last executing test programs: 3.574632635s ago: executing program 1 (id=2780): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000001400)=[{{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000840)="dbeb5a02c82eb6e813ad57289a4d904cec88ac5fb3382f9641252d6ddb5bdfa00afa017a1953b6ac63b6d4bf3e6fa3686e820f7f62ee9a98dc360c47d48b1ba8b9330505dea72961a8ca73334dd98e6711ed6233ea7a888045a096628eee353e59163e0609fc0c0c8e60d1871f484c4a5feeade137aa3ce5db736e8871da7da4f530595c6d6e1f65723a61984228f02a4b2e7f23ac212f31a4f78dde5fdda4a7cb857766883ed161c4632ad692cb", 0xae}, {&(0x7f00000009c0)="38683f236ec70a28ca402d598c63be8457d671512abf13", 0x17}], 0x2}}], 0x1, 0xc0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendmsg$inet(r0, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000180)="24aeb629fe7b9365d7b070ecc4dd1152738d0e31230b870ed50f6d166478d2b3e4963ba03800c460d40436d5d6dd73c8b2cf41e6937baa57c249d2bed4d36b15", 0x40}, {&(0x7f0000000380)="064b5a44bc841d0eb3cde7939f732de2357f57de1b028d9c939cf361d6e17fd0a67ea6b6456bb6c3c6739facbfbff1201931291b341b298590f55f00f3874ce872dbc3ce8cda35ace31b9b334bb5a9165ed6c44eecae86a24d83e1d288d3dd466809e24f0dc811508e518851cd83141ee9ba314b9f0398eaa68f6eae7e8ae7f63b846b74e2178d35f52c2ab884891ea40c2ce9b48fb4f5ce8f8ebfada1e4b15a367904af34b5d705f4130309ed83916c416f91224b852695a76bc8a8b95874d54bbd0f583fd39f957277b27ceb0348eeb5b30e9a5ddb", 0xd6}, {&(0x7f0000000240)="7457b2316e204aba6b5913", 0xb}, {&(0x7f0000000480)="cdf3015ae846337720622f5ef786deee3b963ec31593af", 0x17}], 0x4, &(0x7f00000014c0)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32, @ANYBLOB="ffffffffffffffff00000000110000000000000000000000010000000800000000000000c0"], 0xf8}, 0x44000) sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) 2.521441251s ago: executing program 1 (id=2793): openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000bc0)={0x2, 0x80, 0x3d, 0x1, 0x0, 0x0, 0x0, 0x8, 0xcc38b, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, @perf_config_ext={0x4, 0x100000003}, 0x8342, 0x4, 0x3, 0x0, 0x9, 0x800001, 0xfff7, 0x0, 0x400, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NFT_MSG_GETTABLE(r0, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[], 0x130}, 0x1, 0x0, 0x0, 0x400d4}, 0x80) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x426a80, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x80000e, &(0x7f0000000340)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@quota}, {@errors_remount}, {@barrier}]}, 0x3, 0x44a, &(0x7f0000000bc0)="$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") getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000740)={{{@in=@initdev, @in=@initdev}}, {{@in6}, 0x0, @in=@multicast2}}, &(0x7f00000005c0)=0xe8) mount$cgroup(0x0, &(0x7f0000000600)='.\x00', &(0x7f0000000640), 0x2008000, 0x0) socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x43, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = socket(0x40000000015, 0x5, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000100850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r5}, 0x18) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000000)={0x1, 'veth0_virt_wifi\x00', 0x2000000}, 0x18) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f00000002c0)={0x1, 'ipvlan1\x00', 0x100}, 0x18) recvmmsg(r4, &(0x7f0000004900)=[{{0x0, 0x0, 0x0}, 0xd57e}, {{0x0, 0x0, 0x0}, 0x85ae}], 0x2, 0x60010020, 0x0) sendto$inet(r4, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) setsockopt$SO_J1939_PROMISC(r4, 0x6b, 0x2, &(0x7f0000000680), 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r3}, 0x10) keyctl$join(0x1, &(0x7f0000000580)={'syz', 0x1}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'netdevsim0\x00', 0x1000}) signalfd(r4, 0x0, 0x0) 1.675507834s ago: executing program 1 (id=2808): bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x3, &(0x7f0000000280)=[{0x7b, 0x0, 0x90, 0x6}, {0x0, 0x1, 0x0, 0xf6db}, {0x8, 0xc9, 0x5}]}) process_mrelease(0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x492492492492846, 0x0) fcntl$setstatus(r1, 0x4, 0x42000) ppoll(&(0x7f00000000c0)=[{r1, 0x200}], 0x1, 0x0, 0x0, 0x0) connect$unix(r0, &(0x7f00000002c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e) mbind(&(0x7f00004c9000/0x3000)=nil, 0x3000, 0x8000, 0x0, 0x20, 0x2) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x10001}, 0xc104}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000040)='sys_enter\x00', r2}, 0x10) keyctl$session_to_parent(0x12) 1.548103666s ago: executing program 0 (id=2810): syz_open_dev$usbfs(&(0x7f0000000c00), 0x71, 0x2081) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_PROBE_CLIENT(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000001340)=ANY=[@ANYBLOB="cbfe37b7", @ANYRESOCT=r0, @ANYRES64, @ANYRES32=r1, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x800) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="2c000000130001c300"/20, @ANYRES32=r3, @ANYBLOB="0000d400000000000a0001"], 0x2c}}, 0x0) mkdir(&(0x7f0000000540)='./file0\x00', 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000b80)=ANY=[@ANYBLOB="22d1a8dde804c86f3aa65cc49bb1820a0df6060309e8ddaec13a5ac86dcb65c6e5c6cd1423cac4b916702c0c035bcda92e206a6ac9a76b4ed522833cbc2b66dee8d3b29b4b6c87d1fad12b43870e39425e99cd06f63f3121261b2ad88fa028bf556c3618724fb9adde440d3ecb509f"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='module_request\x00', r4}, 0x10) socketpair(0x0, 0x0, 0x0, &(0x7f0000000140)) pipe2$9p(&(0x7f0000001900), 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x20081e, &(0x7f00000020c0), 0x1, 0x4fb, &(0x7f0000000500)="$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") r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x42042, 0x19e) pwritev2(r6, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5405, 0x0, 0x0) r7 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0x4, &(0x7f0000000400)=ANY=[@ANYRES32=r9, @ANYRESOCT=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r8}, &(0x7f0000000180), &(0x7f00000001c0)=r7}, 0x20) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r10}, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), 0xffffffffffffffff) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) 1.426689108s ago: executing program 0 (id=2811): socket$inet6(0xa, 0x1, 0x8010000000000084) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) socket$inet6_sctp(0xa, 0x5, 0x84) open(&(0x7f0000000280)='.\x00', 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$phonet_pipe(0x23, 0x5, 0x2) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYRES32=r3, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r4}, &(0x7f0000000240), &(0x7f00000003c0)=r6}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000040)={r5, r2, 0x25, 0x2, @val=@tcx={@void, @value=r5}}, 0x1c) syz_emit_ethernet(0x3e, &(0x7f0000000740)=ANY=[], 0x0) 1.426290698s ago: executing program 0 (id=2812): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) chmod(0x0, 0xa5) 1.412910008s ago: executing program 0 (id=2813): r0 = socket$nl_rdma(0x10, 0x3, 0x14) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) r1 = socket$inet6(0xa, 0x1, 0x0) timerfd_settime(0xffffffffffffffff, 0x3, 0x0, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='mmap_lock_acquire_returned\x00'}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xa, 0x31, 0xffffffffffffffff, 0xf2de1000) r2 = socket(0xa, 0x2400000001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x2a, &(0x7f0000034000)={0xc, {{0xa, 0x1, 0x3, @mcast2, 0x10000000}}}, 0x88) setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x2a, &(0x7f00000003c0)={0x0, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) getsockopt$inet6_buf(r2, 0x29, 0x10000000000030, &(0x7f0000034000)=""/144, &(0x7f0000e5f000)=0x90) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) r5 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/xfrm_stat\x00') pread64(r5, &(0x7f0000001240)=""/102392, 0x18ff8, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000002c0000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r7}, 0x10) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000004c0)={'ip6tnl0\x00', &(0x7f0000000740)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x3, 0x0, 0x0, @local, @local, 0x7, 0x7, 0x202, 0x8}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000600)={'syztnl1\x00', 0x0}) 1.27822926s ago: executing program 0 (id=2814): socket$rxrpc(0x21, 0x2, 0xa) io_submit(0x0, 0x0, 0x0) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0105500, &(0x7f00000001c0)={0x0, 0x1, 0x9, 0x4, 0x0, 0x0, 0x0}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d00)=@delchain={0x4b8, 0x65, 0x1, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}, {0x1a, 0xd}, {0xa, 0xfffa}}, [@filter_kind_options=@f_route={{0xa}, {0x488, 0x2, [@TCA_ROUTE4_POLICE={0x1c, 0x5, [@TCA_POLICE_RATE64={0xc, 0x8, 0x5}, @TCA_POLICE_RATE64={0xc, 0x8, 0x3}]}, @TCA_ROUTE4_IIF={0x8}, @TCA_ROUTE4_POLICE={0x10, 0x5, [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x2}]}, @TCA_ROUTE4_POLICE={0x41c, 0x5, [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x4}, @TCA_POLICE_RESULT={0x8, 0x5, 0x1}, @TCA_POLICE_RATE={0x404, 0x2, [0x7f9f3d1e, 0x9, 0x200, 0x0, 0x0, 0x1ff, 0x7, 0x4bfcf931, 0x6, 0x6, 0x7da, 0x9, 0x9, 0x3, 0x4b73c7ce, 0xc13, 0x7fff, 0x750d, 0x0, 0x6, 0x5, 0xf, 0x5, 0x0, 0x0, 0xd, 0x7, 0x4, 0x7f, 0x7, 0x9, 0x8, 0x0, 0xfffffff5, 0xffffffff, 0x6, 0x9af, 0x20000, 0xfffffff5, 0x4d8, 0x6, 0x80000001, 0x9, 0x3ff, 0x0, 0x7, 0x80000000, 0x4, 0x7fff, 0x0, 0xaf, 0xc5, 0x7fffffff, 0x8, 0x10, 0xb7ff, 0x0, 0x1, 0x5, 0x7f8, 0xd0a, 0xcb6b, 0x401, 0x81, 0x8, 0x8, 0x1, 0xf, 0x3, 0x4, 0x10, 0x1, 0x7fff, 0x4, 0x12, 0xa9da, 0x5, 0x304, 0x70, 0x2, 0x0, 0x7, 0xc, 0x0, 0x9, 0x100, 0x800, 0x4, 0x81, 0x5, 0x2, 0x3, 0xe4, 0x6, 0x22, 0x7, 0xfff, 0x4, 0xab1a24e, 0x2, 0x2, 0x3, 0x9, 0x2, 0xffffffa6, 0x61, 0x49800000, 0x80000000, 0x0, 0x6, 0x2, 0x5, 0x5, 0x1, 0x9, 0x80, 0xd, 0x34b, 0x994, 0x6, 0x7, 0x2, 0x5, 0x8, 0x2, 0x8, 0x7, 0x9, 0xb0000000, 0x9, 0xffffdbea, 0x0, 0x9, 0x9, 0x82, 0x8, 0x9, 0x1bb7, 0x8, 0x6, 0x1, 0x1, 0x5c5d, 0xf, 0x1, 0x6, 0xfffffff9, 0xa0, 0x7, 0xa, 0x8, 0x5, 0xe38, 0x1, 0x4, 0x101, 0x5, 0x5, 0x81, 0x8000000, 0xffff90f1, 0x5, 0xc, 0x5, 0x6, 0x0, 0xb, 0xfffffff9, 0x6, 0x7fff, 0x7, 0x2, 0x8, 0xfffff76f, 0x1, 0x6, 0x6, 0x5, 0xffffff9a, 0xbee, 0x80000001, 0x7, 0x0, 0x8, 0xb226, 0x4, 0xfffffffc, 0x7ff, 0x5c5, 0x7, 0x3, 0x5, 0xcf53, 0x6, 0x80000001, 0xbd, 0x3, 0x8001, 0x9, 0x7cc, 0x9, 0x8, 0x10001, 0x2, 0x2, 0x5, 0x4, 0x4eb3, 0xffffff81, 0x3, 0x8, 0xfffffff8, 0x2, 0x2aa, 0x3, 0x3, 0x5, 0x5, 0xfffffff8, 0x14255208, 0x0, 0x401, 0x2, 0x10001, 0x7, 0x0, 0x10000, 0x4, 0x32f2, 0x80000001, 0x9, 0x9, 0x3, 0x0, 0x50, 0xfd, 0xfaf, 0x2, 0x8, 0x6, 0x7, 0x7f, 0xfffffffe, 0x3ff, 0x9, 0x3fc0000, 0x3, 0xb4fe, 0xc, 0x2619, 0x0, 0x5, 0x2, 0x1, 0xe1, 0x2]}]}, @TCA_ROUTE4_FROM={0x8, 0x3, 0x9d}, @TCA_ROUTE4_CLASSID={0x8, 0x1, {0xe, 0x5}}, @TCA_ROUTE4_POLICE={0x1c, 0x5, [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x1e6e}, @TCA_POLICE_RATE64={0xc, 0x8, 0x8cdc}]}, @TCA_ROUTE4_CLASSID={0x8, 0x1, {0x9, 0x6}}]}}]}, 0x4b8}, 0x1, 0x0, 0x0, 0x40}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00006dbffc), 0x4) syz_io_uring_setup(0x3c0c, &(0x7f0000000400)={0x0, 0xc890, 0x4002}, 0x0, 0x0) bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000400)="67d8901bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c14498396b28c7d1784d04aa38922721cb7816094cb82950fd012efd26d3abc8a75ac1f30e53a0eff506f6e6b369ba6c5306e91acaa94e89d3bff4e52cd151235f3defff171c60b91c0c5aeb29736830a09b262dbe4c7ed149885a054de1d7ff5bcecd7a50061814ceefb", 0x9d}, {&(0x7f0000000900)="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", 0x3e4}], 0x2}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) 1.026224624s ago: executing program 2 (id=2821): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000001400)=[{{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000840)="dbeb5a02c82eb6e813ad57289a4d904cec88ac5fb3382f9641252d6ddb5bdfa00afa017a1953b6ac63b6d4bf3e6fa3686e820f7f62ee9a98dc360c47d48b1ba8b9330505dea72961a8ca73334dd98e6711ed6233ea7a888045a096628eee353e59163e0609fc0c0c8e60d1871f484c4a5feeade137aa3ce5db736e8871da7da4f530595c6d6e1f65723a61984228f02a4b2e7f23ac212f31a4f78dde5fdda4a7cb857766883ed161c4632ad692cb", 0xae}, {&(0x7f00000009c0)="38683f236ec70a28ca402d598c63be8457d671512abf13", 0x17}], 0x2}}], 0x1, 0xc0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendmsg$inet(r0, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000180)="24aeb629fe7b9365d7b070ecc4dd1152738d0e31230b870ed50f6d166478d2b3e4963ba03800c460d40436d5d6dd73c8b2cf41e6937baa", 0x37}, {&(0x7f0000000380)="064b5a44bc841d0eb3cde7939f732de2357f57de1b028d9c939cf361d6e17fd0a67ea6b6456bb6c3c6739facbfbff1201931291b341b298590f55f00f3874ce872dbc3ce8cda35ace31b9b334bb5a9165ed6c44eecae86a24d83e1d288d3dd466809e24f0dc811508e5188", 0x6b}, {&(0x7f0000000240)="7457b2", 0x3}, {&(0x7f0000000480)}, {&(0x7f0000000c40)="645ae8fd31b3c84f6b49d710c86a75c8975baf0e80ffbba753a5dbc06bf3f6e09db2655db3539859eab379da476e7e93e21e317ca8321db5", 0x38}], 0x5, &(0x7f00000014c0)=ANY=[@ANYBLOB="1c00"/12, @ANYRES32, @ANYBLOB="ffffffffffffffff00000000110000000000000000000000010000000800000000000000c0"], 0xf8}, 0x44000) sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) 773.302578ms ago: executing program 4 (id=2832): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="b40200000000006661176b00fd0f50000000f40f1b002d1fc5000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff21, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 772.373848ms ago: executing program 1 (id=2833): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x55, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x0, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0x8002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/user\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xae, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r0}, 0x10) r1 = socket$can_bcm(0x1d, 0x2, 0x2) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f00000000c0), 0x10) r3 = dup3(r2, r1, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r6 = socket$unix(0x1, 0x5, 0x0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="0100000003ece1e40ad8871461ab0800", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r6, @ANYBLOB="3bf81bb9f9"], 0x20000600}}, 0x0) sendmsg$can_bcm(r3, &(0x7f0000000080)={&(0x7f00000001c0)={0x1d, r5, 0x3f420f00}, 0x10, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[], 0x4640}, 0x2}, 0x2c004000) 741.581478ms ago: executing program 4 (id=2834): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'wg1\x00', 0x0}) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f00000000c0)=0xf3e, 0x4) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0xb76e}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r3}, &(0x7f0000000180), &(0x7f00000001c0)=r2}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r4}, 0x10) sendto$packet(r0, &(0x7f0000000280)='\x00', 0x1, 0x0, &(0x7f0000000080)={0x11, 0x0, r1, 0x1, 0xf6, 0x6, @random="5afe8b181d50"}, 0x14) 740.407528ms ago: executing program 4 (id=2835): socket$inet6(0xa, 0x1, 0x8010000000000084) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) socket$inet6_sctp(0xa, 0x5, 0x84) open(&(0x7f0000000280)='.\x00', 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$phonet_pipe(0x23, 0x5, 0x2) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r4}, &(0x7f0000000240), &(0x7f00000003c0)=r6}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000040)={r5, r2, 0x25, 0x2, @val=@tcx={@void, @value=r5}}, 0x1c) syz_emit_ethernet(0x3e, &(0x7f0000000740)=ANY=[], 0x0) 725.198908ms ago: executing program 4 (id=2836): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'wg1\x00', 0x0}) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f00000000c0)=0xf3e, 0x4) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0xb76e}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r3}, &(0x7f0000000180), &(0x7f00000001c0)=r2}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r4}, 0x10) sendto$packet(r0, &(0x7f0000000280)='\x00', 0x1, 0x0, &(0x7f0000000080)={0x11, 0x0, r1, 0x1, 0xf6, 0x6, @random="5afe8b181d50"}, 0x14) (fail_nth: 1) 722.680548ms ago: executing program 1 (id=2837): socket$rxrpc(0x21, 0x2, 0xa) io_submit(0x0, 0x0, 0x0) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0105500, &(0x7f00000001c0)={0x0, 0x1, 0x9, 0x4, 0x0, 0x0, 0x0}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d00)=@delchain={0x4b8, 0x65, 0x1, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}, {0x1a, 0xd}, {0xa, 0xfffa}}, [@filter_kind_options=@f_route={{0xa}, {0x488, 0x2, [@TCA_ROUTE4_POLICE={0x1c, 0x5, [@TCA_POLICE_RATE64={0xc, 0x8, 0x5}, @TCA_POLICE_RATE64={0xc, 0x8, 0x3}]}, @TCA_ROUTE4_IIF={0x8}, @TCA_ROUTE4_POLICE={0x10, 0x5, [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x2}]}, @TCA_ROUTE4_POLICE={0x41c, 0x5, [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x4}, @TCA_POLICE_RESULT={0x8, 0x5, 0x1}, @TCA_POLICE_RATE={0x404, 0x2, [0x7f9f3d1e, 0x9, 0x200, 0x0, 0x0, 0x1ff, 0x7, 0x4bfcf931, 0x6, 0x6, 0x7da, 0x9, 0x9, 0x3, 0x4b73c7ce, 0xc13, 0x7fff, 0x750d, 0x0, 0x6, 0x5, 0xf, 0x5, 0x0, 0x0, 0xd, 0x7, 0x4, 0x7f, 0x7, 0x9, 0x8, 0x0, 0xfffffff5, 0xffffffff, 0x6, 0x9af, 0x20000, 0xfffffff5, 0x4d8, 0x6, 0x80000001, 0x9, 0x3ff, 0x0, 0x7, 0x80000000, 0x4, 0x7fff, 0x0, 0xaf, 0xc5, 0x7fffffff, 0x8, 0x10, 0xb7ff, 0x0, 0x1, 0x5, 0x7f8, 0xd0a, 0xcb6b, 0x401, 0x81, 0x8, 0x8, 0x1, 0xf, 0x3, 0x4, 0x10, 0x1, 0x7fff, 0x4, 0x12, 0xa9da, 0x5, 0x304, 0x70, 0x2, 0x0, 0x7, 0xc, 0x0, 0x9, 0x100, 0x800, 0x4, 0x81, 0x5, 0x2, 0x3, 0xe4, 0x6, 0x22, 0x7, 0xfff, 0x4, 0xab1a24e, 0x2, 0x2, 0x3, 0x9, 0x2, 0xffffffa6, 0x61, 0x49800000, 0x80000000, 0x0, 0x6, 0x2, 0x5, 0x5, 0x1, 0x9, 0x80, 0xd, 0x34b, 0x994, 0x6, 0x7, 0x2, 0x5, 0x8, 0x2, 0x8, 0x7, 0x9, 0xb0000000, 0x9, 0xffffdbea, 0x0, 0x9, 0x9, 0x82, 0x8, 0x9, 0x1bb7, 0x8, 0x6, 0x1, 0x1, 0x5c5d, 0xf, 0x1, 0x6, 0xfffffff9, 0xa0, 0x7, 0xa, 0x8, 0x5, 0xe38, 0x1, 0x4, 0x101, 0x5, 0x5, 0x81, 0x8000000, 0xffff90f1, 0x5, 0xc, 0x5, 0x6, 0x0, 0xb, 0xfffffff9, 0x6, 0x7fff, 0x7, 0x2, 0x8, 0xfffff76f, 0x1, 0x6, 0x6, 0x5, 0xffffff9a, 0xbee, 0x80000001, 0x7, 0x0, 0x8, 0xb226, 0x4, 0xfffffffc, 0x7ff, 0x5c5, 0x7, 0x3, 0x5, 0xcf53, 0x6, 0x80000001, 0xbd, 0x3, 0x8001, 0x9, 0x7cc, 0x9, 0x8, 0x10001, 0x2, 0x2, 0x5, 0x4, 0x4eb3, 0xffffff81, 0x3, 0x8, 0xfffffff8, 0x2, 0x2aa, 0x3, 0x3, 0x5, 0x5, 0xfffffff8, 0x14255208, 0x0, 0x401, 0x2, 0x10001, 0x7, 0x0, 0x10000, 0x4, 0x32f2, 0x80000001, 0x9, 0x9, 0x3, 0x0, 0x50, 0xfd, 0xfaf, 0x2, 0x8, 0x6, 0x7, 0x7f, 0xfffffffe, 0x3ff, 0x9, 0x3fc0000, 0x3, 0xb4fe, 0xc, 0x2619, 0x0, 0x5, 0x2, 0x1, 0xe1, 0x2]}]}, @TCA_ROUTE4_FROM={0x8, 0x3, 0x9d}, @TCA_ROUTE4_CLASSID={0x8, 0x1, {0xe, 0x5}}, @TCA_ROUTE4_POLICE={0x1c, 0x5, [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x1e6e}, @TCA_POLICE_RATE64={0xc, 0x8, 0x8cdc}]}, @TCA_ROUTE4_CLASSID={0x8, 0x1, {0x9, 0x6}}]}}]}, 0x4b8}, 0x1, 0x0, 0x0, 0x40}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r1}, &(0x7f0000bbdffc)) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r2, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f00006dbffc), 0x4) keyctl$KEYCTL_PKEY_QUERY(0x18, 0x0, 0x0, &(0x7f0000000780)='\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="1800"/14, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) syz_io_uring_setup(0x3c0c, &(0x7f0000000400)={0x0, 0xc890, 0x4002}, 0x0, 0x0) bind$inet(r2, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000400)="67d8901bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c14498396b28c7d1784d04aa38922721cb7816094cb82950fd012efd26d3abc8a75ac1f30e53a0eff506f6e6b369ba6c5306e91acaa94e89d3bff4e52cd151235f3defff171c60b91c0c5aeb29736830a09b262dbe4c7ed149885a054de1d7ff5bcecd7a50061814ceefb", 0x9d}, {&(0x7f0000000900)="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", 0x3dd}], 0x2}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) 634.83622ms ago: executing program 1 (id=2838): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000001400)=[{{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000840)="dbeb5a02c82eb6e813ad57289a4d904cec88ac5fb3382f9641252d6ddb5bdfa00afa017a1953b6ac63b6d4bf3e6fa3686e820f7f62ee9a98dc360c47d48b1ba8b9330505dea72961a8ca73334dd98e6711ed6233ea7a888045a096628eee353e59163e0609fc0c0c8e60d1871f484c4a5feeade137aa3ce5db736e8871da7da4f530595c6d6e1f65723a61984228f02a4b2e7f23ac212f31a4f78dde5fdda4a7cb857766883ed161c4632ad692cb", 0xae}, {&(0x7f00000009c0)="38683f236ec70a28ca402d598c63be8457d671512abf13", 0x17}], 0x2}}], 0x1, 0xc0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendmsg$inet(r0, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000180)="24aeb629fe7b9365d7b070ecc4dd1152738d0e31230b870ed50f6d166478d2b3e4963ba03800c460d40436d5d6dd73c8b2cf41e6937baa57c249d2bed4d36b15", 0x40}, {&(0x7f0000000380)="064b5a44bc841d0eb3cde7939f732de2357f57de1b028d9c939cf361d6e17fd0a67ea6b6456bb6c3c6739facbfbff1201931291b341b298590f55f00f3874ce872dbc3ce8cda35ace31b9b334bb5a9165ed6c44eecae86a24d83e1d288d3dd466809e24f0dc811508e518851cd83141ee9ba314b9f0398eaa68f6eae7e8ae7f63b846b74e2178d35f52c2ab884891ea40c2ce9b48fb4f5ce8f8ebfada1e4b15a367904af34b5d705f4130309ed83916c416f91224b852695a76bc8a8b95874d54bbd0f583fd39f957277b27ceb0348eeb5b30e9a5ddb33a6ad", 0xd9}, {&(0x7f0000000240)="7457b2316e204aba6b5913", 0xb}, {&(0x7f0000000480)="cdf3015ae846337720622f5ef786deee3b963ec31593af", 0x17}], 0x4, &(0x7f00000014c0)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32, @ANYBLOB="ffffffffffffffff00000000110000000000000000000000010000000800000000000000c0"], 0xf8}, 0x44000) sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) 502.541892ms ago: executing program 4 (id=2840): perf_event_open(&(0x7f0000000500)={0x5, 0x80, 0x55, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x20a0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x10875, 0x0, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0x8002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/user\x00') socketpair$tipc(0x1e, 0x4, 0x0, &(0x7f0000000140)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x200000000000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x207, &(0x7f0000000000), 0x1, 0x469, &(0x7f0000000100)="$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") mount(0x0, &(0x7f0000000240)='.\x00', 0x0, 0x2200020, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r2 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) write$binfmt_script(r2, &(0x7f0000000300)={'#! ', './file0', [{0x20, 'kfree\x00'}, {0x20, '/dev/bus/usb/00#/00#\x00'}, {0x20, '/dev/sg#\x00'}, {0x20, '%^'}], 0xa, "05acd7e30634a4a852bab3fb9de93ccbff1319f1c8dd3ab4e084e24b611f9323d53511918de49b33c8d37c6ee3c55bf8db0d766913fd7d404f14b492f67c4ff1d18ab65f01c6fc149119741cc53623e1ce91b4c0dbd8926c028d02a37a39d89d91a799bb93540a4fce73a0116b3b002542a7cac2"}, 0xa9) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000008385000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xe, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r4}, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="8b332cbd96562361000005000000080003"], 0x1c}}, 0x0) syz_genetlink_get_family_id$team(&(0x7f00000000c0), r3) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000140)) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000003c0)={'ip6gre0\x00', &(0x7f0000000240)={'ip6_vti0\x00', 0x0, 0x2f, 0xd0, 0xd5, 0x9, 0x8, @ipv4={'\x00', '\xff\xff', @multicast1}, @remote, 0x8, 0x40, 0x1ff, 0xa}}) mount$bind(0x0, 0x0, 0x0, 0x2901090, 0x0) r6 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r6, 0x1, &(0x7f0000000040)=ANY=[]) setxattr$security_ima(&(0x7f0000000100)='./file1\x00', &(0x7f0000000140), &(0x7f00000013c0)=ANY=[], 0x700, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x60}, 0x122) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'dummy0\x00'}) 460.542043ms ago: executing program 4 (id=2842): syz_open_dev$loop(&(0x7f00000005c0), 0x9, 0x12d600) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x1, 0x0, 0x0, 0x41000, 0x37, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x5000000, &(0x7f0000000040)=ANY=[@ANYRESHEX=r1], 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000040000000100000022bf"], 0x48) r4 = perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xd, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r3, 0xffffffffffffffff}, &(0x7f00000003c0), &(0x7f0000000400)}, 0x20) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000740), &(0x7f0000000840), 0xffffd6c0, r5}, 0x38) r6 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r6, 0x7, 0x0, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='net_dev_xmit\x00', r7}, 0x10) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0x70, &(0x7f0000000180)=ANY=[@ANYRES32=r3, @ANYRESDEC=r6, @ANYRESHEX=r7, @ANYRES16=r4, @ANYRESHEX=r4, @ANYRES16=r2], 0x0, 0x7, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x110cb3a, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x200008, &(0x7f0000000600), 0x1, 0x51b, &(0x7f0000000f80)="$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") prlimit64(0xffffffffffffffff, 0x7c1a280e768f1140, &(0x7f0000000200)={0x8, 0xec00000000004}, 0x0) r9 = syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000640), 0x64, 0x51a, &(0x7f00000014c0)="$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") ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x80044940, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r9, 0x81f8943c, 0x0) syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1a4b438, &(0x7f0000000280)=ANY=[], 0xb, 0x0, &(0x7f0000000040)) syz_genetlink_get_family_id$mptcp(&(0x7f0000000340), r8) socket$nl_route(0x10, 0x3, 0x0) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffff82ffb702000008000000b703000000000000850002000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r10}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r11, 0x0, r12, 0x0, 0x1, 0x0) vmsplice(r12, &(0x7f00000005c0)=[{&(0x7f0000000180)="04", 0x1}], 0x1, 0x6) 426.404943ms ago: executing program 3 (id=2843): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) socket$netlink(0x10, 0x3, 0x4) write(r0, &(0x7f0000005c00)="2700000014000707030e000012f5fe0012ff0000003ea9ffff7508003900050000000000000000", 0x27) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240"], 0x7c}, 0x1, 0x0, 0x0, 0x10}, 0x10) process_vm_writev(0x0, &(0x7f0000000500)=[{0x0}, {0xffffffffffffffff}], 0x2, 0x0, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2ce, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r3) sendmsg$NL80211_CMD_GET_SURVEY(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="a90303000000000000003200000008004001"], 0x1c}}, 0x4004050) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r3, {r0}}, './file0\x00'}) sendmmsg$inet(r5, &(0x7f0000000680)=[{{&(0x7f00000003c0)={0x2, 0x4e23, @multicast1}, 0x10, &(0x7f0000000600)=[{&(0x7f0000000800)="cec4dc0156194bb512cbab00435c2a2429fcd4f109d2dea0c044a4c44643e6eedfca3e5b25614b0686b4373e2a1d9acd267a36985d9f8b450f61e91c08f8a7e6371c5f9ccb42355084c73282944896b54c0f3a8f7e3dedcf5023b76c3f1d1743620507c92e4620754c32235f27d443d89a890c24f8d4799bcc0f3c1303b5ce3494cf90af12e8fcbf47c2b4d139aa90bf682250a9f3bd447b4bf84da9469d98bb6bc40e927dfe0a1830bb3acbb5181e6466fb7360fffa487eee022821ba8914a7b1450ef4e7a9243d4601470d4b855351ce16b72bc953ad10fbf68a0d94631646328a80488a8067b91a24536353600147f9cd08c9ef", 0xf5}, {&(0x7f00000009c0)="37c9bbc56716c58295f3c8a51af31b6710eac87bc6b03bdc6443c1d60d3167a1bf473a0156894d3c34ee3a1a4d24324880e781a49dcb7a976eb4d1acaecc472dd336cd52d4be399dbc80cb6a04cf40c264ffe5f837d60e34fbc1030745f975518cd463bb4605d1efbd332a36562b07dfd3f0417e41b5344951f7c2edf7640f7147e3f2f60fd2c6d3c143a85237ebe34ae4f45beeb11a85bf6230f9b57aca9694a2fccf8fac09c27da3", 0xa9}], 0x2, &(0x7f0000000580)=[@ip_tos_int={{0x14, 0x0, 0x1, 0xfffffeff}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x37}}], 0x30}}], 0x1, 0x10000000) creat(&(0x7f00000000c0)='./file0\x00', 0x9c) r6 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x4f0, 0x340, 0x25, 0x148, 0x0, 0x60, 0x458, 0x2a8, 0x2a8, 0x458, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'geneve0\x00', {0x44, 0x0, 0x9, 0x0, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x6, './file0\x00'}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6, 'syz0\x00'}}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'veth1_to_bond\x00', 'veth0\x00', {0xff}}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@unspec=@cgroup0={{0x28}, {0x4}}, @common=@unspec=@statistic={{0x38}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x8000, 'syz0\x00', {0x481c}}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x550) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000007c0), 0x13f, 0x5}}, 0x20) stat(&(0x7f0000001c40)='./file0\x00', &(0x7f0000001c80)) r7 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="38000000031401002dbd7000000000000900020073797a30000000000800410073697700140033006c6f0000fffffffffffffff000000000"], 0xffaf}, 0x1, 0x0, 0x0, 0x854}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000181100"/20, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xef59, @void, @value}, 0x94) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r8) r9 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r10}, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000080)}], 0x1, 0x0, 0x0, 0x2044}, 0x60) ioctl$TUNSETOFFLOAD(r9, 0xc004743e, 0x110e22fff6) 425.503583ms ago: executing program 0 (id=2844): mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000001000/0x1000)=nil) perf_event_open(&(0x7f0000000040)={0x4, 0x80, 0xef, 0x7, 0x0, 0x0, 0x0, 0x0, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffdfffc, 0x0, @perf_bp={0x0, 0x8}, 0x800, 0x2000000000, 0x0, 0x5, 0x0, 0x200000b, 0x2, 0x0, 0x9, 0x0, 0x3f}, 0x0, 0x400010, 0xffffffffffffffff, 0x3) r0 = socket$kcm(0x10, 0x400000002, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000001c0)) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210000, &(0x7f0000000200)={[{@inlinecrypt}, {@jqfmt_vfsv1}, {@quota}, {@init_itable_val={'init_itable', 0x3d, 0x8}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@sysvgroups}, {@noauto_da_alloc}, {@stripe={'stripe', 0x3d, 0x5}}, {@orlov}], [{@appraise}]}, 0x1, 0x56f, &(0x7f0000003780)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x14a) fallocate(r1, 0x20, 0x0, 0x8) unshare(0x8000000) r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000140)='asymmetric\x00', 0x0, &(0x7f00000002c0)="9fcc", 0x2, r2) semget$private(0x0, 0x4000, 0x555) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f00000012c0)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) arch_prctl$ARCH_SHSTK_STATUS(0x5005, &(0x7f00000000c0)) write(r4, &(0x7f0000004200)='t', 0x1) fsopen(&(0x7f0000000000)='cpuset\x00', 0x0) sendfile(r4, r3, 0x0, 0x3ffff) sendfile(r4, r3, 0x0, 0x7ffff000) semtimedop(0x0, &(0x7f0000000440)=[{0x0, 0x0, 0x1000}], 0xf, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b03d25a806f8c6394f90524fc60040f03", 0x17}], 0x1}, 0x0) write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="934300005a0033d4"], 0xfe33) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r5, 0x84, 0x11, &(0x7f0000000040), 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r6 = socket(0x10, 0x3, 0x0) write(r6, &(0x7f0000000040)="1400000052004f030e789e7e27286d000a4149f3", 0x14) recvmmsg(r6, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0) 375.525574ms ago: executing program 3 (id=2845): r0 = syz_io_uring_setup(0x5220, &(0x7f0000000180)={0x0, 0x0, 0x10100}, &(0x7f0000000380)=0x0, &(0x7f00000000c0)=0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) connect$inet6(r4, &(0x7f0000000200)={0xa, 0xffff, 0x0, @loopback}, 0x1c) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000040), 0x4) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x2, &(0x7f0000000b80)=@gcm_256={{0x304}, "0000004a650600", "af193cff4810ba5ac120d096eb00000052095b4285514ca312c52e3a08756735", '8\x00', "bc3a20b10f4ad11e"}, 0x38) close(r4) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000001c0)={0x64, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0, 0x0, 0x2bb4bf1e017492a2}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x8260}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x64}}, 0x44) write$UHID_CREATE2(r3, &(0x7f0000000040)=ANY=[@ANYBLOB='5'], 0x118) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) r9 = gettid() setpriority(0x1, r9, 0x5) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x4}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x7c}}, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 333.422465ms ago: executing program 3 (id=2846): socket$inet6(0xa, 0x1, 0x8010000000000084) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) socket$inet6_sctp(0xa, 0x5, 0x84) open(&(0x7f0000000280)='.\x00', 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$phonet_pipe(0x23, 0x5, 0x2) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r4}, &(0x7f0000000240), &(0x7f00000003c0)=r6}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000040)={r5, r2, 0x25, 0x2, @val=@tcx={@void, @value=r5}}, 0x1c) syz_emit_ethernet(0x3e, &(0x7f0000000740)=ANY=[], 0x0) 333.113145ms ago: executing program 3 (id=2847): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000280)='kfree\x00', r0}, 0x18) r1 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000840), 0x2, 0x0) write$selinux_user(r1, &(0x7f0000000080)=ANY=[@ANYBLOB='system_u:object_r:auth_cache_t ro'], 0x27) 301.012285ms ago: executing program 3 (id=2848): socket$rxrpc(0x21, 0x2, 0xa) io_submit(0x0, 0x0, 0x0) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0105500, &(0x7f00000001c0)={0x0, 0x1, 0x9, 0x4, 0x0, 0x0, 0x0}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d00)=@delchain={0x4b8, 0x65, 0x1, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}, {0x1a, 0xd}, {0xa, 0xfffa}}, [@filter_kind_options=@f_route={{0xa}, {0x488, 0x2, [@TCA_ROUTE4_POLICE={0x1c, 0x5, [@TCA_POLICE_RATE64={0xc, 0x8, 0x5}, @TCA_POLICE_RATE64={0xc, 0x8, 0x3}]}, @TCA_ROUTE4_IIF={0x8}, @TCA_ROUTE4_POLICE={0x10, 0x5, [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x2}]}, @TCA_ROUTE4_POLICE={0x41c, 0x5, [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x4}, @TCA_POLICE_RESULT={0x8, 0x5, 0x1}, @TCA_POLICE_RATE={0x404, 0x2, [0x7f9f3d1e, 0x9, 0x200, 0x0, 0x0, 0x1ff, 0x7, 0x4bfcf931, 0x6, 0x6, 0x7da, 0x9, 0x9, 0x3, 0x4b73c7ce, 0xc13, 0x7fff, 0x750d, 0x0, 0x6, 0x5, 0xf, 0x5, 0x0, 0x0, 0xd, 0x7, 0x4, 0x7f, 0x7, 0x9, 0x8, 0x0, 0xfffffff5, 0xffffffff, 0x6, 0x9af, 0x20000, 0xfffffff5, 0x4d8, 0x6, 0x80000001, 0x9, 0x3ff, 0x0, 0x7, 0x80000000, 0x4, 0x7fff, 0x0, 0xaf, 0xc5, 0x7fffffff, 0x8, 0x10, 0xb7ff, 0x0, 0x1, 0x5, 0x7f8, 0xd0a, 0xcb6b, 0x401, 0x81, 0x8, 0x8, 0x1, 0xf, 0x3, 0x4, 0x10, 0x1, 0x7fff, 0x4, 0x12, 0xa9da, 0x5, 0x304, 0x70, 0x2, 0x0, 0x7, 0xc, 0x0, 0x9, 0x100, 0x800, 0x4, 0x81, 0x5, 0x2, 0x3, 0xe4, 0x6, 0x22, 0x7, 0xfff, 0x4, 0xab1a24e, 0x2, 0x2, 0x3, 0x9, 0x2, 0xffffffa6, 0x61, 0x49800000, 0x80000000, 0x0, 0x6, 0x2, 0x5, 0x5, 0x1, 0x9, 0x80, 0xd, 0x34b, 0x994, 0x6, 0x7, 0x2, 0x5, 0x8, 0x2, 0x8, 0x7, 0x9, 0xb0000000, 0x9, 0xffffdbea, 0x0, 0x9, 0x9, 0x82, 0x8, 0x9, 0x1bb7, 0x8, 0x6, 0x1, 0x1, 0x5c5d, 0xf, 0x1, 0x6, 0xfffffff9, 0xa0, 0x7, 0xa, 0x8, 0x5, 0xe38, 0x1, 0x4, 0x101, 0x5, 0x5, 0x81, 0x8000000, 0xffff90f1, 0x5, 0xc, 0x5, 0x6, 0x0, 0xb, 0xfffffff9, 0x6, 0x7fff, 0x7, 0x2, 0x8, 0xfffff76f, 0x1, 0x6, 0x6, 0x5, 0xffffff9a, 0xbee, 0x80000001, 0x7, 0x0, 0x8, 0xb226, 0x4, 0xfffffffc, 0x7ff, 0x5c5, 0x7, 0x3, 0x5, 0xcf53, 0x6, 0x80000001, 0xbd, 0x3, 0x8001, 0x9, 0x7cc, 0x9, 0x8, 0x10001, 0x2, 0x2, 0x5, 0x4, 0x4eb3, 0xffffff81, 0x3, 0x8, 0xfffffff8, 0x2, 0x2aa, 0x3, 0x3, 0x5, 0x5, 0xfffffff8, 0x14255208, 0x0, 0x401, 0x2, 0x10001, 0x7, 0x0, 0x10000, 0x4, 0x32f2, 0x80000001, 0x9, 0x9, 0x3, 0x0, 0x50, 0xfd, 0xfaf, 0x2, 0x8, 0x6, 0x7, 0x7f, 0xfffffffe, 0x3ff, 0x9, 0x3fc0000, 0x3, 0xb4fe, 0xc, 0x2619, 0x0, 0x5, 0x2, 0x1, 0xe1, 0x2]}]}, @TCA_ROUTE4_FROM={0x8, 0x3, 0x9d}, @TCA_ROUTE4_CLASSID={0x8, 0x1, {0xe, 0x5}}, @TCA_ROUTE4_POLICE={0x1c, 0x5, [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x1e6e}, @TCA_POLICE_RATE64={0xc, 0x8, 0x8cdc}]}, @TCA_ROUTE4_CLASSID={0x8, 0x1, {0x9, 0x6}}]}}]}, 0x4b8}, 0x1, 0x0, 0x0, 0x40}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r1}, &(0x7f0000bbdffc)) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r2, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f00006dbffc), 0x4) keyctl$KEYCTL_PKEY_QUERY(0x18, 0x0, 0x0, &(0x7f0000000780)='\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="1800"/14, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) syz_io_uring_setup(0x3c0c, &(0x7f0000000400)={0x0, 0xc890, 0x4002}, 0x0, 0x0) bind$inet(r2, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000400)="67d8901bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c14498396b28c7d1784d04aa38922721cb7816094cb82950fd012efd26d3abc8a75ac1f30e53a0eff506f6e6b369ba6c5306e91acaa94e89d3bff4e52cd151235f3defff171c60b91c0c5aeb29736830a09b262dbe4c7ed149885a054de1d7ff5bcecd7a50061814ceefb", 0x9d}, {&(0x7f0000000900)="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", 0x3dd}], 0x2}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) 276.082845ms ago: executing program 3 (id=2849): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt(r2, 0x6, 0x2, &(0x7f00000001c0)="1a04bb7e", 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000005080)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000800000095000000000000009500a5050000000077d8f3b423cdac8d8000000000000020e16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0f68a7d06d10bfe150a7487535f7866907dc6751dfb261a0e3ccae669e173a649c1cfd6587d452d46b7c57d77578f4c35235138d5521f9453559c3421eed73d5661cfeecf9c66c54c3b3ffe1b4ce25d7c983c044c03bf3ff03fe3e26e7a23129d6606fd28a7f9105f82317874b33d96b39fa4e045469989d552af6200000003a00000000000000abecc2f4a3799af2551ce935b0f327cb3f011a7d06602e2fd5234712596b696418f1623ed38ae89d24e14b40234756ddcebfba2f87925bfacba83109753f543ad027edd68149ee99eebc6f7d6dd4aed4afe1f44ccb19e810879b70a70900000000000000000000d7900a820b6327944e9a217b9800e02a92895614cd50cbf83a1ed25268816b004519c9c5cff097d8000000000009d27d753a30a147b24a48435bd8a568669596e9e08679b3ce48e90defb6670c3d6209000000c773713a66b223fa8b148871c8d31d24000025449f106b99893ed20fa7a050fbbef90327e827e513e9606800000000e89f9c85c822a961546ed5363c17ff1432d08806bc376e3e69ee52b59d13182e1f24ed208ada12f7a1525320e71666f472a972d5eb1affb87ba55b2d72078e9f40b4ae7dc3b2aeb0d11cd22c35d32940f19dff00ffffffff080000ff003853e59de7621e348955735264f34b1046a1813668297a7edad187ef106ae7fcbb25090f17d0baadeb8ae190a1fb5a315f8347fb0379659500000000000000000000000000000000000000002fdf0193ec79c90ed210ebc2fbed6d4216770c1b0dec886b388d138c2b69c6aacb714e7264093061c660a5100b7cc165889eb94c8d7c77b6fa06f1a4d8e4a6b6cb37e319c5c22f276b03cae853f42b07ca0b03b1eb32a6b1a81cd511fd0b59d57a11c6a3ebf9731464ad21f07f618efc31023ac60007426162b57e803519954d7c952197b0a508c0e16fda392fa84be38e937d36af1c35138e05a9e8d6dc0272de72c41500000000304402e22af23437126f330f8eb4075daaeae3134ece35cd86d95bd9836bd186c4b6565e967a4e3e86f299b7400994ba136b4eccf3b0f001a266c0d160b3ce1182001d64b52a5ce7f506295d59eea6903b84ffbabf5a5b91c1d6ecce8728a224aec66c610e3becd60a35e848c224f8251947eed20e2b612cb099bfe8924d33ba7f0691fed04a43e9c64b7a1e3165e86cdb9871c678a6bbb14821f441c6c14d1bd78d8ffdfea12c19ea04264335d60b6b7a7da6fb83f33101db32f6ab137d943dd3c1e8db9f3e1263573dc721ae82fe0bc63598751a5092c9f7dbfc39d564834e3703492c2a651643d8ce5c36d97a4812cf73fc8ea0d6", @ANYRES32=r2, @ANYRES32=r1], &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r3}, 0xb) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) sendmmsg$sock(r0, &(0x7f0000004fc0)=[{{&(0x7f0000000e80)=@tipc=@name={0x1e, 0x2, 0x2, {{0x42, 0x4}}}, 0x80, &(0x7f00000023c0)=[{&(0x7f0000000f80)="e9862673ee14ae3e5916d434bc2f2d349aa7a3ae7dfc6cb9e9a99fb0153c7353", 0x20}, {&(0x7f0000000fc0)="2fad4ae1071a096de9c48890bd2188d0ed6adcef2c60be6d0749093c29a2ec0cb057d3b9a52e8d913eee6c25d03664b4f15542a635cd2984fa6eeff5fe6a8ead7bd56d18a1ee1f82a08bfb6c1ba8e80c9cd56f7c95cf1de926dcabcc35578acc240b52f04fdd697d4b1f97daa5e5e761514e766b69eb28ce43e0b8e0d47d1fc9b566d22902", 0x85}, {&(0x7f0000001080)="f792596fd450fbcfb941e78425beeb14a6370fe30ef930686519391973d037067fc522ba673edfbf5643c334873926ea700f419f38717f2c8f72d6de3be1f1cb28f2456e8ec37f79bbdeac2a42679a4eb2fa4d1532569f75ece72e71f6ac71", 0x5f}, {&(0x7f0000001100)="bd83be006f355bc981701a8702aed5e0035674b1debead6d446687f13432e2cdb672fd4c93136f05c997ab88b5a5bc723ac51f152a50c28969af6aa13b9877a41777906ce4c4013b0061cb039b28f2eb434ca4dab130bbbf11", 0x59}, {&(0x7f0000001180)="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", 0x1000}, {&(0x7f0000002180)}, {&(0x7f00000021c0)="f1b6df5b3221778466d724aa1d1ad2fb204cb4d8e4241c3ec8a7254e352d514b8f14e060bda7b3f84cf1420351c5ac338a2a37e39ef1860455ea5b1f5f73fbfbc2601a2c02d4e54b8b77f8a5f71087d7fd7e4c9223924d892cf6947de1072c3957febe9089c15e0190f81000e522ab7b15214c45c8d7c4d11c7cb30795ebbc", 0x7f}, {&(0x7f0000002240)="17288423c5937c456fe400a820a91b25b38da9c65a00e85da0d8e941113a54ed20aec3e0d81816a933959896f4a0af319c89917e790ca76ba038e2092eaf7772ce8b0432e2b2842a18e77b709a9d4ec057d424661a306e4f24474dc500e75e71d9244e6c30a48faf81759c84859709ec40deb5028cca7fd2129a56ab8d99f8b077532015be7f821baf7a5d1c9f364575f144be2cfff8ccb96175cb61f0f11e18ff6c45add5118339c5d18c4415205159d121321c2a2e1d911be1bdb6251f69154652cfa2eb0803b1ad1376d2a2a1e6b6fd8193aa3c9e", 0xd6}, {&(0x7f0000002340)="35832b1cb56aeaa327b0b037e09f027ba2ff11", 0x13}, {&(0x7f0000002380)="d9c414bf152acc4e455057d708336cc28cfc804b1060908761ab154234c72eba", 0x20}], 0xa, &(0x7f0000002480)=[@txtime={{0x18, 0x1, 0x3d, 0x9f}}, @txtime={{0x18, 0x1, 0x3d, 0xa59}}, @mark={{0x14, 0x1, 0x24, 0x2985}}, @timestamping={{0x14, 0x1, 0x25, 0x1fe6}}, @txtime={{0x18, 0x1, 0x3d, 0x33}}], 0x78}}, {{0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000002500)="d50985644b0031a4c529161eeba5a669b0cdd66c4894f0764bc690636458ad7ef4b4971d071f31ae433df3730346883ded926c99089febda7e63e8d3d0fd6c71163e72c94f4871d90680f4eb9a88aac26a28b961475ae8e60357aedf44c3c763e2017ff5bf4070f3e8b32d5db9e138bca42ade7306069093ba7448fb08e04f0d1cc141bbd9ad16c14f884e15839d06", 0x8f}, {&(0x7f00000025c0)="1547949ed4b265bd72f3519457c61230a20b2fa2756e05305055273c021fc3884cccee0087c551b0cf515db0f2013a82bc720e76be9149a21c833bbd97f9709a72d114b67be2800a883d308a8fd457e9a339af8fba1bae041fd58df7fb988fb38ae64e55395f1746f86cb876098da0df80db80b13a45356f56cd473255c3d59ee04a35677ce4ab5b15d3f9", 0x8b}, {&(0x7f0000002680)="9235f19bffc5d9605a4c6fb10c7f7d600c9d7bf21def7dd1872d7f05ae5833a9ebb07244b21f491e6f16f9dd74802e08fba7bcecd6f7b31211e98a229a11fb784d6e5a9c14cb8500ce7fc7497d93831e3707679a262d8f953a35782e44175212e0f3970e1796b5120857f9ce9211cc8febd1c4ce86587f295ca633dcaf7c4e7df915a0d4c617b9842dc3d9112a960a480bd05da104fc5bd6e3d09240474555018b093622de723a4d97ddf4e572af0ac3236d9fe6a12c07d972065842a3a5", 0xbe}, {&(0x7f0000002740)="3f3c5dda186728f6f7dd2bdf16418d55eb93dfd7f9eacd5131303c8bf7e29fc03f63c2c6ee58b4011758194ad94fcea160f5aba8cef78a9d0c778a3909bf524420ae41dbbdc927f9ed8fdd01", 0x4c}, {&(0x7f00000027c0)="8de699f5de22cee66ea801692e587d0d59a562a435e889e2c2c7ac9e117d688968682f9386e654d25291e31712eb0f0411810c08ec079b793c280776c7417bac4624daa3310541d0c75fe22ca12a1277d3cf246eba57dcd3d32ea97c74cd5540a54d8d", 0x63}], 0x5, &(0x7f00000028c0)=[@txtime={{0x18, 0x1, 0x3d, 0x7}}, @timestamping={{0x14, 0x1, 0x25, 0xefd4}}, @mark={{0x14, 0x1, 0x24, 0x7fff}}, @mark={{0x14, 0x1, 0x24, 0x100}}, @mark={{0x14, 0x1, 0x24, 0x8}}, @mark={{0x14, 0x1, 0x24, 0x1}}, @mark={{0x14, 0x1, 0x24, 0x2}}, @timestamping={{0x14, 0x1, 0x25, 0x48}}], 0xc0}}, {{&(0x7f0000002980)=@caif=@dgm={0x25, 0x1}, 0x80, &(0x7f0000004ec0)=[{&(0x7f0000002b00)="446f34722ddf60d38d27", 0xa}, {&(0x7f0000002b40)="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", 0x1000}, {&(0x7f0000003b40)="4419a3eecbb4834f6b1fd40de1b0378e29ce9d0c22204fbfdc78997bed0b8bb135195a7f450dca0b7ec535d5a23a68550e197c0872927604c1d0afeb0bf13127eaf0903d6b722cb079f9cc1db7b74cf7aaad0eee5eb03d72ba28fade9d4d8e945fc65d1f77fff97fd685f68595aa10bf20047125fa674e416fc5ea7d4a4b349939a5002bd78461171a4c638345b6eb47b3e97e4d03f73c4196a0fe23c3fdcbe81af129903f09dc18cefdb8213f95e83a5b844122343ee6a8dfbe13d314bacf58bf84fde626b4afc3e658", 0xca}, {&(0x7f0000003c40)="cb22eb364011e5dec48491774c7a4eb665966d9f2bd662bdbc1cb5b0627c0e52be070179fb0d3ce1c21df47c2e94b2243bb87cdb6b789aa5609b333990e78e4d93a30fc25ebfcd90437100ddc4d4087e05bee597f8e27ebc55c075d8eb025d05095ce276705a", 0x66}, {&(0x7f0000003cc0)="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", 0x1000}, {&(0x7f0000004cc0)="407f92e457a5854c17c0a6d418994835ddf4ef2b0284cc8c0bfc050914530f6af17216de6b4ddf0d7d1beed167ea175cd4ce612bd1052a0a62cd06f5f4491b8b6c3c6855f9e4be9b21700232d406aff4d49a537f8735393db9e7915558e6e177f208e63a5c8fde6097352add7da2a433a8c7c4433917c90dc7a65e588a6e04846241bc8ec4d954356c9a23bf0c0e77ed1fa0a65386e1adb86d62ed60a5ea1f8dedc6e0117a94fd969daa", 0xaa}, {&(0x7f0000004dc0)="a51322f9847c6df3079837a1c75c44a89257172c61352fcba1b01aea11bf351e9dafd58e4cc9c6edaba6e37553d9015ac5908c334fe989d24339c3c776dba137a77fd90f1518dc4b3987cf2b39da44cdd777521c5da0fce83fed272e10d66cc7a9579d6b4142b48dd98523b26ec6013c3a05e8caa07dd401dce3acfcca1cb0ddd7241061f5d9cf736662a137b3a6592ddc137578d86e59dbbf9a7de7948e013cf59cfc9903758857097fb74782d037ae91b6016c0bafa82788d1d13dd61b025bc854ad71712be142af8038b79c09b868f5ed", 0xd2}], 0x7, &(0x7f0000004f40)=[@timestamping={{0x14, 0x1, 0x25, 0xbc7}}, @timestamping={{0x14, 0x1, 0x25, 0x5}}, @txtime={{0x18, 0x1, 0x3d, 0x3}}], 0x48}}], 0x3, 0x4004882) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r4, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {0xffffffffffffffff, 0x0, 0x10, 0x10, 0x0, @in={0x106, 0x4e20, @empty}, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1c}}}}, 0x118) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000200)={[{@init_itable_val={'init_itable', 0x3d, 0x8000}}, {@nodiscard}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@jqfmt_vfsold}, {}, {@nobarrier}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_usb_connect$cdc_ecm(0x0, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x8, 0x0, 0x7, [{{0x9, 0x4, 0x0, 0xc, 0x3, 0x2, 0x6, 0x0, 0x8, {{0x9, 0x24, 0x6, 0x0, 0x0, "3e18fb9a"}, {0x5, 0x24, 0x0, 0xed33}, {0xd, 0x24, 0xf, 0x1, 0x1a7, 0x7fff, 0x6}}, {[{{0x9, 0x5, 0x81, 0x3, 0x8, 0x5, 0x2, 0xff}}], {{0x9, 0x5, 0x82, 0x2, 0x40, 0xf, 0x0, 0xe}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x0, 0xff, 0xaf}}}}}]}}]}}, &(0x7f0000000bc0)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x310, 0xd, 0xc, 0x6}, 0x29, &(0x7f0000000200)={0x5, 0xf, 0x29, 0x2, [@ss_container_id={0x14, 0x10, 0x4, 0x77, "659a0612fcdb0e6f24e4dbbcdc1f46db"}, @ssp_cap={0x10, 0x10, 0xa, 0x7, 0x1, 0x1, 0x0, 0x0, [0xff]}]}, 0xa, [{0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x300a}}, {0xc9, &(0x7f0000000500)=@string={0xc9, 0x3, "4d9e7dc59379764f58bbeb69e93ebb90eebf43a061ea45487928b421b0034f651f2e11a42afdeb16e6150190326181effa164843520ee4b0f290f11f5df202eae686686b0910afc6454b110eb261e12d96811aebc810fbaad0a20068269ccac83a7f55f6a4492b77f52a44fbe9f7b9d30084124d275a6a9553cfc5398135fad4f358bc122ecb3f1d2f4b372da210af47bc0934db7f708a27ccac16bb253cc7a7709677ccb64ac9ff4bb3fae83ba76e5e60bfe5b28601936d274385e891dd4ac681be71755818b5"}}, {0x28, &(0x7f0000000280)=@string={0x28, 0x3, "0b80942f0a887aa02a2bed067f5367430659ca088edaddd733c9dacf6bbe01b672ece5aeef30"}}, {0xc9, &(0x7f00000054c0)=@string={0xc9, 0x3, "302031ac2a377a8822d26885a34532b1ef598633758fce5cae1acb133059b2e354ec30e0c5b9f68961254fc59c1dca3ab170ee3f65f0616527ecfb2182d9c6b718b127114f0ee1d100789b66bfbdf8f05ed8cf9b2c3444f3a36dc2543ebc4d80214d7dea39270640e0383dcec4cd67fbe339be97b0d663ccee84faf36980e117bb2124a502a1c79e161a4207b6941afc20b89eeacbf0458cff03000000000000f3a873478930119765ae7031f08fcf82cace7f53aa2b1be0b99038740675255355396cb3bf9a8f"}}, {0x27, &(0x7f0000000300)=@string={0x27, 0x3, "59bd29fe46872f7f9bd891cc60904242ab21deb7172fafd5010becb31c5f4c9910871bbc27"}}, {0xd1, &(0x7f0000000680)=@string={0xd1, 0x3, "67e7a2ce04fcf3783e516cdbbe532da81944a8002bd545247962220059857a555666980f02887b18dfbceac6d6fe74ec875c294ec7c2e0bf392289b72a768db7495be0203f70bd1c5bc805693ee80b0d0337832442b8f0dcb444af1f6065ccdc03e748711257bdebf81bb4a25998a8709a3b52879513da805b566c2e490366b6aa994dea7d0ca8046f5dd17f1580b8da54a76bdb2cc8ee5279fe2a81dd72604525bf491c762393f95beab37fc81851ff85f48a8575e82c28b0d438494b4da9622ebddf70e16336dcf14ae6af131cab"}}, {0xb1, &(0x7f0000000780)=@string={0xb1, 0x3, "b983e31cf2ae42af8d1872944116b50a420bb14db74a0704af8e4c89ae1b3c9b13bf693d5c501519adb29306479ba0a24082c5e6a02384f7ca9744563ca64406e8aa7a5ec5a020326cf2d0df41728036bde0db448e087c51247c3c48b4dd948ae52458c59e89ee708b14757c3a7f00d279a683ae4aa877de1aa6e9b92e1834a129996825decc5e186a886df9af370023990b57b9810e16c69e1976ae102e12cbf863a248dd48eb1e9f88df00137aab"}}, {0xdc, &(0x7f0000000840)=@string={0xdc, 0x3, "24e932bd389ac5ca1e527ebb94f8bb200d102b0b2799b995d6ae7f9ed3e2d1570de93b70b7fd816284ad6c7f2ade6f45e8cd7a90e4887220d5632e5133a8b5c11f5acac0838006548185e19e48063d8d7af1012d118e1faa937854baea540536de042d55b00eeed85846c8174977694f3636492752ca314cbefe0733f20b75507548dce44423352d34307388a72194ea08ecf9ed8c85a4751c8906811372a6ac30d0b185ce219c30bcd9befd416ebe523502b807c3d954fcd72046a9f41a276704e77c4006a03ae9768727331d32c540933565659ffd8b07d320"}}, {0x57, &(0x7f0000000940)=@string={0x57, 0x3, "258de06330393ad7beb61613f4e0014e6e517c32e331161f2494cb0476c721ce81dfba289933b1f59efdcb8870a4fab2dbada05d0cbb756210538267ad5fdcd469783c68d930756582c5a3d9e602c3169ac133c22e"}}, {0xa7, &(0x7f0000000b00)=@string={0xa7, 0x3, "4d3e8895b4f13c352c31e1e92e333d201b91709e80d8c9bb417ab037eecd836d0a2c1e2f89c513e592e94fd3ad270fd885e720bf96161df489570357d68e804e1d7d051134bf9afd489120fda71ae3824c44f291b968f3a279261c152d8f70df8f62ed52f88984cbc6fa36df9ca0a250128ca95b3b9755c39edf136112e7943172d38fc83f4d200600000000000000ddaaf25de1bcb48464c354fd95edb93441311128c900"}}]}) 130.663158ms ago: executing program 2 (id=2850): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x55, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x0, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0x8002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xae, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r0}, 0x10) r1 = socket$can_bcm(0x1d, 0x2, 0x2) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f00000000c0), 0x10) r3 = dup3(r2, r1, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r6 = socket$unix(0x1, 0x5, 0x0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="0100000003ece1e40ad8871461ab0800", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r6, @ANYBLOB="3bf81bb9f9"], 0x20000600}}, 0x0) sendmsg$can_bcm(r3, &(0x7f0000000080)={&(0x7f00000001c0)={0x1d, r5, 0x3f420f00}, 0x10, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[], 0x4640}, 0x2}, 0x2c004000) 97.393718ms ago: executing program 2 (id=2851): r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) socket$inet6_sctp(0xa, 0x5, 0x84) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r1, 0x402, 0x8000001f) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents(r2, 0xfffffffffffffffd, 0x58) socket$phonet_pipe(0x23, 0x5, 0x2) pipe2$9p(&(0x7f0000001900), 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r7}, &(0x7f0000000240), &(0x7f00000003c0)=r9}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000040)={r8, r5, 0x25, 0x2, @val=@tcx={@void, @value=r8}}, 0x1c) syz_emit_ethernet(0x3e, &(0x7f0000000740)=ANY=[], 0x0) 79.922568ms ago: executing program 2 (id=2852): bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xae, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000140)={'veth0_to_batadv\x00', &(0x7f0000000100)=@ethtool_cmd={0x24, 0x2, 0x4, 0xc1, 0xc0, 0x9, 0x2, 0x4, 0x6c, 0xf7, 0x3, 0xfffffc00, 0x3, 0x0, 0x5, 0xfffffffa, [0xc35c, 0x2400]}}) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) symlink(&(0x7f0000001780)='./file0/../file0\x00', &(0x7f00000017c0)='./file0\x00') r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000002480)=@raw={'raw\x00', 0x8, 0x3, 0x4e8, 0x0, 0x11, 0x148, 0x340, 0x0, 0x450, 0x2a8, 0x2a8, 0x450, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x3f, 0x0, 0x88000000, 0x3, 0x7}}}, @common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0\x00'}}]}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}, {0x0, 0x0, 0x81}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x4f, 0x7, "72f6daeff0a9c6294e211d2d88fe6dcff5d0e552201da3b7a1fdb30dcb59"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x548) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r3}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = dup(r4) fsetxattr$security_selinux(r5, &(0x7f0000000000), &(0x7f0000000040)='system_u:object_r:mouse_device_t:s0\x00', 0x20, 0x0) 6.43282ms ago: executing program 2 (id=2853): perf_event_open(&(0x7f0000000500)={0x5, 0x80, 0x55, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x20a0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x10875, 0x0, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0x8002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/user\x00') socketpair$tipc(0x1e, 0x4, 0x0, &(0x7f0000000140)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x200000000000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x207, &(0x7f0000000000), 0x1, 0x469, &(0x7f0000000100)="$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") mount(0x0, &(0x7f0000000240)='.\x00', 0x0, 0x2200020, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) write$binfmt_script(r2, &(0x7f0000000300)={'#! ', './file0', [{0x20, 'kfree\x00'}, {0x20, '/dev/bus/usb/00#/00#\x00'}, {0x20, '/dev/sg#\x00'}, {0x20, '%^'}], 0xa, "05acd7e30634a4a852bab3fb9de93ccbff1319f1c8dd3ab4e084e24b611f9323d53511918de49b33c8d37c6ee3c55bf8db0d766913fd7d404f14b492f67c4ff1d18ab65f01c6fc149119741cc53623e1ce91b4c0dbd8926c028d02a37a39d89d91a799bb93540a4fce73a0116b3b002542a7cac2"}, 0xa9) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000008385000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xe, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r4}, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="8b332cbd96562361000005000000080003"], 0x1c}}, 0x0) syz_genetlink_get_family_id$team(&(0x7f00000000c0), r3) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000140)) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000003c0)={'ip6gre0\x00', &(0x7f0000000240)={'ip6_vti0\x00', 0x0, 0x2f, 0xd0, 0xd5, 0x9, 0x8, @ipv4={'\x00', '\xff\xff', @multicast1}, @remote, 0x8, 0x40, 0x1ff, 0xa}}) mount$bind(0x0, 0x0, 0x0, 0x2901090, 0x0) r6 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r6, 0x1, &(0x7f0000000040)=ANY=[]) setxattr$security_ima(&(0x7f0000000100)='./file1\x00', &(0x7f0000000140), &(0x7f00000013c0)=ANY=[], 0x700, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x60}, 0x122) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'dummy0\x00'}) 0s ago: executing program 2 (id=2854): socket$rxrpc(0x21, 0x2, 0xa) io_submit(0x0, 0x0, 0x0) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0105500, &(0x7f00000001c0)={0x0, 0x1, 0x9, 0x4, 0x0, 0x0, 0x0}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d00)=@delchain={0x4b8, 0x65, 0x1, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}, {0x1a, 0xd}, {0xa, 0xfffa}}, [@filter_kind_options=@f_route={{0xa}, {0x488, 0x2, [@TCA_ROUTE4_POLICE={0x1c, 0x5, [@TCA_POLICE_RATE64={0xc, 0x8, 0x5}, @TCA_POLICE_RATE64={0xc, 0x8, 0x3}]}, @TCA_ROUTE4_IIF={0x8}, @TCA_ROUTE4_POLICE={0x10, 0x5, [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x2}]}, @TCA_ROUTE4_POLICE={0x41c, 0x5, [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x4}, @TCA_POLICE_RESULT={0x8, 0x5, 0x1}, @TCA_POLICE_RATE={0x404, 0x2, [0x7f9f3d1e, 0x9, 0x200, 0x0, 0x0, 0x1ff, 0x7, 0x4bfcf931, 0x6, 0x6, 0x7da, 0x9, 0x9, 0x3, 0x4b73c7ce, 0xc13, 0x7fff, 0x750d, 0x0, 0x6, 0x5, 0xf, 0x5, 0x0, 0x0, 0xd, 0x7, 0x4, 0x7f, 0x7, 0x9, 0x8, 0x0, 0xfffffff5, 0xffffffff, 0x6, 0x9af, 0x20000, 0xfffffff5, 0x4d8, 0x6, 0x80000001, 0x9, 0x3ff, 0x0, 0x7, 0x80000000, 0x4, 0x7fff, 0x0, 0xaf, 0xc5, 0x7fffffff, 0x8, 0x10, 0xb7ff, 0x0, 0x1, 0x5, 0x7f8, 0xd0a, 0xcb6b, 0x401, 0x81, 0x8, 0x8, 0x1, 0xf, 0x3, 0x4, 0x10, 0x1, 0x7fff, 0x4, 0x12, 0xa9da, 0x5, 0x304, 0x70, 0x2, 0x0, 0x7, 0xc, 0x0, 0x9, 0x100, 0x800, 0x4, 0x81, 0x5, 0x2, 0x3, 0xe4, 0x6, 0x22, 0x7, 0xfff, 0x4, 0xab1a24e, 0x2, 0x2, 0x3, 0x9, 0x2, 0xffffffa6, 0x61, 0x49800000, 0x80000000, 0x0, 0x6, 0x2, 0x5, 0x5, 0x1, 0x9, 0x80, 0xd, 0x34b, 0x994, 0x6, 0x7, 0x2, 0x5, 0x8, 0x2, 0x8, 0x7, 0x9, 0xb0000000, 0x9, 0xffffdbea, 0x0, 0x9, 0x9, 0x82, 0x8, 0x9, 0x1bb7, 0x8, 0x6, 0x1, 0x1, 0x5c5d, 0xf, 0x1, 0x6, 0xfffffff9, 0xa0, 0x7, 0xa, 0x8, 0x5, 0xe38, 0x1, 0x4, 0x101, 0x5, 0x5, 0x81, 0x8000000, 0xffff90f1, 0x5, 0xc, 0x5, 0x6, 0x0, 0xb, 0xfffffff9, 0x6, 0x7fff, 0x7, 0x2, 0x8, 0xfffff76f, 0x1, 0x6, 0x6, 0x5, 0xffffff9a, 0xbee, 0x80000001, 0x7, 0x0, 0x8, 0xb226, 0x4, 0xfffffffc, 0x7ff, 0x5c5, 0x7, 0x3, 0x5, 0xcf53, 0x6, 0x80000001, 0xbd, 0x3, 0x8001, 0x9, 0x7cc, 0x9, 0x8, 0x10001, 0x2, 0x2, 0x5, 0x4, 0x4eb3, 0xffffff81, 0x3, 0x8, 0xfffffff8, 0x2, 0x2aa, 0x3, 0x3, 0x5, 0x5, 0xfffffff8, 0x14255208, 0x0, 0x401, 0x2, 0x10001, 0x7, 0x0, 0x10000, 0x4, 0x32f2, 0x80000001, 0x9, 0x9, 0x3, 0x0, 0x50, 0xfd, 0xfaf, 0x2, 0x8, 0x6, 0x7, 0x7f, 0xfffffffe, 0x3ff, 0x9, 0x3fc0000, 0x3, 0xb4fe, 0xc, 0x2619, 0x0, 0x5, 0x2, 0x1, 0xe1, 0x2]}]}, @TCA_ROUTE4_FROM={0x8, 0x3, 0x9d}, @TCA_ROUTE4_CLASSID={0x8, 0x1, {0xe, 0x5}}, @TCA_ROUTE4_POLICE={0x1c, 0x5, [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x1e6e}, @TCA_POLICE_RATE64={0xc, 0x8, 0x8cdc}]}, @TCA_ROUTE4_CLASSID={0x8, 0x1, {0x9, 0x6}}]}}]}, 0x4b8}, 0x1, 0x0, 0x0, 0x40}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00006dbffc), 0x4) syz_io_uring_setup(0x3c0c, &(0x7f0000000400)={0x0, 0xc890, 0x4002}, 0x0, 0x0) bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000400)="67d8901bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c14498396b28c7d1784d04aa38922721cb7816094cb82950fd012efd26d3abc8a75ac1f30e53a0eff506f6e6b369ba6c5306e91acaa94e89d3bff4e52cd151235f3defff171c60b91c0c5aeb29736830a09b262dbe4c7ed149885a054de1d7ff5bcecd7a50061814ceefb", 0x9d}, {&(0x7f0000000900)="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", 0x3e4}], 0x2}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) kernel console output (not intermixed with test programs): e=0x7ffc0000 [ 100.776018][ T29] audit: type=1326 audit(1750202212.790:4685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7808 comm="syz.3.1634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9f39f3e929 code=0x7ffc0000 [ 100.797066][ T7810] lo speed is unknown, defaulting to 1000 [ 100.811280][ T29] audit: type=1326 audit(1750202212.920:4686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7808 comm="syz.3.1634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f39f3e929 code=0x7ffc0000 [ 100.835331][ T29] audit: type=1326 audit(1750202212.920:4687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7808 comm="syz.3.1634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f39f3e929 code=0x7ffc0000 [ 100.839657][ T7821] xt_hashlimit: size too large, truncated to 1048576 [ 100.859274][ T29] audit: type=1326 audit(1750202212.920:4688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7808 comm="syz.3.1634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9f39f3e929 code=0x7ffc0000 [ 100.890087][ T29] audit: type=1326 audit(1750202212.920:4689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7808 comm="syz.3.1634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f39f3e929 code=0x7ffc0000 [ 100.914223][ T29] audit: type=1326 audit(1750202212.920:4690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7808 comm="syz.3.1634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f39f3e929 code=0x7ffc0000 [ 100.976599][ T7826] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 100.986109][ T7826] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 101.249337][ T7837] loop1: detected capacity change from 0 to 1024 [ 101.278407][ T7837] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 101.333601][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.783621][ T7869] netlink: 5 bytes leftover after parsing attributes in process `syz.2.1655'. [ 101.793256][ T7869] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 101.838737][ T7871] netlink: 'syz.2.1656': attribute type 1 has an invalid length. [ 101.846631][ T7871] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1656'. [ 101.926366][ T7873] futex_wake_op: syz.2.1657 tries to shift op by -1; fix this program [ 102.087458][ T7874] lo speed is unknown, defaulting to 1000 [ 102.112295][ T7874] sd 0:0:1:0: device reset [ 102.250411][ T7878] loop1: detected capacity change from 0 to 512 [ 102.258251][ T7878] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 102.269679][ T7878] EXT4-fs (loop1): 1 truncate cleaned up [ 102.275752][ T7878] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 102.294166][ T7878] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 102.302835][ T7878] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 102.512639][ T7888] FAULT_INJECTION: forcing a failure. [ 102.512639][ T7888] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 102.526547][ T7888] CPU: 1 UID: 0 PID: 7888 Comm: syz.0.1663 Not tainted 6.16.0-rc2-syzkaller-00045-g4663747812d1 #0 PREEMPT(voluntary) [ 102.526575][ T7888] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 102.526588][ T7888] Call Trace: [ 102.526595][ T7888] [ 102.526603][ T7888] __dump_stack+0x1d/0x30 [ 102.526705][ T7888] dump_stack_lvl+0xe8/0x140 [ 102.526735][ T7888] dump_stack+0x15/0x1b [ 102.526751][ T7888] should_fail_ex+0x265/0x280 [ 102.526777][ T7888] should_fail+0xb/0x20 [ 102.526829][ T7888] should_fail_usercopy+0x1a/0x20 [ 102.526900][ T7888] _copy_to_user+0x20/0xa0 [ 102.526923][ T7888] simple_read_from_buffer+0xb5/0x130 [ 102.526951][ T7888] proc_fail_nth_read+0x100/0x140 [ 102.527003][ T7888] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 102.527023][ T7888] vfs_read+0x1a0/0x6f0 [ 102.527040][ T7888] ? kmem_cache_free+0xdf/0x300 [ 102.527129][ T7888] ? putname+0xda/0x100 [ 102.527143][ T7888] ksys_read+0xda/0x1a0 [ 102.527162][ T7888] __x64_sys_read+0x40/0x50 [ 102.527197][ T7888] x64_sys_call+0x2d77/0x2fb0 [ 102.527210][ T7888] do_syscall_64+0xd2/0x200 [ 102.527222][ T7888] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 102.527238][ T7888] ? clear_bhb_loop+0x40/0x90 [ 102.527314][ T7888] ? clear_bhb_loop+0x40/0x90 [ 102.527327][ T7888] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.527342][ T7888] RIP: 0033:0x7f275d40d33c [ 102.527354][ T7888] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 102.527376][ T7888] RSP: 002b:00007f275ba77030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 102.527446][ T7888] RAX: ffffffffffffffda RBX: 00007f275d635fa0 RCX: 00007f275d40d33c [ 102.527453][ T7888] RDX: 000000000000000f RSI: 00007f275ba770a0 RDI: 0000000000000004 [ 102.527459][ T7888] RBP: 00007f275ba77090 R08: 0000000000000000 R09: 0000000000000000 [ 102.527465][ T7888] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 102.527472][ T7888] R13: 0000000000000000 R14: 00007f275d635fa0 R15: 00007ffc8f7ba298 [ 102.527481][ T7888] [ 102.968843][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.065589][ T7902] lo speed is unknown, defaulting to 1000 [ 103.197159][ T7901] loop0: detected capacity change from 0 to 512 [ 103.204093][ T7901] EXT4-fs: Ignoring removed mblk_io_submit option [ 103.210606][ T7901] EXT4-fs: Ignoring removed bh option [ 103.217463][ T7901] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 103.236737][ T7901] EXT4-fs (loop0): 1 truncate cleaned up [ 103.243817][ T7901] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.503985][ T7907] siw: device registration error -23 [ 103.547026][ T7916] xt_hashlimit: size too large, truncated to 1048576 [ 103.592375][ T7922] futex_wake_op: syz.2.1676 tries to shift op by -1; fix this program [ 103.714362][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.775967][ T7923] SELinux: syz.1.1675 (7923) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 103.824690][ T7932] sd 0:0:1:0: device reset [ 103.911012][ T7920] lo speed is unknown, defaulting to 1000 [ 103.924832][ T7926] lo speed is unknown, defaulting to 1000 [ 104.020588][ T7936] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1679'. [ 104.419418][ T7951] 9pnet: Could not find request transport: 0xffffffffffffffff [ 104.953740][ T7966] xt_hashlimit: size too large, truncated to 1048576 [ 105.227555][ T7983] loop0: detected capacity change from 0 to 512 [ 105.276836][ T7983] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.322983][ T7983] ext4 filesystem being mounted at /399/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 105.424800][ T7987] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 96: padding at end of block bitmap is not set [ 105.477711][ T7993] lo speed is unknown, defaulting to 1000 [ 105.591617][ T7997] futex_wake_op: syz.4.1699 tries to shift op by -1; fix this program [ 105.669135][ T7999] loop1: detected capacity change from 0 to 1024 [ 105.676228][ T29] kauditd_printk_skb: 191 callbacks suppressed [ 105.676287][ T29] audit: type=1400 audit(1750202217.780:4882): avc: denied { open } for pid=7979 comm="syz.0.1695" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 105.702723][ T29] audit: type=1400 audit(1750202217.780:4883): avc: denied { kernel } for pid=7979 comm="syz.0.1695" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 105.722456][ T29] audit: type=1400 audit(1750202217.790:4884): avc: denied { mount } for pid=7998 comm="syz.1.1700" name="/" dev="gadgetfs" ino=4113 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 105.735612][ T7997] lo speed is unknown, defaulting to 1000 [ 105.754438][ T29] audit: type=1400 audit(1750202217.880:4885): avc: granted { setsecparam } for pid=7979 comm="syz.0.1695" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 105.773742][ T29] audit: type=1400 audit(1750202217.880:4886): avc: denied { read } for pid=7979 comm="syz.0.1695" path="socket:[19737]" dev="sockfs" ino=19737 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 105.798838][ T7999] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 105.814662][ T29] audit: type=1400 audit(1750202217.940:4887): avc: denied { tracepoint } for pid=7998 comm="syz.1.1700" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 105.844753][ T29] audit: type=1400 audit(1750202217.970:4888): avc: denied { create } for pid=7998 comm="syz.1.1700" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 105.859349][ T7999] vlan2: entered allmulticast mode [ 105.871348][ T7997] sd 0:0:1:0: device reset [ 105.874799][ T29] audit: type=1400 audit(1750202217.980:4889): avc: denied { ioctl } for pid=7998 comm="syz.1.1700" path="socket:[20766]" dev="sockfs" ino=20766 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 105.901602][ T29] audit: type=1326 audit(1750202217.990:4890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7996 comm="syz.4.1699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa4cdfe929 code=0x7ffc0000 [ 105.925170][ T29] audit: type=1326 audit(1750202217.990:4891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7996 comm="syz.4.1699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa4cdfe929 code=0x7ffc0000 [ 105.956469][ T8007] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.1695: Failed to acquire dquot type 1 [ 106.048817][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.273239][ T8036] futex_wake_op: syz.3.1712 tries to shift op by -1; fix this program [ 106.388710][ T8039] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 106.437384][ T8045] sd 0:0:1:0: device reset [ 106.445622][ T8036] lo speed is unknown, defaulting to 1000 [ 106.446984][ T8044] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 106.469844][ T8044] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 106.548544][ T8047] vlan2: entered allmulticast mode [ 106.638070][ T8050] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 106.646868][ T8050] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 106.680800][ T8052] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 106.689343][ T8052] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 107.177103][ T8063] IPv4: Oversized IP packet from 127.202.26.0 [ 107.185180][ T8067] IPv4: Oversized IP packet from 127.202.26.0 [ 107.192479][ T8063] netlink: 'syz.1.1722': attribute type 6 has an invalid length. [ 107.805257][ T8115] xt_hashlimit: size too large, truncated to 1048576 [ 108.137403][ T8122] vlan2: entered allmulticast mode [ 108.240421][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.324998][ T8129] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 108.334282][ T8129] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 108.345702][ T8131] xt_hashlimit: size too large, truncated to 1048576 [ 108.496213][ T8146] xt_hashlimit: size too large, truncated to 1048576 [ 108.793910][ T8158] loop0: detected capacity change from 0 to 8192 [ 108.895912][ T8170] netlink: 'syz.0.1767': attribute type 4 has an invalid length. [ 108.921485][ T8170] netlink: 'syz.0.1767': attribute type 4 has an invalid length. [ 108.958467][ T8177] loop1: detected capacity change from 0 to 512 [ 108.974320][ T8177] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.992390][ T8177] ext4 filesystem being mounted at /307/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 109.069373][ T8177] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.1770: Failed to acquire dquot type 1 [ 109.093528][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.202293][ T8200] loop0: detected capacity change from 0 to 512 [ 109.209227][ T8200] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 109.220582][ T8200] EXT4-fs (loop0): 1 truncate cleaned up [ 109.226682][ T8200] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 109.244201][ T8200] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 109.252695][ T8200] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 109.712452][ T8214] lo speed is unknown, defaulting to 1000 [ 109.743380][ T8214] SELinux: syz.2.1785 (8214) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 109.780021][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.981637][ T3398] IPVS: starting estimator thread 0... [ 109.987371][ T8225] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 109.993289][ T8228] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1790'. [ 110.059521][ T8225] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1790'. [ 110.070054][ T8225] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1790'. [ 110.081163][ T8229] IPVS: using max 2448 ests per chain, 122400 per kthread [ 110.283723][ T8245] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 110.343587][ T8245] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 110.392903][ T8249] SELinux: syz.1.1798 (8249) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 110.443943][ T8248] lo speed is unknown, defaulting to 1000 [ 110.525731][ T8254] xt_hashlimit: size too large, truncated to 1048576 [ 110.656929][ T8256] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 110.691887][ T8256] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 110.822664][ T29] kauditd_printk_skb: 225 callbacks suppressed [ 110.822682][ T29] audit: type=1400 audit(1750202222.940:5113): avc: granted { setsecparam } for pid=8258 comm="syz.3.1802" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 111.277972][ T29] audit: type=1400 audit(1750202223.400:5114): avc: denied { cpu } for pid=8288 comm="syz.4.1813" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 111.409712][ T8305] pim6reg1: entered promiscuous mode [ 111.415696][ T8305] pim6reg1: entered allmulticast mode [ 111.604754][ T8320] program syz.0.1825 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 111.614458][ T8320] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 111.624735][ T29] audit: type=1400 audit(1750202223.730:5115): avc: denied { write } for pid=8314 comm="syz.0.1825" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 111.648978][ T29] audit: type=1326 audit(1750202223.740:5116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8322 comm="syz.4.1829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa4cdfe929 code=0x7ffc0000 [ 111.672964][ T29] audit: type=1326 audit(1750202223.740:5117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8322 comm="syz.4.1829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa4cdfe929 code=0x7ffc0000 [ 111.696411][ T29] audit: type=1326 audit(1750202223.740:5118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8322 comm="syz.4.1829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7faa4cdfe929 code=0x7ffc0000 [ 111.720384][ T29] audit: type=1326 audit(1750202223.740:5119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8322 comm="syz.4.1829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa4cdfe929 code=0x7ffc0000 [ 111.744812][ T29] audit: type=1326 audit(1750202223.740:5120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8322 comm="syz.4.1829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa4cdfe929 code=0x7ffc0000 [ 111.768249][ T29] audit: type=1326 audit(1750202223.740:5121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8322 comm="syz.4.1829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7faa4cdfe929 code=0x7ffc0000 [ 111.792381][ T29] audit: type=1326 audit(1750202223.740:5122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8322 comm="syz.4.1829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa4cdfe929 code=0x7ffc0000 [ 112.043484][ T8336] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1834'. [ 112.253230][ T8349] (unnamed net_device) (uninitialized): Unable to set peer notification delay as MII monitoring is disabled [ 113.025854][ T8400] futex_wake_op: syz.1.1861 tries to shift op by -1; fix this program [ 113.365510][ T8405] sd 0:0:1:0: device reset [ 113.399927][ T8404] lo speed is unknown, defaulting to 1000 [ 113.629490][ T8418] loop0: detected capacity change from 0 to 1024 [ 113.636698][ T8418] EXT4-fs: Ignoring removed nomblk_io_submit option [ 113.648915][ T8418] EXT4-fs (loop0): stripe (8) is not aligned with cluster size (16), stripe is disabled [ 113.672752][ T8418] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 113.691754][ T8418] EXT4-fs error (device loop0): ext4_check_all_de:659: inode #12: block 7: comm syz.0.1866: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=108 fake=0 [ 113.726113][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.948835][ T8452] loop1: detected capacity change from 0 to 1024 [ 113.966262][ T8452] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 114.008608][ T8452] vlan2: entered allmulticast mode [ 114.114159][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.155466][ T8476] loop1: detected capacity change from 0 to 512 [ 114.166593][ T8476] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 114.182835][ T8476] EXT4-fs (loop1): 1 truncate cleaned up [ 114.189136][ T8476] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 114.205491][ T8476] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 114.215081][ T8476] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 114.253821][ T8479] loop0: detected capacity change from 0 to 1024 [ 114.283047][ T8479] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 114.405219][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.442349][ T8490] SELinux: syz.4.1895 (8490) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 114.442546][ T8487] lo speed is unknown, defaulting to 1000 [ 114.772501][ T8506] program syz.4.1902 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 114.793675][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.826153][ T8514] loop1: detected capacity change from 0 to 512 [ 114.943896][ T8514] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 114.975396][ T8514] EXT4-fs (loop1): 1 truncate cleaned up [ 114.983652][ T8514] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 115.078819][ T8522] 9pnet_fd: Insufficient options for proto=fd [ 115.187794][ T8525] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 115.244876][ T8525] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 115.803975][ T8542] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 115.830782][ T8542] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 115.929011][ T29] kauditd_printk_skb: 422 callbacks suppressed [ 115.929026][ T29] audit: type=1326 audit(1750202228.050:5545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8546 comm="syz.4.1919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa4cdfe929 code=0x7ffc0000 [ 115.958949][ T29] audit: type=1326 audit(1750202228.050:5546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8546 comm="syz.4.1919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa4cdfe929 code=0x7ffc0000 [ 115.982708][ T29] audit: type=1326 audit(1750202228.050:5547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8546 comm="syz.4.1919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=242 compat=0 ip=0x7faa4cdfe929 code=0x7ffc0000 [ 116.006455][ T29] audit: type=1326 audit(1750202228.050:5548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8546 comm="syz.4.1919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa4cdfe929 code=0x7ffc0000 [ 116.029953][ T29] audit: type=1326 audit(1750202228.050:5549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8546 comm="syz.4.1919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa4cdfe929 code=0x7ffc0000 [ 116.117051][ T8550] netlink: 'syz.4.1920': attribute type 6 has an invalid length. [ 116.166098][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.177895][ T29] audit: type=1400 audit(1750202228.310:5550): avc: denied { write } for pid=8553 comm="syz.2.1922" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 116.178062][ T8554] program syz.2.1922 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 116.252372][ T8554] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 116.263987][ T29] audit: type=1400 audit(1750202228.390:5551): avc: denied { create } for pid=8548 comm="syz.4.1920" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 116.356685][ T8559] lo speed is unknown, defaulting to 1000 [ 116.367081][ T8560] SELinux: syz.1.1924 (8560) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 116.398905][ T29] audit: type=1400 audit(1750202228.520:5552): avc: denied { setopt } for pid=8553 comm="syz.2.1922" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 116.419446][ T29] audit: type=1400 audit(1750202228.520:5553): avc: denied { bind } for pid=8553 comm="syz.2.1922" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 116.438780][ T29] audit: type=1400 audit(1750202228.520:5554): avc: denied { name_bind } for pid=8553 comm="syz.2.1922" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 116.795410][ T8583] vlan2: entered allmulticast mode [ 116.945192][ T8604] SELinux: syz.0.1943 (8604) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 117.077916][ T8614] program syz.3.1948 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 117.181681][ T8621] loop1: detected capacity change from 0 to 1024 [ 117.188560][ T8621] EXT4-fs: Ignoring removed i_version option [ 117.195310][ T8621] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 117.212288][ T8621] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:483: comm syz.1.1950: Invalid block bitmap block 0 in block_group 0 [ 117.226159][ T8621] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.1950: Failed to acquire dquot type 0 [ 117.237810][ T8621] EXT4-fs error (device loop1): ext4_free_blocks:6587: comm syz.1.1950: Freeing blocks not in datazone - block = 0, count = 4096 [ 117.251952][ T8621] EXT4-fs error (device loop1): ext4_read_inode_bitmap:139: comm syz.1.1950: Invalid inode bitmap blk 0 in block_group 0 [ 117.264932][ T8621] EXT4-fs error (device loop1) in ext4_free_inode:361: Corrupt filesystem [ 117.274143][ T8621] EXT4-fs (loop1): 1 orphan inode deleted [ 117.274873][ T41] EXT4-fs error (device loop1): ext4_release_dquot:6969: comm kworker/u8:2: Failed to release dquot type 0 [ 117.280311][ T8621] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 117.465571][ T8627] siw: device registration error -23 [ 117.598087][ T8634] vlan2: entered allmulticast mode [ 117.634015][ T8638] SELinux: syz.3.1957 (8638) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 117.670876][ T8643] xt_hashlimit: size too large, truncated to 1048576 [ 117.850882][ T8650] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 117.860589][ T8650] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 117.971663][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.049047][ T8668] SELinux: syz.1.1969 (8668) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 118.148140][ T8681] netlink: 'syz.3.1971': attribute type 29 has an invalid length. [ 118.286840][ T8693] SELinux: syz.1.1981 (8693) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 118.358894][ T8701] siw: device registration error -23 [ 118.411746][ T8706] futex_wake_op: syz.4.1987 tries to shift op by -1; fix this program [ 118.500325][ T8713] lo speed is unknown, defaulting to 1000 [ 118.524340][ T8715] sd 0:0:1:0: device reset [ 118.745156][ T8731] siw: device registration error -23 [ 119.053433][ T8766] siw: device registration error -23 [ 119.088735][ T8777] SELinux: syz.3.2018 (8777) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 119.290341][ T8808] xt_hashlimit: size too large, truncated to 1048576 [ 119.480801][ T8815] FAULT_INJECTION: forcing a failure. [ 119.480801][ T8815] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 119.494035][ T8815] CPU: 0 UID: 0 PID: 8815 Comm: syz.1.2033 Not tainted 6.16.0-rc2-syzkaller-00045-g4663747812d1 #0 PREEMPT(voluntary) [ 119.494142][ T8815] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 119.494155][ T8815] Call Trace: [ 119.494163][ T8815] [ 119.494170][ T8815] __dump_stack+0x1d/0x30 [ 119.494263][ T8815] dump_stack_lvl+0xe8/0x140 [ 119.494282][ T8815] dump_stack+0x15/0x1b [ 119.494298][ T8815] should_fail_ex+0x265/0x280 [ 119.494325][ T8815] should_fail+0xb/0x20 [ 119.494351][ T8815] should_fail_usercopy+0x1a/0x20 [ 119.494458][ T8815] _copy_to_user+0x20/0xa0 [ 119.494557][ T8815] simple_read_from_buffer+0xb5/0x130 [ 119.494668][ T8815] proc_fail_nth_read+0x100/0x140 [ 119.494688][ T8815] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 119.494721][ T8815] vfs_read+0x1a0/0x6f0 [ 119.494758][ T8815] ? __rcu_read_unlock+0x4f/0x70 [ 119.494777][ T8815] ? __fget_files+0x184/0x1c0 [ 119.494797][ T8815] ksys_read+0xda/0x1a0 [ 119.494833][ T8815] __x64_sys_read+0x40/0x50 [ 119.494919][ T8815] x64_sys_call+0x2d77/0x2fb0 [ 119.494939][ T8815] do_syscall_64+0xd2/0x200 [ 119.494956][ T8815] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 119.494993][ T8815] ? clear_bhb_loop+0x40/0x90 [ 119.495020][ T8815] ? clear_bhb_loop+0x40/0x90 [ 119.495040][ T8815] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.495063][ T8815] RIP: 0033:0x7f1efc87d33c [ 119.495142][ T8815] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 119.495159][ T8815] RSP: 002b:00007f1efaee7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 119.495183][ T8815] RAX: ffffffffffffffda RBX: 00007f1efcaa5fa0 RCX: 00007f1efc87d33c [ 119.495197][ T8815] RDX: 000000000000000f RSI: 00007f1efaee70a0 RDI: 0000000000000018 [ 119.495211][ T8815] RBP: 00007f1efaee7090 R08: 0000000000000000 R09: 0000000000000000 [ 119.495239][ T8815] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 119.495252][ T8815] R13: 0000000000000000 R14: 00007f1efcaa5fa0 R15: 00007fff35544ac8 [ 119.495269][ T8815] [ 119.728294][ T8818] siw: device registration error -23 [ 120.010568][ T8851] xt_hashlimit: size too large, truncated to 1048576 [ 120.215308][ T8860] siw: device registration error -23 [ 120.233565][ T8862] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 120.644834][ T8909] bond1: entered promiscuous mode [ 120.649974][ T8909] bond1: entered allmulticast mode [ 120.656621][ T8909] 8021q: adding VLAN 0 to HW filter on device bond1 [ 120.679672][ T8909] bond1 (unregistering): Released all slaves [ 120.747710][ T8917] lo speed is unknown, defaulting to 1000 [ 120.973321][ T29] kauditd_printk_skb: 421 callbacks suppressed [ 120.973334][ T29] audit: type=1326 audit(1750202233.100:5973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8938 comm="syz.4.2080" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa4cdfe929 code=0x7ffc0000 [ 121.005274][ T29] audit: type=1326 audit(1750202233.100:5974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8938 comm="syz.4.2080" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa4cdfe929 code=0x7ffc0000 [ 121.028822][ T29] audit: type=1326 audit(1750202233.100:5975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8938 comm="syz.4.2080" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7faa4cdfe929 code=0x7ffc0000 [ 121.052939][ T29] audit: type=1326 audit(1750202233.100:5976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8938 comm="syz.4.2080" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa4cdfe929 code=0x7ffc0000 [ 121.076873][ T29] audit: type=1326 audit(1750202233.100:5977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8938 comm="syz.4.2080" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7faa4cdfe929 code=0x7ffc0000 [ 121.100842][ T29] audit: type=1326 audit(1750202233.100:5978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8938 comm="syz.4.2080" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa4cdfe929 code=0x7ffc0000 [ 121.125018][ T29] audit: type=1326 audit(1750202233.100:5979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8938 comm="syz.4.2080" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7faa4cdfe929 code=0x7ffc0000 [ 121.148536][ T29] audit: type=1326 audit(1750202233.100:5980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8938 comm="syz.4.2080" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa4cdfe929 code=0x7ffc0000 [ 121.172366][ T29] audit: type=1326 audit(1750202233.100:5981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8938 comm="syz.4.2080" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7faa4cdfe929 code=0x7ffc0000 [ 121.195761][ T29] audit: type=1326 audit(1750202233.100:5982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8938 comm="syz.4.2080" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa4cdfe929 code=0x7ffc0000 [ 121.318288][ T8950] loop0: detected capacity change from 0 to 512 [ 121.325902][ T8950] EXT4-fs: Ignoring removed mblk_io_submit option [ 121.343844][ T8950] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 121.363185][ T8950] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 121.376992][ T8950] ext4 filesystem being mounted at /483/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 121.402262][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.421711][ T8960] x_tables: duplicate entry at hook 2 [ 121.752941][ T8995] SELinux: syz.1.2099 (8995) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 121.829645][ T9001] loop1: detected capacity change from 0 to 1024 [ 121.858135][ T9001] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 121.880518][ T9001] vlan2: entered allmulticast mode [ 121.966171][ T9018] program syz.3.2109 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 121.977023][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.059989][ T9032] tmpfs: Bad value for 'mpol' [ 122.251312][ T9049] vlan2: entered allmulticast mode [ 122.443699][ T9078] loop1: detected capacity change from 0 to 512 [ 122.453020][ T9078] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 122.475808][ T9078] EXT4-fs (loop1): 1 truncate cleaned up [ 122.488528][ T9078] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 122.510574][ T9078] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 122.510694][ T9078] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 123.039723][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.062956][ T9093] loop1: detected capacity change from 0 to 1024 [ 123.074866][ T9093] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 123.095271][ T9093] vlan2: entered allmulticast mode [ 123.168472][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.309794][ T9101] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 123.318540][ T9101] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 123.524692][ T9115] SELinux: syz.0.2149 (9115) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 123.561337][ T9117] loop0: detected capacity change from 0 to 2048 [ 123.568107][ T9117] EXT4-fs: Ignoring removed bh option [ 123.583905][ T9117] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 123.783649][ T9125] vlan2: entered allmulticast mode [ 124.046239][ T9141] siw: device registration error -23 [ 124.101875][ T9146] siw: device registration error -23 [ 124.153693][ T9155] vlan2: entered allmulticast mode [ 124.408682][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.662004][ T9228] IPv6: NLM_F_CREATE should be specified when creating new route [ 124.684128][ T9232] sd 0:0:1:0: device reset [ 124.688896][ T9231] FAULT_INJECTION: forcing a failure. [ 124.688896][ T9231] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 124.702518][ T9231] CPU: 1 UID: 0 PID: 9231 Comm: syz.0.2200 Not tainted 6.16.0-rc2-syzkaller-00045-g4663747812d1 #0 PREEMPT(voluntary) [ 124.702644][ T9231] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 124.702656][ T9231] Call Trace: [ 124.702663][ T9231] [ 124.702679][ T9231] __dump_stack+0x1d/0x30 [ 124.702758][ T9231] dump_stack_lvl+0xe8/0x140 [ 124.702779][ T9231] dump_stack+0x15/0x1b [ 124.702794][ T9231] should_fail_ex+0x265/0x280 [ 124.702821][ T9231] should_fail+0xb/0x20 [ 124.702848][ T9231] should_fail_usercopy+0x1a/0x20 [ 124.702960][ T9231] _copy_to_user+0x20/0xa0 [ 124.703031][ T9231] simple_read_from_buffer+0xb5/0x130 [ 124.703067][ T9231] proc_fail_nth_read+0x100/0x140 [ 124.703090][ T9231] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 124.703136][ T9231] vfs_read+0x1a0/0x6f0 [ 124.703228][ T9231] ? __rcu_read_unlock+0x4f/0x70 [ 124.703248][ T9231] ? __fget_files+0x184/0x1c0 [ 124.703271][ T9231] ksys_read+0xda/0x1a0 [ 124.703380][ T9231] __x64_sys_read+0x40/0x50 [ 124.703416][ T9231] x64_sys_call+0x2d77/0x2fb0 [ 124.703440][ T9231] do_syscall_64+0xd2/0x200 [ 124.703457][ T9231] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 124.703481][ T9231] ? clear_bhb_loop+0x40/0x90 [ 124.703499][ T9231] ? clear_bhb_loop+0x40/0x90 [ 124.703574][ T9231] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.703638][ T9231] RIP: 0033:0x7f275d40d33c [ 124.703724][ T9231] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 124.703745][ T9231] RSP: 002b:00007f275ba77030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 124.703767][ T9231] RAX: ffffffffffffffda RBX: 00007f275d635fa0 RCX: 00007f275d40d33c [ 124.703782][ T9231] RDX: 000000000000000f RSI: 00007f275ba770a0 RDI: 0000000000000007 [ 124.703794][ T9231] RBP: 00007f275ba77090 R08: 0000000000000000 R09: 0000000000000000 [ 124.703805][ T9231] R10: 0000000000000033 R11: 0000000000000246 R12: 0000000000000001 [ 124.703860][ T9231] R13: 0000000000000000 R14: 00007f275d635fa0 R15: 00007ffc8f7ba298 [ 124.703880][ T9231] [ 124.927201][ T9218] lo speed is unknown, defaulting to 1000 [ 125.105091][ T9267] SELinux: syz.2.2211 (9267) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 125.169785][ T9272] siw: device registration error -23 [ 125.960350][ T9308] random: crng reseeded on system resumption [ 126.012614][ T29] kauditd_printk_skb: 689 callbacks suppressed [ 126.012633][ T29] audit: type=1400 audit(1750202238.140:6672): avc: denied { name_bind } for pid=9312 comm="syz.1.2230" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 126.040633][ T29] audit: type=1400 audit(1750202238.140:6673): avc: denied { node_bind } for pid=9312 comm="syz.1.2230" saddr=172.20.20.170 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 126.077943][ T29] audit: type=1326 audit(1750202238.200:6674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9320 comm="syz.1.2234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1efc87e929 code=0x7ffc0000 [ 126.088391][ T9321] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 126.101440][ T29] audit: type=1326 audit(1750202238.200:6675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9320 comm="syz.1.2234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1efc87e929 code=0x7ffc0000 [ 126.101475][ T29] audit: type=1326 audit(1750202238.200:6676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9320 comm="syz.1.2234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1efc87e929 code=0x7ffc0000 [ 126.101515][ T29] audit: type=1326 audit(1750202238.200:6677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9320 comm="syz.1.2234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1efc87e929 code=0x7ffc0000 [ 126.101543][ T29] audit: type=1326 audit(1750202238.200:6678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9320 comm="syz.1.2234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1efc87e929 code=0x7ffc0000 [ 126.101567][ T29] audit: type=1326 audit(1750202238.200:6679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9320 comm="syz.1.2234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1efc87e929 code=0x7ffc0000 [ 126.101637][ T29] audit: type=1326 audit(1750202238.200:6680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9320 comm="syz.1.2234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1efc87e929 code=0x7ffc0000 [ 126.101660][ T29] audit: type=1326 audit(1750202238.200:6681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9320 comm="syz.1.2234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f1efc87d3df code=0x7ffc0000 [ 126.277417][ T9321] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 126.689156][ T9347] lo speed is unknown, defaulting to 1000 [ 126.733998][ T9347] sd 0:0:1:0: device reset [ 126.933851][ T9352] siw: device registration error -23 [ 127.124146][ T9361] xt_hashlimit: size too large, truncated to 1048576 [ 127.316657][ T9369] program syz.4.2254 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 127.414376][ T9373] 9pnet_fd: Insufficient options for proto=fd [ 127.847230][ T1038] page_pool_release_retry() stalled pool shutdown: id 42, 1 inflight 61 sec [ 127.880457][ T9376] program syz.3.2256 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 127.943446][ T9396] loop0: detected capacity change from 0 to 512 [ 127.955549][ T9396] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 127.965803][ T9397] vlan2: entered allmulticast mode [ 127.977569][ T9396] EXT4-fs (loop0): invalid journal inode [ 127.984470][ T9396] EXT4-fs (loop0): can't get journal size [ 128.008760][ T9396] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e056c118, mo2=0002] [ 128.017753][ T9396] System zones: 1-12, 13-13 [ 128.023744][ T9396] EXT4-fs (loop0): 1 truncate cleaned up [ 128.030153][ T9396] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 128.050115][ T9396] vlan2: entered allmulticast mode [ 128.158686][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.730921][ T9457] loop1: detected capacity change from 0 to 1024 [ 128.754298][ T9457] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 128.814911][ T9457] vlan2: entered allmulticast mode [ 128.970251][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.169607][ T9480] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 129.204908][ T9480] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 129.253744][ T9492] SELinux: syz.4.2304 (9492) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 129.276058][ T9490] vlan2: entered allmulticast mode [ 129.305993][ T9494] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 129.316305][ T9494] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 129.503992][ T9512] netlink: 'syz.3.2312': attribute type 6 has an invalid length. [ 129.658483][ T9517] IPv6: NLM_F_CREATE should be specified when creating new route [ 129.892810][ T9544] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 129.933736][ T9544] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 130.040537][ T9544] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2323'. [ 130.239085][ T9572] loop1: detected capacity change from 0 to 1024 [ 130.269116][ T9572] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 130.347719][ T9572] vlan2: entered allmulticast mode [ 130.372698][ T9579] SELinux: syz.4.2336 (9579) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 130.497781][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.703448][ T9605] xt_hashlimit: size too large, truncated to 1048576 [ 130.938726][ T9619] loop0: detected capacity change from 0 to 1024 [ 130.949987][ T9617] netlink: 'syz.4.2350': attribute type 6 has an invalid length. [ 131.000818][ T9619] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 131.055054][ T9619] vlan2: entered allmulticast mode [ 131.094566][ T9625] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 131.151973][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.339871][ T9651] siw: device registration error -23 [ 131.434334][ T29] kauditd_printk_skb: 354 callbacks suppressed [ 131.434352][ T29] audit: type=1326 audit(1750202243.560:7036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9658 comm="syz.0.2365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f275d40e929 code=0x7ffc0000 [ 131.517234][ T29] audit: type=1326 audit(1750202243.590:7037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9658 comm="syz.0.2365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f275d40e929 code=0x7ffc0000 [ 131.541034][ T29] audit: type=1326 audit(1750202243.590:7038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9658 comm="syz.0.2365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f275d40e929 code=0x7ffc0000 [ 131.552574][ T9666] netlink: 'syz.0.2366': attribute type 6 has an invalid length. [ 131.565424][ T29] audit: type=1326 audit(1750202243.590:7039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9658 comm="syz.0.2365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=90 compat=0 ip=0x7f275d40e929 code=0x7ffc0000 [ 131.596702][ T29] audit: type=1326 audit(1750202243.590:7040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9658 comm="syz.0.2365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f275d40e929 code=0x7ffc0000 [ 131.620445][ T9666] loop0: detected capacity change from 0 to 512 [ 131.697503][ T9666] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 131.805550][ T29] audit: type=1326 audit(1750202243.890:7041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9669 comm="syz.2.2369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f831b09e929 code=0x7ffc0000 [ 131.829149][ T29] audit: type=1326 audit(1750202243.890:7042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9669 comm="syz.2.2369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f831b09e929 code=0x7ffc0000 [ 131.852721][ T29] audit: type=1326 audit(1750202243.890:7043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9669 comm="syz.2.2369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f831b09e929 code=0x7ffc0000 [ 131.876167][ T29] audit: type=1326 audit(1750202243.890:7044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9669 comm="syz.2.2369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f831b09e929 code=0x7ffc0000 [ 131.899580][ T29] audit: type=1326 audit(1750202243.890:7045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9669 comm="syz.2.2369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f831b09e929 code=0x7ffc0000 [ 131.970677][ T9666] EXT4-fs error (device loop0): ext4_iget_extra_inode:5035: inode #15: comm syz.0.2366: corrupted in-inode xattr: e_value out of bounds [ 132.080737][ T9666] EXT4-fs (loop0): Remounting filesystem read-only [ 132.091709][ T9666] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 132.153083][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.324908][ T9701] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.373524][ T9709] FAULT_INJECTION: forcing a failure. [ 132.373524][ T9709] name failslab, interval 1, probability 0, space 0, times 0 [ 132.386320][ T9709] CPU: 0 UID: 0 PID: 9709 Comm: syz.0.2382 Not tainted 6.16.0-rc2-syzkaller-00045-g4663747812d1 #0 PREEMPT(voluntary) [ 132.386400][ T9709] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 132.386484][ T9709] Call Trace: [ 132.386491][ T9709] [ 132.386498][ T9709] __dump_stack+0x1d/0x30 [ 132.386518][ T9709] dump_stack_lvl+0xe8/0x140 [ 132.386536][ T9709] dump_stack+0x15/0x1b [ 132.386629][ T9709] should_fail_ex+0x265/0x280 [ 132.386660][ T9709] should_failslab+0x8c/0xb0 [ 132.386682][ T9709] kmem_cache_alloc_node_noprof+0x57/0x320 [ 132.386765][ T9709] ? __alloc_skb+0x101/0x320 [ 132.386872][ T9709] __alloc_skb+0x101/0x320 [ 132.386919][ T9709] netlink_alloc_large_skb+0xba/0xf0 [ 132.386954][ T9709] netlink_sendmsg+0x3cf/0x6b0 [ 132.386974][ T9709] ? __pfx_netlink_sendmsg+0x10/0x10 [ 132.386994][ T9709] __sock_sendmsg+0x142/0x180 [ 132.387040][ T9709] ____sys_sendmsg+0x31e/0x4e0 [ 132.387070][ T9709] ___sys_sendmsg+0x17b/0x1d0 [ 132.387210][ T9709] __x64_sys_sendmsg+0xd4/0x160 [ 132.387251][ T9709] x64_sys_call+0x2999/0x2fb0 [ 132.387275][ T9709] do_syscall_64+0xd2/0x200 [ 132.387295][ T9709] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 132.387338][ T9709] ? clear_bhb_loop+0x40/0x90 [ 132.387362][ T9709] ? clear_bhb_loop+0x40/0x90 [ 132.387382][ T9709] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.387401][ T9709] RIP: 0033:0x7f275d40e929 [ 132.387437][ T9709] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 132.387468][ T9709] RSP: 002b:00007f275ba56038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 132.387491][ T9709] RAX: ffffffffffffffda RBX: 00007f275d636080 RCX: 00007f275d40e929 [ 132.387505][ T9709] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000004 [ 132.387519][ T9709] RBP: 00007f275ba56090 R08: 0000000000000000 R09: 0000000000000000 [ 132.387531][ T9709] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 132.387606][ T9709] R13: 0000000000000000 R14: 00007f275d636080 R15: 00007ffc8f7ba298 [ 132.387626][ T9709] [ 132.658034][ T9701] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.675297][ T9711] netlink: 'syz.2.2386': attribute type 6 has an invalid length. [ 132.759962][ T9701] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.839580][ T9701] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.843300][ T9727] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 132.859206][ T9727] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 132.915547][ T9701] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.930853][ T9701] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.942964][ T9701] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.957569][ T9701] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.307421][ T9748] loop0: detected capacity change from 0 to 512 [ 133.317235][ T9750] FAULT_INJECTION: forcing a failure. [ 133.317235][ T9750] name failslab, interval 1, probability 0, space 0, times 0 [ 133.330571][ T9750] CPU: 1 UID: 0 PID: 9750 Comm: syz.4.2401 Not tainted 6.16.0-rc2-syzkaller-00045-g4663747812d1 #0 PREEMPT(voluntary) [ 133.330672][ T9750] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 133.330684][ T9750] Call Trace: [ 133.330690][ T9750] [ 133.330697][ T9750] __dump_stack+0x1d/0x30 [ 133.330721][ T9750] dump_stack_lvl+0xe8/0x140 [ 133.330742][ T9750] dump_stack+0x15/0x1b [ 133.330779][ T9750] should_fail_ex+0x265/0x280 [ 133.330811][ T9750] should_failslab+0x8c/0xb0 [ 133.330833][ T9750] kmem_cache_alloc_node_noprof+0x57/0x320 [ 133.330879][ T9750] ? __alloc_skb+0x101/0x320 [ 133.330911][ T9750] __alloc_skb+0x101/0x320 [ 133.330959][ T9750] ? audit_log_start+0x365/0x6c0 [ 133.330993][ T9750] audit_log_start+0x380/0x6c0 [ 133.331029][ T9750] audit_seccomp+0x48/0x100 [ 133.331057][ T9750] ? __seccomp_filter+0x68c/0x10d0 [ 133.331159][ T9750] __seccomp_filter+0x69d/0x10d0 [ 133.331185][ T9750] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 133.331207][ T9750] ? vfs_write+0x75e/0x8e0 [ 133.331290][ T9750] ? __rcu_read_unlock+0x4f/0x70 [ 133.331350][ T9750] ? __fget_files+0x184/0x1c0 [ 133.331372][ T9750] __secure_computing+0x82/0x150 [ 133.331397][ T9750] syscall_trace_enter+0xcf/0x1e0 [ 133.331477][ T9750] do_syscall_64+0xac/0x200 [ 133.331497][ T9750] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 133.331531][ T9750] ? clear_bhb_loop+0x40/0x90 [ 133.331556][ T9750] ? clear_bhb_loop+0x40/0x90 [ 133.331579][ T9750] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.331601][ T9750] RIP: 0033:0x7faa4cdfe929 [ 133.331618][ T9750] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 133.331670][ T9750] RSP: 002b:00007faa4b467038 EFLAGS: 00000246 ORIG_RAX: 0000000000000040 [ 133.331693][ T9750] RAX: ffffffffffffffda RBX: 00007faa4d025fa0 RCX: 00007faa4cdfe929 [ 133.331706][ T9750] RDX: 0000000000000589 RSI: 0000000000000004 RDI: 0000000000000000 [ 133.331719][ T9750] RBP: 00007faa4b467090 R08: 0000000000000000 R09: 0000000000000000 [ 133.331733][ T9750] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 133.331759][ T9750] R13: 0000000000000000 R14: 00007faa4d025fa0 R15: 00007ffe78c19288 [ 133.331776][ T9750] [ 133.580232][ T9748] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 133.631399][ T9748] EXT4-fs error (device loop0): xattr_find_entry:333: inode #15: comm syz.0.2399: corrupted xattr entries [ 133.662626][ T9748] EXT4-fs (loop0): Remounting filesystem read-only [ 133.669440][ T9748] EXT4-fs (loop0): 1 truncate cleaned up [ 133.680346][ T9760] netlink: 'syz.2.2402': attribute type 6 has an invalid length. [ 133.689073][ T9748] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 134.086050][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.261522][ T9801] SELinux: syz.0.2421 (9801) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 134.373576][ T9809] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2424'. [ 134.474142][ T9821] siw: device registration error -23 [ 134.498282][ T9825] SELinux: syz.0.2432 (9825) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 134.594015][ T9838] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2437'. [ 134.722654][ T9854] SELinux: syz.4.2444 (9854) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 134.929771][ T9885] SELinux: syz.0.2458 (9885) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 135.356428][ T9898] siw: device registration error -23 [ 135.613786][ T9903] FAULT_INJECTION: forcing a failure. [ 135.613786][ T9903] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 135.626976][ T9903] CPU: 0 UID: 0 PID: 9903 Comm: syz.3.2464 Not tainted 6.16.0-rc2-syzkaller-00045-g4663747812d1 #0 PREEMPT(voluntary) [ 135.627000][ T9903] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 135.627010][ T9903] Call Trace: [ 135.627063][ T9903] [ 135.627069][ T9903] __dump_stack+0x1d/0x30 [ 135.627086][ T9903] dump_stack_lvl+0xe8/0x140 [ 135.627102][ T9903] dump_stack+0x15/0x1b [ 135.627116][ T9903] should_fail_ex+0x265/0x280 [ 135.627197][ T9903] should_fail+0xb/0x20 [ 135.627219][ T9903] should_fail_usercopy+0x1a/0x20 [ 135.627303][ T9903] strncpy_from_user+0x25/0x230 [ 135.627320][ T9903] ? kmem_cache_alloc_noprof+0x186/0x310 [ 135.627339][ T9903] ? getname_flags+0x80/0x3b0 [ 135.627411][ T9903] getname_flags+0xae/0x3b0 [ 135.627427][ T9903] do_sys_openat2+0x60/0x110 [ 135.627475][ T9903] __x64_sys_openat+0xf2/0x120 [ 135.627504][ T9903] x64_sys_call+0x1af/0x2fb0 [ 135.627594][ T9903] do_syscall_64+0xd2/0x200 [ 135.627612][ T9903] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 135.627653][ T9903] ? clear_bhb_loop+0x40/0x90 [ 135.627671][ T9903] ? clear_bhb_loop+0x40/0x90 [ 135.627692][ T9903] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.627745][ T9903] RIP: 0033:0x7f9f39f3e929 [ 135.627757][ T9903] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 135.627816][ T9903] RSP: 002b:00007f9f385a7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 135.627830][ T9903] RAX: ffffffffffffffda RBX: 00007f9f3a165fa0 RCX: 00007f9f39f3e929 [ 135.627839][ T9903] RDX: 0000000000000441 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 135.627847][ T9903] RBP: 00007f9f385a7090 R08: 0000000000000000 R09: 0000000000000000 [ 135.627855][ T9903] R10: 0000000000000104 R11: 0000000000000246 R12: 0000000000000001 [ 135.627863][ T9903] R13: 0000000000000000 R14: 00007f9f3a165fa0 R15: 00007ffd6b191918 [ 135.627955][ T9903] [ 135.884711][ T3394] IPVS: starting estimator thread 0... [ 135.897071][ T9909] SELinux: security_context_str_to_sid (-Xܘ7.H\ %u@) failed with errno=-22 [ 135.934174][ T9914] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 135.948708][ T9914] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 135.970993][ T9912] IPVS: using max 2592 ests per chain, 129600 per kthread [ 135.978452][ T9920] xt_CT: You must specify a L4 protocol and not use inversions on it [ 135.993728][ T9922] loop1: detected capacity change from 0 to 512 [ 136.002639][ T9922] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 136.014326][ T9922] EXT4-fs error (device loop1): xattr_find_entry:333: inode #15: comm syz.1.2470: corrupted xattr entries [ 136.027443][ T9922] EXT4-fs (loop1): Remounting filesystem read-only [ 136.034422][ T9922] EXT4-fs (loop1): 1 truncate cleaned up [ 136.039822][ T9927] siw: device registration error -23 [ 136.040533][ T9922] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 136.109693][ T9929] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 136.118270][ T9929] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 136.472580][ T9934] futex_wake_op: syz.4.2476 tries to shift op by -1; fix this program [ 136.659224][ T9935] lo speed is unknown, defaulting to 1000 [ 136.679260][ T29] kauditd_printk_skb: 171 callbacks suppressed [ 136.679279][ T29] audit: type=1326 audit(1750202248.800:7215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9933 comm="syz.4.2476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7faa4cdf58e7 code=0x7ffc0000 [ 136.710506][ T29] audit: type=1326 audit(1750202248.810:7216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9933 comm="syz.4.2476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7faa4cd9ab19 code=0x7ffc0000 [ 136.731477][ T9935] sd 0:0:1:0: device reset [ 136.734481][ T29] audit: type=1326 audit(1750202248.810:7217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9933 comm="syz.4.2476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa4cdfe929 code=0x7ffc0000 [ 136.762417][ T29] audit: type=1326 audit(1750202248.820:7218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9933 comm="syz.4.2476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7faa4cdf58e7 code=0x7ffc0000 [ 136.785789][ T29] audit: type=1326 audit(1750202248.820:7219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9933 comm="syz.4.2476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7faa4cd9ab19 code=0x7ffc0000 [ 136.809847][ T29] audit: type=1326 audit(1750202248.820:7220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9933 comm="syz.4.2476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7faa4cdf58e7 code=0x7ffc0000 [ 136.833493][ T29] audit: type=1326 audit(1750202248.820:7221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9933 comm="syz.4.2476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7faa4cd9ab19 code=0x7ffc0000 [ 136.856856][ T29] audit: type=1326 audit(1750202248.820:7222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9933 comm="syz.4.2476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7faa4cdf58e7 code=0x7ffc0000 [ 136.880635][ T29] audit: type=1326 audit(1750202248.820:7223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9933 comm="syz.4.2476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7faa4cd9ab19 code=0x7ffc0000 [ 136.904302][ T29] audit: type=1326 audit(1750202248.820:7224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9933 comm="syz.4.2476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7faa4cdf58e7 code=0x7ffc0000 [ 136.928422][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.990374][ T9947] loop1: detected capacity change from 0 to 512 [ 137.004106][ T9947] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 137.016951][ T9947] ext4 filesystem being mounted at /488/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 137.044058][ T9949] vlan0: entered allmulticast mode [ 137.258584][ T9964] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.2481: Failed to acquire dquot type 1 [ 137.306165][ T9969] xt_hashlimit: size too large, truncated to 1048576 [ 137.429570][ T9973] siw: device registration error -23 [ 137.524644][ T9757] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 96: padding at end of block bitmap is not set [ 137.608242][ T9993] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2497'. [ 137.620196][ T9993] SELinux: Context system_u:object_r:gpg_exec_t:s0 is not valid (left unmapped). [ 137.674216][T10003] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 137.930898][T10011] xt_hashlimit: size too large, truncated to 1048576 [ 138.234654][T10024] FAULT_INJECTION: forcing a failure. [ 138.234654][T10024] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 138.247894][T10024] CPU: 0 UID: 0 PID: 10024 Comm: syz.4.2510 Not tainted 6.16.0-rc2-syzkaller-00045-g4663747812d1 #0 PREEMPT(voluntary) [ 138.247918][T10024] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 138.248004][T10024] Call Trace: [ 138.248010][T10024] [ 138.248017][T10024] __dump_stack+0x1d/0x30 [ 138.248035][T10024] dump_stack_lvl+0xe8/0x140 [ 138.248049][T10024] dump_stack+0x15/0x1b [ 138.248098][T10024] should_fail_ex+0x265/0x280 [ 138.248132][T10024] should_fail+0xb/0x20 [ 138.248162][T10024] should_fail_usercopy+0x1a/0x20 [ 138.248204][T10024] strncpy_from_user+0x25/0x230 [ 138.248227][T10024] ? __kmalloc_cache_noprof+0x189/0x320 [ 138.248253][T10024] getname_flags+0x230/0x3b0 [ 138.248324][T10024] io_symlinkat_prep+0x127/0x1d0 [ 138.248350][T10024] io_submit_sqes+0x5e5/0xfd0 [ 138.248381][T10024] __se_sys_io_uring_enter+0x1c1/0x1b70 [ 138.248407][T10024] ? 0xffffffff81000000 [ 138.248473][T10024] ? __rcu_read_unlock+0x4f/0x70 [ 138.248497][T10024] ? get_pid_task+0x96/0xd0 [ 138.248510][T10024] ? proc_fail_nth_write+0x12d/0x160 [ 138.248550][T10024] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 138.248563][T10024] ? vfs_write+0x75e/0x8e0 [ 138.248581][T10024] ? __rcu_read_unlock+0x4f/0x70 [ 138.248594][T10024] ? __fget_files+0x184/0x1c0 [ 138.248644][T10024] ? fput+0x8f/0xc0 [ 138.248659][T10024] __x64_sys_io_uring_enter+0x78/0x90 [ 138.248747][T10024] x64_sys_call+0x28c8/0x2fb0 [ 138.248758][T10024] do_syscall_64+0xd2/0x200 [ 138.248768][T10024] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 138.248781][T10024] ? clear_bhb_loop+0x40/0x90 [ 138.248839][T10024] ? clear_bhb_loop+0x40/0x90 [ 138.248849][T10024] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.248916][T10024] RIP: 0033:0x7faa4cdfe929 [ 138.248925][T10024] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 138.249055][T10024] RSP: 002b:00007faa4b467038 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 138.249066][T10024] RAX: ffffffffffffffda RBX: 00007faa4d025fa0 RCX: 00007faa4cdfe929 [ 138.249126][T10024] RDX: 0000000000006513 RSI: 0000000000001b20 RDI: 0000000000000007 [ 138.249133][T10024] RBP: 00007faa4b467090 R08: 0000000000000000 R09: 0000000000000000 [ 138.249139][T10024] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 138.249145][T10024] R13: 0000000000000000 R14: 00007faa4d025fa0 R15: 00007ffe78c19288 [ 138.249155][T10024] [ 138.520090][T10028] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 138.561347][T10036] program syz.3.2515 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 138.775060][T10060] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2524'. [ 138.824410][T10070] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 138.837204][T10068] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 138.845806][T10068] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 139.037450][T10093] vlan0: entered allmulticast mode [ 140.023626][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.050395][T10147] loop1: detected capacity change from 0 to 512 [ 140.057485][T10147] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 140.069811][T10147] EXT4-fs (loop1): 1 truncate cleaned up [ 140.076526][T10147] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 140.096704][T10147] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 140.105336][T10147] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 140.317859][T10160] siw: device registration error -23 [ 140.321909][ T1038] page_pool_release_retry() stalled pool shutdown: id 51, 1 inflight 60 sec [ 140.357396][T10164] FAULT_INJECTION: forcing a failure. [ 140.357396][T10164] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 140.370641][T10164] CPU: 1 UID: 0 PID: 10164 Comm: syz.4.2568 Not tainted 6.16.0-rc2-syzkaller-00045-g4663747812d1 #0 PREEMPT(voluntary) [ 140.370749][T10164] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 140.370761][T10164] Call Trace: [ 140.370768][T10164] [ 140.370775][T10164] __dump_stack+0x1d/0x30 [ 140.370799][T10164] dump_stack_lvl+0xe8/0x140 [ 140.370821][T10164] dump_stack+0x15/0x1b [ 140.370836][T10164] should_fail_ex+0x265/0x280 [ 140.370938][T10164] should_fail+0xb/0x20 [ 140.370967][T10164] should_fail_usercopy+0x1a/0x20 [ 140.371054][T10164] _copy_to_user+0x20/0xa0 [ 140.371077][T10164] simple_read_from_buffer+0xb5/0x130 [ 140.371173][T10164] proc_fail_nth_read+0x100/0x140 [ 140.371198][T10164] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 140.371233][T10164] vfs_read+0x1a0/0x6f0 [ 140.371264][T10164] ? __rcu_read_unlock+0x4f/0x70 [ 140.371346][T10164] ? __fget_files+0x184/0x1c0 [ 140.371433][T10164] ksys_read+0xda/0x1a0 [ 140.371465][T10164] __x64_sys_read+0x40/0x50 [ 140.371502][T10164] x64_sys_call+0x2d77/0x2fb0 [ 140.371524][T10164] do_syscall_64+0xd2/0x200 [ 140.371614][T10164] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 140.371640][T10164] ? clear_bhb_loop+0x40/0x90 [ 140.371722][T10164] ? clear_bhb_loop+0x40/0x90 [ 140.371743][T10164] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.371765][T10164] RIP: 0033:0x7faa4cdfd33c [ 140.371782][T10164] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 140.371801][T10164] RSP: 002b:00007faa4b467030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 140.371822][T10164] RAX: ffffffffffffffda RBX: 00007faa4d025fa0 RCX: 00007faa4cdfd33c [ 140.371834][T10164] RDX: 000000000000000f RSI: 00007faa4b4670a0 RDI: 0000000000000006 [ 140.371845][T10164] RBP: 00007faa4b467090 R08: 0000000000000000 R09: 0000000000000000 [ 140.371857][T10164] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 140.371868][T10164] R13: 0000000000000000 R14: 00007faa4d025fa0 R15: 00007ffe78c19288 [ 140.371887][T10164] [ 140.608441][T10169] SELinux: syz.2.2570 (10169) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 140.630050][T10170] loop0: detected capacity change from 0 to 512 [ 140.701775][T10176] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 140.704797][T10179] netlink: 88 bytes leftover after parsing attributes in process `syz.4.2575'. [ 140.708935][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.731431][T10170] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 140.780929][T10170] ext4 filesystem being mounted at /584/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 140.801632][T10186] SELinux: Context free is not valid (left unmapped). [ 140.911294][T10206] FAULT_INJECTION: forcing a failure. [ 140.911294][T10206] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 140.924523][T10206] CPU: 0 UID: 0 PID: 10206 Comm: syz.2.2580 Not tainted 6.16.0-rc2-syzkaller-00045-g4663747812d1 #0 PREEMPT(voluntary) [ 140.924606][T10206] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 140.924619][T10206] Call Trace: [ 140.924626][T10206] [ 140.924634][T10206] __dump_stack+0x1d/0x30 [ 140.924669][T10206] dump_stack_lvl+0xe8/0x140 [ 140.924689][T10206] dump_stack+0x15/0x1b [ 140.924756][T10206] should_fail_ex+0x265/0x280 [ 140.924791][T10206] should_fail+0xb/0x20 [ 140.924840][T10206] should_fail_usercopy+0x1a/0x20 [ 140.924872][T10206] _copy_from_user+0x1c/0xb0 [ 140.924895][T10206] ___sys_sendmsg+0xc1/0x1d0 [ 140.925001][T10206] __sys_sendmmsg+0x178/0x300 [ 140.925031][T10206] __x64_sys_sendmmsg+0x57/0x70 [ 140.925052][T10206] x64_sys_call+0x2f2f/0x2fb0 [ 140.925074][T10206] do_syscall_64+0xd2/0x200 [ 140.925127][T10206] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 140.925154][T10206] ? clear_bhb_loop+0x40/0x90 [ 140.925176][T10206] ? clear_bhb_loop+0x40/0x90 [ 140.925256][T10206] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.925279][T10206] RIP: 0033:0x7f831b09e929 [ 140.925298][T10206] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 140.925317][T10206] RSP: 002b:00007f83196e6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 140.925385][T10206] RAX: ffffffffffffffda RBX: 00007f831b2c6080 RCX: 00007f831b09e929 [ 140.925399][T10206] RDX: 0000000000000002 RSI: 0000200000000a80 RDI: 0000000000000004 [ 140.925414][T10206] RBP: 00007f83196e6090 R08: 0000000000000000 R09: 0000000000000000 [ 140.925427][T10206] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 140.925441][T10206] R13: 0000000000000000 R14: 00007f831b2c6080 R15: 00007ffc23af7a98 [ 140.925460][T10206] [ 141.745637][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.801240][T10358] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 141.851542][ T29] kauditd_printk_skb: 404 callbacks suppressed [ 141.851560][ T29] audit: type=1400 audit(1750202253.980:7627): avc: denied { write } for pid=10364 comm="syz.0.2594" name="001" dev="devtmpfs" ino=147 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 141.895878][T10365] loop0: detected capacity change from 0 to 512 [ 141.916146][T10365] Quota error (device loop0): v2_read_file_info: Free block number 1 out of range (1, 6). [ 141.942263][T10365] EXT4-fs warning (device loop0): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 141.945346][ T29] audit: type=1326 audit(1750202254.070:7628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10373 comm="syz.2.2597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f831b09e929 code=0x7ffc0000 [ 141.980671][ T29] audit: type=1326 audit(1750202254.070:7629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10373 comm="syz.2.2597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f831b09e929 code=0x7ffc0000 [ 141.997163][T10365] EXT4-fs (loop0): mount failed [ 142.004294][ T29] audit: type=1326 audit(1750202254.110:7630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10373 comm="syz.2.2597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f831b09e929 code=0x7ffc0000 [ 142.032748][ T29] audit: type=1326 audit(1750202254.110:7631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10373 comm="syz.2.2597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f831b09e929 code=0x7ffc0000 [ 142.056373][ T29] audit: type=1326 audit(1750202254.110:7632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10373 comm="syz.2.2597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f831b09e929 code=0x7ffc0000 [ 142.079918][ T29] audit: type=1326 audit(1750202254.110:7633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10373 comm="syz.2.2597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f831b09e929 code=0x7ffc0000 [ 142.103708][ T29] audit: type=1326 audit(1750202254.110:7634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10373 comm="syz.2.2597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f831b09d3df code=0x7ffc0000 [ 142.127230][ T29] audit: type=1326 audit(1750202254.110:7635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10373 comm="syz.2.2597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f831b09e929 code=0x7ffc0000 [ 142.133889][T10378] SELinux: syz.4.2599 (10378) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 142.211717][T10365] loop0: detected capacity change from 0 to 512 [ 142.224350][T10365] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 142.256215][T10365] EXT4-fs (loop0): 1 truncate cleaned up [ 142.266137][T10365] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 142.295187][T10365] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.326200][T10365] batadv_slave_1: entered promiscuous mode [ 142.333367][T10365] batadv_slave_1: left promiscuous mode [ 142.679096][T10413] vlan2: entered allmulticast mode [ 142.810841][T10427] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2621'. [ 142.837398][T10433] loop9: detected capacity change from 0 to 7 [ 142.843738][T10433] Buffer I/O error on dev loop9, logical block 0, async page read [ 142.851896][T10433] Buffer I/O error on dev loop9, logical block 0, async page read [ 142.859731][T10433] loop9: unable to read partition table [ 142.866180][T10433] loop_reread_partitions: partition scan of loop9 (被ڬdƤݡ [ 142.866180][T10433] U) failed (rc=-5) [ 142.958548][T10447] vlan0: entered allmulticast mode [ 142.998136][T10450] FAULT_INJECTION: forcing a failure. [ 142.998136][T10450] name failslab, interval 1, probability 0, space 0, times 0 [ 143.010988][T10450] CPU: 0 UID: 0 PID: 10450 Comm: syz.2.2632 Not tainted 6.16.0-rc2-syzkaller-00045-g4663747812d1 #0 PREEMPT(voluntary) [ 143.011049][T10450] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 143.011060][T10450] Call Trace: [ 143.011068][T10450] [ 143.011076][T10450] __dump_stack+0x1d/0x30 [ 143.011096][T10450] dump_stack_lvl+0xe8/0x140 [ 143.011114][T10450] dump_stack+0x15/0x1b [ 143.011137][T10450] should_fail_ex+0x265/0x280 [ 143.011166][T10450] should_failslab+0x8c/0xb0 [ 143.011187][T10450] kmem_cache_alloc_noprof+0x50/0x310 [ 143.011212][T10450] ? __kernfs_new_node+0x6d/0x350 [ 143.011318][T10450] __kernfs_new_node+0x6d/0x350 [ 143.011349][T10450] ? _raw_spin_lock_irqsave+0x3a/0x90 [ 143.011372][T10450] ? _raw_spin_unlock_irqrestore+0x2b/0x60 [ 143.011400][T10450] ? __percpu_counter_sum+0x10d/0x130 [ 143.011429][T10450] kernfs_new_node+0xd0/0x140 [ 143.011497][T10450] kernfs_create_dir_ns+0x44/0xe0 [ 143.011518][T10450] internal_create_group+0x2bb/0x9e0 [ 143.011545][T10450] ? blk_validate_limits+0xa06/0xb30 [ 143.011635][T10450] sysfs_create_group+0x1f/0x30 [ 143.011660][T10450] loop_configure+0x804/0xa50 [ 143.011766][T10450] lo_ioctl+0x559/0x15d0 [ 143.011867][T10450] ? avc_has_extended_perms+0x73d/0x940 [ 143.011899][T10450] ? blkdev_common_ioctl+0xad6/0x1ac0 [ 143.011926][T10450] ? do_vfs_ioctl+0x9df/0x11d0 [ 143.012015][T10450] ? selinux_file_ioctl+0x2e3/0x370 [ 143.012036][T10450] ? __pfx_lo_ioctl+0x10/0x10 [ 143.012062][T10450] ? __pfx_blkdev_ioctl+0x10/0x10 [ 143.012141][T10450] blkdev_ioctl+0x352/0x440 [ 143.012167][T10450] __se_sys_ioctl+0xce/0x140 [ 143.012253][T10450] __x64_sys_ioctl+0x43/0x50 [ 143.012276][T10450] x64_sys_call+0x19a8/0x2fb0 [ 143.012299][T10450] do_syscall_64+0xd2/0x200 [ 143.012318][T10450] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 143.012347][T10450] ? clear_bhb_loop+0x40/0x90 [ 143.012405][T10450] ? clear_bhb_loop+0x40/0x90 [ 143.012489][T10450] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.012545][T10450] RIP: 0033:0x7f831b09e929 [ 143.012562][T10450] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 143.012580][T10450] RSP: 002b:00007f8319707038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 143.012601][T10450] RAX: ffffffffffffffda RBX: 00007f831b2c5fa0 RCX: 00007f831b09e929 [ 143.012615][T10450] RDX: 00002000000002c0 RSI: 0000000000004c0a RDI: 0000000000000003 [ 143.012655][T10450] RBP: 00007f8319707090 R08: 0000000000000000 R09: 0000000000000000 [ 143.012666][T10450] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 143.012676][T10450] R13: 0000000000000000 R14: 00007f831b2c5fa0 R15: 00007ffc23af7a98 [ 143.012692][T10450] [ 143.012711][T10450] loop9: detected capacity change from 0 to 7 [ 143.073433][T10456] xt_hashlimit: size too large, truncated to 1048576 [ 143.084250][T10450] Buffer I/O error on dev loop9, logical block 0, async page read [ 143.303619][T10450] Buffer I/O error on dev loop9, logical block 0, async page read [ 143.311476][T10450] loop9: unable to read partition table [ 143.317257][T10450] loop_reread_partitions: partition scan of loop9 (被ڬdƤݡ [ 143.317257][T10450] U) failed (rc=-5) [ 143.420025][T10467] siw: device registration error -23 [ 143.485721][ T4875] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.495774][T10473] loop1: detected capacity change from 0 to 512 [ 143.503045][T10451] lo speed is unknown, defaulting to 1000 [ 143.514730][T10473] EXT4-fs: Ignoring removed nomblk_io_submit option [ 143.530590][ T4875] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.542158][T10473] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 143.554649][T10478] futex_wake_op: syz.2.2639 tries to shift op by -1; fix this program [ 143.648038][ T4875] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.662046][T10473] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 143.681911][T10481] program syz.4.2640 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 143.687466][T10473] ext4 filesystem being mounted at /499/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 143.709239][T10473] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 143.725574][ T4875] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.742470][T10473] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2637'. [ 143.808180][T10451] chnl_net:caif_netlink_parms(): no params data found [ 143.819655][T10491] lo speed is unknown, defaulting to 1000 [ 143.846433][T10495] sd 0:0:1:0: device reset [ 143.859277][ T4875] bridge_slave_1: left allmulticast mode [ 143.865012][ T4875] bridge_slave_1: left promiscuous mode [ 143.870751][ T4875] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.880383][ T4875] bridge_slave_0: left promiscuous mode [ 143.886403][ T4875] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.963584][ T4875] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 143.973449][ T4875] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 143.982873][ T4875] bond0 (unregistering): Released all slaves [ 144.025227][T10513] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 144.050515][T10451] bridge0: port 1(bridge_slave_0) entered blocking state [ 144.058285][T10451] bridge0: port 1(bridge_slave_0) entered disabled state [ 144.065857][T10451] bridge_slave_0: entered allmulticast mode [ 144.072875][T10451] bridge_slave_0: entered promiscuous mode [ 144.119543][T10451] bridge0: port 2(bridge_slave_1) entered blocking state [ 144.126749][T10451] bridge0: port 2(bridge_slave_1) entered disabled state [ 144.133989][T10451] bridge_slave_1: entered allmulticast mode [ 144.140412][T10451] bridge_slave_1: entered promiscuous mode [ 144.170583][ T4875] hsr_slave_0: left promiscuous mode [ 144.176875][ T4875] hsr_slave_1: left promiscuous mode [ 144.182392][ T4875] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 144.189792][ T4875] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 144.197299][ T4875] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 144.205149][ T4875] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 144.216072][ T4875] veth1_macvtap: left promiscuous mode [ 144.222910][ T4875] veth0_macvtap: left promiscuous mode [ 144.228625][ T4875] veth1_vlan: left promiscuous mode [ 144.234635][ T4875] veth0_vlan: left promiscuous mode [ 144.325009][T10451] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 144.336616][T10451] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 144.357341][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.375963][T10451] team0: Port device team_slave_0 added [ 144.384967][T10524] SELinux: syz.1.2652 (10524) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 144.386376][T10451] team0: Port device team_slave_1 added [ 144.452925][T10451] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 144.459939][T10451] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 144.485978][T10451] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 144.503286][T10451] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 144.510271][T10451] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 144.536587][T10451] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 144.563097][T10535] xt_hashlimit: size too large, truncated to 1048576 [ 144.581461][T10451] hsr_slave_0: entered promiscuous mode [ 144.587744][T10451] hsr_slave_1: entered promiscuous mode [ 144.695649][ T4875] IPVS: stop unused estimator thread 0... [ 144.722475][T10545] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 144.722475][T10545] program syz.4.2661 not setting count and/or reply_len properly [ 144.854689][T10560] futex_wake_op: syz.4.2666 tries to shift op by -1; fix this program [ 144.856931][T10557] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 144.872089][T10557] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 145.025264][T10561] lo speed is unknown, defaulting to 1000 [ 145.050855][T10561] sd 0:0:1:0: device reset [ 145.085088][T10451] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 145.093628][T10451] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 145.102515][T10451] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 145.110715][T10451] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 145.142827][T10451] 8021q: adding VLAN 0 to HW filter on device bond0 [ 145.154126][T10451] 8021q: adding VLAN 0 to HW filter on device team0 [ 145.163371][ T4875] bridge0: port 1(bridge_slave_0) entered blocking state [ 145.170422][ T4875] bridge0: port 1(bridge_slave_0) entered forwarding state [ 145.181647][ T4875] bridge0: port 2(bridge_slave_1) entered blocking state [ 145.188771][ T4875] bridge0: port 2(bridge_slave_1) entered forwarding state [ 145.243084][T10451] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 145.299982][T10451] veth0_vlan: entered promiscuous mode [ 145.307959][T10451] veth1_vlan: entered promiscuous mode [ 145.323274][T10451] veth0_macvtap: entered promiscuous mode [ 145.330697][T10451] veth1_macvtap: entered promiscuous mode [ 145.341906][T10451] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 145.353676][T10451] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 145.361961][T10451] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.370849][T10451] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.380177][T10451] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.389083][T10451] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.480507][ T1038] IPVS: starting estimator thread 0... [ 145.498111][T10588] SELinux: security_context_str_to_sid (-Xܘ7.H\ %u@) failed with errno=-22 [ 145.571306][T10589] IPVS: using max 2784 ests per chain, 139200 per kthread [ 145.703119][T10601] xt_hashlimit: size too large, truncated to 1048576 [ 145.792159][T10606] loop0: detected capacity change from 0 to 1024 [ 145.908751][T10609] netlink: 'syz.3.2675': attribute type 6 has an invalid length. [ 145.922731][T10606] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 145.965528][T10606] vlan2: entered allmulticast mode [ 146.089604][ T3409] IPVS: starting estimator thread 0... [ 146.105482][T10451] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.110262][T10619] loop1: detected capacity change from 0 to 1024 [ 146.125284][T10619] SELinux: security_context_str_to_sid (-Xܘ7.H\ %u@) failed with errno=-22 [ 146.201022][T10620] IPVS: using max 2832 ests per chain, 141600 per kthread [ 146.284442][T10632] vlan2: entered allmulticast mode [ 146.862463][ T29] kauditd_printk_skb: 867 callbacks suppressed [ 146.862494][ T29] audit: type=1326 audit(1750202258.990:8503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10646 comm="syz.4.2689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa4cdfe929 code=0x7ffc0000 [ 146.894670][ T29] audit: type=1326 audit(1750202258.990:8504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10646 comm="syz.4.2689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa4cdfe929 code=0x7ffc0000 [ 146.918787][ T29] audit: type=1326 audit(1750202258.990:8505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10646 comm="syz.4.2689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7faa4cdfe929 code=0x7ffc0000 [ 146.942587][ T29] audit: type=1326 audit(1750202258.990:8506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10646 comm="syz.4.2689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa4cdfe929 code=0x7ffc0000 [ 146.966387][ T29] audit: type=1326 audit(1750202258.990:8507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10646 comm="syz.4.2689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa4cdfe929 code=0x7ffc0000 [ 146.990526][ T29] audit: type=1326 audit(1750202258.990:8508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10646 comm="syz.4.2689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7faa4cdfe929 code=0x7ffc0000 [ 147.014059][ T29] audit: type=1326 audit(1750202259.020:8509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10646 comm="syz.4.2689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa4cdfe929 code=0x7ffc0000 [ 147.039458][ T29] audit: type=1326 audit(1750202259.020:8510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10646 comm="syz.4.2689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa4cdfe929 code=0x7ffc0000 [ 147.063729][ T29] audit: type=1326 audit(1750202259.050:8511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10646 comm="syz.4.2689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=12 compat=0 ip=0x7faa4cdfe929 code=0x7ffc0000 [ 147.087303][ T29] audit: type=1326 audit(1750202259.050:8512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10646 comm="syz.4.2689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa4cdfe929 code=0x7ffc0000 [ 147.151740][T10649] bridge0: port 2(bridge_slave_1) entered disabled state [ 147.159011][T10649] bridge0: port 1(bridge_slave_0) entered disabled state [ 147.171161][T10649] bridge0: entered allmulticast mode [ 147.198351][T10659] netlink: 'syz.1.2695': attribute type 13 has an invalid length. [ 147.202617][T10657] SELinux: security_context_str_to_sid (-Xܘ7.H\ %u@) failed with errno=-22 [ 147.206449][T10660] netlink: 'syz.1.2695': attribute type 13 has an invalid length. [ 147.237818][T10662] netlink: 'syz.0.2693': attribute type 6 has an invalid length. [ 147.292814][T10667] loop0: detected capacity change from 0 to 512 [ 147.299379][T10659] gretap0: refused to change device tx_queue_len [ 147.300179][T10667] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 147.305980][T10659] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 147.340478][T10667] EXT4-fs error (device loop0): ext4_iget_extra_inode:5035: inode #15: comm syz.0.2693: corrupted in-inode xattr: e_value out of bounds [ 147.356992][T10667] EXT4-fs (loop0): Remounting filesystem read-only [ 147.364945][T10667] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 147.377383][T10660] gretap0: refused to change device tx_queue_len [ 147.383786][T10660] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 147.531351][T10686] netlink: 5 bytes leftover after parsing attributes in process `syz.4.2702'. [ 147.555719][T10686] 0{X: renamed from gretap0 (while UP) [ 147.576536][T10686] 0{X: entered allmulticast mode [ 147.592450][T10686] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 147.996067][T10451] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.043610][T10706] loop1: detected capacity change from 0 to 512 [ 148.053589][T10706] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 148.070097][T10706] EXT4-fs error (device loop1): ext4_orphan_get:1419: comm syz.1.2709: bad orphan inode 15 [ 148.082405][T10706] ext4_test_bit(bit=14, block=18) = 1 [ 148.087891][T10706] is_bad_inode(inode)=0 [ 148.092329][T10706] NEXT_ORPHAN(inode)=1023 [ 148.096764][T10706] max_ino=32 [ 148.099982][T10706] i_nlink=0 [ 148.187484][T10706] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0009-000000000000 r/w without journal. Quota mode: none. [ 148.242110][T10706] ext2 filesystem being mounted at /513/qY3aK supports timestamps until 2038-01-19 (0x7fffffff) [ 148.311820][T10691] syz.4.2702 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 148.326752][T10691] CPU: 1 UID: 0 PID: 10691 Comm: syz.4.2702 Not tainted 6.16.0-rc2-syzkaller-00045-g4663747812d1 #0 PREEMPT(voluntary) [ 148.326848][T10691] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 148.326862][T10691] Call Trace: [ 148.326869][T10691] [ 148.326879][T10691] __dump_stack+0x1d/0x30 [ 148.326905][T10691] dump_stack_lvl+0xe8/0x140 [ 148.326947][T10691] dump_stack+0x15/0x1b [ 148.326965][T10691] dump_header+0x81/0x220 [ 148.327020][T10691] oom_kill_process+0x334/0x3f0 [ 148.327056][T10691] out_of_memory+0x979/0xb80 [ 148.327117][T10691] try_charge_memcg+0x5e6/0x9e0 [ 148.327141][T10691] obj_cgroup_charge_pages+0xa6/0x150 [ 148.327172][T10691] __memcg_kmem_charge_page+0x9f/0x170 [ 148.327199][T10691] __alloc_frozen_pages_noprof+0x188/0x360 [ 148.327276][T10691] alloc_pages_mpol+0xb3/0x250 [ 148.327348][T10691] alloc_pages_noprof+0x90/0x130 [ 148.327379][T10691] __vmalloc_node_range_noprof+0x6f2/0xe00 [ 148.327426][T10691] __kvmalloc_node_noprof+0x30f/0x4e0 [ 148.327489][T10691] ? ip_set_alloc+0x1f/0x30 [ 148.327515][T10691] ? ip_set_alloc+0x1f/0x30 [ 148.327538][T10691] ? __kmalloc_cache_noprof+0x189/0x320 [ 148.327572][T10691] ip_set_alloc+0x1f/0x30 [ 148.327604][T10691] hash_netiface_create+0x282/0x740 [ 148.327678][T10691] ? __pfx_hash_netiface_create+0x10/0x10 [ 148.327714][T10691] ip_set_create+0x3cc/0x960 [ 148.327764][T10691] ? __nla_parse+0x40/0x60 [ 148.327782][T10691] nfnetlink_rcv_msg+0x4c3/0x590 [ 148.327827][T10691] ? selinux_capable+0x1f9/0x270 [ 148.327878][T10691] netlink_rcv_skb+0x123/0x220 [ 148.327909][T10691] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 148.327959][T10691] nfnetlink_rcv+0x16b/0x1690 [ 148.328055][T10691] ? __kfree_skb+0x109/0x150 [ 148.328080][T10691] ? nlmon_xmit+0x4f/0x60 [ 148.328102][T10691] ? consume_skb+0x49/0x150 [ 148.328209][T10691] ? nlmon_xmit+0x4f/0x60 [ 148.328228][T10691] ? dev_hard_start_xmit+0x3b0/0x3e0 [ 148.328266][T10691] ? __dev_queue_xmit+0x11c0/0x1fb0 [ 148.328371][T10691] ? __dev_queue_xmit+0x182/0x1fb0 [ 148.328420][T10691] ? ref_tracker_free+0x37d/0x3e0 [ 148.328457][T10691] ? __netlink_deliver_tap+0x4dc/0x500 [ 148.328515][T10691] netlink_unicast+0x59e/0x670 [ 148.328549][T10691] netlink_sendmsg+0x58b/0x6b0 [ 148.328569][T10691] ? __pfx_netlink_sendmsg+0x10/0x10 [ 148.328609][T10691] __sock_sendmsg+0x142/0x180 [ 148.328709][T10691] ____sys_sendmsg+0x31e/0x4e0 [ 148.328741][T10691] ___sys_sendmsg+0x17b/0x1d0 [ 148.328790][T10691] __x64_sys_sendmsg+0xd4/0x160 [ 148.328960][T10691] x64_sys_call+0x2999/0x2fb0 [ 148.329043][T10691] do_syscall_64+0xd2/0x200 [ 148.329079][T10691] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 148.329102][T10691] ? clear_bhb_loop+0x40/0x90 [ 148.329190][T10691] ? clear_bhb_loop+0x40/0x90 [ 148.329259][T10691] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.329278][T10691] RIP: 0033:0x7faa4cdfe929 [ 148.329297][T10691] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 148.329319][T10691] RSP: 002b:00007faa4b446038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 148.329343][T10691] RAX: ffffffffffffffda RBX: 00007faa4d026080 RCX: 00007faa4cdfe929 [ 148.329358][T10691] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000007 [ 148.329411][T10691] RBP: 00007faa4ce80b39 R08: 0000000000000000 R09: 0000000000000000 [ 148.329422][T10691] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 148.329435][T10691] R13: 0000000000000000 R14: 00007faa4d026080 R15: 00007ffe78c19288 [ 148.329455][T10691] [ 148.329463][T10691] memory: usage 307200kB, limit 307200kB, failcnt 191 [ 148.336304][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0009-000000000000. [ 148.342015][T10691] memory+swap: usage 307500kB, limit 9007199254740988kB, failcnt 0 [ 148.502877][T10723] siw: device registration error -23 [ 148.504588][T10691] kmem: usage 307184kB, limit 9007199254740988kB, failcnt 0 [ 148.719701][T10691] Memory cgroup stats for /syz4: [ 148.720454][T10691] cache 0 [ 148.728414][T10691] rss 0 [ 148.731275][T10691] shmem 0 [ 148.734239][T10691] mapped_file 0 [ 148.737828][T10691] dirty 0 [ 148.740787][T10691] writeback 0 [ 148.744227][T10691] workingset_refault_anon 11 [ 148.748920][T10691] workingset_refault_file 19 [ 148.753549][T10691] swap 307200 [ 148.756846][T10691] swapcached 16384 [ 148.760832][T10691] pgpgin 156429 [ 148.764469][T10691] pgpgout 156425 [ 148.768031][T10691] pgfault 173971 [ 148.771783][T10691] pgmajfault 12 [ 148.775258][T10691] inactive_anon 16384 [ 148.779257][T10691] active_anon 0 [ 148.782765][T10691] inactive_file 0 [ 148.786479][T10691] active_file 0 [ 148.789953][T10691] unevictable 0 [ 148.793465][T10691] hierarchical_memory_limit 314572800 [ 148.798902][T10691] hierarchical_memsw_limit 9223372036854771712 [ 148.805105][T10691] total_cache 0 [ 148.808566][T10691] total_rss 0 [ 148.811921][T10691] total_shmem 0 [ 148.815369][T10691] total_mapped_file 0 [ 148.819456][T10691] total_dirty 0 [ 148.823036][T10691] total_writeback 0 [ 148.827074][T10691] total_workingset_refault_anon 11 [ 148.832231][T10691] total_workingset_refault_file 19 [ 148.837382][T10691] total_swap 307200 [ 148.841204][T10691] total_swapcached 16384 [ 148.845509][T10691] total_pgpgin 156429 [ 148.849477][T10691] total_pgpgout 156425 [ 148.853587][T10691] total_pgfault 173971 [ 148.857731][T10691] total_pgmajfault 12 [ 148.861777][T10691] total_inactive_anon 16384 [ 148.866272][T10691] total_active_anon 0 [ 148.870234][T10691] total_inactive_file 0 [ 148.874537][T10691] total_active_file 0 [ 148.878591][T10691] total_unevictable 0 [ 148.882604][T10691] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.2702,pid=10684,uid=0 [ 148.897357][T10691] Memory cgroup out of memory: Killed process 10684 (syz.4.2702) total-vm:95932kB, anon-rss:936kB, file-rss:22644kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 148.980486][T10743] SELinux: syz.2.2722 (10743) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 149.045874][T10750] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2724'. [ 149.045896][T10748] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2724'. [ 149.075623][T10691] syz.4.2702 (10691) used greatest stack depth: 6952 bytes left [ 149.109414][T10748] lo speed is unknown, defaulting to 1000 [ 149.140462][T10756] program syz.4.2727 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 149.245604][T10766] netlink: 'syz.2.2729': attribute type 6 has an invalid length. [ 149.305949][T10771] vlan2: entered allmulticast mode [ 149.308909][T10772] siw: device registration error -23 [ 149.424161][T10776] SELinux: syz.0.2735 (10776) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 149.459751][T10780] FAULT_INJECTION: forcing a failure. [ 149.459751][T10780] name failslab, interval 1, probability 0, space 0, times 0 [ 149.472596][T10780] CPU: 0 UID: 0 PID: 10780 Comm: syz.4.2737 Not tainted 6.16.0-rc2-syzkaller-00045-g4663747812d1 #0 PREEMPT(voluntary) [ 149.472629][T10780] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 149.472642][T10780] Call Trace: [ 149.472647][T10780] [ 149.472654][T10780] __dump_stack+0x1d/0x30 [ 149.472675][T10780] dump_stack_lvl+0xe8/0x140 [ 149.472771][T10780] dump_stack+0x15/0x1b [ 149.472786][T10780] should_fail_ex+0x265/0x280 [ 149.472815][T10780] should_failslab+0x8c/0xb0 [ 149.472835][T10780] kmem_cache_alloc_node_noprof+0x57/0x320 [ 149.472870][T10780] ? __alloc_skb+0x101/0x320 [ 149.472902][T10780] __alloc_skb+0x101/0x320 [ 149.472958][T10780] netlink_alloc_large_skb+0xba/0xf0 [ 149.473024][T10780] netlink_sendmsg+0x3cf/0x6b0 [ 149.473048][T10780] ? __pfx_netlink_sendmsg+0x10/0x10 [ 149.473070][T10780] __sock_sendmsg+0x142/0x180 [ 149.473097][T10780] ____sys_sendmsg+0x31e/0x4e0 [ 149.473219][T10780] ___sys_sendmsg+0x17b/0x1d0 [ 149.473310][T10780] __x64_sys_sendmsg+0xd4/0x160 [ 149.473348][T10780] x64_sys_call+0x2999/0x2fb0 [ 149.473371][T10780] do_syscall_64+0xd2/0x200 [ 149.473470][T10780] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 149.473500][T10780] ? clear_bhb_loop+0x40/0x90 [ 149.473568][T10780] ? clear_bhb_loop+0x40/0x90 [ 149.473587][T10780] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.473607][T10780] RIP: 0033:0x7faa4cdfe929 [ 149.473625][T10780] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 149.473702][T10780] RSP: 002b:00007faa4b467038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 149.473721][T10780] RAX: ffffffffffffffda RBX: 00007faa4d025fa0 RCX: 00007faa4cdfe929 [ 149.473735][T10780] RDX: 0000000000000000 RSI: 0000200000000800 RDI: 0000000000000003 [ 149.473750][T10780] RBP: 00007faa4b467090 R08: 0000000000000000 R09: 0000000000000000 [ 149.473763][T10780] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 149.473833][T10780] R13: 0000000000000000 R14: 00007faa4d025fa0 R15: 00007ffe78c19288 [ 149.473851][T10780] [ 149.720223][T10788] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2741'. [ 149.725161][T10785] loop0: detected capacity change from 0 to 512 [ 149.730112][T10788] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2741'. [ 149.738187][T10785] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 149.756268][T10785] EXT4-fs (loop0): orphan cleanup on readonly fs [ 149.764421][T10788] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2741'. [ 149.764643][T10785] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:517: comm syz.0.2738: Block bitmap for bg 0 marked uninitialized [ 149.774033][T10788] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2741'. [ 149.798303][T10785] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 149.808887][T10785] EXT4-fs (loop0): 1 orphan inode deleted [ 149.815669][T10785] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 149.835852][T10785] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 149.849970][T10785] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 149.861690][T10791] lo speed is unknown, defaulting to 1000 [ 149.867321][T10788] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2741'. [ 149.874878][T10785] program syz.0.2738 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 149.889975][T10785] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:517: comm syz.0.2738: Block bitmap for bg 0 marked uninitialized [ 149.903766][T10788] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2741'. [ 149.931361][T10451] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.989497][T10811] SELinux: syz.0.2747 (10811) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 149.990709][T10788] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2741'. [ 150.072891][T10791] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2741'. [ 150.081515][T10818] FAULT_INJECTION: forcing a failure. [ 150.081515][T10818] name failslab, interval 1, probability 0, space 0, times 0 [ 150.094547][T10818] CPU: 0 UID: 0 PID: 10818 Comm: syz.2.2750 Not tainted 6.16.0-rc2-syzkaller-00045-g4663747812d1 #0 PREEMPT(voluntary) [ 150.094575][T10818] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 150.094650][T10818] Call Trace: [ 150.094657][T10818] [ 150.094665][T10818] __dump_stack+0x1d/0x30 [ 150.094685][T10818] dump_stack_lvl+0xe8/0x140 [ 150.094782][T10818] dump_stack+0x15/0x1b [ 150.094803][T10818] should_fail_ex+0x265/0x280 [ 150.094835][T10818] should_failslab+0x8c/0xb0 [ 150.094863][T10818] kmem_cache_alloc_node_noprof+0x57/0x320 [ 150.094954][T10818] ? __alloc_skb+0x101/0x320 [ 150.094979][T10818] __alloc_skb+0x101/0x320 [ 150.095002][T10818] ? audit_log_start+0x365/0x6c0 [ 150.095143][T10818] audit_log_start+0x380/0x6c0 [ 150.095173][T10818] audit_seccomp+0x48/0x100 [ 150.095198][T10818] ? __seccomp_filter+0x68c/0x10d0 [ 150.095218][T10818] __seccomp_filter+0x69d/0x10d0 [ 150.095239][T10818] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 150.095313][T10818] ? vfs_write+0x75e/0x8e0 [ 150.095361][T10818] __secure_computing+0x82/0x150 [ 150.095384][T10818] syscall_trace_enter+0xcf/0x1e0 [ 150.095406][T10818] do_syscall_64+0xac/0x200 [ 150.095423][T10818] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 150.095509][T10818] ? clear_bhb_loop+0x40/0x90 [ 150.095530][T10818] ? clear_bhb_loop+0x40/0x90 [ 150.095632][T10818] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 150.095656][T10818] RIP: 0033:0x7f831b09e929 [ 150.095675][T10818] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 150.095695][T10818] RSP: 002b:00007f8319707038 EFLAGS: 00000246 ORIG_RAX: 0000000000000089 [ 150.095757][T10818] RAX: ffffffffffffffda RBX: 00007f831b2c5fa0 RCX: 00007f831b09e929 [ 150.095843][T10818] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000140 [ 150.095857][T10818] RBP: 00007f8319707090 R08: 0000000000000000 R09: 0000000000000000 [ 150.095871][T10818] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 150.095886][T10818] R13: 0000000000000000 R14: 00007f831b2c5fa0 R15: 00007ffc23af7a98 [ 150.095906][T10818] [ 150.786303][T10838] SELinux: syz.4.2758 (10838) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 150.872299][T10846] netlink: 'syz.4.2759': attribute type 6 has an invalid length. [ 150.924874][T10848] loop0: detected capacity change from 0 to 512 [ 150.932667][T10848] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 150.944715][T10848] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 150.959587][T10848] EXT4-fs (loop0): 1 truncate cleaned up [ 150.967981][T10848] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 150.990373][T10853] FAULT_INJECTION: forcing a failure. [ 150.990373][T10853] name failslab, interval 1, probability 0, space 0, times 0 [ 151.003236][T10853] CPU: 0 UID: 0 PID: 10853 Comm: syz.3.2762 Not tainted 6.16.0-rc2-syzkaller-00045-g4663747812d1 #0 PREEMPT(voluntary) [ 151.003313][T10853] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 151.003326][T10853] Call Trace: [ 151.003333][T10853] [ 151.003340][T10853] __dump_stack+0x1d/0x30 [ 151.003363][T10853] dump_stack_lvl+0xe8/0x140 [ 151.003385][T10853] dump_stack+0x15/0x1b [ 151.003403][T10853] should_fail_ex+0x265/0x280 [ 151.003495][T10853] ? sctp_add_bind_addr+0x71/0x1e0 [ 151.003545][T10853] should_failslab+0x8c/0xb0 [ 151.003594][T10853] __kmalloc_cache_noprof+0x4c/0x320 [ 151.003623][T10853] sctp_add_bind_addr+0x71/0x1e0 [ 151.003650][T10853] sctp_do_bind+0x427/0x4b0 [ 151.003681][T10853] sctp_connect_new_asoc+0x153/0x3a0 [ 151.003722][T10853] sctp_sendmsg+0xf10/0x18d0 [ 151.003786][T10853] ? selinux_socket_sendmsg+0xd1/0x1b0 [ 151.003823][T10853] ? __pfx_sctp_sendmsg+0x10/0x10 [ 151.003851][T10853] inet_sendmsg+0xc5/0xd0 [ 151.003871][T10853] __sock_sendmsg+0x102/0x180 [ 151.003943][T10853] __sys_sendto+0x268/0x330 [ 151.003980][T10853] __x64_sys_sendto+0x76/0x90 [ 151.004012][T10853] x64_sys_call+0x2eb6/0x2fb0 [ 151.004032][T10853] do_syscall_64+0xd2/0x200 [ 151.004065][T10853] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 151.004088][T10853] ? clear_bhb_loop+0x40/0x90 [ 151.004119][T10853] ? clear_bhb_loop+0x40/0x90 [ 151.004169][T10853] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 151.004191][T10853] RIP: 0033:0x7f9f39f3e929 [ 151.004208][T10853] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 151.004283][T10853] RSP: 002b:00007f9f385a7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 151.004304][T10853] RAX: ffffffffffffffda RBX: 00007f9f3a165fa0 RCX: 00007f9f39f3e929 [ 151.004318][T10853] RDX: 000000000000ff80 RSI: 0000200000000100 RDI: 0000000000000006 [ 151.004332][T10853] RBP: 00007f9f385a7090 R08: 00002000000000c0 R09: 0000000000000010 [ 151.004345][T10853] R10: 000000002000c8d4 R11: 0000000000000246 R12: 0000000000000001 [ 151.004358][T10853] R13: 0000000000000000 R14: 00007f9f3a165fa0 R15: 00007ffd6b191918 [ 151.004378][T10853] [ 151.240216][T10451] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.411625][T10875] loop1: detected capacity change from 0 to 512 [ 151.419353][T10875] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 151.430376][T10875] EXT4-fs (loop1): orphan cleanup on readonly fs [ 151.438903][T10875] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:517: comm syz.1.2772: Block bitmap for bg 0 marked uninitialized [ 151.453566][T10875] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 151.466049][T10875] EXT4-fs (loop1): 1 orphan inode deleted [ 151.472730][T10875] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 151.521576][T10875] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 151.540060][T10882] netlink: 'syz.0.2771': attribute type 10 has an invalid length. [ 151.552207][T10882] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 151.634798][T10887] program syz.1.2772 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 151.744158][T10875] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 151.807357][T10886] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:517: comm syz.1.2772: Block bitmap for bg 0 marked uninitialized [ 152.005561][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.025727][ T29] kauditd_printk_skb: 376 callbacks suppressed [ 152.025744][ T29] audit: type=1326 audit(1750202264.147:8885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10895 comm="syz.4.2779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa4cdfe929 code=0x7ffc0000 [ 152.061178][ T29] audit: type=1326 audit(1750202264.187:8886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10895 comm="syz.4.2779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7faa4cdfe929 code=0x7ffc0000 [ 152.085259][ T29] audit: type=1326 audit(1750202264.187:8887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10895 comm="syz.4.2779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa4cdfe929 code=0x7ffc0000 [ 152.109016][ T29] audit: type=1326 audit(1750202264.187:8888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10895 comm="syz.4.2779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=90 compat=0 ip=0x7faa4cdfe929 code=0x7ffc0000 [ 152.133069][ T29] audit: type=1326 audit(1750202264.187:8889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10895 comm="syz.4.2779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa4cdfe929 code=0x7ffc0000 [ 152.242263][T10898] lo speed is unknown, defaulting to 1000 [ 152.248994][ T29] audit: type=1326 audit(1750202264.367:8890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10903 comm="syz.0.2782" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36f4a4e929 code=0x7ffc0000 [ 152.273053][ T29] audit: type=1326 audit(1750202264.367:8891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10903 comm="syz.0.2782" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36f4a4e929 code=0x7ffc0000 [ 152.330277][T10914] FAULT_INJECTION: forcing a failure. [ 152.330277][T10914] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 152.344082][T10914] CPU: 1 UID: 0 PID: 10914 Comm: syz.3.2784 Not tainted 6.16.0-rc2-syzkaller-00045-g4663747812d1 #0 PREEMPT(voluntary) [ 152.344194][T10914] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 152.344207][T10914] Call Trace: [ 152.344214][T10914] [ 152.344222][T10914] __dump_stack+0x1d/0x30 [ 152.344246][T10914] dump_stack_lvl+0xe8/0x140 [ 152.344265][T10914] dump_stack+0x15/0x1b [ 152.344287][T10914] should_fail_ex+0x265/0x280 [ 152.344320][T10914] should_fail+0xb/0x20 [ 152.344350][T10914] should_fail_usercopy+0x1a/0x20 [ 152.344423][T10914] _copy_to_user+0x20/0xa0 [ 152.344449][T10914] simple_read_from_buffer+0xb5/0x130 [ 152.344482][T10914] proc_fail_nth_read+0x100/0x140 [ 152.344562][T10914] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 152.344629][T10914] vfs_read+0x1a0/0x6f0 [ 152.344654][T10914] ? __rcu_read_unlock+0x4f/0x70 [ 152.344674][T10914] ? __fget_files+0x184/0x1c0 [ 152.344694][T10914] ksys_read+0xda/0x1a0 [ 152.344782][T10914] __x64_sys_read+0x40/0x50 [ 152.344813][T10914] x64_sys_call+0x2d77/0x2fb0 [ 152.344850][T10914] do_syscall_64+0xd2/0x200 [ 152.344905][T10914] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 152.344930][T10914] ? clear_bhb_loop+0x40/0x90 [ 152.344953][T10914] ? clear_bhb_loop+0x40/0x90 [ 152.344976][T10914] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.345022][T10914] RIP: 0033:0x7f9f39f3d33c [ 152.345037][T10914] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 152.345054][T10914] RSP: 002b:00007f9f385a7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 152.345075][T10914] RAX: ffffffffffffffda RBX: 00007f9f3a165fa0 RCX: 00007f9f39f3d33c [ 152.345090][T10914] RDX: 000000000000000f RSI: 00007f9f385a70a0 RDI: 0000000000000006 [ 152.345103][T10914] RBP: 00007f9f385a7090 R08: 0000000000000000 R09: 0000000000000000 [ 152.345116][T10914] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 152.345129][T10914] R13: 0000000000000000 R14: 00007f9f3a165fa0 R15: 00007ffd6b191918 [ 152.345149][T10914] [ 152.558435][ T29] audit: type=1326 audit(1750202264.367:8892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10903 comm="syz.0.2782" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f36f4a4e929 code=0x7ffc0000 [ 152.582187][ T29] audit: type=1326 audit(1750202264.367:8893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10903 comm="syz.0.2782" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36f4a4e929 code=0x7ffc0000 [ 152.605743][ T29] audit: type=1326 audit(1750202264.367:8894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10903 comm="syz.0.2782" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36f4a4e929 code=0x7ffc0000 [ 152.755321][T10928] FAULT_INJECTION: forcing a failure. [ 152.755321][T10928] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 152.768622][T10928] CPU: 0 UID: 0 PID: 10928 Comm: syz.2.2789 Not tainted 6.16.0-rc2-syzkaller-00045-g4663747812d1 #0 PREEMPT(voluntary) [ 152.768648][T10928] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 152.768655][T10928] Call Trace: [ 152.768661][T10928] [ 152.768670][T10928] __dump_stack+0x1d/0x30 [ 152.768717][T10928] dump_stack_lvl+0xe8/0x140 [ 152.768738][T10928] dump_stack+0x15/0x1b [ 152.768748][T10928] should_fail_ex+0x265/0x280 [ 152.768767][T10928] should_fail+0xb/0x20 [ 152.768788][T10928] should_fail_usercopy+0x1a/0x20 [ 152.768807][T10928] _copy_from_user+0x1c/0xb0 [ 152.768871][T10928] __sys_sendto+0x19e/0x330 [ 152.768895][T10928] __x64_sys_sendto+0x76/0x90 [ 152.768929][T10928] x64_sys_call+0x2eb6/0x2fb0 [ 152.769050][T10928] do_syscall_64+0xd2/0x200 [ 152.769062][T10928] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 152.769079][T10928] ? clear_bhb_loop+0x40/0x90 [ 152.769092][T10928] ? clear_bhb_loop+0x40/0x90 [ 152.769250][T10928] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.769261][T10928] RIP: 0033:0x7f831b09e929 [ 152.769270][T10928] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 152.769280][T10928] RSP: 002b:00007f8319707038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 152.769291][T10928] RAX: ffffffffffffffda RBX: 00007f831b2c5fa0 RCX: 00007f831b09e929 [ 152.769336][T10928] RDX: 0000000000000001 RSI: 0000200000000280 RDI: 0000000000000003 [ 152.769396][T10928] RBP: 00007f8319707090 R08: 0000200000000080 R09: 0000000000000014 [ 152.769406][T10928] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 152.769419][T10928] R13: 0000000000000000 R14: 00007f831b2c5fa0 R15: 00007ffc23af7a98 [ 152.769430][T10928] [ 152.975742][T10930] program syz.2.2790 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 152.992742][T10932] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 153.003104][T10932] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 153.025084][T10934] siw: device registration error -23 [ 153.077980][T10937] loop1: detected capacity change from 0 to 512 [ 153.086505][T10937] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 153.105637][T10937] EXT4-fs error (device loop1): xattr_find_entry:333: inode #15: comm syz.1.2793: corrupted xattr entries [ 153.120360][T10937] EXT4-fs (loop1): Remounting filesystem read-only [ 153.129918][T10937] EXT4-fs (loop1): 1 truncate cleaned up [ 153.136708][T10937] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 153.356526][T10957] kernel profiling enabled (shift: 17) [ 153.530293][T10964] program syz.2.2802 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 153.696228][T10977] netlink: 'syz.4.2807': attribute type 6 has an invalid length. [ 153.899706][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.053984][T10984] loop0: detected capacity change from 0 to 512 [ 154.071071][ T3394] page_pool_release_retry() stalled pool shutdown: id 55, 1 inflight 60 sec [ 154.074675][T10984] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 154.092912][T10984] ext4 filesystem being mounted at /28/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 154.122866][T10451] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.376419][T11003] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 154.385390][T11003] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 154.413326][T11005] program syz.2.2816 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 154.446878][T11007] siw: device registration error -23 [ 154.523982][T11014] SELinux: syz.2.2820 (11014) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 154.638417][T11027] __nla_validate_parse: 2 callbacks suppressed [ 154.638430][T11027] netlink: 148 bytes leftover after parsing attributes in process `syz.4.2826'. [ 154.673635][T11029] program syz.4.2827 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 154.859087][T11049] FAULT_INJECTION: forcing a failure. [ 154.859087][T11049] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 154.872314][T11049] CPU: 0 UID: 0 PID: 11049 Comm: syz.4.2836 Not tainted 6.16.0-rc2-syzkaller-00045-g4663747812d1 #0 PREEMPT(voluntary) [ 154.872363][T11049] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 154.872377][T11049] Call Trace: [ 154.872398][T11049] [ 154.872406][T11049] __dump_stack+0x1d/0x30 [ 154.872430][T11049] dump_stack_lvl+0xe8/0x140 [ 154.872451][T11049] dump_stack+0x15/0x1b [ 154.872490][T11049] should_fail_ex+0x265/0x280 [ 154.872520][T11049] should_fail+0xb/0x20 [ 154.872545][T11049] should_fail_usercopy+0x1a/0x20 [ 154.872578][T11049] _copy_from_user+0x1c/0xb0 [ 154.872610][T11049] __sys_sendto+0x19e/0x330 [ 154.872697][T11049] __x64_sys_sendto+0x76/0x90 [ 154.872727][T11049] x64_sys_call+0x2eb6/0x2fb0 [ 154.872750][T11049] do_syscall_64+0xd2/0x200 [ 154.872790][T11049] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 154.872818][T11049] ? clear_bhb_loop+0x40/0x90 [ 154.872840][T11049] ? clear_bhb_loop+0x40/0x90 [ 154.872862][T11049] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.872885][T11049] RIP: 0033:0x7faa4cdfe929 [ 154.872976][T11049] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 154.872996][T11049] RSP: 002b:00007faa4b467038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 154.873018][T11049] RAX: ffffffffffffffda RBX: 00007faa4d025fa0 RCX: 00007faa4cdfe929 [ 154.873031][T11049] RDX: 0000000000000001 RSI: 0000200000000280 RDI: 0000000000000003 [ 154.873044][T11049] RBP: 00007faa4b467090 R08: 0000200000000080 R09: 0000000000000014 [ 154.873059][T11049] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 154.873072][T11049] R13: 0000000000000000 R14: 00007faa4d025fa0 R15: 00007ffe78c19288 [ 154.873163][T11049] [ 155.093652][T11055] program syz.4.2840 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 155.143745][T11063] siw: device registration error -23 [ 155.158743][T11066] loop0: detected capacity change from 0 to 1024 [ 155.165556][T11066] EXT4-fs: inline encryption not supported [ 155.171811][T11066] EXT4-fs: Ignoring removed orlov option [ 155.177553][T11066] ext4: Unknown parameter 'appraise' [ 155.193760][T11066] loop0: detected capacity change from 0 to 1024 [ 155.200856][T11066] EXT4-fs: Ignoring removed orlov option [ 155.209300][T11066] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 155.249881][T11076] SELinux: syz.3.2847 (11076) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 155.311609][T11081] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 155.320248][T11081] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 155.337098][T11082] netlink: 'syz.0.2844': attribute type 3 has an invalid length. [ 155.344970][T11082] netlink: 13435 bytes leftover after parsing attributes in process `syz.0.2844'. [ 155.503474][T11088] xt_hashlimit: max too large, truncated to 1048576 [ 155.551836][T11090] program syz.2.2853 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 155.753252][T11079] ================================================================== [ 155.761392][T11079] BUG: KCSAN: data-race in generic_buffers_fsync_noflush / writeback_single_inode [ 155.770631][T11079] [ 155.772975][T11079] write to 0xffff888106be9300 of 4 bytes by task 11066 on cpu 0: [ 155.780806][T11079] writeback_single_inode+0x14a/0x3e0 [ 155.786207][T11079] sync_inode_metadata+0x5b/0x90 [ 155.791168][T11079] generic_buffers_fsync_noflush+0xd9/0x120 [ 155.797105][T11079] ext4_sync_file+0x1ab/0x690 [ 155.801975][T11079] vfs_fsync_range+0x10d/0x130 [ 155.806755][T11079] ext4_buffered_write_iter+0x34f/0x3c0 [ 155.812334][T11079] ext4_file_write_iter+0x383/0xf00 [ 155.817553][T11079] iter_file_splice_write+0x5f2/0x970 [ 155.822961][T11079] direct_splice_actor+0x156/0x2a0 [ 155.828108][T11079] splice_direct_to_actor+0x312/0x680 [ 155.833513][T11079] do_splice_direct+0xda/0x150 [ 155.838292][T11079] do_sendfile+0x380/0x650 [ 155.842722][T11079] __x64_sys_sendfile64+0x105/0x150 [ 155.847927][T11079] x64_sys_call+0xb39/0x2fb0 [ 155.852534][T11079] do_syscall_64+0xd2/0x200 [ 155.857043][T11079] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.862946][T11079] [ 155.865273][T11079] read to 0xffff888106be9300 of 4 bytes by task 11079 on cpu 1: [ 155.872910][T11079] generic_buffers_fsync_noflush+0x80/0x120 [ 155.878816][T11079] ext4_sync_file+0x1ab/0x690 [ 155.883501][T11079] vfs_fsync_range+0x10d/0x130 [ 155.888358][T11079] ext4_buffered_write_iter+0x34f/0x3c0 [ 155.893913][T11079] ext4_file_write_iter+0x383/0xf00 [ 155.899119][T11079] iter_file_splice_write+0x5f2/0x970 [ 155.904504][T11079] direct_splice_actor+0x156/0x2a0 [ 155.909630][T11079] splice_direct_to_actor+0x312/0x680 [ 155.915017][T11079] do_splice_direct+0xda/0x150 [ 155.919891][T11079] do_sendfile+0x380/0x650 [ 155.924455][T11079] __x64_sys_sendfile64+0x105/0x150 [ 155.929681][T11079] x64_sys_call+0xb39/0x2fb0 [ 155.934294][T11079] do_syscall_64+0xd2/0x200 [ 155.938818][T11079] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.944826][T11079] [ 155.947155][T11079] value changed: 0x00000020 -> 0x00000002 [ 155.952893][T11079] [ 155.955241][T11079] Reported by Kernel Concurrency Sanitizer on: [ 155.961408][T11079] CPU: 1 UID: 0 PID: 11079 Comm: syz.0.2844 Not tainted 6.16.0-rc2-syzkaller-00045-g4663747812d1 #0 PREEMPT(voluntary) [ 155.973930][T11079] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 155.984073][T11079] ================================================================== [ 156.110388][T10451] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.