last executing test programs: 3.245798384s ago: executing program 2 (id=1759): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000005c0)=ANY=[@ANYBLOB="fc000000190001000000000000000000e0000002000000000000000000000000ac1414aa00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000a900000000000000000000000003000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000000000000080400002000000000000080000000000000000000000000000000044000500ac1414aa000000000000000000000000000000003c00000000000000ffffffff00000000000000000000000002da000004"], 0xfc}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r1, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) r2 = gettid() ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="b000000004bf48d2383fef9bc69626a8a378fd04f0acfa8b4c2d2679be45b813d9e58776862da1b8bb03a7be9741656c2f62f78e112227b97f8abf378e570a8836335fb9025f5d91179483dc7bcf2da218597cb30d6d7ba0d96dbda429cf276aa51b43c70728970f1e02045b71b2ece5b8df4a7a891b4558051ccd2c0addd21bd48a11ad83f957fd57dc74b0cd4c14fd65708afab77d", @ANYRES16, @ANYBLOB="040025bd7000fedbdf251200000008000300", @ANYRES32=r3], 0xb0}, 0x1, 0x0, 0x0, 0x20000000}, 0x4048001) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) futex(0x0, 0xd, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000)=0x2000000, 0x300) 2.538251864s ago: executing program 1 (id=1767): r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) recvmsg$unix(r0, &(0x7f00000008c0)={0x0, 0x6, &(0x7f00000005c0)=[{&(0x7f00000004c0)=""/205, 0xcd}, {&(0x7f0000000380)=""/84, 0x54}, {&(0x7f00000002c0)}, {&(0x7f0000000680)=""/240, 0xf0}, {&(0x7f0000000940)=""/157, 0x9d}], 0x5, &(0x7f0000000400)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x40}, 0x40000000) (async) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) (async) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000), 0x4) (async) r3 = getpid() (async) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000c40)={0x11, 0x4, &(0x7f0000000900)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r5, 0x0, 0x2}, 0x18) fstat(r5, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000780)={{0x0, 0x0, 0x0, r6, 0x0, 0x8, 0xfffd}, 0x0, 0x0, 0x5, 0x1, 0x7, 0x2, 0xd592, 0x5163, 0x6, 0x338b, r4, r4}) (async) quotactl_fd$Q_GETINFO(r2, 0x0, r6, &(0x7f0000000040)) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r7}, 0x10) r8 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r8, &(0x7f0000001240)=""/102400, 0x200000, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) (async) r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r2) sendmsg$DEVLINK_CMD_RELOAD(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r10, 0x1, 0x70bd26, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r3}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000180)={'dvmrp1\x00', @random="06dd41f1fb2e"}) (async) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180), &(0x7f0000000140), 0x5, r11}, 0x38) (async) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x18, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r12, 0x0, 0x2}, 0x18) 2.404026196s ago: executing program 2 (id=1769): socket$xdp(0x2c, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x13, 0x8, &(0x7f00000017c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x1000000}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r3}, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000340), r4) sendmsg$NLBL_CIPSOV4_C_ADD(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="08010000", @ANYRES16=r5, @ANYBLOB="0100000000000000000001000000080001000000000014000480050003000000000005000300000000000800020001000000d00008"], 0x108}}, 0x0) r6 = gettid() r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r7, &(0x7f0000000440)=""/247, 0x26) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r7, 0x4040534e, &(0x7f0000000080)={0x31, @time={0x0, 0xfffffffd}, 0x0, {0x0, 0x2}, 0x0, 0x0, 0x4}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r7, 0xc08c5335, &(0x7f0000000200)={0x7, 0x2, 0x1, 'queue0\x00', 0x996a}) tkill(r6, 0x7) openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x404402, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) openat$vsock(0xffffffffffffff9c, &(0x7f00000003c0), 0x101440, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) 2.11452199s ago: executing program 1 (id=1770): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$packet(0x11, 0xa, 0x300) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000200000000"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb, 0x0, &(0x7f0000000000)="259a53f271a76d2688f54c", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000280)='kmem_cache_free\x00', r1, 0x0, 0x9}, 0x18) 2.11403702s ago: executing program 1 (id=1771): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0x100000004}, 0x18) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = socket(0x10, 0x803, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x4}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000a80)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r4, {0xa, 0x4}, {}, {0x3, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x8, 0x10}}]}}]}, 0x40}}, 0x20040054) 2.050965391s ago: executing program 1 (id=1772): prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, &(0x7f0000001100)={0x77359400}, 0x1) 1.711704206s ago: executing program 3 (id=1773): openat$ptp0(0xffffffffffffff9c, &(0x7f00000002c0), 0x80042, 0x0) syz_mount_image$ext4(&(0x7f0000000880)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x21000e, &(0x7f0000000600)={[{@data_writeback}, {@grpquota}, {@errors_remount}, {@delalloc}, {@bh}], [{@euid_lt={'euid<', 0xee01}}]}, 0xde, 0x531, &(0x7f0000000bc0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x2004c0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000580), 0xc}, 0x1100, 0x5dd8, 0x0, 0x5, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) epoll_create1(0x0) epoll_create1(0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x800000, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 1.614234168s ago: executing program 0 (id=1775): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xfffffbf4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000000)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f00000001c0)='kfree\x00', r1, 0x0, 0x4}, 0x18) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/vmstat\x00', 0x0, 0x0) preadv2(r2, 0x0, 0x0, 0x867, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000740)='./file0\x00', 0x10040, &(0x7f0000000380)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x2}}, {@nouid32}]}, 0xfd, 0x269, &(0x7f0000000780)="$eJzs3U9oHFUcB/Df7B/jJotEvQjiHxARDYR4E7zEi0JAQhARVIiIeJJEiAnesp68eNCzSkDwEkpvTXssvYReWgo9pW0O6aXQhh4aemgPW3Znt2ySDW33b9n5fGCYmbz35r0J832zLMxsAJk1GRGzEZGPiKmIKEZE0lrh7XSZbOxulLYXI6rVL+4m9XrpfqrZbiIiKhHxUUShWba29c3e/Z3P3vtjtfju/1tflwZ1fq3293Y/P/h3/vczcx+uXb56ez6J2Sg3ylrPo5eSNn8rJBGv9KOz50RSGPYIeBoLv56+Vsv9qxHxTj3/xcg1IvvnygsXivHBPye1/evOldcHOVag96rVYu0eWKkCmZOLiHIkuemISLdzuenp9DP89fx47qfllV+mflxeXfph2DMV0CvlSHY/PTd2duJI/m/l0/wDo6scsfvlwuaN2vZBftijAfqm9dv2N9JVLf9T362/H/IPmSP/kF3yD9kl/zACOsyu/EN2dZP/F/s0JmAw3P9hhBWbG5W2xfIP2SX/MKL+a/fU6WHyD9nVmn8AIFuqY8N+AhkYlmHPPwAAAAAAAAAAAAAAAAAAwHEbpe3F5jKoPi/+HbH/SUQU2vWfr/8ecfNt4+P3klq1x5K0WVe+favLA3TpVM+evi511Oqlm73qvzOX3uzPcX87vHviP2d9KaJSqzxTKBy//pLG9de5l59QXvy+yw6e0dG3An781WD7P+rh5nD7n9uJOF+bf2bazT+5eK2+bj//lFtfsdyhnx90eQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAG5lEAAAD//4oibec=") r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r3, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r3, &(0x7f0000000240)=':', 0x1, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x5, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000000)='nv\x00', 0x3) shutdown(r3, 0x1) symlink(&(0x7f0000001640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/../file0\x00', &(0x7f0000000e40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r4 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000240)='cgroup.threads\x00', 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) r5 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000000c0)="ff", 0x1, 0xffffffffffffffff) r6 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000340)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) r8 = socket$inet_sctp(0x2, 0x1, 0x84) r9 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r9, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r8, 0x84, 0x75, &(0x7f0000000600)={r10, 0x352a}, &(0x7f0000000640)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r7, 0x84, 0x22, &(0x7f00000003c0)={0x8, 0x2, 0x2, 0x9, r10}, &(0x7f0000000400)=0x10) add_key$user(&(0x7f0000000080), &(0x7f0000000100)={'syz', 0x0}, &(0x7f00000001c0)="a6", 0x1, r6) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r6, &(0x7f0000000240)='asymmetric\x00', &(0x7f0000000200)) keyctl$KEYCTL_MOVE(0x1e, r5, 0xffffffffffffffff, r6, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f00000002c0)=@o_path={&(0x7f0000000200)='./file0\x00', 0x0, 0x4010, r4}, 0x18) creat(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffffa1) 1.590440888s ago: executing program 0 (id=1776): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x100000004}, 0x18) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r3 = socket(0x10, 0x803, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x4}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000a80)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r5, {0xa, 0x4}, {}, {0x3, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x8, 0x10}}]}}]}, 0x40}}, 0x20040054) 1.532887289s ago: executing program 2 (id=1777): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) lsm_get_self_attr(0x64, 0xffffffffffffffff, &(0x7f0000000040)=0xfffffffffffffdb1, 0x0) 1.532250469s ago: executing program 0 (id=1778): mlockall(0x2) mmap(&(0x7f0000361000/0x2000)=nil, 0x2000, 0x300000a, 0x769f00b363895638, 0xffffffffffffffff, 0x0) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10) r1 = socket(0x1e, 0x4, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) recvmmsg$unix(r0, &(0x7f00000043c0)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000002c0)=""/240, 0xf0}], 0x1}}], 0x1, 0x0, 0x0) 1.482458329s ago: executing program 2 (id=1779): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prctl$PR_SET_IO_FLUSHER(0x39, 0x1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) r4 = openat$cgroup_type(r3, &(0x7f0000000300), 0x2, 0x0) write$cgroup_type(r4, &(0x7f0000000280), 0x9) r5 = openat$cgroup_procs(r3, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f0000000c40), 0x12) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socket$nl_route(0x10, 0x3, 0x0) r7 = openat$cgroup_ro(r6, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r7, &(0x7f0000000200)=0x1, 0x12) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = openat$cgroup_procs(r8, &(0x7f0000000840)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r9, &(0x7f0000000380), 0x12) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r10 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r11}, 0x10) open(&(0x7f0000000040)='./file2\x00', 0x181042, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000200)={[{@init_itable_val={'init_itable', 0x3d, 0x8000}}, {@nodiscard}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@jqfmt_vfsold}, {}, {@nobarrier}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") 1.309120982s ago: executing program 0 (id=1783): r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0x42, 0x0) pwrite64(r0, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) fsetxattr$trusted_overlay_nlink(r0, &(0x7f0000000000), 0x0, 0x0, 0x1) socket$igmp6(0xa, 0x3, 0x2) lseek(r0, 0x5, 0x4) syz_usb_connect(0x4, 0xa99, &(0x7f0000000300)={{0x12, 0x1, 0x201, 0x6b, 0xf1, 0x79, 0x0, 0x403, 0xfb5b, 0x6795, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa87, 0x3, 0xe, 0x79, 0x50, 0x3, [{{0x9, 0x4, 0x5c, 0xc9, 0x10, 0xb, 0xf7, 0x86, 0x7, [@cdc_ecm={{0x8, 0x24, 0x6, 0x0, 0x0, "1ebb2a"}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0x4, 0x0, 0xd, 0xe3}, [@mdlm={0x15, 0x24, 0x12, 0x400}, @network_terminal={0x7, 0x24, 0xa, 0x2, 0x48, 0xbf, 0x2}, @country_functional={0x12, 0x24, 0x7, 0x5, 0x6, [0x40, 0x1, 0x4, 0x2, 0x8001, 0xaf]}]}, @hid_hid={0x9, 0x21, 0x1, 0x9, 0x1, {0x22, 0xbb7}}], [{{0x9, 0x5, 0x1, 0x4, 0x400, 0x1, 0x7, 0x40, [@generic={0x86, 0xd, "b0a91c8d2e66c79a535027f6b10dcd21e1cad9208728012654b1f6889628166c74c0d156f9959586679f6dd83b4887840a965cd3893d9bab547c0a3963bf643dfbb7339418955ee5f2f0525a03677ca6907fb09a29d2e4cdbb7e7e60982763871c6cf946b137cb98fc98cab13eb32f7b4df1a8ebeb69a96921c783ddc590a222bb663ede"}]}}, {{0x9, 0x5, 0x4, 0x0, 0x8, 0x6, 0x9, 0xb}}, {{0x9, 0x5, 0x1, 0x0, 0x200, 0x3c, 0xc, 0x2, [@generic={0xdb, 0x8, "c76a5e0d198ab77e60e776665f4c51110988e9cae0cc7e6a22161e567376aa684db09624df8c2f86b874f8d7ad9a3686c67e654f7021679c62a9e8e1a1b22eaaf4b3fad73cf1e00f336f15531006e937c802405c07b0c1ba54193ee8c17216d69f199a525247b803a9f7de57eede4377ec4ddf58432088924d8f536f9b3ee302c4303c773f2d13179d29a80e3d71e5acfa10fa22435e4be9814aa4973d806c2dd497792494f7fb0f0328ba9bd449a11d07e0a42d4e95529fb71dad2dfc96dcb27281687816b2b7ab9f36adab9f65d972a09c735e661abd6c42"}, @generic={0xb8, 0x0, "ffe75e0415235fcfa171e35fbb362c0d027eea0f5956925c582cc262447c670f8f57c2cdd7b9c81f189df91a3dee092d26c22095babe94c659afb2a1a585e36963652257d58cfb6b47005a0771bb2ae25dd19e58bbc6b156f1366b05af5d8a76117768b88a186801be92e3e7c5b9cb122d6e7390666a285373129c0d7ebd51df8a7d80e553e6fb92d713b5a75011eb880cf288b8c6a82998f89ecd50c2507eac1c2895696d86aae823e69db74a20a80c05e48e095dff"}]}}, {{0x9, 0x5, 0x8d, 0x4, 0x8, 0x3, 0x5, 0x1c, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0xff, 0x37}]}}, {{0x9, 0x5, 0x2, 0x3, 0x3ff, 0x5, 0x7d, 0xda}}, {{0x9, 0x5, 0x2, 0x10, 0x3ff, 0x1, 0x32, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x5f, 0xfff8}]}}, {{0x9, 0x5, 0x2, 0x0, 0x400, 0x8, 0x21, 0x5b, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0xe, 0x8}]}}, {{0x9, 0x5, 0xb, 0x10, 0x40, 0x27, 0xe, 0x24, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x2, 0xa5}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x81}]}}, {{0x9, 0x5, 0x9, 0x10, 0x0, 0x4, 0x2, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0xe, 0x6}]}}, {{0x9, 0x5, 0xc, 0x4, 0x40, 0x1, 0x1, 0x1}}, {{0x9, 0x5, 0xe, 0x0, 0x10, 0x2, 0x4, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x4}, @generic={0x6e, 0x21, "38e203532b42d347ef64015de2c7e65441560ae549eeeab2f8b9a4ba696275f2c6592537b49cbb76751fdb730ec070efac429f841bce46d3ca89c6694135154a5c8a14ccfb2e87403eb77b5666fc2d884f3472c80b6b3cd7c18bac6510f5a3c745a919267416447348a9c8e5"}]}}, {{0x9, 0x5, 0x9, 0x1b, 0x20, 0x2, 0x6, 0x0, [@generic={0xf9, 0x23, "6577f64e2fc29965702e5d7509ef0528a07f5e333095659e0241f15ede7e3038b4521a4c65bcdd69da5eef6d83ce40d259077b957e53da4bb10c2cd788578a452945a606365313aa6d7aa3008c9571d4cf3401fd95259a575b78b0307257644018e2f0c32a20a9f2e4fd42b3487bf5427e01439160c1fce3e5d6ba6a3847842ef4391d56be50deea4001f367f2d19ff6b99589e31bdd8ae27487e88b55c6fa01bc72afdd5bff824d74551a01bc59091eda0e1ae441dc032fd559ff3632cd7638934e1f5c9d9a0426da0911b01ecb90efeafe72a68793f906f68ff527122eb77a11b42c99eaf45582ac0fd8c8b18906f2262ee9168ef5f2"}]}}, {{0x9, 0x5, 0xf, 0x3, 0x20, 0x61, 0x3, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x7, 0x637}]}}, {{0x9, 0x5, 0x9, 0x8, 0x3ff, 0x2, 0x1, 0x7}}, {{0x9, 0x5, 0x2, 0x0, 0x20, 0x4, 0x7f, 0x40}}, {{0x9, 0x5, 0x0, 0x10, 0x200, 0x0, 0x9, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0xdf, 0x9}, @generic={0x8, 0xb, "dd0d55e5c70d"}]}}]}}, {{0x9, 0x4, 0x78, 0x96, 0x3, 0x66, 0x98, 0x7e, 0xf, [@uac_as={[@format_type_ii_discrete={0x12, 0x24, 0x2, 0x2, 0x400, 0x3ff, 0x93, "7fd94cc8c0de94336c"}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x86, 0x4, 0x9, 0x6, "997a", "ee6f"}, @format_type_i_discrete={0xe, 0x24, 0x2, 0x1, 0xe, 0x4, 0x2, 0x2, "588b1ab5ef1f"}, @as_header={0x7, 0x24, 0x1, 0x4, 0x1, 0x2}]}], [{{0x9, 0x5, 0xd, 0xc, 0x50, 0xe2, 0x68, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0xd, 0x9}, @generic={0x7e, 0x2, "5dbd839274970a068c4ce13fcd117523fd4a949ec1d55c447edb7a09a57216c663819a40c39ae955cfae74812dd25c49507476a4bb552ef605b203ccc0f755d64330c0390a7e38848137f231941e59e0b4a725d1f6b617be43ec82b97611273fc059c2993cdac2e864916a8e7b02e9e68c9204365a08216f74f70c04"}]}}, {{0x9, 0x5, 0x0, 0x8, 0x220, 0x7, 0x3, 0xf7, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x1, 0x9}]}}, {{0x9, 0x5, 0x0, 0x10, 0x28adf4953f869a3f, 0x6, 0x8, 0x6}}]}}, {{0x9, 0x4, 0x2e, 0x2, 0xf, 0xff, 0xd2, 0x9a, 0xf, [@uac_as={[@format_type_i_continuous={0xe, 0x24, 0x2, 0x1, 0x8, 0x3, 0x8, 0x2, "eaaaca", "7ac096"}, @format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x5, 0x3, 0x5, 0x2, "", "da"}]}], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x7f, 0x7, 0xf, [@uac_iso={0x7, 0x25, 0x1, 0x182, 0xe, 0x7f}]}}, {{0x9, 0x5, 0x4, 0x1, 0x20, 0xa9, 0x9, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x8, 0x73}, @generic={0xf8, 0x9, "df30720b6939925039d0516105bf3b1500f612f2e439f87368c0c7bf9a5a9dbaefd83561d42825326fbae10c56690e6da494ba21fcf84cc6817d4ee0ba6a1d623473a0f456efe8b31e3bc477bcfa5626876d837b9e0375ba4ccfdd8d02ec7f99ab5f7ea5e820107062085fb2eb3e3b6f91618c5f04ccc37b3d1635b99c69c787f4c0a0f932c0b606f6691174f137b5393e301ec9ec26d9c1eca6b9e721865fb379da44375c09876c26b2a44a7cbf555e30a34c29b7b9dd1b836204a0ef916009c2322ef10ec910f5b3b1178756e0780157f1ed7e2044d8174b8cb4c99e892415d6c2717b4eb105f4eaeb183ac05b0e164db6aa47c047"}]}}, {{0x9, 0x5, 0x8, 0x1, 0x200, 0xcf, 0x3b, 0x1}}, {{0x9, 0x5, 0xa, 0x10, 0x40, 0xb3, 0x0, 0x1}}, {{0x9, 0x5, 0x8, 0x0, 0x40, 0x6, 0x0, 0x7f}}, {{0x9, 0x5, 0x80, 0x0, 0x40, 0x6, 0xa0, 0x3, [@generic={0x80, 0x23, "019190ca9653df2aa41fbfd3e1be29dcafa792ecefbcc134cf76464036118bd7bb30f34e6db82a4f345e24e7f98f2f85784e03d7704ccd85495d43503f03d7c91e5d8011c8d1fc319be00964d1eecd1cc34dbe4c7bb14c45f26576a488b6e874bab34dc68bb0317f7e476e6ab5b852edcc690e2174bf9c692852d3806827"}, @generic={0x6b, 0x31, "28a766b87f3a0ea4665195ea7aed732510d52b4fb93cb9a8b160ea671c3360427a9a4b0afe75268360f8ff8e2a7a0a231d810243b8ff8f23fa420874455a4d884b58f81fb1b88464644b8bb369e38ac603d8f334cf2e08c6a24a5b4fa673e3e31f2009521c6be8f1b3"}]}}, {{0x9, 0x5, 0x80, 0x4, 0x3f7, 0x0, 0xa9, 0x4}}, {{0x9, 0x5, 0x0, 0x10, 0x10, 0x2, 0x16, 0xd, [@generic={0x22, 0x22, "fd04ead2482c90da5dcc6631a9dbe9395f13482c26bd32fd060d6bc2fc6d6868"}]}}, {{0x9, 0x5, 0x6, 0x1, 0x200, 0x9e, 0xf1, 0x5, [@generic={0x20, 0x8, "dd71ae1ff16935845ed07c86d70905a8f1c78282d4f7ee1add058619975e"}, @uac_iso={0x7, 0x25, 0x1, 0x83, 0x81, 0x9}]}}, {{0x9, 0x5, 0x0, 0x2, 0x10, 0x3, 0x56, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x6, 0x9}]}}, {{0x9, 0x5, 0x2, 0x0, 0x20, 0x3, 0xe1, 0x1, [@generic={0x81, 0xf, "8eb42685f13a58f4aa762c36a99f66144bec6719955b9683fbcec8c2cf5b31cd55ac40f12cf1f9fdf4f14f39838044d1746d178eb7b37280dec41b9134357ba315d9bcf05386dc31b18b82d04f27917960efecc57134aa19484a80f43c82622029205e72317ae21399cae29660c786610b61dd4a94410f8068ad2654d50eb5"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x8c, 0x329}]}}, {{0x9, 0x5, 0x5, 0x3, 0x200, 0x48, 0x6f, 0x4}}, {{0x9, 0x5, 0xd, 0x16, 0x20, 0xf, 0x0, 0x50, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x10, 0x77}, @generic={0x2, 0x23}]}}, {{0x9, 0x5, 0x8, 0x10, 0x3ff, 0xd, 0x5, 0x5f, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x2, 0x2cd4}, @generic={0x72, 0x4, "d206e0731b36238e0a1ffe4ab6eb356e22ca280620cedba01f61f21cd0eb108337d18eda659db36755900cc5a5b06b946c2f4664fff1c60924674cfa04dd67118c85203e4ec87cdeed0ab77665d3a763355a6275dbba6b6ec629a1ef4da9b13109d66813093992d6ae02a11f8d0013b7"}]}}, {{0x9, 0x5, 0x3, 0x8, 0x400, 0x81, 0x9, 0x3, [@generic={0x1e, 0x0, "344dd436a57c573f94694792a02b201004073e7e6d3fa67bba024f08"}, @generic={0xda, 0x8, "4f561041bb77977d2439762f02602f40de4be246219872eb3acda4bd4609d837d723e48d2b5535145147e5247168eea8f72ae5c340d7698d470421c1ff3c70f843c20a4f9dfce152f061808b6083ebd45d0ee59a88ff323bb307c8f144d8cad79c70c5b44190703a320974f6649a84653185603ab739ceb04f9cdd6cffe75fc9ea6d27b0042655a6f3a60bac28ae614c499da7bc911d0ffc0a4c846b247deacd8b1e4c0379ebb33275885fb4584a8ceb0b7322cc5a6a2885be5a7bedd67bcdd729ae00e0b1c60c7e80a07765f9b2c49e03c5cf71d1730015"}]}}]}}]}}]}}, &(0x7f0000000140)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x250, 0x2, 0x6, 0x6, 0xff, 0x2}, 0x5, &(0x7f0000000240)=ANY=[@ANYBLOB="00f31f28ec7c0b8b010000000000003752ddd41ab7bbcf0bc2600891427ebc4dd4901e3f0936f0aa92e64ee4976e6323f0702682a7fa2f9de817410981719cb5dc3995563a5578ac7e07db5e334f923bb76024f82f542b0bda9dcf5f6c741ef553e37f913e6f1e1a109908a336835ef82054f2346e57f8023dd2fbab762da21c"]}) 1.184632893s ago: executing program 1 (id=1784): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000180000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000f0850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) r1 = socket$inet_smc(0x2b, 0x1, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) ioctl$int_in(r1, 0x5421, &(0x7f0000000100)=0x100000001) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000180)=0x1, 0x4) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e20, @dev}, 0x10) close(r1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000001ac0)='kfree_skb\x00', r0}, 0x18) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) clock_nanosleep(0x9, 0x0, &(0x7f0000000080)={0x0, 0x3938700}, 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) getpeername(r4, 0x0, 0x0) ioctl$TIOCSWINSZ(r3, 0x5414, &(0x7f0000000180)={0xb, 0x0, 0x3, 0x7fff}) r5 = socket(0x10, 0x803, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000340)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x78, 0x78, 0x4, [@func={0xc, 0x0, 0x0, 0xc, 0x5}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2, 0xb}}, @volatile={0x7, 0x0, 0x0, 0x9, 0x1}, @enum64={0x6, 0x3, 0x0, 0x13, 0x0, 0x4, [{0x3, 0x9, 0x2}, {0xe, 0x9b, 0x2}, {0x2, 0x3, 0x2}]}, @type_tag={0x1, 0x0, 0x0, 0x12, 0x4}, @func={0x10, 0x0, 0x0, 0xc, 0x2}]}, {0x0, [0x0, 0x2e]}}, &(0x7f0000000400)=""/245, 0x94, 0xf5, 0x1, 0x30, 0x10000, @value}, 0x28) bpf$OBJ_GET_MAP(0x7, &(0x7f0000001640)=@generic={&(0x7f0000001600)='./file0\x00', 0x0, 0x18}, 0x18) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='smaps_rollup\x00') lseek(r6, 0x4, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001840)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x1, @ANYBLOB="0f000000000000000200008c03000000000000000c3871819368642e5b5d19563c89c0429dcd7ccb0fd3788ffb01c4423a50033b3cc4555ee41d29d5c144bd7dbcc200ea42dede52c5c83044bcd9355c66653e7ea31677a14dcb6aef852ff04dbb5e847dc2a27d6a442821b5b771b7f773e810419e73ec9181285c3cc4613abcd0f3b067775fef737cb52a50a9bb4430b84635ef85b1b2ad7206fb63744578c9a38127a0557e7686f5d0eb5609f707657cecd7e5409f40d2e52a5a495d2c996638608b5324fba4cd69f858597132e6bd9e8503c1ca88fb9901856c52bee69c3377d2c765670b6e0717cd867a5722570018864b098f1c10d017310b9ed5f7e796abc13268ba71c5d0", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="04000000030000000100"/28], 0x50) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r5, 0x84, 0x71, &(0x7f0000000040)={0x0, 0x13da}, &(0x7f0000001680)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r6, 0x84, 0x73, &(0x7f00000016c0)={r7, 0x1ff, 0x0, 0x8, 0x7}, &(0x7f0000001a80)=0x18) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=ANY=[@ANYBLOB="60000000100039042cbd7000eaffffff000003e4", @ANYRES32, @ANYBLOB="001100000000000040001280080001007369740034000280050009002900000008000200ac1414bb08000c000000010006000d000900"], 0x60}, 0x1, 0x0, 0x0, 0x8000}, 0x4040) 1.048996826s ago: executing program 1 (id=1785): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r0 = socket$kcm(0x29, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000001440)={&(0x7f0000000140)=@ax25={{0x3, @default}, [@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @null]}, 0x80, &(0x7f00000011c0)=[{&(0x7f00000001c0)="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", 0x1000}], 0x1, &(0x7f0000001480)=ANY=[@ANYBLOB="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"], 0x230}, 0x4000) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x1f4) r2 = dup2(r1, r1) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x200000, &(0x7f0000000200), 0x3, 0x570, &(0x7f0000000680)="$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") r3 = open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x20) fallocate(r3, 0x0, 0x0, 0x1001f0) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000008850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000040), 0x10) sendmsg$can_bcm(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000001bbb8389a46eb7225600dde7", @ANYRES64=0x0, @ANYRES64=0x2710], 0x80}}, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r5, 0x0, 0x8000f28, 0x8) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000001280)={0x0, @local, @private}, &(0x7f00000012c0)=0xc) sendto$packet(r5, &(0x7f0000001200)="501833e322d796eaeffb28f1735fea74a991e173334e93c57963c6dd5ad7016548586afe49c8dbff41a21b160608e4dea4006e6ee2f42024de1a98b617c00889336979bb26479e36cd3ea7e28c761a6f7cae11ad601708e5ef86", 0x5a, 0x4000000, &(0x7f0000001300)={0x11, 0xf6, r6, 0x1, 0x6, 0x6, @broadcast}, 0x14) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r7}, 0x10) copy_file_range(r3, 0x0, r3, &(0x7f00000000c0)=0xc615, 0x39ea, 0x0) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x200000a, 0x1, 0x8}) ioctl$BLKTRACESETUP(r2, 0x1276, 0x0) 856.418198ms ago: executing program 4 (id=1787): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r0}, &(0x7f0000000000), &(0x7f00000005c0)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x4f0, 0x340, 0x25, 0x148, 0x0, 0x60, 0x458, 0x2a8, 0x2a8, 0x458, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'geneve0\x00', {0x44, 0x0, 0x9, 0x0, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x6, './file0\x00'}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6, 'syz0\x00'}}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'veth1_to_bond\x00', 'veth0\x00', {0xff}}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@unspec=@cgroup0={{0x28}, {0x4}}, @common=@unspec=@statistic={{0x38}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x8000, 'syz0\x00', {0x481c}}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x550) 811.408639ms ago: executing program 4 (id=1788): socket$xdp(0x2c, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x13, 0x8, &(0x7f00000017c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x1000000}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r3}, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000340), r4) sendmsg$NLBL_CIPSOV4_C_ADD(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="08010000", @ANYRES16=r5, @ANYBLOB="0100000000000000000001000000080001000000000014000480050003000000000005000300000000000800020001000000d00008"], 0x108}}, 0x0) r6 = gettid() r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r7, &(0x7f0000000440)=""/247, 0x26) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r7, 0x4040534e, &(0x7f0000000080)={0x31, @time={0x0, 0xfffffffd}, 0x0, {0x0, 0x2}, 0x0, 0x0, 0x4}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r7, 0xc08c5335, &(0x7f0000000200)={0x7, 0x2, 0x1, 'queue0\x00', 0x996a}) tkill(r6, 0x7) openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x404402, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) openat$vsock(0xffffffffffffff9c, &(0x7f00000003c0), 0x101440, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) 713.76756ms ago: executing program 3 (id=1789): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x100000004}, 0x18) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r3 = socket(0x10, 0x803, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x4}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000a80)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r5, {0xa, 0x4}, {}, {0x3, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x8, 0x10}}]}}]}, 0x40}}, 0x20040054) 650.908371ms ago: executing program 3 (id=1790): mlockall(0x2) mmap(&(0x7f0000361000/0x2000)=nil, 0x2000, 0x300000a, 0x769f00b363895638, 0xffffffffffffffff, 0x0) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10) r1 = socket(0x1e, 0x4, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000013c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) recvmmsg$unix(r0, &(0x7f00000043c0)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000002c0)=""/240, 0xf0}], 0x1}}], 0x1, 0x0, 0x0) 553.844072ms ago: executing program 4 (id=1791): socket$xdp(0x2c, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x13, 0x8, &(0x7f00000017c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x1000000}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r3}, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000340), r4) sendmsg$NLBL_CIPSOV4_C_ADD(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="08010000", @ANYRES16=r5, @ANYBLOB="0100000000000000000001000000080001000000000014000480050003000000000005000300000000000800020001000000d00008"], 0x108}}, 0x0) r6 = gettid() r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r7, &(0x7f0000000440)=""/247, 0x26) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r7, 0x4040534e, &(0x7f0000000080)={0x31, @time={0x0, 0xfffffffd}, 0x0, {0x0, 0x2}, 0x0, 0x0, 0x4}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r7, 0xc08c5335, &(0x7f0000000200)={0x7, 0x2, 0x1, 'queue0\x00', 0x996a}) tkill(r6, 0x7) openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x404402, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) openat$vsock(0xffffffffffffff9c, &(0x7f00000003c0), 0x101440, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) 534.053413ms ago: executing program 3 (id=1792): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1ae96d0103010000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000740)=ANY=[], 0xffc9) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x90, &(0x7f00000004c0)=[@in6={0xa, 0x4e23, 0x6, @loopback={0x0, 0x7ffffffe}, 0x63}, @in6={0xa, 0x4e24, 0x9, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xa}, @in6={0xa, 0x4e23, 0x5, @private2, 0x3}, @in6={0xa, 0x4e23, 0x4, @mcast1}, @in={0x2, 0x4e24, @broadcast}, @in={0x2, 0x4e24, @loopback}]}, &(0x7f0000000300)=0x10) 514.217253ms ago: executing program 3 (id=1793): munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r0 = syz_io_uring_setup(0x3ac6, &(0x7f00000001c0)={0x0, 0xfffffffd, 0x10100, 0x4, 0x37c}, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000380)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002040)=ANY=[], 0x1c48}, 0x0, 0xe3d08660d3cd4684}) io_uring_enter(r0, 0x92, 0x0, 0x0, 0x0, 0x0) 489.092513ms ago: executing program 3 (id=1794): prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, &(0x7f0000001100)={0x77359400}, 0x1) 486.840033ms ago: executing program 2 (id=1795): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$kcm(0x10, 0x7, 0x0) sendmsg$kcm(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="d8000000180081054e81f782db44b904021d005c06007c09e8fe55a10a0015400500142603600e1208000b0000000401a8001600a400014002000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360d070100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffec", 0xbd}, {&(0x7f0000000080)="dd4289470cce256876f2c9b17d97b68f2726ed8a10148545240f9f", 0x1b}], 0x2}, 0x410) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRESHEX=r0, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) r2 = socket$kcm(0x1e, 0x5, 0x0) sendmsg$kcm(r2, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000300)="80", 0x1}], 0x1}, 0x0) recvmsg(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000dc0)=""/255, 0xff}], 0x1, &(0x7f0000000480)=""/5, 0x5}, 0x40000010) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async, rerun: 32) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r4, 0x2000002, 0xe, 0x4e, &(0x7f00000003c0)="db32c9f7b9a60000000000000000", 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) (rerun: 32) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r5, 0x29, 0x12, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$unix(0x1, 0x5, 0x0) (async, rerun: 32) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r6}, 0x10) (rerun: 32) r7 = socket$netlink(0x10, 0x3, 0x14) (async, rerun: 32) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) (async, rerun: 32) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) (async, rerun: 32) shmat(0x0, &(0x7f0000ffa000/0x3000)=nil, 0x4000) (async, rerun: 32) r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r8, 0xc08c5332, &(0x7f00000001c0)={0x1000003, 0x300102, 0x0, 'queue1\x00', 0xffffffff}) r9 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x100) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r9, 0xc02c5341, 0x0) (async) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000640)=ANY=[@ANYBLOB="38000000031401002dbd7000000000000900020073787a30000000000800410073697700140033006c6f000000000000000000000000000042f98c3ee7d4cbdb7217d421e70488f61156c67aeb370dbd7116ebc3aab60a3d7abc9c3abe9a1bf9b075d252ad8c91c364e4f91a7065070bde6b69adaa055e0c90baa0763fee6d5a14e457afed2c7cea9e3dbbe425c8b528da1b46b752162410ef1e25cc6ad02bfe6f7d69423dad655864adf0d7e2555bb384fae6f0c0177826b4dd588cdb205dd538bfb1c4ec56ec4cc4ccfff0cd6f7eb60c0db0d129892e8fc3ccade8a0522f519d02cdcdbac9471006c160911d463c8b733e5a6a68ecbde3509a69fdc0c59e3c224d3bc8d8afa1792189c756c1a4d7d540192d9e49b19af4f5f65cc13eec92b6e81bd8f6c7ccf107b87499615108e8d06f4c7d49f55484a9eb424951246a9264fc9ca86f4f174004bf36e20be76273bb125e289865f99fd29fb462faffecc5595835ad9a20038ef16f2e9726ac6f57accec2713004f3ef15bcfc471afe6dee8521e244ae0c133ec6fd6a674e35164940d6ca1b0fdcec"], 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0) 414.820475ms ago: executing program 0 (id=1796): munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r0 = syz_io_uring_setup(0x3ac6, &(0x7f00000001c0)={0x0, 0xfffffffd, 0x10100, 0x4, 0x37c}, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000380)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002040)=ANY=[], 0x1c48}, 0x0, 0xe3d08660d3cd4684}) io_uring_enter(r0, 0x92, 0x0, 0x0, 0x0, 0x0) (fail_nth: 3) 135.515169ms ago: executing program 2 (id=1797): symlink(&(0x7f0000001780)='./file0/../file0\x00', &(0x7f00000017c0)='./file0\x00') r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000040), &(0x7f0000000280)='%-010d \x00'}, 0x20) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) write(r2, &(0x7f0000004200)='t', 0x1) sendfile(r2, r1, 0x0, 0x3ffff) sendfile(r2, r1, 0x0, 0x7ffff000) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r4}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x11, 0xc, &(0x7f0000000480)=ANY=[], 0x0, 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b40)={&(0x7f0000000380)='kfree\x00', r6}, 0x18) r7 = socket$rds(0x15, 0x5, 0x0) bind$rds(r7, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r7, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}], 0x1}}], 0x48}, 0x0) acct(&(0x7f00000001c0)='./file0\x00') r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x6, 0x8, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 128.969618ms ago: executing program 0 (id=1798): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, &(0x7f0000001100)={0x77359400}, 0x1) 86.227949ms ago: executing program 4 (id=1799): r0 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x48) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wpan4\x00'}) socket$inet6_udp(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB, @ANYRES8=r1, @ANYRES64=0x0, @ANYRES16=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$net_dm(&(0x7f0000004b40), r2) sendmsg$NET_DM_CMD_START(r2, &(0x7f0000004c00)={0x0, 0x0, &(0x7f0000004bc0)={&(0x7f0000004b80)={0x14, r3, 0x1, 0x70bd2c, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x8000) 66.511389ms ago: executing program 4 (id=1800): syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x90020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_setup(0x1783, 0x0) epoll_create1(0x0) epoll_create1(0x0) r0 = syz_io_uring_setup(0x27f0, &(0x7f0000000340)={0x0, 0x400000, 0x10100, 0x400001, 0x28c}, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1868, &(0x7f00000003c0)={0x0, 0xd762, 0x100, 0x0, 0x134, 0x0, r0}, &(0x7f00000002c0)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r2, r1, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r0, 0x8184c, 0x0, 0x9, 0x0, 0x0) r3 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f00000009c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @mcast1, @empty}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a5"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r4, &(0x7f0000000000)={0x27}, 0x74) sendmmsg$unix(r4, &(0x7f0000000f80)=[{{&(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}, {{&(0x7f0000000e80)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000000740)=[{&(0x7f0000001dc0)="b6", 0x1}, {0x0}], 0x2}}, {{&(0x7f0000000580)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f00000006c0)=[{&(0x7f0000000600)='{', 0x1}], 0x1}}], 0x3, 0x0) 0s ago: executing program 4 (id=1801): socket$xdp(0x2c, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x13, 0x8, &(0x7f00000017c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x1000000}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r3}, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000340), r4) sendmsg$NLBL_CIPSOV4_C_ADD(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="08010000", @ANYRES16=r5, @ANYBLOB="0100000000000000000001000000080001000000000014000480050003000000000005000300000000000800020001000000d00008"], 0x108}}, 0x0) r6 = gettid() r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r7, &(0x7f0000000440)=""/247, 0x26) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r7, 0x4040534e, &(0x7f0000000080)={0x31, @time={0x0, 0xfffffffd}, 0x0, {0x0, 0x2}, 0x0, 0x0, 0x4}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r7, 0xc08c5335, &(0x7f0000000200)={0x7, 0x2, 0x1, 'queue0\x00', 0x996a}) tkill(r6, 0x7) openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x404402, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) openat$vsock(0xffffffffffffff9c, &(0x7f00000003c0), 0x101440, 0x0) kernel console output (not intermixed with test programs): x265/0x280 [ 122.663159][ T7231] should_fail+0xb/0x20 [ 122.663195][ T7231] should_fail_usercopy+0x1a/0x20 [ 122.663215][ T7231] copy_page_from_iter_atomic+0x21b/0xff0 [ 122.663241][ T7231] ? shmem_write_begin+0xa8/0x190 [ 122.663310][ T7231] ? shmem_write_begin+0xe1/0x190 [ 122.663350][ T7231] generic_perform_write+0x2c2/0x490 [ 122.663403][ T7231] shmem_file_write_iter+0xc5/0xf0 [ 122.663486][ T7231] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 122.663531][ T7231] vfs_write+0x4a0/0x8d0 [ 122.663569][ T7231] ksys_write+0xda/0x1a0 [ 122.663606][ T7231] __x64_sys_write+0x40/0x50 [ 122.663702][ T7231] x64_sys_call+0x2cdd/0x2fb0 [ 122.663724][ T7231] do_syscall_64+0xd0/0x1a0 [ 122.663787][ T7231] ? clear_bhb_loop+0x40/0x90 [ 122.663817][ T7231] ? clear_bhb_loop+0x40/0x90 [ 122.663844][ T7231] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.663873][ T7231] RIP: 0033:0x7fd416add41f [ 122.663898][ T7231] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 122.663932][ T7231] RSP: 002b:00007fd415146df0 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 122.663957][ T7231] RAX: ffffffffffffffda RBX: 0000000000100000 RCX: 00007fd416add41f [ 122.663976][ T7231] RDX: 0000000000100000 RSI: 00007fd40cd27000 RDI: 0000000000000004 [ 122.664062][ T7231] RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000000051c [ 122.664118][ T7231] R10: 0000200000000a82 R11: 0000000000000293 R12: 0000000000000004 [ 122.664131][ T7231] R13: 00007fd415146ef0 R14: 00007fd415146eb0 R15: 00007fd40cd27000 [ 122.664149][ T7231] [ 122.890978][ T7233] loop2: detected capacity change from 0 to 128 [ 122.932762][ T7233] ext4 filesystem being mounted at /253/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 122.951278][ T7236] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1172'. [ 123.374017][ T7253] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1180'. [ 123.496436][ T7260] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 123.666855][ T7265] loop4: detected capacity change from 0 to 1024 [ 123.682512][ T7265] EXT4-fs: Ignoring removed bh option [ 123.689031][ T7265] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (7780!=20869) [ 123.699805][ T7265] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 123.720468][ T7265] EXT4-fs (loop4): invalid journal inode [ 123.732242][ T7265] EXT4-fs (loop4): can't get journal size [ 123.749720][ T7265] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.1185: bg 0: block 32: padding at end of block bitmap is not set [ 124.408872][ T7289] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 124.522248][ T7287] loop3: detected capacity change from 0 to 2048 [ 124.555765][ T29] kauditd_printk_skb: 39 callbacks suppressed [ 124.555816][ T29] audit: type=1400 audit(1747704927.180:2707): avc: denied { read } for pid=7293 comm="syz.1.1195" name="event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 124.592728][ T7287] loop3: p3 < > p4 < > [ 124.597165][ T7287] loop3: partition table partially beyond EOD, truncated [ 124.606138][ T7287] loop3: p3 start 4284289 is beyond EOD, truncated [ 124.645112][ T29] audit: type=1400 audit(1747704927.180:2708): avc: denied { open } for pid=7293 comm="syz.1.1195" path="/dev/input/event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 124.670123][ T29] audit: type=1400 audit(1747704927.220:2709): avc: denied { create } for pid=7293 comm="syz.1.1195" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 124.877811][ T29] audit: type=1400 audit(1747704927.340:2710): avc: denied { write } for pid=7293 comm="syz.1.1195" name="001" dev="devtmpfs" ino=168 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 124.970501][ T29] audit: type=1400 audit(1747704927.540:2711): avc: denied { lock } for pid=7300 comm="syz.0.1196" path="socket:[15316]" dev="sockfs" ino=15316 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 125.032961][ T29] audit: type=1400 audit(1747704927.620:2712): avc: denied { connect } for pid=7300 comm="syz.0.1196" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 125.042108][ T7308] loop3: detected capacity change from 0 to 2048 [ 125.108053][ T7310] loop4: detected capacity change from 0 to 512 [ 125.119780][ T7310] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 125.135816][ T7308] loop3: p1 < > p4 [ 125.141276][ T7308] loop3: p4 size 8388608 extends beyond EOD, truncated [ 125.157475][ T7310] EXT4-fs (loop4): 1 truncate cleaned up [ 125.196800][ T29] audit: type=1400 audit(1747704927.790:2713): avc: denied { mount } for pid=7307 comm="syz.3.1200" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 125.273852][ T29] audit: type=1400 audit(1747704927.890:2714): avc: denied { unmount } for pid=3314 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 125.329458][ T7320] 9pnet_fd: Insufficient options for proto=fd [ 125.342395][ T29] audit: type=1400 audit(1747704927.920:2715): avc: denied { unmount } for pid=3314 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 125.363661][ T29] audit: type=1400 audit(1747704927.950:2716): avc: denied { read } for pid=7319 comm="syz.3.1203" dev="sockfs" ino=16006 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 125.425700][ T7324] loop3: detected capacity change from 0 to 2048 [ 125.458458][ T7324] ext4 filesystem being mounted at /240/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 125.537761][ T7328] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 125.956772][ T7346] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1210'. [ 125.999973][ T54] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm kworker/u8:5: bg 0: block 345: padding at end of block bitmap is not set [ 126.027797][ T54] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 625 with error 117 [ 126.040613][ T54] EXT4-fs (loop3): This should not happen!! Data will be lost [ 126.040613][ T54] [ 126.076005][ T7348] SELinux: syz.1.1211 (7348) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 126.215536][ T7348] FAULT_INJECTION: forcing a failure. [ 126.215536][ T7348] name failslab, interval 1, probability 0, space 0, times 0 [ 126.228266][ T7348] CPU: 0 UID: 0 PID: 7348 Comm: syz.1.1211 Not tainted 6.15.0-rc7-syzkaller #0 PREEMPT(voluntary) [ 126.228304][ T7348] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 126.228321][ T7348] Call Trace: [ 126.228329][ T7348] [ 126.228338][ T7348] __dump_stack+0x1d/0x30 [ 126.228366][ T7348] dump_stack_lvl+0xe8/0x140 [ 126.228468][ T7348] dump_stack+0x15/0x1b [ 126.228491][ T7348] should_fail_ex+0x265/0x280 [ 126.228536][ T7348] should_failslab+0x8c/0xb0 [ 126.228574][ T7348] __kmalloc_noprof+0xa5/0x3e0 [ 126.228657][ T7348] ? sel_write_user+0x197/0x440 [ 126.228687][ T7348] sel_write_user+0x197/0x440 [ 126.228714][ T7348] selinux_transaction_write+0xc6/0x110 [ 126.228798][ T7348] ? __pfx_selinux_transaction_write+0x10/0x10 [ 126.228849][ T7348] vfs_write+0x269/0x8d0 [ 126.228882][ T7348] ? __rcu_read_unlock+0x4f/0x70 [ 126.228912][ T7348] ? __fget_files+0x184/0x1c0 [ 126.228953][ T7348] ksys_write+0xda/0x1a0 [ 126.228991][ T7348] __x64_sys_write+0x40/0x50 [ 126.229074][ T7348] x64_sys_call+0x2cdd/0x2fb0 [ 126.229102][ T7348] do_syscall_64+0xd0/0x1a0 [ 126.229165][ T7348] ? clear_bhb_loop+0x40/0x90 [ 126.229223][ T7348] ? clear_bhb_loop+0x40/0x90 [ 126.229253][ T7348] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.229324][ T7348] RIP: 0033:0x7feb0bace969 [ 126.229345][ T7348] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 126.229369][ T7348] RSP: 002b:00007feb0a137038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 126.229394][ T7348] RAX: ffffffffffffffda RBX: 00007feb0bcf5fa0 RCX: 00007feb0bace969 [ 126.229411][ T7348] RDX: 0000000000000027 RSI: 0000200000000080 RDI: 0000000000000004 [ 126.229436][ T7348] RBP: 00007feb0a137090 R08: 0000000000000000 R09: 0000000000000000 [ 126.229453][ T7348] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 126.229470][ T7348] R13: 0000000000000000 R14: 00007feb0bcf5fa0 R15: 00007ffebab4a798 [ 126.229492][ T7348] [ 126.562214][ T7350] loop4: detected capacity change from 0 to 512 [ 126.660111][ T7350] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 126.718430][ T7362] tipc: Started in network mode [ 126.723546][ T7362] tipc: Node identity ac14140f, cluster identity 4711 [ 126.731715][ T7362] tipc: New replicast peer: 255.255.255.255 [ 126.738194][ T7362] tipc: Enabled bearer , priority 10 [ 126.751361][ T7364] loop2: detected capacity change from 0 to 1024 [ 126.760474][ T7350] EXT4-fs (loop4): 1 truncate cleaned up [ 126.778785][ T7364] EXT4-fs: Ignoring removed orlov option [ 127.167561][ T7374] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1218'. [ 127.193228][ T7376] loop4: detected capacity change from 0 to 1024 [ 127.207386][ T7376] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 127.242944][ T7376] EXT4-fs error (device loop4): ext4_map_blocks:709: inode #3: block 1: comm syz.4.1219: lblock 1 mapped to illegal pblock 1 (length 1) [ 127.274885][ T7376] EXT4-fs error (device loop4): ext4_acquire_dquot:6935: comm syz.4.1219: Failed to acquire dquot type 0 [ 127.287305][ T7376] EXT4-fs error (device loop4): ext4_free_blocks:6587: comm syz.4.1219: Freeing blocks not in datazone - block = 0, count = 4096 [ 127.304111][ T7376] EXT4-fs error (device loop4): ext4_read_inode_bitmap:139: comm syz.4.1219: Invalid inode bitmap blk 0 in block_group 0 [ 127.317331][ T51] EXT4-fs error (device loop4): ext4_map_blocks:675: inode #3: block 1: comm kworker/u8:3: lblock 1 mapped to illegal pblock 1 (length 1) [ 127.360919][ T7376] EXT4-fs error (device loop4) in ext4_free_inode:361: Corrupt filesystem [ 127.373497][ T51] EXT4-fs error (device loop4): ext4_release_dquot:6971: comm kworker/u8:3: Failed to release dquot type 0 [ 127.403065][ T7376] EXT4-fs (loop4): 1 orphan inode deleted [ 127.508344][ T7376] EXT4-fs error (device loop4): ext4_search_dir:1476: inode #2: block 16: comm syz.4.1219: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 127.552577][ T7376] EXT4-fs error (device loop4): ext4_search_dir:1476: inode #2: block 16: comm syz.4.1219: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 127.581807][ T7400] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1233'. [ 127.855229][ T3459] tipc: Node number set to 2886997007 [ 127.884865][ T7406] loop4: detected capacity change from 0 to 512 [ 127.900998][ T7406] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 127.954088][ T7406] EXT4-fs (loop4): 1 truncate cleaned up [ 128.069903][ T7433] netlink: 830 bytes leftover after parsing attributes in process `syz.2.1238'. [ 128.137016][ T7433] loop2: detected capacity change from 0 to 1024 [ 128.176613][ T7433] EXT4-fs: Ignoring removed nobh option [ 128.182308][ T7433] EXT4-fs: Ignoring removed bh option [ 128.216240][ T7436] loop3: detected capacity change from 0 to 512 [ 128.246173][ T7433] EXT4-fs mount: 38 callbacks suppressed [ 128.246193][ T7433] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 128.287413][ T7436] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 128.311329][ T7433] FAULT_INJECTION: forcing a failure. [ 128.311329][ T7433] name failslab, interval 1, probability 0, space 0, times 0 [ 128.324020][ T7433] CPU: 1 UID: 0 PID: 7433 Comm: syz.2.1238 Not tainted 6.15.0-rc7-syzkaller #0 PREEMPT(voluntary) [ 128.324049][ T7433] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 128.324066][ T7433] Call Trace: [ 128.324123][ T7433] [ 128.324132][ T7433] __dump_stack+0x1d/0x30 [ 128.324169][ T7433] dump_stack_lvl+0xe8/0x140 [ 128.324195][ T7433] dump_stack+0x15/0x1b [ 128.324218][ T7433] should_fail_ex+0x265/0x280 [ 128.324271][ T7433] should_failslab+0x8c/0xb0 [ 128.324313][ T7433] kmem_cache_alloc_noprof+0x50/0x310 [ 128.324339][ T7433] ? skb_clone+0x151/0x1f0 [ 128.324363][ T7433] skb_clone+0x151/0x1f0 [ 128.324394][ T7433] netlink_trim+0x13b/0x200 [ 128.324426][ T7433] netlink_broadcast_filtered+0x4c/0xc00 [ 128.324465][ T7433] ? tcf_action_dump+0x156/0x1d0 [ 128.324573][ T7433] nlmsg_notify+0xcf/0x170 [ 128.324617][ T7433] rtnetlink_send+0x48/0x60 [ 128.324661][ T7433] tc_ctl_action+0x72b/0x830 [ 128.324774][ T7433] ? __pfx_tc_ctl_action+0x10/0x10 [ 128.324806][ T7433] rtnetlink_rcv_msg+0x657/0x6d0 [ 128.324920][ T7433] ? avc_has_perm_noaudit+0x1b1/0x200 [ 128.324950][ T7433] netlink_rcv_skb+0x123/0x220 [ 128.325005][ T7433] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 128.325042][ T7433] rtnetlink_rcv+0x1c/0x30 [ 128.325073][ T7433] netlink_unicast+0x5a1/0x670 [ 128.325178][ T7433] netlink_sendmsg+0x58b/0x6b0 [ 128.325208][ T7433] ? __pfx_netlink_sendmsg+0x10/0x10 [ 128.325235][ T7433] __sock_sendmsg+0x145/0x180 [ 128.325265][ T7433] ____sys_sendmsg+0x31e/0x4e0 [ 128.325348][ T7433] ___sys_sendmsg+0x17b/0x1d0 [ 128.325416][ T7433] __x64_sys_sendmsg+0xd4/0x160 [ 128.325446][ T7433] x64_sys_call+0x2999/0x2fb0 [ 128.325467][ T7433] do_syscall_64+0xd0/0x1a0 [ 128.325494][ T7433] ? clear_bhb_loop+0x40/0x90 [ 128.325523][ T7433] ? clear_bhb_loop+0x40/0x90 [ 128.325548][ T7433] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.325606][ T7433] RIP: 0033:0x7f0d3694e969 [ 128.325627][ T7433] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 128.325716][ T7433] RSP: 002b:00007f0d34fb7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 128.325800][ T7433] RAX: ffffffffffffffda RBX: 00007f0d36b75fa0 RCX: 00007f0d3694e969 [ 128.325818][ T7433] RDX: 0000000000000000 RSI: 00002000000037c0 RDI: 000000000000000e [ 128.325834][ T7433] RBP: 00007f0d34fb7090 R08: 0000000000000000 R09: 0000000000000000 [ 128.325846][ T7433] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 128.325858][ T7433] R13: 0000000000000000 R14: 00007f0d36b75fa0 R15: 00007fff51d73858 [ 128.325885][ T7433] [ 128.385393][ T7436] ext4 filesystem being mounted at /243/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 128.604729][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.629102][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.837684][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.955595][ T7469] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1251'. [ 129.010846][ T7473] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1253'. [ 129.221115][ T7471] loop4: detected capacity change from 0 to 512 [ 129.258461][ T7471] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 129.290174][ T7488] netlink: 'syz.3.1259': attribute type 1 has an invalid length. [ 129.318629][ T7490] FAULT_INJECTION: forcing a failure. [ 129.318629][ T7490] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 129.332582][ T7490] CPU: 1 UID: 0 PID: 7490 Comm: syz.3.1260 Not tainted 6.15.0-rc7-syzkaller #0 PREEMPT(voluntary) [ 129.332618][ T7490] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 129.332634][ T7490] Call Trace: [ 129.332647][ T7490] [ 129.332657][ T7490] __dump_stack+0x1d/0x30 [ 129.332679][ T7490] dump_stack_lvl+0xe8/0x140 [ 129.332698][ T7490] dump_stack+0x15/0x1b [ 129.332717][ T7490] should_fail_ex+0x265/0x280 [ 129.332815][ T7490] should_fail+0xb/0x20 [ 129.332856][ T7490] should_fail_usercopy+0x1a/0x20 [ 129.332881][ T7490] _copy_to_user+0x20/0xa0 [ 129.332904][ T7490] simple_read_from_buffer+0xb5/0x130 [ 129.332967][ T7490] proc_fail_nth_read+0x100/0x140 [ 129.333004][ T7490] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 129.333038][ T7490] vfs_read+0x1a0/0x6f0 [ 129.333068][ T7490] ? _raw_spin_unlock+0x26/0x50 [ 129.333239][ T7490] ? __rcu_read_unlock+0x4f/0x70 [ 129.333263][ T7490] ? __fget_files+0x184/0x1c0 [ 129.333323][ T7490] ksys_read+0xda/0x1a0 [ 129.333428][ T7490] __x64_sys_read+0x40/0x50 [ 129.333455][ T7490] x64_sys_call+0x2d77/0x2fb0 [ 129.333477][ T7490] do_syscall_64+0xd0/0x1a0 [ 129.333514][ T7490] ? clear_bhb_loop+0x40/0x90 [ 129.333579][ T7490] ? clear_bhb_loop+0x40/0x90 [ 129.333608][ T7490] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.333738][ T7490] RIP: 0033:0x7fe4082bd37c [ 129.333754][ T7490] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 129.333809][ T7490] RSP: 002b:00007fe406927030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 129.333875][ T7490] RAX: ffffffffffffffda RBX: 00007fe4084e5fa0 RCX: 00007fe4082bd37c [ 129.333892][ T7490] RDX: 000000000000000f RSI: 00007fe4069270a0 RDI: 0000000000000003 [ 129.333967][ T7490] RBP: 00007fe406927090 R08: 0000000000000000 R09: 0000000000000000 [ 129.333984][ T7490] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 129.334000][ T7490] R13: 0000000000000000 R14: 00007fe4084e5fa0 R15: 00007ffcabe797f8 [ 129.334095][ T7490] [ 129.578698][ T7471] EXT4-fs (loop4): 1 truncate cleaned up [ 129.612828][ T7471] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 129.676393][ T29] kauditd_printk_skb: 32 callbacks suppressed [ 129.676411][ T29] audit: type=1400 audit(1747704932.300:2746): avc: denied { connect } for pid=7496 comm="syz.3.1263" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 129.846915][ T7504] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1266'. [ 129.882383][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.229497][ T7519] xt_l2tp: v2 sid > 0xffff: 117440512 [ 130.239309][ T29] audit: type=1400 audit(1747704932.860:2747): avc: denied { append } for pid=7515 comm="syz.3.1272" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 130.263210][ T29] audit: type=1400 audit(1747704932.860:2748): avc: denied { ioctl } for pid=7515 comm="syz.3.1272" path="/dev/sg0" dev="devtmpfs" ino=135 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 130.296510][ T7520] loop3: detected capacity change from 0 to 512 [ 130.304809][ T7520] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 130.439774][ T7520] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 130.452760][ T7520] ext4 filesystem being mounted at /257/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 130.691455][ T7525] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1273'. [ 131.020506][ T7539] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 131.211620][ T29] audit: type=1400 audit(1747704933.830:2749): avc: denied { write } for pid=7545 comm="syz.4.1282" name="usbmon4" dev="devtmpfs" ino=154 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 131.235511][ T29] audit: type=1400 audit(1747704933.830:2750): avc: denied { open } for pid=7545 comm="syz.4.1282" path="/dev/usbmon4" dev="devtmpfs" ino=154 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 131.789637][ T29] audit: type=1400 audit(1747704934.400:2751): avc: denied { bind } for pid=7560 comm="syz.1.1287" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 131.941172][ T7564] loop4: detected capacity change from 0 to 512 [ 131.978559][ T7564] EXT4-fs: Ignoring removed bh option [ 131.984028][ T7564] ext2: Unknown parameter 'euid<00000000000000060929' [ 131.995558][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.057134][ T7572] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1292'. [ 132.131504][ T29] audit: type=1400 audit(1747704934.750:2752): avc: denied { remount } for pid=7579 comm="syz.1.1296" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 132.145588][ T54] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 132.162767][ T2969] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 132.172628][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 132.182638][ T2969] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 132.190881][ T2969] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 132.214768][ T7587] loop3: detected capacity change from 0 to 1024 [ 132.221605][ T7587] EXT4-fs: Ignoring removed orlov option [ 132.242113][ T7587] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 132.643611][ T7600] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1302'. [ 132.732666][ T7602] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1303'. [ 132.865639][ T53] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 132.874165][ T54] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 132.882857][ T2969] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 132.891741][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 133.065211][ T29] audit: type=1400 audit(1747704935.680:2753): avc: denied { name_bind } for pid=7603 comm="syz.2.1304" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 133.124982][ T7611] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1307'. [ 133.149806][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.184782][ T29] audit: type=1400 audit(1747704935.800:2754): avc: denied { create } for pid=7616 comm="syz.3.1309" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 133.213124][ T7618] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1311'. [ 133.269680][ T7627] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1314'. [ 133.299409][ T7627] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1314'. [ 133.329971][ T29] audit: type=1400 audit(1747704935.950:2755): avc: denied { create } for pid=7626 comm="syz.1.1314" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 133.359256][ T7638] loop4: detected capacity change from 0 to 512 [ 133.372389][ T7638] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 133.399200][ T7638] EXT4-fs (loop4): 1 truncate cleaned up [ 133.409479][ T7638] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 134.100990][ T54] kworker/u8:5 invoked oom-killer: gfp_mask=0x100c0a(GFP_NOIO|__GFP_HIGHMEM|__GFP_MOVABLE|__GFP_HARDWALL), order=0, oom_score_adj=0 [ 134.115213][ T54] CPU: 0 UID: 0 PID: 54 Comm: kworker/u8:5 Not tainted 6.15.0-rc7-syzkaller #0 PREEMPT(voluntary) [ 134.115248][ T54] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 134.115266][ T54] Workqueue: loop4 loop_rootcg_workfn [ 134.115379][ T54] Call Trace: [ 134.115442][ T54] [ 134.115453][ T54] __dump_stack+0x1d/0x30 [ 134.115478][ T54] dump_stack_lvl+0xe8/0x140 [ 134.115504][ T54] dump_stack+0x15/0x1b [ 134.115526][ T54] dump_header+0x81/0x220 [ 134.115570][ T54] oom_kill_process+0x334/0x3f0 [ 134.115654][ T54] out_of_memory+0x979/0xb80 [ 134.115690][ T54] mem_cgroup_out_of_memory+0x13d/0x190 [ 134.115728][ T54] try_charge_memcg+0x5e2/0x870 [ 134.115808][ T54] charge_memcg+0x51/0xc0 [ 134.115841][ T54] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 134.115880][ T54] __read_swap_cache_async+0x1df/0x350 [ 134.115919][ T54] swap_cluster_readahead+0x376/0x3e0 [ 134.115961][ T54] shmem_swapin_folio+0x722/0xe50 [ 134.116033][ T54] ? __rcu_read_unlock+0x4f/0x70 [ 134.116070][ T54] shmem_get_folio_gfp+0x26c/0xd40 [ 134.116117][ T54] ? __rb_insert_augmented+0x76/0x2c0 [ 134.116147][ T54] shmem_write_begin+0xa8/0x190 [ 134.116235][ T54] generic_perform_write+0x184/0x490 [ 134.116283][ T54] shmem_file_write_iter+0xc5/0xf0 [ 134.116317][ T54] lo_rw_aio+0x5fa/0x7c0 [ 134.116439][ T54] loop_process_work+0x52d/0xa60 [ 134.116490][ T54] ? wb_workfn+0x7f0/0x910 [ 134.116563][ T54] ? pwq_dec_nr_in_flight+0x5fe/0x6d0 [ 134.116671][ T54] loop_rootcg_workfn+0x22/0x30 [ 134.116706][ T54] process_scheduled_works+0x4cb/0x9d0 [ 134.116757][ T54] worker_thread+0x582/0x770 [ 134.116798][ T54] ? schedule+0x5f/0xd0 [ 134.116878][ T54] kthread+0x486/0x510 [ 134.116902][ T54] ? finish_task_switch+0xad/0x2b0 [ 134.116963][ T54] ? __pfx_worker_thread+0x10/0x10 [ 134.117042][ T54] ? __pfx_kthread+0x10/0x10 [ 134.117068][ T54] ret_from_fork+0x4b/0x60 [ 134.117093][ T54] ? __pfx_kthread+0x10/0x10 [ 134.117178][ T54] ret_from_fork_asm+0x1a/0x30 [ 134.117224][ T54] [ 134.117234][ T54] memory: usage 307200kB, limit 307200kB, failcnt 213 [ 134.260865][ T7658] loop2: detected capacity change from 0 to 512 [ 134.264295][ T54] memory+swap: usage 307660kB, limit 9007199254740988kB, failcnt 0 [ 134.274962][ T7658] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 134.279303][ T54] kmem: usage 307016kB, limit 9007199254740988kB, failcnt 0 [ 134.279323][ T54] Memory cgroup stats for /syz4 [ 134.283493][ T7658] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 134.287647][ T54] : [ 134.302982][ T54] cache 184320 [ 134.319874][ T7658] EXT4-fs (loop2): warning: checktime reached, running e2fsck is recommended [ 134.326428][ T54] rss 0 [ 134.326441][ T54] shmem 0 [ 134.326449][ T54] mapped_file 0 [ 134.326457][ T54] dirty 0 [ 134.326465][ T54] writeback 163840 [ 134.326519][ T54] workingset_refault_anon 105 [ 134.333662][ T7658] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 134.341147][ T54] workingset_refault_file 103 [ 134.341161][ T54] swap 471040 [ 134.341171][ T54] swapcached 4096 [ 134.350851][ T7658] System zones: [ 134.357508][ T54] pgpgin 81559 [ 134.357521][ T54] pgpgout 81513 [ 134.362385][ T7658] 0-2 [ 134.370690][ T54] pgfault 78535 [ 134.373182][ T7658] , 18-18 [ 134.376561][ T54] pgmajfault 62 [ 134.376572][ T54] inactive_anon 4096 [ 134.376582][ T54] active_anon 0 [ 134.376590][ T54] inactive_file 167936 [ 134.376598][ T54] active_file 16384 [ 134.376604][ T54] unevictable 0 [ 134.376611][ T54] hierarchical_memory_limit 314572800 [ 134.385525][ T7658] , 34-34 [ 134.388321][ T54] hierarchical_memsw_limit 9223372036854771712 [ 134.388337][ T54] total_cache 184320 [ 134.391418][ T7658] EXT4-fs warning (device loop2): ext4_update_dynamic_rev:1132: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 134.394936][ T54] total_rss 0 [ 134.394948][ T54] total_shmem 0 [ 134.398284][ T7658] EXT4-fs (loop2): 1 truncate cleaned up [ 134.401650][ T54] total_mapped_file 0 [ 134.407319][ T7658] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 134.414500][ T54] total_dirty 0 [ 134.414511][ T54] total_writeback 163840 [ 134.538610][ T54] total_workingset_refault_anon 105 [ 134.543808][ T54] total_workingset_refault_file 103 [ 134.549024][ T54] total_swap 471040 [ 134.552937][ T54] total_swapcached 4096 [ 134.557130][ T54] total_pgpgin 81559 [ 134.561182][ T54] total_pgpgout 81513 [ 134.565219][ T54] total_pgfault 78535 [ 134.569213][ T54] total_pgmajfault 62 [ 134.573204][ T54] total_inactive_anon 4096 [ 134.577692][ T54] total_active_anon 0 [ 134.581717][ T54] total_inactive_file 167936 [ 134.586564][ T54] total_active_file 16384 [ 134.590988][ T54] total_unevictable 0 [ 134.595364][ T54] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.1316,pid=7637,uid=0 [ 134.610099][ T54] Memory cgroup out of memory: Killed process 7637 (syz.4.1316) total-vm:93880kB, anon-rss:1064kB, file-rss:22444kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 134.679114][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.699373][ T7664] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1324'. [ 134.893163][ T7673] loop2: detected capacity change from 0 to 512 [ 134.916482][ T7673] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 135.034231][ T7673] EXT4-fs (loop2): 1 truncate cleaned up [ 135.060124][ T7673] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 135.100044][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.118355][ T29] kauditd_printk_skb: 10 callbacks suppressed [ 135.118373][ T29] audit: type=1326 audit(1747704937.740:2766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7684 comm="syz.0.1330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd416ade969 code=0x7ffc0000 [ 135.148693][ T7685] FAULT_INJECTION: forcing a failure. [ 135.148693][ T7685] name failslab, interval 1, probability 0, space 0, times 0 [ 135.161635][ T7685] CPU: 0 UID: 0 PID: 7685 Comm: syz.0.1330 Not tainted 6.15.0-rc7-syzkaller #0 PREEMPT(voluntary) [ 135.161671][ T7685] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 135.161685][ T7685] Call Trace: [ 135.161693][ T7685] [ 135.161703][ T7685] __dump_stack+0x1d/0x30 [ 135.161732][ T7685] dump_stack_lvl+0xe8/0x140 [ 135.161778][ T7685] dump_stack+0x15/0x1b [ 135.161801][ T7685] should_fail_ex+0x265/0x280 [ 135.161852][ T7685] should_failslab+0x8c/0xb0 [ 135.161895][ T7685] __kmalloc_node_track_caller_noprof+0xa4/0x410 [ 135.161974][ T7685] ? sidtab_sid2str_get+0xa0/0x130 [ 135.162018][ T7685] kmemdup_noprof+0x2b/0x70 [ 135.162045][ T7685] sidtab_sid2str_get+0xa0/0x130 [ 135.162088][ T7685] security_sid_to_context_core+0x1eb/0x2e0 [ 135.162163][ T7685] security_sid_to_context+0x27/0x40 [ 135.162260][ T7685] selinux_lsmprop_to_secctx+0x67/0xf0 [ 135.162302][ T7685] security_lsmprop_to_secctx+0x43/0x80 [ 135.162332][ T7685] audit_log_task_context+0x77/0x190 [ 135.162387][ T7685] audit_log_task+0xf4/0x250 [ 135.162482][ T7685] audit_seccomp+0x61/0x100 [ 135.162517][ T7685] ? __seccomp_filter+0x68c/0x10d0 [ 135.162551][ T7685] __seccomp_filter+0x69d/0x10d0 [ 135.162582][ T7685] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 135.162619][ T7685] ? vfs_write+0x75e/0x8d0 [ 135.162711][ T7685] ? __rcu_read_unlock+0x4f/0x70 [ 135.162741][ T7685] ? bpf_trace_run2+0x124/0x1c0 [ 135.162779][ T7685] __secure_computing+0x82/0x150 [ 135.162824][ T7685] syscall_trace_enter+0xcf/0x1e0 [ 135.162855][ T7685] do_syscall_64+0xaa/0x1a0 [ 135.162926][ T7685] ? clear_bhb_loop+0x40/0x90 [ 135.162955][ T7685] ? clear_bhb_loop+0x40/0x90 [ 135.163028][ T7685] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.163054][ T7685] RIP: 0033:0x7fd416add37c [ 135.163081][ T7685] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 135.163106][ T7685] RSP: 002b:00007fd415147030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 135.163131][ T7685] RAX: ffffffffffffffda RBX: 00007fd416d05fa0 RCX: 00007fd416add37c [ 135.163148][ T7685] RDX: 000000000000000f RSI: 00007fd4151470a0 RDI: 0000000000000007 [ 135.163164][ T7685] RBP: 00007fd415147090 R08: 0000000000000000 R09: 0000000000000000 [ 135.163181][ T7685] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 135.163261][ T7685] R13: 0000000000000000 R14: 00007fd416d05fa0 R15: 00007ffc23d4aba8 [ 135.163285][ T7685] [ 135.163296][ T7685] audit: error in audit_log_task_context [ 135.415616][ T29] audit: type=1326 audit(1747704937.770:2767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7684 comm="syz.0.1330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd416add2d0 code=0x7ffc0000 [ 135.439717][ T29] audit: type=1326 audit(1747704937.770:2768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7684 comm="syz.0.1330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fd416add41f code=0x7ffc0000 [ 135.463379][ T29] audit: type=1326 audit(1747704937.770:2769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7684 comm="syz.0.1330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=74 compat=0 ip=0x7fd416ade969 code=0x7ffc0000 [ 135.724643][ T29] audit: type=1326 audit(1747704937.770:2770): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=7684 comm="syz.0.1330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7fd416add37c code=0x7ffc0000 [ 135.745770][ T29] audit: type=1326 audit(1747704938.120:2771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7684 comm="syz.0.1330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fd416add41f code=0x7ffc0000 [ 135.769512][ T29] audit: type=1326 audit(1747704938.120:2772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7684 comm="syz.0.1330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fd416add5ca code=0x7ffc0000 [ 135.793185][ T29] audit: type=1326 audit(1747704938.120:2773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7684 comm="syz.0.1330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd416ade969 code=0x7ffc0000 [ 135.816664][ T29] audit: type=1326 audit(1747704938.120:2774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7684 comm="syz.0.1330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd416ade969 code=0x7ffc0000 [ 135.874275][ T7689] loop4: detected capacity change from 0 to 512 [ 135.921233][ T7689] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 135.953638][ T7689] EXT4-fs (loop4): 1 truncate cleaned up [ 135.966548][ T7689] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 135.996866][ T7700] wireguard0: entered promiscuous mode [ 136.096825][ T7709] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1336'. [ 136.164719][ T7714] netlink: 160 bytes leftover after parsing attributes in process `syz.0.1339'. [ 136.208285][ T7718] ip6gretap1: entered allmulticast mode [ 136.244713][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.275837][ T7723] FAULT_INJECTION: forcing a failure. [ 136.275837][ T7723] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 136.289031][ T7723] CPU: 1 UID: 0 PID: 7723 Comm: syz.3.1343 Not tainted 6.15.0-rc7-syzkaller #0 PREEMPT(voluntary) [ 136.289066][ T7723] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 136.289081][ T7723] Call Trace: [ 136.289093][ T7723] [ 136.289102][ T7723] __dump_stack+0x1d/0x30 [ 136.289130][ T7723] dump_stack_lvl+0xe8/0x140 [ 136.289233][ T7723] dump_stack+0x15/0x1b [ 136.289254][ T7723] should_fail_ex+0x265/0x280 [ 136.289300][ T7723] should_fail+0xb/0x20 [ 136.289340][ T7723] should_fail_usercopy+0x1a/0x20 [ 136.289367][ T7723] _copy_from_user+0x1c/0xb0 [ 136.289451][ T7723] kstrtouint_from_user+0x69/0xf0 [ 136.289496][ T7723] ? avc_policy_seqno+0x15/0x30 [ 136.289524][ T7723] proc_fail_nth_write+0x50/0x160 [ 136.289562][ T7723] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 136.289673][ T7723] vfs_write+0x269/0x8d0 [ 136.289701][ T7723] ? vfs_read+0x47f/0x6f0 [ 136.289734][ T7723] ? __rcu_read_unlock+0x4f/0x70 [ 136.289806][ T7723] ? __fget_files+0x184/0x1c0 [ 136.289848][ T7723] ksys_write+0xda/0x1a0 [ 136.289883][ T7723] __x64_sys_write+0x40/0x50 [ 136.289982][ T7723] x64_sys_call+0x2cdd/0x2fb0 [ 136.290011][ T7723] do_syscall_64+0xd0/0x1a0 [ 136.290042][ T7723] ? clear_bhb_loop+0x40/0x90 [ 136.290202][ T7723] ? clear_bhb_loop+0x40/0x90 [ 136.290229][ T7723] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 136.290254][ T7723] RIP: 0033:0x7fe4082bd41f [ 136.290273][ T7723] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 136.290297][ T7723] RSP: 002b:00007fe406927030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 136.290319][ T7723] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fe4082bd41f [ 136.290353][ T7723] RDX: 0000000000000001 RSI: 00007fe4069270a0 RDI: 0000000000000004 [ 136.290370][ T7723] RBP: 00007fe406927090 R08: 0000000000000000 R09: 0000000000000000 [ 136.290386][ T7723] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 136.290403][ T7723] R13: 0000000000000000 R14: 00007fe4084e5fa0 R15: 00007ffcabe797f8 [ 136.290428][ T7723] [ 136.592881][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.603852][ T7736] net_ratelimit: 8 callbacks suppressed [ 136.603872][ T7736] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 136.613006][ T7733] loop2: detected capacity change from 0 to 512 [ 136.627496][ T7733] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 136.657152][ T7733] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 136.703192][ T7733] ext4 filesystem being mounted at /282/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 136.725068][ T7746] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 136.733566][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 136.769259][ T7749] loop4: detected capacity change from 0 to 128 [ 136.776054][ T7749] vfat: Unknown parameter 'ÿÿÿÿÿ' [ 136.791941][ T7733] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 136.822972][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.959965][ T7765] loop3: detected capacity change from 0 to 128 [ 137.042891][ T7763] SELinux: policydb magic number 0x4c5047 does not match expected magic number 0xf97cff8c [ 137.053497][ T7763] SELinux: failed to load policy [ 137.083904][ T7770] __nla_validate_parse: 2 callbacks suppressed [ 137.083926][ T7770] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1356'. [ 137.130127][ T7773] loop2: detected capacity change from 0 to 512 [ 137.152693][ T7773] EXT4-fs: Ignoring removed bh option [ 137.158245][ T7773] ext2: Unknown parameter 'euid<00000000000000060929' [ 137.278158][ T7776] loop4: detected capacity change from 0 to 512 [ 137.288225][ T7776] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 137.301338][ T7781] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1361'. [ 137.311967][ T7776] EXT4-fs (loop4): 1 truncate cleaned up [ 137.318894][ T7776] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 137.369629][ T7784] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1362'. [ 137.460973][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.474712][ T7794] random: crng reseeded on system resumption [ 137.524430][ T7799] loop4: detected capacity change from 0 to 164 [ 137.547580][ T7801] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1369'. [ 137.557359][ T7801] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1369'. [ 137.568284][ T7801] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1369'. [ 137.577355][ T7801] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1369'. [ 137.611603][ T7801] tipc: Enabled bearer , priority 0 [ 137.638339][ T7800] tipc: Disabling bearer [ 137.659640][ T7799] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1366'. [ 137.706661][ T7807] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 137.715278][ T7807] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 137.778382][ T7825] FAULT_INJECTION: forcing a failure. [ 137.778382][ T7825] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 137.791646][ T7825] CPU: 0 UID: 0 PID: 7825 Comm: syz.4.1376 Not tainted 6.15.0-rc7-syzkaller #0 PREEMPT(voluntary) [ 137.791673][ T7825] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 137.791754][ T7825] Call Trace: [ 137.791762][ T7825] [ 137.791769][ T7825] __dump_stack+0x1d/0x30 [ 137.791793][ T7825] dump_stack_lvl+0xe8/0x140 [ 137.791821][ T7825] dump_stack+0x15/0x1b [ 137.791843][ T7825] should_fail_ex+0x265/0x280 [ 137.791887][ T7825] should_fail+0xb/0x20 [ 137.791923][ T7825] should_fail_usercopy+0x1a/0x20 [ 137.792030][ T7825] strncpy_from_user+0x25/0x230 [ 137.792066][ T7825] ? kmem_cache_alloc_noprof+0x186/0x310 [ 137.792093][ T7825] ? getname_flags+0x80/0x3b0 [ 137.792180][ T7825] getname_flags+0xae/0x3b0 [ 137.792234][ T7825] do_sys_openat2+0x60/0x110 [ 137.792261][ T7825] __x64_sys_openat+0xf2/0x120 [ 137.792348][ T7825] x64_sys_call+0x1af/0x2fb0 [ 137.792376][ T7825] do_syscall_64+0xd0/0x1a0 [ 137.792402][ T7825] ? clear_bhb_loop+0x40/0x90 [ 137.792510][ T7825] ? clear_bhb_loop+0x40/0x90 [ 137.792538][ T7825] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.792566][ T7825] RIP: 0033:0x7f78d96be969 [ 137.792585][ T7825] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 137.792686][ T7825] RSP: 002b:00007f78d7d27038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 137.792710][ T7825] RAX: ffffffffffffffda RBX: 00007f78d98e5fa0 RCX: 00007f78d96be969 [ 137.792726][ T7825] RDX: 0000000000000000 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 137.792743][ T7825] RBP: 00007f78d7d27090 R08: 0000000000000000 R09: 0000000000000000 [ 137.792759][ T7825] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 137.792810][ T7825] R13: 0000000000000000 R14: 00007f78d98e5fa0 R15: 00007fffe4487818 [ 137.792834][ T7825] [ 138.057091][ T7832] loop2: detected capacity change from 0 to 512 [ 138.066981][ T7832] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 138.088290][ T7832] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 138.101656][ T7832] ext4 filesystem being mounted at /285/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 138.119536][ T7832] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 138.149039][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.175102][ T7843] netlink: 204 bytes leftover after parsing attributes in process `syz.4.1381'. [ 138.276059][ T7849] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1383'. [ 138.423984][ T7853] sctp: [Deprecated]: syz.3.1384 (pid 7853) Use of int in maxseg socket option. [ 138.423984][ T7853] Use struct sctp_assoc_value instead [ 138.465304][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 138.516628][ T7860] loop3: detected capacity change from 0 to 256 [ 138.563074][ T7865] loop2: detected capacity change from 0 to 512 [ 138.592147][ T7865] EXT4-fs: Ignoring removed bh option [ 138.597771][ T7865] ext2: Unknown parameter 'euid<00000000000000060929' [ 138.636098][ T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 138.645022][ T3459] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 138.653993][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 138.662330][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 138.683283][ T7874] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 138.870814][ T7886] FAULT_INJECTION: forcing a failure. [ 138.870814][ T7886] name failslab, interval 1, probability 0, space 0, times 0 [ 138.874324][ T7888] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 138.883819][ T7886] CPU: 0 UID: 0 PID: 7886 Comm: syz.1.1398 Not tainted 6.15.0-rc7-syzkaller #0 PREEMPT(voluntary) [ 138.883858][ T7886] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 138.883875][ T7886] Call Trace: [ 138.883886][ T7886] [ 138.883897][ T7886] __dump_stack+0x1d/0x30 [ 138.883948][ T7886] dump_stack_lvl+0xe8/0x140 [ 138.883975][ T7886] dump_stack+0x15/0x1b [ 138.883997][ T7886] should_fail_ex+0x265/0x280 [ 138.884072][ T7886] should_failslab+0x8c/0xb0 [ 138.884132][ T7886] __kmalloc_node_track_caller_noprof+0xa4/0x410 [ 138.884164][ T7886] ? sidtab_sid2str_get+0xa0/0x130 [ 138.884228][ T7886] ? skb_put+0xa9/0xf0 [ 138.884282][ T7886] kmemdup_noprof+0x2b/0x70 [ 138.884309][ T7886] sidtab_sid2str_get+0xa0/0x130 [ 138.884429][ T7886] security_sid_to_context_core+0x1eb/0x2e0 [ 138.884521][ T7886] security_sid_to_context+0x27/0x40 [ 138.884561][ T7886] avc_audit_post_callback+0x9d/0x520 [ 138.884646][ T7886] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 138.884726][ T7886] common_lsm_audit+0x1bb/0x230 [ 138.884762][ T7886] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 138.884845][ T7886] slow_avc_audit+0x104/0x140 [ 138.884894][ T7886] avc_has_perm+0x128/0x150 [ 138.884923][ T7886] selinux_socket_getsockopt+0x175/0x1b0 [ 138.885013][ T7886] security_socket_getsockopt+0x46/0x80 [ 138.885048][ T7886] do_sock_getsockopt+0x57/0x240 [ 138.885078][ T7886] __x64_sys_getsockopt+0x11e/0x1a0 [ 138.885109][ T7886] x64_sys_call+0x12aa/0x2fb0 [ 138.885167][ T7886] do_syscall_64+0xd0/0x1a0 [ 138.885251][ T7886] ? clear_bhb_loop+0x40/0x90 [ 138.885281][ T7886] ? clear_bhb_loop+0x40/0x90 [ 138.885311][ T7886] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.885340][ T7886] RIP: 0033:0x7feb0bace969 [ 138.885436][ T7886] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 138.885476][ T7886] RSP: 002b:00007feb0a137038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 138.885503][ T7886] RAX: ffffffffffffffda RBX: 00007feb0bcf5fa0 RCX: 00007feb0bace969 [ 138.885520][ T7886] RDX: 000000000000009f RSI: 000000000000010d RDI: 0000000000000003 [ 138.885537][ T7886] RBP: 00007feb0a137090 R08: 00002000000000c0 R09: 0000000000000000 [ 138.885554][ T7886] R10: 0000200000001040 R11: 0000000000000246 R12: 0000000000000001 [ 138.885576][ T7886] R13: 0000000000000000 R14: 00007feb0bcf5fa0 R15: 00007ffebab4a798 [ 138.885602][ T7886] [ 139.013380][ T7893] loop3: detected capacity change from 0 to 512 [ 139.143967][ T7893] EXT4-fs: Ignoring removed oldalloc option [ 139.161890][ T7893] EXT4-fs error (device loop3): ext4_xattr_inode_iget:433: comm syz.3.1399: Parent and EA inode have the same ino 15 [ 139.175221][ T7893] EXT4-fs error (device loop3): ext4_xattr_inode_iget:433: comm syz.3.1399: Parent and EA inode have the same ino 15 [ 139.188743][ T7893] EXT4-fs (loop3): 1 orphan inode deleted [ 139.195426][ T7893] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 139.225584][ T7888] EXT4-fs error (device loop3): ext4_lookup:1789: inode #14: comm syz.3.1399: invalid fast symlink length 39 [ 139.251095][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.361096][ T7908] loop4: detected capacity change from 0 to 764 [ 139.371294][ T7908] Symlink component flag not implemented [ 139.377416][ T7908] Symlink component flag not implemented (7) [ 139.596393][ T7916] Symlink component flag not implemented (7) [ 139.622437][ T7918] loop2: detected capacity change from 0 to 1024 [ 139.635931][ T7918] EXT4-fs (loop2): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 139.676229][ T7918] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 140.065345][ T7918] EXT4-fs error (device loop2): ext4_xattr_inode_iget:437: inode #11: comm syz.2.1411: missing EA_INODE flag [ 140.084756][ T7918] EXT4-fs (loop2): Remounting filesystem read-only [ 140.107280][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.209590][ T7935] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 140.245272][ T29] kauditd_printk_skb: 178 callbacks suppressed [ 140.245295][ T29] audit: type=1400 audit(1747704942.840:2951): avc: denied { relabelto } for pid=7930 comm="syz.1.1416" name="265" dev="tmpfs" ino=1464 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 140.278378][ T29] audit: type=1400 audit(1747704942.840:2952): avc: denied { associate } for pid=7930 comm="syz.1.1416" name="265" dev="tmpfs" ino=1464 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:fsadm_exec_t:s0" [ 140.440582][ T7932] hsr0: entered promiscuous mode [ 140.547280][ T29] audit: type=1400 audit(1747704943.170:2953): avc: denied { bind } for pid=7940 comm="syz.3.1419" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 140.706436][ T29] audit: type=1400 audit(1747704943.320:2954): avc: denied { write } for pid=3315 comm="syz-executor" name="265" dev="tmpfs" ino=1464 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 140.732892][ T29] audit: type=1400 audit(1747704943.320:2955): avc: denied { remove_name } for pid=3315 comm="syz-executor" name="binderfs" dev="tmpfs" ino=1468 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 140.760293][ T29] audit: type=1400 audit(1747704943.320:2956): avc: denied { rmdir } for pid=3315 comm="syz-executor" name="265" dev="tmpfs" ino=1464 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 140.946907][ T7960] FAULT_INJECTION: forcing a failure. [ 140.946907][ T7960] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 140.960259][ T7960] CPU: 1 UID: 0 PID: 7960 Comm: syz.2.1417 Not tainted 6.15.0-rc7-syzkaller #0 PREEMPT(voluntary) [ 140.960287][ T7960] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 140.960345][ T7960] Call Trace: [ 140.960353][ T7960] [ 140.960362][ T7960] __dump_stack+0x1d/0x30 [ 140.960391][ T7960] dump_stack_lvl+0xe8/0x140 [ 140.960416][ T7960] dump_stack+0x15/0x1b [ 140.960439][ T7960] should_fail_ex+0x265/0x280 [ 140.960476][ T7960] should_fail+0xb/0x20 [ 140.960559][ T7960] should_fail_usercopy+0x1a/0x20 [ 140.960582][ T7960] _copy_to_user+0x20/0xa0 [ 140.960605][ T7960] simple_read_from_buffer+0xb5/0x130 [ 140.960641][ T7960] proc_fail_nth_read+0x100/0x140 [ 140.960678][ T7960] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 140.960760][ T7960] vfs_read+0x1a0/0x6f0 [ 140.960787][ T7960] ? __rcu_read_unlock+0x4f/0x70 [ 140.960811][ T7960] ? __fget_files+0x184/0x1c0 [ 140.960844][ T7960] ksys_read+0xda/0x1a0 [ 140.960941][ T7960] __x64_sys_read+0x40/0x50 [ 140.960971][ T7960] x64_sys_call+0x2d77/0x2fb0 [ 140.960993][ T7960] do_syscall_64+0xd0/0x1a0 [ 140.961041][ T7960] ? clear_bhb_loop+0x40/0x90 [ 140.961071][ T7960] ? clear_bhb_loop+0x40/0x90 [ 140.961097][ T7960] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.961119][ T7960] RIP: 0033:0x7f0d3694d37c [ 140.961134][ T7960] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 140.961222][ T7960] RSP: 002b:00007f0d34fb7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 140.961247][ T7960] RAX: ffffffffffffffda RBX: 00007f0d36b75fa0 RCX: 00007f0d3694d37c [ 140.961262][ T7960] RDX: 000000000000000f RSI: 00007f0d34fb70a0 RDI: 0000000000000006 [ 140.961274][ T7960] RBP: 00007f0d34fb7090 R08: 0000000000000000 R09: 0000000000000000 [ 140.961286][ T7960] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 140.961298][ T7960] R13: 0000000000000000 R14: 00007f0d36b75fa0 R15: 00007fff51d73858 [ 140.961320][ T7960] [ 141.228887][ T7968] veth1_to_bond: entered allmulticast mode [ 141.235114][ T7968] veth1_to_bond: entered promiscuous mode [ 141.247366][ T7968] veth1_to_bond: left promiscuous mode [ 141.252993][ T7968] veth1_to_bond: left allmulticast mode [ 141.258910][ T29] audit: type=1400 audit(1747704943.870:2957): avc: denied { nlmsg_write } for pid=7965 comm="syz.0.1425" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 141.350458][ T7978] loop2: detected capacity change from 0 to 1024 [ 141.370982][ T7980] FAULT_INJECTION: forcing a failure. [ 141.370982][ T7980] name failslab, interval 1, probability 0, space 0, times 0 [ 141.383900][ T7980] CPU: 1 UID: 0 PID: 7980 Comm: syz.3.1432 Not tainted 6.15.0-rc7-syzkaller #0 PREEMPT(voluntary) [ 141.383936][ T7980] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 141.383954][ T7980] Call Trace: [ 141.383963][ T7980] [ 141.384007][ T7980] __dump_stack+0x1d/0x30 [ 141.384029][ T7980] dump_stack_lvl+0xe8/0x140 [ 141.384055][ T7980] dump_stack+0x15/0x1b [ 141.384078][ T7980] should_fail_ex+0x265/0x280 [ 141.384147][ T7980] ? __pfx_cond_bools_destroy+0x10/0x10 [ 141.384169][ T7980] should_failslab+0x8c/0xb0 [ 141.384225][ T7980] kmem_cache_alloc_noprof+0x50/0x310 [ 141.384286][ T7980] ? hashtab_duplicate+0xfe/0x360 [ 141.384415][ T7980] ? __pfx_cond_bools_destroy+0x10/0x10 [ 141.384443][ T7980] hashtab_duplicate+0xfe/0x360 [ 141.384478][ T7980] ? __pfx_cond_bools_copy+0x10/0x10 [ 141.384544][ T7980] cond_policydb_dup+0xd2/0x4e0 [ 141.384577][ T7980] security_set_bools+0xa0/0x340 [ 141.384626][ T7980] sel_commit_bools_write+0x1ea/0x270 [ 141.384653][ T7980] vfs_writev+0x3eb/0x870 [ 141.384706][ T7980] ? __pfx_sel_commit_bools_write+0x10/0x10 [ 141.384740][ T7980] ? mutex_lock+0xd/0x30 [ 141.384765][ T7980] do_writev+0xe7/0x210 [ 141.384840][ T7980] __x64_sys_writev+0x45/0x50 [ 141.384878][ T7980] x64_sys_call+0x2006/0x2fb0 [ 141.384903][ T7980] do_syscall_64+0xd0/0x1a0 [ 141.384935][ T7980] ? clear_bhb_loop+0x40/0x90 [ 141.384963][ T7980] ? clear_bhb_loop+0x40/0x90 [ 141.385046][ T7980] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.385075][ T7980] RIP: 0033:0x7fe4082be969 [ 141.385093][ T7980] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 141.385145][ T7980] RSP: 002b:00007fe406927038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 141.385163][ T7980] RAX: ffffffffffffffda RBX: 00007fe4084e5fa0 RCX: 00007fe4082be969 [ 141.385178][ T7980] RDX: 0000000000000001 RSI: 00002000000025c0 RDI: 0000000000000006 [ 141.385194][ T7980] RBP: 00007fe406927090 R08: 0000000000000000 R09: 0000000000000000 [ 141.385210][ T7980] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 141.385246][ T7980] R13: 0000000000000000 R14: 00007fe4084e5fa0 R15: 00007ffcabe797f8 [ 141.385272][ T7980] [ 141.606728][ T2969] net_ratelimit: 6 callbacks suppressed [ 141.606744][ T2969] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 141.631916][ T7978] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 141.657387][ T7986] FAULT_INJECTION: forcing a failure. [ 141.657387][ T7986] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 141.670835][ T7986] CPU: 1 UID: 0 PID: 7986 Comm: syz.3.1433 Not tainted 6.15.0-rc7-syzkaller #0 PREEMPT(voluntary) [ 141.670889][ T7986] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 141.670902][ T7986] Call Trace: [ 141.670950][ T7986] [ 141.670960][ T7986] __dump_stack+0x1d/0x30 [ 141.670988][ T7986] dump_stack_lvl+0xe8/0x140 [ 141.671056][ T7986] dump_stack+0x15/0x1b [ 141.671072][ T7986] should_fail_ex+0x265/0x280 [ 141.671181][ T7986] should_fail+0xb/0x20 [ 141.671222][ T7986] should_fail_usercopy+0x1a/0x20 [ 141.671249][ T7986] copy_page_from_iter_atomic+0x21b/0xff0 [ 141.671352][ T7986] ? shmem_write_begin+0xa8/0x190 [ 141.671391][ T7986] ? shmem_write_begin+0xe1/0x190 [ 141.671430][ T7986] generic_perform_write+0x2c2/0x490 [ 141.671525][ T7986] shmem_file_write_iter+0xc5/0xf0 [ 141.671570][ T7986] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 141.671606][ T7986] vfs_write+0x4a0/0x8d0 [ 141.671681][ T7986] ksys_write+0xda/0x1a0 [ 141.671795][ T7986] __x64_sys_write+0x40/0x50 [ 141.671822][ T7986] x64_sys_call+0x2cdd/0x2fb0 [ 141.671844][ T7986] do_syscall_64+0xd0/0x1a0 [ 141.671874][ T7986] ? clear_bhb_loop+0x40/0x90 [ 141.671902][ T7986] ? clear_bhb_loop+0x40/0x90 [ 141.671968][ T7986] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.671994][ T7986] RIP: 0033:0x7fe4082bd41f [ 141.672014][ T7986] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 141.672038][ T7986] RSP: 002b:00007fe406926df0 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 141.672062][ T7986] RAX: ffffffffffffffda RBX: 0000000000010000 RCX: 00007fe4082bd41f [ 141.672126][ T7986] RDX: 0000000000010000 RSI: 00007fe3fe507000 RDI: 0000000000000006 [ 141.672142][ T7986] RBP: 0000000000000000 R08: 0000000000000000 R09: 00000000000002a4 [ 141.672159][ T7986] R10: 0000200000000502 R11: 0000000000000293 R12: 0000000000000006 [ 141.672175][ T7986] R13: 00007fe406926ef0 R14: 00007fe406926eb0 R15: 00007fe3fe507000 [ 141.672200][ T7986] [ 141.875980][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 141.897315][ T7986] loop3: detected capacity change from 0 to 128 [ 141.904120][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.905248][ T3459] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 142.109518][ T8004] loop2: detected capacity change from 0 to 128 [ 142.181122][ T8008] wireguard0: entered promiscuous mode [ 142.217562][ T8017] FAULT_INJECTION: forcing a failure. [ 142.217562][ T8017] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 142.231313][ T8017] CPU: 0 UID: 0 PID: 8017 Comm: syz.2.1444 Not tainted 6.15.0-rc7-syzkaller #0 PREEMPT(voluntary) [ 142.231377][ T8017] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 142.231390][ T8017] Call Trace: [ 142.231395][ T8017] [ 142.231404][ T8017] __dump_stack+0x1d/0x30 [ 142.231425][ T8017] dump_stack_lvl+0xe8/0x140 [ 142.231445][ T8017] dump_stack+0x15/0x1b [ 142.231465][ T8017] should_fail_ex+0x265/0x280 [ 142.231588][ T8017] should_fail_alloc_page+0xf2/0x100 [ 142.231632][ T8017] __alloc_frozen_pages_noprof+0xff/0x360 [ 142.231675][ T8017] alloc_pages_mpol+0xb3/0x250 [ 142.231712][ T8017] vma_alloc_folio_noprof+0x1aa/0x300 [ 142.231740][ T8017] handle_mm_fault+0x1056/0x2ae0 [ 142.231837][ T8017] ? __rcu_read_lock+0x37/0x50 [ 142.231900][ T8017] __get_user_pages+0xde2/0x1d20 [ 142.231947][ T8017] __gup_longterm_locked+0x30f/0x1010 [ 142.231977][ T8017] ? ___pte_offset_map+0xc3/0x140 [ 142.232009][ T8017] gup_fast_fallback+0x1134/0x1500 [ 142.232102][ T8017] pin_user_pages_fast+0x5f/0x90 [ 142.232128][ T8017] io_pin_pages+0xb5/0x170 [ 142.232175][ T8017] io_sqe_buffer_register+0x184/0x1220 [ 142.232209][ T8017] ? __kvmalloc_node_noprof+0x37c/0x4d0 [ 142.232239][ T8017] ? io_sqe_buffers_register+0xc2/0x530 [ 142.232276][ T8017] io_sqe_buffers_register+0x2a5/0x530 [ 142.232399][ T8017] __se_sys_io_uring_register+0xa9f/0xeb0 [ 142.232435][ T8017] ? fput+0x8f/0xc0 [ 142.232549][ T8017] ? ksys_write+0x16e/0x1a0 [ 142.232589][ T8017] __x64_sys_io_uring_register+0x55/0x70 [ 142.232616][ T8017] x64_sys_call+0xc91/0x2fb0 [ 142.232679][ T8017] do_syscall_64+0xd0/0x1a0 [ 142.232732][ T8017] ? clear_bhb_loop+0x40/0x90 [ 142.232761][ T8017] ? clear_bhb_loop+0x40/0x90 [ 142.232824][ T8017] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.232845][ T8017] RIP: 0033:0x7f0d3694e969 [ 142.232860][ T8017] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 142.232883][ T8017] RSP: 002b:00007f0d34fb7038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 142.232905][ T8017] RAX: ffffffffffffffda RBX: 00007f0d36b75fa0 RCX: 00007f0d3694e969 [ 142.232921][ T8017] RDX: 00002000000002c0 RSI: 0000000000000000 RDI: 0000000000000009 [ 142.232938][ T8017] RBP: 00007f0d34fb7090 R08: 0000000000000000 R09: 0000000000000000 [ 142.232954][ T8017] R10: 100000000000011a R11: 0000000000000246 R12: 0000000000000001 [ 142.233005][ T8017] R13: 0000000000000000 R14: 00007f0d36b75fa0 R15: 00007fff51d73858 [ 142.233028][ T8017] [ 142.484748][ T3459] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 142.513484][ T29] audit: type=1400 audit(1747704945.130:2958): avc: denied { create } for pid=8023 comm="GPL" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 142.524312][ T8024] loop2: detected capacity change from 0 to 2048 [ 142.575670][ T8024] loop2: p1 < > p4 < > [ 142.582635][ T29] audit: type=1326 audit(1747704945.200:2959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8023 comm="GPL" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d3694e969 code=0x7ffc0000 [ 142.610560][ T29] audit: type=1326 audit(1747704945.230:2960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8023 comm="GPL" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d3694e969 code=0x7ffc0000 [ 142.946102][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 143.705042][ T8056] loop2: detected capacity change from 0 to 512 [ 143.731702][ T8056] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 143.745514][ T3389] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 143.759340][ T8056] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 143.783784][ T8056] ext4 filesystem being mounted at /307/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 143.821264][ T8065] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.844843][ T8056] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 143.866166][ T8077] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 143.872364][ T8079] __nla_validate_parse: 7 callbacks suppressed [ 143.872385][ T8079] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1464'. [ 143.874507][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 143.915278][ T8065] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.957217][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.967874][ T8065] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.985463][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 144.010161][ T8065] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.024646][ T8081] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0) [ 144.065384][ T8081] SELinux: failed to load policy [ 144.069006][ T8065] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.075940][ T10] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 144.088033][ T10] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 144.102782][ T8065] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.127889][ T8081] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 144.157928][ T8065] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.170302][ T8081] loop2: detected capacity change from 0 to 1024 [ 144.186130][ T8081] EXT4-fs: Ignoring removed nomblk_io_submit option [ 144.193294][ T8085] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1466'. [ 144.195186][ T8081] EXT4-fs: Mount option(s) incompatible with ext2 [ 144.211805][ T8065] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.559643][ T8095] loop4: detected capacity change from 0 to 512 [ 144.586007][ T8095] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 144.588046][ T8100] netlink: 28 bytes leftover after parsing attributes in process `wg1'. [ 144.637385][ T8095] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 144.651694][ T8102] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 144.695263][ T8095] ext4 filesystem being mounted at /286/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 144.751896][ T8095] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 144.809914][ T8110] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1475'. [ 144.845571][ T8113] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1477'. [ 144.871841][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.876764][ T8116] FAULT_INJECTION: forcing a failure. [ 144.876764][ T8116] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 144.894148][ T8116] CPU: 1 UID: 0 PID: 8116 Comm: syz.3.1479 Not tainted 6.15.0-rc7-syzkaller #0 PREEMPT(voluntary) [ 144.894239][ T8116] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 144.894253][ T8116] Call Trace: [ 144.894262][ T8116] [ 144.894273][ T8116] __dump_stack+0x1d/0x30 [ 144.894301][ T8116] dump_stack_lvl+0xe8/0x140 [ 144.894379][ T8116] dump_stack+0x15/0x1b [ 144.894421][ T8116] should_fail_ex+0x265/0x280 [ 144.894464][ T8116] should_fail_alloc_page+0xf2/0x100 [ 144.894498][ T8116] __alloc_frozen_pages_noprof+0xff/0x360 [ 144.894537][ T8116] alloc_pages_mpol+0xb3/0x250 [ 144.894643][ T8116] vma_alloc_folio_noprof+0x1aa/0x300 [ 144.894672][ T8116] do_wp_page+0x673/0x23e0 [ 144.894805][ T8116] ? __rcu_read_lock+0x37/0x50 [ 144.894839][ T8116] handle_mm_fault+0x6dc/0x2ae0 [ 144.894879][ T8116] ? mas_walk+0xf2/0x120 [ 144.894908][ T8116] do_user_addr_fault+0x636/0x1090 [ 144.894972][ T8116] ? fpregs_assert_state_consistent+0x84/0xa0 [ 144.895013][ T8116] exc_page_fault+0x54/0xc0 [ 144.895032][ T8116] asm_exc_page_fault+0x26/0x30 [ 144.895105][ T8116] RIP: 0033:0x7fe408180d70 [ 144.895125][ T8116] Code: 39 4f 08 72 4c 8d 4d ff 85 ed 74 33 66 0f 1f 44 00 00 48 39 f0 72 1b 4d 8b 07 49 89 c1 49 29 f1 47 0f b6 0c 08 45 84 c9 74 08 <45> 88 0c 00 49 8b 47 10 48 83 c0 01 49 89 47 10 83 e9 01 73 d3 41 [ 144.895148][ T8116] RSP: 002b:00007fe4069264a0 EFLAGS: 00010202 [ 144.895163][ T8116] RAX: 0000000000011005 RBX: 00007fe406926540 RCX: 0000000000000101 [ 144.895176][ T8116] RDX: 00000000000001ff RSI: 0000000000000800 RDI: 00007fe4069265e0 [ 144.895191][ T8116] RBP: 0000000000000102 R08: 00007fe3fe507000 R09: 0000000000000008 [ 144.895207][ T8116] R10: 0000200000001182 R11: 0000000000000773 R12: 0000000000000601 [ 144.895221][ T8116] R13: 00007fe40835bfc0 R14: 0000000000000015 R15: 00007fe4069265e0 [ 144.895278][ T8116] [ 145.075453][ T8116] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 145.133355][ T8119] loop2: detected capacity change from 0 to 1024 [ 145.176610][ T8119] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 145.234644][ T8119] EXT4-fs error (device loop2): ext4_xattr_inode_iget:437: inode #11: comm syz.2.1478: missing EA_INODE flag [ 145.264700][ T29] kauditd_printk_skb: 152 callbacks suppressed [ 145.264718][ T29] audit: type=1400 audit(1747704947.880:3113): avc: denied { write } for pid=8134 comm="syz.1.1483" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 145.312479][ T8119] EXT4-fs (loop2): Remounting filesystem read-only [ 145.337616][ T29] audit: type=1400 audit(1747704947.920:3114): avc: denied { create } for pid=8118 comm="syz.2.1478" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 145.357763][ T29] audit: type=1400 audit(1747704947.920:3115): avc: denied { create } for pid=8118 comm="syz.2.1478" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 145.653234][ T29] audit: type=1400 audit(1747704948.270:3116): avc: denied { sys_module } for pid=8145 comm="syz.0.1487" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 145.665096][ T8146] netlink: 92 bytes leftover after parsing attributes in process `syz.0.1487'. [ 145.915566][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.024537][ T8154] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1490'. [ 146.069342][ T29] audit: type=1400 audit(1747704948.680:3117): avc: denied { read write } for pid=8155 comm="syz.3.1491" name="ptp0" dev="devtmpfs" ino=246 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 146.093331][ T29] audit: type=1400 audit(1747704948.680:3118): avc: denied { open } for pid=8155 comm="syz.3.1491" path="/dev/ptp0" dev="devtmpfs" ino=246 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 146.159909][ T29] audit: type=1400 audit(1747704948.780:3119): avc: denied { read write } for pid=8159 comm="syz.4.1493" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 146.184598][ T29] audit: type=1400 audit(1747704948.780:3120): avc: denied { open } for pid=8159 comm="syz.4.1493" path="/dev/sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 146.208689][ T29] audit: type=1400 audit(1747704948.780:3121): avc: denied { ioctl } for pid=8159 comm="syz.4.1493" path="/dev/sg0" dev="devtmpfs" ino=135 ioctlcmd=0x227b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 146.269600][ T8167] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1489'. [ 146.270957][ T8166] loop4: detected capacity change from 0 to 512 [ 146.286586][ T8166] ext4: Unknown parameter 'func' [ 146.496935][ T8173] loop2: detected capacity change from 0 to 512 [ 146.503950][ T8173] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 146.545047][ T8173] EXT4-fs (loop2): 1 truncate cleaned up [ 146.551338][ T8173] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 146.671218][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.760804][ T8184] loop2: detected capacity change from 0 to 1024 [ 146.841060][ T8185] loop2: detected capacity change from 0 to 1024 [ 146.848224][ T8185] EXT4-fs: Ignoring removed bh option [ 146.857447][ T8185] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 146.964362][ T8189] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1501'. [ 147.018783][ T29] audit: type=1400 audit(1747704949.640:3122): avc: denied { bind } for pid=8192 comm="syz.3.1504" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 147.060768][ T8197] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1506'. [ 147.297360][ T8223] net_ratelimit: 4 callbacks suppressed [ 147.297443][ T8223] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 147.619742][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.658874][ T8244] FAULT_INJECTION: forcing a failure. [ 147.658874][ T8244] name failslab, interval 1, probability 0, space 0, times 0 [ 147.672040][ T8244] CPU: 1 UID: 0 PID: 8244 Comm: syz.2.1525 Not tainted 6.15.0-rc7-syzkaller #0 PREEMPT(voluntary) [ 147.672127][ T8244] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 147.672139][ T8244] Call Trace: [ 147.672217][ T8244] [ 147.672226][ T8244] __dump_stack+0x1d/0x30 [ 147.672254][ T8244] dump_stack_lvl+0xe8/0x140 [ 147.672277][ T8244] dump_stack+0x15/0x1b [ 147.672298][ T8244] should_fail_ex+0x265/0x280 [ 147.672380][ T8244] should_failslab+0x8c/0xb0 [ 147.672413][ T8244] __kmalloc_noprof+0xa5/0x3e0 [ 147.672433][ T8244] ? p9_client_prepare_req+0x27c/0x820 [ 147.672468][ T8244] p9_client_prepare_req+0x27c/0x820 [ 147.672523][ T8244] p9_client_rpc+0xdf/0x6c0 [ 147.672559][ T8244] p9_client_wstat+0x164/0x1a0 [ 147.672590][ T8244] v9fs_vfs_setattr+0x46f/0x670 [ 147.672709][ T8244] ? __pfx_v9fs_vfs_setattr+0x10/0x10 [ 147.672776][ T8244] notify_change+0x809/0x890 [ 147.672812][ T8244] chown_common+0x29f/0x3c0 [ 147.672857][ T8244] do_fchownat+0x110/0x210 [ 147.672929][ T8244] __x64_sys_lchown+0x4a/0x60 [ 147.672954][ T8244] x64_sys_call+0x1c87/0x2fb0 [ 147.673022][ T8244] do_syscall_64+0xd0/0x1a0 [ 147.673048][ T8244] ? clear_bhb_loop+0x40/0x90 [ 147.673073][ T8244] ? clear_bhb_loop+0x40/0x90 [ 147.673154][ T8244] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.673181][ T8244] RIP: 0033:0x7f0d3694e969 [ 147.673197][ T8244] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 147.673215][ T8244] RSP: 002b:00007f0d34fb7038 EFLAGS: 00000246 ORIG_RAX: 000000000000005e [ 147.673234][ T8244] RAX: ffffffffffffffda RBX: 00007f0d36b75fa0 RCX: 00007f0d3694e969 [ 147.673246][ T8244] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000300 [ 147.673259][ T8244] RBP: 00007f0d34fb7090 R08: 0000000000000000 R09: 0000000000000000 [ 147.673314][ T8244] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 147.673330][ T8244] R13: 0000000000000000 R14: 00007f0d36b75fa0 R15: 00007fff51d73858 [ 147.673351][ T8244] [ 147.691531][ T8174] loop4: detected capacity change from 0 to 256 [ 147.972217][ T8255] loop2: detected capacity change from 0 to 2048 [ 148.016224][ T8255] loop2: p1 < > p4 < > [ 148.062876][ T8259] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 148.293400][ T8262] loop2: detected capacity change from 0 to 512 [ 148.303513][ T8262] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 148.329353][ T8262] EXT4-fs (loop2): 1 truncate cleaned up [ 148.338333][ T8262] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 148.376688][ T8291] loop4: detected capacity change from 0 to 256 [ 148.440567][ T8296] loop4: detected capacity change from 0 to 512 [ 148.448887][ T8296] EXT4-fs: Ignoring removed bh option [ 148.454372][ T8296] ext2: Unknown parameter 'euid<00000000000000060929' [ 148.564561][ T8298] veth3: entered promiscuous mode [ 148.569714][ T8298] veth3: entered allmulticast mode [ 148.647870][ T8301] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 148.656804][ T8301] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 148.665864][ T8301] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 148.674607][ T8301] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 148.802982][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.987046][ T8323] __nla_validate_parse: 6 callbacks suppressed [ 148.987065][ T8323] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1554'. [ 149.271426][ T8341] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1560'. [ 149.687872][ T8351] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 149.899430][ T8362] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1568'. [ 150.155067][ T8383] loop4: detected capacity change from 0 to 512 [ 150.172887][ T8383] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 150.208951][ T8383] EXT4-fs (loop4): 1 truncate cleaned up [ 150.235545][ T8383] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 150.255576][ T8389] loop2: detected capacity change from 0 to 512 [ 150.265253][ T8389] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 150.309380][ T8392] Driver unsupported XDP return value 0 on prog (id 1285) dev N/A, expect packet loss! [ 150.322510][ T29] kauditd_printk_skb: 324 callbacks suppressed [ 150.322535][ T29] audit: type=1400 audit(1747704952.940:3447): avc: denied { write } for pid=8391 comm="syz.1.1579" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 150.351505][ T8392] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=8392 comm=syz.1.1579 [ 150.369866][ T8389] EXT4-fs (loop2): 1 truncate cleaned up [ 150.385357][ T29] audit: type=1400 audit(1747704952.970:3448): avc: denied { ioctl } for pid=8391 comm="syz.1.1579" path="socket:[20482]" dev="sockfs" ino=20482 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 150.410480][ T8389] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 150.479320][ T29] audit: type=1400 audit(1747704953.100:3449): avc: denied { create } for pid=8395 comm="syz.1.1580" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 150.493975][ T8389] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.524402][ T8396] 9pnet_fd: Insufficient options for proto=fd [ 150.543387][ T29] audit: type=1400 audit(1747704953.150:3450): avc: denied { bind } for pid=8395 comm="syz.1.1580" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 150.836363][ T8406] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1584'. [ 150.931502][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.941527][ T8412] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1588'. [ 150.961139][ T8417] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1587'. [ 150.970278][ T8417] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1587'. [ 151.061370][ T29] audit: type=1400 audit(1747704953.670:3451): avc: denied { read write } for pid=8418 comm="syz.1.1590" name="nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 151.085196][ T29] audit: type=1400 audit(1747704953.670:3452): avc: denied { open } for pid=8418 comm="syz.1.1590" path="/dev/nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 151.177105][ T29] audit: type=1400 audit(1747704953.800:3453): avc: denied { watch watch_reads } for pid=8430 comm="syz.3.1595" path="/344" dev="tmpfs" ino=1895 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 151.200428][ T29] audit: type=1400 audit(1747704953.800:3454): avc: denied { ioctl } for pid=8430 comm="syz.3.1595" path="socket:[20535]" dev="sockfs" ino=20535 ioctlcmd=0x8955 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 151.305314][ T29] audit: type=1400 audit(1747704953.860:3455): avc: denied { write } for pid=8433 comm="syz.3.1596" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 151.325679][ T29] audit: type=1400 audit(1747704953.860:3456): avc: denied { nlmsg_write } for pid=8433 comm="syz.3.1596" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 151.388192][ T8444] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1600'. [ 151.508946][ T8446] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1601'. [ 151.550133][ T8458] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1603'. [ 151.560225][ T8459] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 151.572177][ T8458] netlink: 'syz.0.1603': attribute type 21 has an invalid length. [ 151.598505][ T23] IPVS: starting estimator thread 0... [ 151.685304][ T8464] IPVS: using max 2448 ests per chain, 122400 per kthread [ 151.906900][ T8484] FAULT_INJECTION: forcing a failure. [ 151.906900][ T8484] name failslab, interval 1, probability 0, space 0, times 0 [ 151.920460][ T8484] CPU: 1 UID: 0 PID: 8484 Comm: syz.1.1616 Not tainted 6.15.0-rc7-syzkaller #0 PREEMPT(voluntary) [ 151.920492][ T8484] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 151.920517][ T8484] Call Trace: [ 151.920526][ T8484] [ 151.920536][ T8484] __dump_stack+0x1d/0x30 [ 151.920563][ T8484] dump_stack_lvl+0xe8/0x140 [ 151.920623][ T8484] dump_stack+0x15/0x1b [ 151.920640][ T8484] should_fail_ex+0x265/0x280 [ 151.920741][ T8484] should_failslab+0x8c/0xb0 [ 151.920778][ T8484] kmem_cache_alloc_node_noprof+0x57/0x320 [ 151.920803][ T8484] ? dup_task_struct+0x70/0x6a0 [ 151.920883][ T8484] dup_task_struct+0x70/0x6a0 [ 151.920917][ T8484] ? _parse_integer+0x27/0x40 [ 151.920958][ T8484] copy_process+0x399/0x1f90 [ 151.921188][ T8484] ? kstrtouint+0x76/0xc0 [ 151.921224][ T8484] ? kstrtouint_from_user+0x9f/0xf0 [ 151.921337][ T8484] ? __rcu_read_unlock+0x4f/0x70 [ 151.921385][ T8484] kernel_clone+0x16c/0x5b0 [ 151.921421][ T8484] ? vfs_write+0x75e/0x8d0 [ 151.921490][ T8484] __x64_sys_clone+0xe6/0x120 [ 151.921543][ T8484] x64_sys_call+0x2c59/0x2fb0 [ 151.921572][ T8484] do_syscall_64+0xd0/0x1a0 [ 151.921629][ T8484] ? clear_bhb_loop+0x40/0x90 [ 151.921657][ T8484] ? clear_bhb_loop+0x40/0x90 [ 151.921688][ T8484] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 151.921716][ T8484] RIP: 0033:0x7feb0bace969 [ 151.921736][ T8484] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 151.921759][ T8484] RSP: 002b:00007feb0a0e2fe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 151.921783][ T8484] RAX: ffffffffffffffda RBX: 00007feb0bcf6080 RCX: 00007feb0bace969 [ 151.921795][ T8484] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000400 [ 151.921812][ T8484] RBP: 00007feb0a0e3090 R08: 0000000000000000 R09: 0000000000000000 [ 151.921897][ T8484] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 151.921913][ T8484] R13: 0000000000000000 R14: 00007feb0bcf6080 R15: 00007ffebab4a798 [ 151.921937][ T8484] [ 152.173614][ T8486] 9pnet_fd: Insufficient options for proto=fd [ 152.226203][ T8492] loop4: detected capacity change from 0 to 512 [ 152.252302][ T8492] EXT4-fs (loop4): 1 orphan inode deleted [ 152.260834][ T8492] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 152.274455][ T8492] ext4 filesystem being mounted at /308/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 152.286613][ T51] EXT4-fs error (device loop4): ext4_release_dquot:6971: comm kworker/u8:3: Failed to release dquot type 1 [ 152.323340][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.508272][ T8519] syz_tun: entered allmulticast mode [ 152.519060][ T8519] tipc: Enabled bearer , priority 10 [ 152.534382][ T8519] loop2: detected capacity change from 0 to 1024 [ 152.560608][ T8519] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 152.576860][ T8513] loop4: detected capacity change from 0 to 512 [ 152.586179][ T8513] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 152.599911][ T8519] ext4 filesystem being mounted at /338/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 152.619272][ T8513] EXT4-fs (loop4): 1 truncate cleaned up [ 152.630738][ T8513] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 152.645088][ T8519] FAULT_INJECTION: forcing a failure. [ 152.645088][ T8519] name failslab, interval 1, probability 0, space 0, times 0 [ 152.657941][ T8519] CPU: 0 UID: 0 PID: 8519 Comm: syz.2.1630 Not tainted 6.15.0-rc7-syzkaller #0 PREEMPT(voluntary) [ 152.657978][ T8519] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 152.657995][ T8519] Call Trace: [ 152.658003][ T8519] [ 152.658012][ T8519] __dump_stack+0x1d/0x30 [ 152.658041][ T8519] dump_stack_lvl+0xe8/0x140 [ 152.658065][ T8519] dump_stack+0x15/0x1b [ 152.658093][ T8519] should_fail_ex+0x265/0x280 [ 152.658134][ T8519] should_failslab+0x8c/0xb0 [ 152.658176][ T8519] kmem_cache_alloc_noprof+0x50/0x310 [ 152.658203][ T8519] ? alloc_vfsmnt+0x2d/0x350 [ 152.658295][ T8519] alloc_vfsmnt+0x2d/0x350 [ 152.658315][ T8519] clone_mnt+0x41/0x750 [ 152.658343][ T8519] copy_tree+0x2f1/0x820 [ 152.658380][ T8519] copy_mnt_ns+0x120/0x5e0 [ 152.658414][ T8519] ? kmem_cache_alloc_noprof+0x220/0x310 [ 152.658441][ T8519] ? create_new_namespaces+0x3c/0x410 [ 152.658585][ T8519] create_new_namespaces+0x83/0x410 [ 152.658740][ T8519] unshare_nsproxy_namespaces+0xe8/0x120 [ 152.658787][ T8519] ksys_unshare+0x3d0/0x6d0 [ 152.658842][ T8519] ? ksys_write+0x16e/0x1a0 [ 152.658881][ T8519] __x64_sys_unshare+0x1f/0x30 [ 152.658920][ T8519] x64_sys_call+0x2d4b/0x2fb0 [ 152.658950][ T8519] do_syscall_64+0xd0/0x1a0 [ 152.659062][ T8519] ? clear_bhb_loop+0x40/0x90 [ 152.659088][ T8519] ? clear_bhb_loop+0x40/0x90 [ 152.659116][ T8519] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.659172][ T8519] RIP: 0033:0x7f0d3694e969 [ 152.659191][ T8519] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 152.659212][ T8519] RSP: 002b:00007f0d34fb7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 152.659231][ T8519] RAX: ffffffffffffffda RBX: 00007f0d36b75fa0 RCX: 00007f0d3694e969 [ 152.659244][ T8519] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000024020400 [ 152.659331][ T8519] RBP: 00007f0d34fb7090 R08: 0000000000000000 R09: 0000000000000000 [ 152.659347][ T8519] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 152.659368][ T8519] R13: 0000000000000000 R14: 00007f0d36b75fa0 R15: 00007fff51d73858 [ 152.659393][ T8519] [ 152.776202][ T8289] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 152.966088][ T8517] syz_tun: left allmulticast mode [ 153.003571][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.144969][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.226794][ T8542] FAULT_INJECTION: forcing a failure. [ 153.226794][ T8542] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 153.240258][ T8542] CPU: 1 UID: 0 PID: 8542 Comm: syz.2.1634 Not tainted 6.15.0-rc7-syzkaller #0 PREEMPT(voluntary) [ 153.240317][ T8542] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 153.240335][ T8542] Call Trace: [ 153.240343][ T8542] [ 153.240352][ T8542] __dump_stack+0x1d/0x30 [ 153.240379][ T8542] dump_stack_lvl+0xe8/0x140 [ 153.240413][ T8542] dump_stack+0x15/0x1b [ 153.240436][ T8542] should_fail_ex+0x265/0x280 [ 153.240542][ T8542] should_fail+0xb/0x20 [ 153.240579][ T8542] should_fail_usercopy+0x1a/0x20 [ 153.240607][ T8542] _copy_from_iter+0xcf/0xdd0 [ 153.240633][ T8542] ? __build_skb_around+0x1a0/0x200 [ 153.240678][ T8542] ? __alloc_skb+0x223/0x320 [ 153.240732][ T8542] netlink_sendmsg+0x471/0x6b0 [ 153.240808][ T8542] ? __pfx_netlink_sendmsg+0x10/0x10 [ 153.240836][ T8542] __sock_sendmsg+0x145/0x180 [ 153.240873][ T8542] sock_write_iter+0x165/0x1b0 [ 153.240907][ T8542] do_iter_readv_writev+0x41e/0x4c0 [ 153.240985][ T8542] vfs_writev+0x2c9/0x870 [ 153.241096][ T8542] do_writev+0xe7/0x210 [ 153.241122][ T8542] __x64_sys_writev+0x45/0x50 [ 153.241158][ T8542] x64_sys_call+0x2006/0x2fb0 [ 153.241235][ T8542] do_syscall_64+0xd0/0x1a0 [ 153.241268][ T8542] ? clear_bhb_loop+0x40/0x90 [ 153.241302][ T8542] ? clear_bhb_loop+0x40/0x90 [ 153.241332][ T8542] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.241359][ T8542] RIP: 0033:0x7f0d3694e969 [ 153.241379][ T8542] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 153.241401][ T8542] RSP: 002b:00007f0d34fb7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 153.241463][ T8542] RAX: ffffffffffffffda RBX: 00007f0d36b75fa0 RCX: 00007f0d3694e969 [ 153.241480][ T8542] RDX: 0000000000000001 RSI: 0000200000000140 RDI: 0000000000000003 [ 153.241497][ T8542] RBP: 00007f0d34fb7090 R08: 0000000000000000 R09: 0000000000000000 [ 153.241514][ T8542] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 153.241530][ T8542] R13: 0000000000000000 R14: 00007f0d36b75fa0 R15: 00007fff51d73858 [ 153.241556][ T8542] [ 153.525619][ T8544] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 153.655072][ T8553] loop4: detected capacity change from 0 to 512 [ 153.675366][ T8553] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 153.686626][ T8561] FAULT_INJECTION: forcing a failure. [ 153.686626][ T8561] name failslab, interval 1, probability 0, space 0, times 0 [ 153.699410][ T8561] CPU: 0 UID: 0 PID: 8561 Comm: syz.2.1645 Not tainted 6.15.0-rc7-syzkaller #0 PREEMPT(voluntary) [ 153.699501][ T8561] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 153.699516][ T8561] Call Trace: [ 153.699524][ T8561] [ 153.699534][ T8561] __dump_stack+0x1d/0x30 [ 153.699562][ T8561] dump_stack_lvl+0xe8/0x140 [ 153.699587][ T8561] dump_stack+0x15/0x1b [ 153.699622][ T8561] should_fail_ex+0x265/0x280 [ 153.699662][ T8561] ? tcf_block_get_ext+0xcf/0xb30 [ 153.699693][ T8561] should_failslab+0x8c/0xb0 [ 153.699735][ T8561] __kmalloc_cache_noprof+0x4c/0x320 [ 153.699790][ T8561] tcf_block_get_ext+0xcf/0xb30 [ 153.699823][ T8561] tcf_block_get+0x67/0xa0 [ 153.699853][ T8561] ? __pfx_tcf_chain_head_change_dflt+0x10/0x10 [ 153.699969][ T8561] fq_codel_init+0x251/0x460 [ 153.699991][ T8561] ? __pfx_fq_codel_init+0x10/0x10 [ 153.700014][ T8561] qdisc_create+0x562/0x970 [ 153.700044][ T8561] tc_modify_qdisc+0xdc7/0x1310 [ 153.700149][ T8561] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 153.700214][ T8561] rtnetlink_rcv_msg+0x657/0x6d0 [ 153.700249][ T8561] ? avc_has_perm_noaudit+0x1b1/0x200 [ 153.700275][ T8561] netlink_rcv_skb+0x123/0x220 [ 153.700313][ T8561] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 153.700421][ T8561] rtnetlink_rcv+0x1c/0x30 [ 153.700452][ T8561] netlink_unicast+0x5a1/0x670 [ 153.700486][ T8561] netlink_sendmsg+0x58b/0x6b0 [ 153.700511][ T8561] ? __pfx_netlink_sendmsg+0x10/0x10 [ 153.700545][ T8561] __sock_sendmsg+0x145/0x180 [ 153.700573][ T8561] ____sys_sendmsg+0x345/0x4e0 [ 153.700605][ T8561] ___sys_sendmsg+0x17b/0x1d0 [ 153.700695][ T8561] __sys_sendmmsg+0x178/0x300 [ 153.700733][ T8561] __x64_sys_sendmmsg+0x57/0x70 [ 153.700755][ T8561] x64_sys_call+0x2f2f/0x2fb0 [ 153.700781][ T8561] do_syscall_64+0xd0/0x1a0 [ 153.700814][ T8561] ? clear_bhb_loop+0x40/0x90 [ 153.700882][ T8561] ? clear_bhb_loop+0x40/0x90 [ 153.700964][ T8561] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.700993][ T8561] RIP: 0033:0x7f0d3694e969 [ 153.701010][ T8561] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 153.701035][ T8561] RSP: 002b:00007f0d34fb7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 153.701060][ T8561] RAX: ffffffffffffffda RBX: 00007f0d36b75fa0 RCX: 00007f0d3694e969 [ 153.701077][ T8561] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000006 [ 153.701092][ T8561] RBP: 00007f0d34fb7090 R08: 0000000000000000 R09: 0000000000000000 [ 153.701178][ T8561] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 153.701195][ T8561] R13: 0000000000000000 R14: 00007f0d36b75fa0 R15: 00007fff51d73858 [ 153.701283][ T8561] [ 153.983937][ T8553] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 153.996909][ T8553] ext4 filesystem being mounted at /312/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 154.015552][ T8571] __nla_validate_parse: 5 callbacks suppressed [ 154.015598][ T8571] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1648'. [ 154.024970][ T8553] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 154.048813][ T8573] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1649'. [ 154.188361][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.544806][ T8581] loop4: detected capacity change from 0 to 512 [ 154.585089][ T8581] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 154.654957][ T8581] EXT4-fs (loop4): 1 truncate cleaned up [ 154.702166][ T8581] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 155.025732][ T8595] netlink: 204 bytes leftover after parsing attributes in process `syz.3.1655'. [ 155.228214][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.287644][ T8607] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1658'. [ 155.336018][ T8609] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1660'. [ 155.781079][ T8628] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1666'. [ 155.913068][ T29] kauditd_printk_skb: 28 callbacks suppressed [ 155.913088][ T29] audit: type=1400 audit(1747704958.530:3484): avc: denied { write } for pid=8636 comm="syz.1.1670" name="001" dev="devtmpfs" ino=168 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 156.061533][ T8642] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1671'. [ 156.283902][ T8644] loop4: detected capacity change from 0 to 512 [ 156.308151][ T8644] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 156.369509][ T8644] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 156.392644][ T8644] ext4 filesystem being mounted at /315/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 156.418777][ T8644] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 156.504902][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.580296][ T8654] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1674'. [ 156.632948][ T8656] netlink: 'syz.4.1674': attribute type 10 has an invalid length. [ 156.648007][ T29] audit: type=1400 audit(1747704959.250:3485): avc: denied { mount } for pid=8653 comm="syz.4.1674" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 156.725194][ T29] audit: type=1400 audit(1747704959.330:3486): avc: denied { create } for pid=8657 comm="syz.2.1675" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 156.738623][ T8656] hsr_slave_0: left promiscuous mode [ 156.745997][ T29] audit: type=1400 audit(1747704959.330:3487): avc: denied { rename } for pid=8657 comm="syz.2.1675" name="file0" dev="tmpfs" ino=1924 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 156.774519][ T29] audit: type=1400 audit(1747704959.340:3488): avc: denied { unlink } for pid=3322 comm="syz-executor" name="file1" dev="tmpfs" ino=1924 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 156.798856][ T8656] hsr_slave_1: left promiscuous mode [ 156.837097][ T29] audit: type=1400 audit(1747704959.460:3489): avc: denied { read append } for pid=8653 comm="syz.4.1674" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 156.862985][ T29] audit: type=1400 audit(1747704959.480:3490): avc: denied { open } for pid=8653 comm="syz.4.1674" path="/dev/loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 156.888318][ T29] audit: type=1400 audit(1747704959.480:3491): avc: denied { ioctl } for pid=8653 comm="syz.4.1674" path="/dev/loop-control" dev="devtmpfs" ino=99 ioctlcmd=0x4c82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 156.910903][ T8668] netlink: 204 bytes leftover after parsing attributes in process `syz.2.1678'. [ 156.996808][ T29] audit: type=1400 audit(1747704959.610:3492): avc: denied { unmount } for pid=3317 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 157.113098][ T8683] loop4: detected capacity change from 0 to 512 [ 157.120491][ T8683] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 157.148293][ T8683] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 157.169482][ T8683] ext4 filesystem being mounted at /319/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 157.183622][ T8683] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 157.259275][ T8695] infiniband syz!: set active [ 157.264298][ T8695] infiniband syz!: added team_slave_0 [ 157.272385][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.284243][ T29] audit: type=1400 audit(1747704959.900:3493): avc: denied { read } for pid=8694 comm="syz.1.1685" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 157.316898][ T8695] RDS/IB: syz!: added [ 157.321095][ T8695] smc: adding ib device syz! with port count 1 [ 157.327552][ T8695] smc: ib device syz! port 1 has pnetid [ 157.348717][ T8701] FAULT_INJECTION: forcing a failure. [ 157.348717][ T8701] name failslab, interval 1, probability 0, space 0, times 0 [ 157.361619][ T8701] CPU: 0 UID: 0 PID: 8701 Comm: syz.4.1686 Not tainted 6.15.0-rc7-syzkaller #0 PREEMPT(voluntary) [ 157.361702][ T8701] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 157.361719][ T8701] Call Trace: [ 157.361728][ T8701] [ 157.361739][ T8701] __dump_stack+0x1d/0x30 [ 157.361767][ T8701] dump_stack_lvl+0xe8/0x140 [ 157.361790][ T8701] dump_stack+0x15/0x1b [ 157.361863][ T8701] should_fail_ex+0x265/0x280 [ 157.361942][ T8701] should_failslab+0x8c/0xb0 [ 157.361984][ T8701] kmem_cache_alloc_noprof+0x50/0x310 [ 157.362056][ T8701] ? getname_flags+0x80/0x3b0 [ 157.362090][ T8701] getname_flags+0x80/0x3b0 [ 157.362164][ T8701] do_sys_openat2+0x60/0x110 [ 157.362200][ T8701] __x64_sys_openat+0xf2/0x120 [ 157.362232][ T8701] x64_sys_call+0x1af/0x2fb0 [ 157.362261][ T8701] do_syscall_64+0xd0/0x1a0 [ 157.362294][ T8701] ? clear_bhb_loop+0x40/0x90 [ 157.362372][ T8701] ? clear_bhb_loop+0x40/0x90 [ 157.362401][ T8701] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.362430][ T8701] RIP: 0033:0x7f78d96be969 [ 157.362450][ T8701] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 157.362489][ T8701] RSP: 002b:00007f78d7d27038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 157.362512][ T8701] RAX: ffffffffffffffda RBX: 00007f78d98e5fa0 RCX: 00007f78d96be969 [ 157.362529][ T8701] RDX: 000000000000275a RSI: 0000200000000240 RDI: ffffffffffffff9c [ 157.362618][ T8701] RBP: 00007f78d7d27090 R08: 0000000000000000 R09: 0000000000000000 [ 157.362676][ T8701] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 157.362693][ T8701] R13: 0000000000000000 R14: 00007f78d98e5fa0 R15: 00007fffe4487818 [ 157.362719][ T8701] [ 157.579123][ T8703] loop4: detected capacity change from 0 to 512 [ 157.588101][ T8703] EXT4-fs: Ignoring removed bh option [ 157.593886][ T8703] ext2: Unknown parameter 'euid<00000000000000060929' [ 158.061664][ T8713] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.109225][ T8717] loop9: detected capacity change from 0 to 7 [ 158.116220][ T8717] Buffer I/O error on dev loop9, logical block 0, async page read [ 158.124806][ T8717] Buffer I/O error on dev loop9, logical block 0, async page read [ 158.132716][ T8717] loop9: unable to read partition table [ 158.139787][ T8717] loop_reread_partitions: partition scan of loop9 (þ被üŸÑø éÚ¬§½dƤ´à–ƒÝ¡¯¨â·û [ 158.139787][ T8717] Uªÿÿÿÿÿÿ) failed (rc=-5) [ 158.155252][ T8713] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.217416][ T8713] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.327048][ T8713] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.396966][ T8713] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.409205][ T8713] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.422072][ T8713] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.436025][ T8713] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.505292][ T8731] SELinux: syz.1.1699 (8731) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 158.521802][ T8731] FAULT_INJECTION: forcing a failure. [ 158.521802][ T8731] name failslab, interval 1, probability 0, space 0, times 0 [ 158.534600][ T8731] CPU: 0 UID: 0 PID: 8731 Comm: syz.1.1699 Not tainted 6.15.0-rc7-syzkaller #0 PREEMPT(voluntary) [ 158.534638][ T8731] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 158.534655][ T8731] Call Trace: [ 158.534664][ T8731] [ 158.534673][ T8731] __dump_stack+0x1d/0x30 [ 158.534702][ T8731] dump_stack_lvl+0xe8/0x140 [ 158.534809][ T8731] dump_stack+0x15/0x1b [ 158.534831][ T8731] should_fail_ex+0x265/0x280 [ 158.534934][ T8731] should_failslab+0x8c/0xb0 [ 158.535012][ T8731] __kmalloc_noprof+0xa5/0x3e0 [ 158.535113][ T8731] ? sel_write_user+0x1ac/0x440 [ 158.535140][ T8731] sel_write_user+0x1ac/0x440 [ 158.535169][ T8731] selinux_transaction_write+0xc6/0x110 [ 158.535197][ T8731] ? __pfx_selinux_transaction_write+0x10/0x10 [ 158.535291][ T8731] vfs_write+0x269/0x8d0 [ 158.535316][ T8731] ? __rcu_read_unlock+0x4f/0x70 [ 158.535415][ T8731] ? __fget_files+0x184/0x1c0 [ 158.535456][ T8731] ksys_write+0xda/0x1a0 [ 158.535558][ T8731] __x64_sys_write+0x40/0x50 [ 158.535594][ T8731] x64_sys_call+0x2cdd/0x2fb0 [ 158.535623][ T8731] do_syscall_64+0xd0/0x1a0 [ 158.535657][ T8731] ? clear_bhb_loop+0x40/0x90 [ 158.535687][ T8731] ? clear_bhb_loop+0x40/0x90 [ 158.535715][ T8731] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.535742][ T8731] RIP: 0033:0x7feb0bace969 [ 158.535763][ T8731] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 158.535787][ T8731] RSP: 002b:00007feb0a137038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 158.535810][ T8731] RAX: ffffffffffffffda RBX: 00007feb0bcf5fa0 RCX: 00007feb0bace969 [ 158.535902][ T8731] RDX: 0000000000000027 RSI: 0000200000000080 RDI: 0000000000000003 [ 158.535920][ T8731] RBP: 00007feb0a137090 R08: 0000000000000000 R09: 0000000000000000 [ 158.535937][ T8731] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 158.535956][ T8731] R13: 0000000000000000 R14: 00007feb0bcf5fa0 R15: 00007ffebab4a798 [ 158.535979][ T8731] [ 158.834018][ T8743] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 158.843872][ T8743] FAULT_INJECTION: forcing a failure. [ 158.843872][ T8743] name failslab, interval 1, probability 0, space 0, times 0 [ 158.856746][ T8743] CPU: 0 UID: 0 PID: 8743 Comm: syz.2.1702 Not tainted 6.15.0-rc7-syzkaller #0 PREEMPT(voluntary) [ 158.856829][ T8743] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 158.856843][ T8743] Call Trace: [ 158.856851][ T8743] [ 158.856868][ T8743] __dump_stack+0x1d/0x30 [ 158.856937][ T8743] dump_stack_lvl+0xe8/0x140 [ 158.856959][ T8743] dump_stack+0x15/0x1b [ 158.856983][ T8743] should_fail_ex+0x265/0x280 [ 158.857062][ T8743] should_failslab+0x8c/0xb0 [ 158.857093][ T8743] kmem_cache_alloc_noprof+0x50/0x310 [ 158.857117][ T8743] ? skb_clone+0x151/0x1f0 [ 158.857185][ T8743] skb_clone+0x151/0x1f0 [ 158.857206][ T8743] netlink_trim+0x13b/0x200 [ 158.857309][ T8743] netlink_broadcast_filtered+0x4c/0xc00 [ 158.857358][ T8743] nlmsg_notify+0xcf/0x170 [ 158.857406][ T8743] rtnetlink_send+0x48/0x60 [ 158.857532][ T8743] qdisc_notify+0x244/0x280 [ 158.857562][ T8743] qdisc_graft+0xc43/0xcc0 [ 158.857594][ T8743] ? qdisc_hash_add+0x173/0x1d0 [ 158.857630][ T8743] tc_modify_qdisc+0xe13/0x1310 [ 158.857708][ T8743] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 158.857739][ T8743] rtnetlink_rcv_msg+0x657/0x6d0 [ 158.857772][ T8743] ? avc_has_perm_noaudit+0x1b1/0x200 [ 158.857839][ T8743] netlink_rcv_skb+0x123/0x220 [ 158.857887][ T8743] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 158.857923][ T8743] rtnetlink_rcv+0x1c/0x30 [ 158.857946][ T8743] netlink_unicast+0x5a1/0x670 [ 158.857996][ T8743] netlink_sendmsg+0x58b/0x6b0 [ 158.858026][ T8743] ? __pfx_netlink_sendmsg+0x10/0x10 [ 158.858054][ T8743] __sock_sendmsg+0x145/0x180 [ 158.858183][ T8743] ____sys_sendmsg+0x31e/0x4e0 [ 158.858226][ T8743] ___sys_sendmsg+0x17b/0x1d0 [ 158.858293][ T8743] __x64_sys_sendmsg+0xd4/0x160 [ 158.858326][ T8743] x64_sys_call+0x2999/0x2fb0 [ 158.858355][ T8743] do_syscall_64+0xd0/0x1a0 [ 158.858387][ T8743] ? clear_bhb_loop+0x40/0x90 [ 158.858411][ T8743] ? clear_bhb_loop+0x40/0x90 [ 158.858499][ T8743] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.858527][ T8743] RIP: 0033:0x7f0d3694e969 [ 158.858548][ T8743] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 158.858574][ T8743] RSP: 002b:00007f0d34fb7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 158.858593][ T8743] RAX: ffffffffffffffda RBX: 00007f0d36b75fa0 RCX: 00007f0d3694e969 [ 158.858605][ T8743] RDX: 0000000000004000 RSI: 0000200000000040 RDI: 0000000000000005 [ 158.858757][ T8743] RBP: 00007f0d34fb7090 R08: 0000000000000000 R09: 0000000000000000 [ 158.858770][ T8743] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 158.858782][ T8743] R13: 0000000000000000 R14: 00007f0d36b75fa0 R15: 00007fff51d73858 [ 158.858801][ T8743] [ 158.859346][ T8741] FAULT_INJECTION: forcing a failure. [ 158.859346][ T8741] name failslab, interval 1, probability 0, space 0, times 0 [ 158.980556][ T8733] loop4: detected capacity change from 0 to 512 [ 158.983439][ T8741] CPU: 1 UID: 0 PID: 8741 Comm: syz.1.1704 Not tainted 6.15.0-rc7-syzkaller #0 PREEMPT(voluntary) [ 158.983474][ T8741] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 158.983490][ T8741] Call Trace: [ 158.983499][ T8741] [ 158.983510][ T8741] __dump_stack+0x1d/0x30 [ 158.983620][ T8741] dump_stack_lvl+0xe8/0x140 [ 158.983654][ T8741] dump_stack+0x15/0x1b [ 158.983678][ T8741] should_fail_ex+0x265/0x280 [ 158.983771][ T8741] should_failslab+0x8c/0xb0 [ 158.983891][ T8741] __kmalloc_noprof+0xa5/0x3e0 [ 158.983924][ T8741] ? offload_action_alloc+0x2b/0x180 [ 158.983971][ T8741] offload_action_alloc+0x2b/0x180 [ 158.984099][ T8741] tcf_action_offload_add_ex+0x11f/0x3c0 [ 158.984156][ T8741] tcf_action_init+0x282/0x5f0 [ 158.984228][ T8741] tc_ctl_action+0x291/0x830 [ 158.984361][ T8741] ? __pfx_tc_ctl_action+0x10/0x10 [ 158.984397][ T8741] rtnetlink_rcv_msg+0x657/0x6d0 [ 158.984438][ T8741] netlink_rcv_skb+0x123/0x220 [ 158.984483][ T8741] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 158.984547][ T8741] rtnetlink_rcv+0x1c/0x30 [ 158.984578][ T8741] netlink_unicast+0x5a1/0x670 [ 158.984633][ T8741] netlink_sendmsg+0x58b/0x6b0 [ 158.984662][ T8741] ? __pfx_netlink_sendmsg+0x10/0x10 [ 158.984691][ T8741] __sock_sendmsg+0x145/0x180 [ 158.984729][ T8741] ____sys_sendmsg+0x31e/0x4e0 [ 158.984843][ T8741] ___sys_sendmsg+0x17b/0x1d0 [ 158.984970][ T8741] __x64_sys_sendmsg+0xd4/0x160 [ 158.985131][ T8741] x64_sys_call+0x2999/0x2fb0 [ 158.985161][ T8741] do_syscall_64+0xd0/0x1a0 [ 158.985220][ T8741] ? clear_bhb_loop+0x40/0x90 [ 158.985250][ T8741] ? clear_bhb_loop+0x40/0x90 [ 158.985335][ T8741] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.985365][ T8741] RIP: 0033:0x7feb0bace969 [ 158.985386][ T8741] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 158.985411][ T8741] RSP: 002b:00007feb0a137038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 158.985473][ T8741] RAX: ffffffffffffffda RBX: 00007feb0bcf5fa0 RCX: 00007feb0bace969 [ 158.985491][ T8741] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000000000000005 [ 158.985508][ T8741] RBP: 00007feb0a137090 R08: 0000000000000000 R09: 0000000000000000 [ 158.985524][ T8741] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 158.985658][ T8741] R13: 0000000000000000 R14: 00007feb0bcf5fa0 R15: 00007ffebab4a798 [ 158.985684][ T8741] [ 158.988138][ T8748] netlink: 'syz.3.1706': attribute type 10 has an invalid length. [ 159.079186][ T8733] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 159.210761][ T8748] C: renamed from team_slave_0 [ 159.417343][ T8733] EXT4-fs (loop4): 1 truncate cleaned up [ 159.425670][ T8733] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 159.430493][ T8748] netlink: 'syz.3.1706': attribute type 3 has an invalid length. [ 159.445951][ T8748] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1706'. [ 159.455094][ T8748] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 159.473972][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.571214][ T8769] netlink: 'syz.3.1714': attribute type 3 has an invalid length. [ 159.593325][ T8769] netlink: 'syz.3.1714': attribute type 1 has an invalid length. [ 159.775711][ T8767] loop4: detected capacity change from 0 to 512 [ 159.800440][ T8767] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 159.843130][ T8767] EXT4-fs (loop4): 1 truncate cleaned up [ 159.861684][ T8767] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 160.380443][ T8806] block device autoloading is deprecated and will be removed. [ 160.458609][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.701538][ T8822] loop4: detected capacity change from 0 to 512 [ 160.715210][ T8822] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 160.738307][ T8822] EXT4-fs (loop4): 1 truncate cleaned up [ 160.745597][ T8822] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 160.874205][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.087849][ T29] kauditd_printk_skb: 8 callbacks suppressed [ 161.087867][ T29] audit: type=1400 audit(1747704963.710:3502): avc: denied { read } for pid=8834 comm="syz.0.1739" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 161.120533][ T8837] 9pnet_fd: p9_fd_create_tcp (8837): problem connecting socket to 127.0.0.1 [ 161.128982][ T29] audit: type=1400 audit(1747704963.710:3503): avc: denied { open } for pid=8834 comm="syz.0.1739" path="/dev/autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 161.153469][ T29] audit: type=1400 audit(1747704963.740:3504): avc: denied { ioctl } for pid=8834 comm="syz.0.1739" path="/dev/autofs" dev="devtmpfs" ino=91 ioctlcmd=0x937e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 161.387693][ T29] audit: type=1326 audit(1747704964.010:3505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8841 comm="syz.0.1741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd416ade969 code=0x7fc00000 [ 161.411321][ T29] audit: type=1326 audit(1747704964.010:3506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8841 comm="syz.0.1741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd416ade969 code=0x7fc00000 [ 161.435220][ T29] audit: type=1326 audit(1747704964.010:3507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8841 comm="syz.0.1741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd416ade969 code=0x7fc00000 [ 161.458654][ T29] audit: type=1326 audit(1747704964.010:3508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8841 comm="syz.0.1741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd416ade969 code=0x7fc00000 [ 161.482538][ T29] audit: type=1326 audit(1747704964.010:3509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8841 comm="syz.0.1741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd416ade969 code=0x7fc00000 [ 161.506347][ T29] audit: type=1326 audit(1747704964.010:3510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8841 comm="syz.0.1741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd416ade969 code=0x7fc00000 [ 161.530314][ T29] audit: type=1326 audit(1747704964.010:3511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8841 comm="syz.0.1741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd416ade969 code=0x7fc00000 [ 161.562552][ T8782] loop3: detected capacity change from 0 to 256 [ 161.742845][ T8857] netlink: 204 bytes leftover after parsing attributes in process `syz.2.1748'. [ 162.026505][ T8870] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 162.351543][ T8877] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1754'. [ 162.599616][ T8882] loop4: detected capacity change from 0 to 512 [ 162.643877][ T8882] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 162.671701][ T8892] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1760'. [ 162.765944][ T8882] EXT4-fs (loop4): 1 truncate cleaned up [ 162.780926][ T8882] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 162.850568][ T8899] SELinux: syz.1.1762 (8899) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 162.862883][ T8882] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.034933][ T8907] FAULT_INJECTION: forcing a failure. [ 163.034933][ T8907] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 163.048099][ T8907] CPU: 0 UID: 0 PID: 8907 Comm: syz.3.1765 Not tainted 6.15.0-rc7-syzkaller #0 PREEMPT(voluntary) [ 163.048169][ T8907] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 163.048187][ T8907] Call Trace: [ 163.048196][ T8907] [ 163.048206][ T8907] __dump_stack+0x1d/0x30 [ 163.048235][ T8907] dump_stack_lvl+0xe8/0x140 [ 163.048261][ T8907] dump_stack+0x15/0x1b [ 163.048340][ T8907] should_fail_ex+0x265/0x280 [ 163.048385][ T8907] should_fail+0xb/0x20 [ 163.048423][ T8907] should_fail_usercopy+0x1a/0x20 [ 163.048449][ T8907] _copy_to_user+0x20/0xa0 [ 163.048582][ T8907] simple_read_from_buffer+0xb5/0x130 [ 163.048610][ T8907] proc_fail_nth_read+0x100/0x140 [ 163.048642][ T8907] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 163.048734][ T8907] vfs_read+0x1a0/0x6f0 [ 163.048764][ T8907] ? __rcu_read_unlock+0x4f/0x70 [ 163.048791][ T8907] ? __fget_files+0x184/0x1c0 [ 163.048878][ T8907] ksys_read+0xda/0x1a0 [ 163.048906][ T8907] __x64_sys_read+0x40/0x50 [ 163.048940][ T8907] x64_sys_call+0x2d77/0x2fb0 [ 163.048968][ T8907] do_syscall_64+0xd0/0x1a0 [ 163.049053][ T8907] ? clear_bhb_loop+0x40/0x90 [ 163.049082][ T8907] ? clear_bhb_loop+0x40/0x90 [ 163.049111][ T8907] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.049149][ T8907] RIP: 0033:0x7fe4082bd37c [ 163.049166][ T8907] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 163.049189][ T8907] RSP: 002b:00007fe406927030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 163.049208][ T8907] RAX: ffffffffffffffda RBX: 00007fe4084e5fa0 RCX: 00007fe4082bd37c [ 163.049239][ T8907] RDX: 000000000000000f RSI: 00007fe4069270a0 RDI: 0000000000000005 [ 163.049253][ T8907] RBP: 00007fe406927090 R08: 0000000000000000 R09: 0000000000000000 [ 163.049269][ T8907] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 163.049282][ T8907] R13: 0000000000000000 R14: 00007fe4084e5fa0 R15: 00007ffcabe797f8 [ 163.049307][ T8907] [ 163.056018][ T8908] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1764'. [ 163.417688][ T8914] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.511528][ T8914] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.553277][ T8921] netlink: 204 bytes leftover after parsing attributes in process `syz.2.1769'. [ 163.583054][ T8914] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.598832][ T8923] netlink: 204 bytes leftover after parsing attributes in process `syz.4.1768'. [ 163.628425][ T8914] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.684108][ T8914] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.696493][ T8914] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.708881][ T8914] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.721527][ T8914] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.253676][ T8938] loop3: detected capacity change from 0 to 512 [ 164.253798][ T8939] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1774'. [ 164.260623][ T8938] EXT4-fs: Ignoring removed bh option [ 164.274821][ T8938] ext2: Unknown parameter 'euid<00000000000000060929' [ 164.686761][ T8960] loop4: detected capacity change from 0 to 512 [ 164.725958][ T8960] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 164.762033][ T8960] EXT4-fs (loop4): 1 truncate cleaned up [ 164.776494][ T8960] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 164.805520][ T8967] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1784'. [ 164.961705][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.982611][ T8974] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1786'. [ 165.106763][ T8980] netlink: 204 bytes leftover after parsing attributes in process `syz.4.1788'. [ 165.316847][ T8989] netlink: 204 bytes leftover after parsing attributes in process `syz.4.1791'. [ 165.508264][ T9006] FAULT_INJECTION: forcing a failure. [ 165.508264][ T9006] name failslab, interval 1, probability 0, space 0, times 0 [ 165.521731][ T9006] CPU: 1 UID: 0 PID: 9006 Comm: syz.0.1796 Not tainted 6.15.0-rc7-syzkaller #0 PREEMPT(voluntary) [ 165.521767][ T9006] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 165.521832][ T9006] Call Trace: [ 165.521839][ T9006] [ 165.521849][ T9006] __dump_stack+0x1d/0x30 [ 165.521890][ T9006] dump_stack_lvl+0xe8/0x140 [ 165.521917][ T9006] dump_stack+0x15/0x1b [ 165.521935][ T9006] should_fail_ex+0x265/0x280 [ 165.521977][ T9006] should_failslab+0x8c/0xb0 [ 165.522077][ T9006] __kmalloc_noprof+0xa5/0x3e0 [ 165.522169][ T9006] ? io_cqring_event_overflow+0x57/0x2c0 [ 165.522202][ T9006] io_cqring_event_overflow+0x57/0x2c0 [ 165.522264][ T9006] io_req_cqe_overflow+0x87/0xb0 [ 165.522306][ T9006] __io_submit_flush_completions+0x263/0xa00 [ 165.522380][ T9006] io_submit_sqes+0xe25/0x1000 [ 165.522434][ T9006] __se_sys_io_uring_enter+0x1c1/0x1b70 [ 165.522529][ T9006] ? __rcu_read_unlock+0x4f/0x70 [ 165.522558][ T9006] ? get_pid_task+0x96/0xd0 [ 165.522586][ T9006] ? proc_fail_nth_write+0x12d/0x160 [ 165.522671][ T9006] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 165.522706][ T9006] ? vfs_write+0x75e/0x8d0 [ 165.522736][ T9006] ? __rcu_read_unlock+0x4f/0x70 [ 165.522764][ T9006] ? __fget_files+0x184/0x1c0 [ 165.522882][ T9006] ? fput+0x8f/0xc0 [ 165.522909][ T9006] __x64_sys_io_uring_enter+0x78/0x90 [ 165.522953][ T9006] x64_sys_call+0x28c8/0x2fb0 [ 165.522979][ T9006] do_syscall_64+0xd0/0x1a0 [ 165.523085][ T9006] ? clear_bhb_loop+0x40/0x90 [ 165.523114][ T9006] ? clear_bhb_loop+0x40/0x90 [ 165.523143][ T9006] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.523197][ T9006] RIP: 0033:0x7fd416ade969 [ 165.523213][ T9006] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 165.523232][ T9006] RSP: 002b:00007fd415147038 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 165.523252][ T9006] RAX: ffffffffffffffda RBX: 00007fd416d05fa0 RCX: 00007fd416ade969 [ 165.523264][ T9006] RDX: 0000000000000000 RSI: 0000000000000092 RDI: 0000000000000003 [ 165.523316][ T9006] RBP: 00007fd415147090 R08: 0000000000000000 R09: 0000000000000000 [ 165.523336][ T9006] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 165.523352][ T9006] R13: 0000000000000000 R14: 00007fd416d05fa0 R15: 00007ffc23d4aba8 [ 165.523380][ T9006] [ 165.917119][ T9019] netlink: 204 bytes leftover after parsing attributes in process `syz.4.1801'. [ 165.995717][ T9008] ================================================================== [ 166.003869][ T9008] BUG: KCSAN: data-race in touch_atime / touch_atime [ 166.010690][ T9008] [ 166.013023][ T9008] write to 0xffff88811a471b18 of 4 bytes by task 9013 on cpu 0: [ 166.020756][ T9008] touch_atime+0x1e8/0x330 [ 166.025246][ T9008] shmem_file_splice_read+0x582/0x5d0 [ 166.030673][ T9008] splice_direct_to_actor+0x26f/0x680 [ 166.036187][ T9008] do_splice_direct+0xda/0x150 [ 166.040981][ T9008] do_sendfile+0x380/0x640 [ 166.045424][ T9008] __x64_sys_sendfile64+0x105/0x150 [ 166.050678][ T9008] x64_sys_call+0xb39/0x2fb0 [ 166.055385][ T9008] do_syscall_64+0xd0/0x1a0 [ 166.059931][ T9008] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.065872][ T9008] [ 166.068307][ T9008] read to 0xffff88811a471b18 of 4 bytes by task 9008 on cpu 1: [ 166.075867][ T9008] touch_atime+0x194/0x330 [ 166.080581][ T9008] shmem_file_splice_read+0x582/0x5d0 [ 166.085991][ T9008] splice_direct_to_actor+0x26f/0x680 [ 166.091433][ T9008] do_splice_direct+0xda/0x150 [ 166.096345][ T9008] do_sendfile+0x380/0x640 [ 166.100790][ T9008] __x64_sys_sendfile64+0x105/0x150 [ 166.106075][ T9008] x64_sys_call+0xb39/0x2fb0 [ 166.110786][ T9008] do_syscall_64+0xd0/0x1a0 [ 166.115344][ T9008] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.121264][ T9008] [ 166.123634][ T9008] value changed: 0x245fa05d -> 0x24f836dd [ 166.129449][ T9008] [ 166.131791][ T9008] Reported by Kernel Concurrency Sanitizer on: [ 166.137957][ T9008] CPU: 1 UID: 0 PID: 9008 Comm: syz.2.1797 Not tainted 6.15.0-rc7-syzkaller #0 PREEMPT(voluntary) [ 166.148842][ T9008] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 166.159112][ T9008] ==================================================================