last executing test programs: 4.862246802s ago: executing program 3 (id=5912): inotify_init() r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) bpf$MAP_CREATE(0x0, 0x0, 0x0) ptrace(0x10, r0) 4.862032941s ago: executing program 3 (id=5913): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000130000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r3, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='kfree\x00', r5, 0x0, 0x10000001}, 0x18) read(0xffffffffffffffff, &(0x7f0000000100)=""/140, 0xde) tkill(0x0, 0x7) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r6) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r8], 0x1c}}, 0x0) 3.966078467s ago: executing program 3 (id=5922): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0100000004000000080000000b"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = syz_io_uring_setup(0xbc3, &(0x7f0000000100)={0x0, 0x1568, 0x10000, 0x2, 0x285}, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000300)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x2, 0xa3d8, &(0x7f00000005c0)=[{&(0x7f0000000240)="5db5bd", 0x3}], 0x10000000000002a8, 0x8, 0x1, {0x2}}) io_uring_enter(r2, 0x29ab, 0xd480, 0x0, 0x0, 0x0) 2.994513757s ago: executing program 0 (id=5935): r0 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010027bd7000fbd3df2502000000050004000100000005000400010000001400020076657468315f746f5f7465616d0000000900030073797a320000000009"], 0x68}, 0x1, 0x0, 0x0, 0x4000145}, 0x0) 2.757589779s ago: executing program 0 (id=5937): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1d, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910000000000000d3041818000100009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0xe4}, 0x94) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_misc(r0, &(0x7f0000000240), 0xfffffecc) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x80782, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x4) write(r2, &(0x7f0000000280), 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000000100000100000028"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYRESHEX=r3, @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, @fallback=0x3e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSW2(r2, 0x402c542c, &(0x7f0000000340)={0x1, 0xb, 0x9, 0x2, 0x4, "3bc9a3558fc50251a1a8a1000000ddff00", 0x3, 0xcb}) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) ioctl$TIOCSPTLCK(r1, 0x40045431, &(0x7f0000000000)) 1.815163647s ago: executing program 0 (id=5948): r0 = syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000bc0)={[{@nodioread_nolock}, {@noinit_itable}, {@lazytime}, {@nouid32}, {@nodelalloc}, {@block_validity}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x0, 0x481, &(0x7f0000001040)="$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") pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r2, &(0x7f0000000400)=[{&(0x7f0000000100)="92", 0x1}], 0x1) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r5, 0x0, 0xf3a, 0x0) splice(r1, 0x0, r5, 0x0, 0x80, 0x7) write$bt_hci(r5, 0x0, 0x7) write(r3, 0x0, 0x0) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000a80)=ANY=[]) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="00000000ad7a000000000000000000000000000068f8951ad8bb0df4072812e7e9d1e037723d85866a2dc839302e80df79dcd347704ba60221febfdec08e37bc1ea03d9dbbe372d9b70eed2028185ef94f30b4d3f93f8073289d62ba0833926a1c8cb6f36560171d53d022e88fe6636128ebdb643a1a26dae1dba187fb2e9fb1908d699522ee9d5331bb3856b69f4957d3257520014c5d11a2edc0d10240825c9cb53f5b1e5edf01e5d0415f5f3d504da1f3559592b45aba93484086bba9a75068dc33b030f8465aae85a8c8d72c", @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000c00)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r7) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="14000000", @ANYRES16=r8, @ANYBLOB='ya\x00\x00\x00 \x00\x00\x00\x00~'], 0x14}}, 0x4000054) 1.390695689s ago: executing program 4 (id=5950): inotify_init() r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, &(0x7f0000000080)}) bpf$MAP_CREATE(0x0, 0x0, 0x0) ptrace(0x10, r0) 1.36903669s ago: executing program 0 (id=5952): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0xb}]}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r2, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r4, {0xb, 0xd}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_TIME_STAMP(r6, 0x0, 0x3, &(0x7f0000000200), 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x9, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r7}, 0x10) syz_emit_ethernet(0xfc5, &(0x7f00000023c0)=ANY=[@ANYBLOB="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"], 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f00000012c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEAUTHENTICATE(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="24000000a0ced25667f56912370981a09e88d080cb352d7d46a1142726cc60", @ANYRES16=r10, @ANYBLOB="c50f000000000000000011000000", @ANYRES32=0x0, @ANYRESDEC=r8], 0x24}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000800000000000000000001811", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) kexec_load(0x3e00, 0x1, &(0x7f00000002c0)=[{0x0, 0x0, 0xff600000, 0x1000000}], 0x0) rseq(&(0x7f0000000300), 0x20, 0x0, 0x0) r11 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x121202, 0x0) ioctl$TIOCVHANGUP(r11, 0x5437, 0x2) 1.324215203s ago: executing program 1 (id=5953): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0100000004000000080000000b"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa1", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = syz_io_uring_setup(0xbc3, &(0x7f0000000100)={0x0, 0x1568, 0x10000, 0x2, 0x285}, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000300)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x2, 0xa3d8, &(0x7f00000005c0)=[{&(0x7f0000000240)="5db5bd", 0x3}], 0x10000000000002a8, 0x8, 0x1, {0x2}}) io_uring_enter(r2, 0x29ab, 0xd480, 0x0, 0x0, 0x0) 1.323716092s ago: executing program 1 (id=5954): mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x0, 0x6031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000c00)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000004c0)='sched_switch\x00', r1}, 0x18) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000e40)=@raw={'raw\x00', 0x3c1, 0x3, 0x4c0, 0x300, 0x18c, 0x203, 0x300, 0x19030000, 0x3f0, 0x2e0, 0x2e0, 0x3f0, 0x2e0, 0x7fffffe, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x300, 0x0, {0x1000000}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{}, {0x20}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xe}, {}, {0x0, 0x0, 0x3}, {0x2}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {0x16}, {}, {}, {0x7}, {}, {0x0, 0x0, 0x0, 0x101}, {}, {}, {}, {}, {}, {}, {0xfffe}, {}, {}, {}, {0x0, 0xfd}, {}, {0x7a04}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {0xb84, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}]}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x4}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz1\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x520) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='sys_enter\x00', r0, 0x0, 0x3}, 0x18) unshare(0x20060400) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) bpf$MAP_CREATE(0x0, 0x0, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x1c, r6, 0xe17, 0x0, 0x0, {0x1, 0x0, 0x6000}, [@L2TP_ATTR_CONN_ID={0x8}]}, 0x1c}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kmem_cache_free\x00', r5, 0x0, 0xffff}, 0x18) syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(r4, 0x8108551b, &(0x7f0000000380)={0x0, 0x0, "5a77bd318786aeb879ca62cdab2a0000000086d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f6853772b21a100efb76cba37ff3111d6847e8b9398a646717af75fc008daefba68e6222103472bc55704cdb72b4b996ed831f3b802549db3a8ffff7d34171113d806726615380fe65a6a0a72e1ac2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be010e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef14eee686be0fc58e384f93a13f4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe363590d1f600"}) ioctl$USBDEVFS_CLEAR_HALT(r4, 0xc0105502, &(0x7f0000000300)={0x1, 0x1}) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0x8, &(0x7f0000000940)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000100000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r3, 0xffffffffffffffff}, &(0x7f0000000540), &(0x7f0000000580)=r7}, 0x20) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x50) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r10}, 0x10) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r8, &(0x7f0000000780)}, 0x20) syz_mount_image$vfat(&(0x7f0000001800), &(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc888, &(0x7f0000002340)=ANY=[@ANYRES16=0x0, @ANYRES32=0x0], 0x4, 0x273, &(0x7f0000000680)="$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") r11 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0) renameat2(r11, &(0x7f0000000140)='./file0\x00', r11, &(0x7f00000002c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) 1.237294227s ago: executing program 4 (id=5955): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0100000004000000080000000b"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000000085000000040000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = syz_io_uring_setup(0xbc3, &(0x7f0000000100)={0x0, 0x1568, 0x10000, 0x2, 0x285}, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000300)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x2, 0xa3d8, &(0x7f00000005c0)=[{&(0x7f0000000240)="5db5bd", 0x3}], 0x10000000000002a8, 0x8, 0x1, {0x2}}) io_uring_enter(r2, 0x29ab, 0xd480, 0x0, 0x0, 0x0) 1.222466438s ago: executing program 4 (id=5956): r0 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010027bd7000fbd3df2502000000050004000100000005000400010000001400020076657468315f746f5f7465616d0000000900030073797a3200000000090001"], 0x68}, 0x1, 0x0, 0x0, 0x4000145}, 0x0) 1.208055139s ago: executing program 1 (id=5957): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0xb}]}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r2, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r4, {0xb, 0xd}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_TIME_STAMP(r6, 0x0, 0x3, &(0x7f0000000200), 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x9, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r7}, 0x10) syz_emit_ethernet(0xfc5, &(0x7f00000023c0)=ANY=[@ANYBLOB="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"], 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f00000012c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEAUTHENTICATE(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="24000000a0ced25667f56912370981a09e88d080cb352d7d46a1142726cc60", @ANYRES16=r10, @ANYBLOB="c50f00000000000000", @ANYRES32=0x0, @ANYRESDEC=r8], 0x24}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000800000000000000000001811", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) kexec_load(0x3e00, 0x1, &(0x7f00000002c0)=[{0x0, 0x0, 0xff600000, 0x1000000}], 0x0) rseq(&(0x7f0000000300), 0x20, 0x0, 0x0) r11 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x121202, 0x0) ioctl$TIOCVHANGUP(r11, 0x5437, 0x2) 1.155801111s ago: executing program 4 (id=5958): bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r0}, 0x10) r1 = gettid() r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x2082) read(r2, &(0x7f0000000100)=""/140, 0xde) tkill(r1, 0x7) 916.061783ms ago: executing program 4 (id=5959): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e21, @broadcast}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000009900000001"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x18) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x600}, @IFLA_GROUP={0x8}]}, 0xfe61}}, 0x880) sendto(r1, &(0x7f00000002c0)='%', 0x300000, 0x0, 0x0, 0x0) close(r1) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000500)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYBLOB="12ec418b418ca357a428b852b235c0da113ed79b8f0887a106113dbdb8ec650d9099f83ab8963e9fe23d59e61a049ed6546865606d4a7c58642ab0b854a5becb9dc028921bb9858c6830d1f964e65d53dcf11c7c0aa6dbe1dfd68eeeb14314032ae462f00d0ecacaa367a325c8219c3c13e390ed2a3a9aad6364ab1dbc8bdd42892f", @ANYRES64=r0], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r5}, 0x10) r6 = syz_open_procfs(0x0, &(0x7f0000000200)='task\x00') getdents64(r6, 0x0, 0x43) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010100000000000000000a0000000900010073797a300000000048000000030a010200000000000000000a0000000900010073797a3000000000090003007379"], 0x190}}, 0x0) 703.538454ms ago: executing program 3 (id=5928): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000001c0)='sched_switch\x00', r1}, 0x10) perf_event_open$cgroup(&(0x7f0000000300)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x2, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x9}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 687.113395ms ago: executing program 3 (id=5960): r0 = syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000bc0)={[{@nodioread_nolock}, {@noinit_itable}, {@lazytime}, {@nouid32}, {@nodelalloc}, {@block_validity}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x0, 0x481, &(0x7f0000001040)="$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") pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r2, &(0x7f0000000400)=[{&(0x7f0000000100)="92", 0x1}], 0x1) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r5, 0x0, 0xf3a, 0x0) splice(r1, 0x0, r5, 0x0, 0x80, 0x7) write$bt_hci(r5, 0x0, 0x7) write(r3, 0x0, 0x0) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000a80)=ANY=[]) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="00000000ad7a000000000000000000000000000068f8951ad8bb0df4072812e7e9d1e037723d85866a2dc839302e80df79dcd347704ba60221febfdec08e37bc1ea03d9dbbe372d9b70eed2028185ef94f30b4d3f93f8073289d62ba0833926a1c8cb6f36560171d53d022e88fe6636128ebdb643a1a26dae1dba187fb2e9fb1908d699522ee9d5331bb3856b69f4957d3257520014c5d11a2edc0d10240825c9cb53f5b1e5edf01e5d0415f5f3d504da1f3559592b45aba93484086bba9a75068dc33b030f8465aae85a8c8d72c3f98ba561268aa9baa8a993f9e9a598a1f80e3c4b8452bc3f47e486b1a67550056b4", @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000c00)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r7) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="14000000", @ANYRES16=r8, @ANYBLOB='ya\x00\x00\x00 \x00\x00\x00\x00~'], 0x14}}, 0x4000054) 475.607426ms ago: executing program 2 (id=5961): r0 = socket(0x1e, 0x4, 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x3}, 0x8) sendto$inet6(r1, &(0x7f0000000000)="aa", 0x1, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x6}, 0x3}, 0x1c) shutdown(r1, 0x1) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, 0x0, 0x0) sendmmsg(r0, &(0x7f00000030c0), 0x0, 0x9200000000000000) dup3(0xffffffffffffffff, r0, 0x0) socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180500000000c800000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0xf0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB='ya\x00\x00\x00\x00\x00\x00 \x00~'], 0x14}}, 0x4000054) socket$can_bcm(0x1d, 0x2, 0x2) 474.884296ms ago: executing program 3 (id=5962): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000130000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r3, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = gettid() read(0xffffffffffffffff, &(0x7f0000000100)=""/140, 0xde) tkill(r5, 0x7) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r6) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r8], 0x1c}}, 0x0) 444.819387ms ago: executing program 2 (id=5963): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0100000004000000080000000b"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa1", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = syz_io_uring_setup(0xbc3, &(0x7f0000000100)={0x0, 0x1568, 0x10000, 0x2, 0x285}, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000300)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x2, 0xa3d8, &(0x7f00000005c0)=[{&(0x7f0000000240)="5db5bd", 0x3}], 0x10000000000002a8, 0x8, 0x1, {0x2}}) io_uring_enter(r2, 0x29ab, 0xd480, 0x0, 0x0, 0x0) 426.318238ms ago: executing program 2 (id=5964): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000130000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = gettid() r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x2082) read(r2, &(0x7f0000000100)=""/140, 0xde) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000040)={0x197, @tick, 0x0, {}, 0xff, 0x2}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r2, 0xc0605345, &(0x7f00000001c0)={0xfffffff9, 0x2, {0xffffffffffffffff, 0x3, 0x5, 0x0, 0x8}, 0xd4d}) tkill(r1, 0x7) 403.123119ms ago: executing program 0 (id=5965): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0100000004000000080000000b"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000004000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = syz_io_uring_setup(0xbc3, &(0x7f0000000100)={0x0, 0x1568, 0x10000, 0x2, 0x285}, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000300)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x2, 0xa3d8, &(0x7f00000005c0)=[{&(0x7f0000000240)="5db5bd", 0x3}], 0x10000000000002a8, 0x8, 0x1, {0x2}}) io_uring_enter(r2, 0x29ab, 0xd480, 0x0, 0x0, 0x0) 383.29269ms ago: executing program 0 (id=5966): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0, 0x0, 0x1}, 0x18) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) close(r2) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) write(r4, &(0x7f00000002c0)="4cf7", 0x2) splice(r4, &(0x7f0000000040)=0x8000000, r4, 0x0, 0x6, 0x0) readv(r3, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) chown(&(0x7f0000000040)='./file1\x00', 0x0, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000480)="89e7ee2c78dad9b4b473e4c988cafb0c7d1b1403bb91be0e49e20600000000000000074d53031a741e59ce9161166be63370ed0cec74053630accc", 0x3b}], 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = syz_init_net_socket$llc(0x1a, 0x802, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) get_robust_list(0x0, &(0x7f00000007c0)=0x0, &(0x7f0000000800)) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180200000020702500000000002020207b1af8ff00000000bfa100000000000007010000dbffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kfree\x00', 0xffffffffffffffff, 0x0, 0x8}, 0x18) bind$llc(r7, &(0x7f0000000000)={0x1a, 0x0, 0x1, 0x3, 0x3, 0x4a}, 0x10) close(r7) 274.792276ms ago: executing program 1 (id=5967): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000005000000000000000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r1}, 0x10) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000040), 0x200080, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) 185.26376ms ago: executing program 2 (id=5968): bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000130000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r0}, 0x10) r1 = gettid() r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x2082) read(r2, &(0x7f0000000100)=""/140, 0xde) tkill(r1, 0x7) 162.300252ms ago: executing program 1 (id=5969): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0xfd, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2000007d, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) keyctl$search(0x18, 0x0, &(0x7f00000001c0)='cifs.idmap\x00', 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000180)={'fscrypt:', @desc3}, &(0x7f0000000200)={0x0, "dc7d750bd6958efa85cbaa2700e1a698ab00c5a10dbf706fa09a72fb5a7f0ea5eb0c254ac08a608fd4bebc6a7ef6a03ccfd0280cf8f3cf370bd271537155ccd1", 0x40}, 0x48, 0xfffffffffffffffe) socket$nl_sock_diag(0x10, 0x3, 0x4) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x18) time(0x0) 149.276103ms ago: executing program 2 (id=5970): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000001c0)='sched_switch\x00', r1}, 0x10) perf_event_open$cgroup(&(0x7f0000000300)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x2, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x9}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 138.245443ms ago: executing program 1 (id=5971): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0, 0x0, 0x1}, 0x18) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) close(r2) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) write(r4, &(0x7f00000002c0)="4cf7", 0x2) splice(r4, &(0x7f0000000040)=0x8000000, r4, 0x0, 0x6, 0x0) readv(r3, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) chown(&(0x7f0000000040)='./file1\x00', 0x0, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000480)="89e7ee2c78dad9b4b473e4c988cafb0c7d1b1403bb91be0e49e20600000000000000074d53031a741e59ce9161166be63370ed0cec74053630accc", 0x3b}], 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = syz_init_net_socket$llc(0x1a, 0x802, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) get_robust_list(0x0, &(0x7f00000007c0)=0x0, &(0x7f0000000800)) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180200000020702500000000002020207b1af8ff00000000bfa100000000000007010000dbffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kfree\x00', 0xffffffffffffffff, 0x0, 0x8}, 0x18) bind$llc(r7, &(0x7f0000000000)={0x1a, 0x0, 0x1, 0x3, 0x3, 0x4a}, 0x10) close(r7) 126.753654ms ago: executing program 2 (id=5972): mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x0, 0x6031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000c00)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000004c0)='sched_switch\x00', r1}, 0x18) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000e40)=@raw={'raw\x00', 0x3c1, 0x3, 0x4c0, 0x300, 0x18c, 0x203, 0x300, 0x19030000, 0x3f0, 0x2e0, 0x2e0, 0x3f0, 0x2e0, 0x7fffffe, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x300, 0x0, {0x1000000}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{}, {0x20}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xe}, {}, {0x0, 0x0, 0x3}, {0x2}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {0x16}, {}, {}, {0x7}, {}, {0x0, 0x0, 0x0, 0x101}, {}, {}, {}, {}, {}, {}, {0xfffe}, {}, {}, {}, {0x0, 0xfd}, {}, {0x7a04}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {0xb84, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}]}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x4}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz1\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x520) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='sys_enter\x00', r0, 0x0, 0x3}, 0x18) unshare(0x20060400) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) bpf$MAP_CREATE(0x0, 0x0, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x1c, r6, 0xe17, 0x0, 0x0, {0x1, 0x0, 0x6000}, [@L2TP_ATTR_CONN_ID={0x8}]}, 0x1c}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kmem_cache_free\x00', r5, 0x0, 0xffff}, 0x18) syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(r4, 0x8108551b, &(0x7f0000000380)={0x0, 0x0, "5a77bd318786aeb879ca62cdab2a0000000086d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f6853772b21a100efb76cba37ff3111d6847e8b9398a646717af75fc008daefba68e6222103472bc55704cdb72b4b996ed831f3b802549db3a8ffff7d34171113d806726615380fe65a6a0a72e1ac2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be010e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef14eee686be0fc58e384f93a13f4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe363590d1f600"}) ioctl$USBDEVFS_CLEAR_HALT(r4, 0xc0105502, &(0x7f0000000300)={0x1, 0x1}) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0x8, &(0x7f0000000940)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000100000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r3, 0xffffffffffffffff}, &(0x7f0000000540), &(0x7f0000000580)=r7}, 0x20) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x50) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r10}, 0x10) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r8, &(0x7f0000000780)}, 0x20) syz_mount_image$vfat(&(0x7f0000001800), &(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc888, &(0x7f0000002340)=ANY=[@ANYRES16=0x0, @ANYRES32=0x0], 0x4, 0x273, &(0x7f0000000680)="$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") r11 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0) renameat2(r11, &(0x7f0000000140)='./file0\x00', r11, &(0x7f00000002c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) 0s ago: executing program 4 (id=5973): r0 = syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000bc0)={[{@nodioread_nolock}, {@noinit_itable}, {@lazytime}, {@nouid32}, {@nodelalloc}, {@block_validity}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x0, 0x481, &(0x7f0000001040)="$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") pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r2, &(0x7f0000000400)=[{&(0x7f0000000100)="92", 0x1}], 0x1) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r5, 0x0, 0xf3a, 0x0) splice(r1, 0x0, r5, 0x0, 0x80, 0x7) write$bt_hci(r5, 0x0, 0x7) write(r3, 0x0, 0x0) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000a80)=ANY=[]) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="00000000ad7a000000000000000000000000000068f8951ad8bb0df4072812e7e9d1e037723d85866a2dc839302e80df79dcd347704ba60221febfdec08e37bc1ea03d9dbbe372d9b70eed2028185ef94f30b4d3f93f8073289d62ba0833926a1c8cb6f36560171d53d022e88fe6636128ebdb643a1a26dae1dba187fb2e9fb1908d699522ee9d5331bb3856b69f4957d3257520014c5d11a2edc0d10240825c9cb53f5b1e5edf01e5d0415f5f3d504da1f3559592b45aba93484086bba9a75068dc33b030f8465aae85a8c8d72c3f98ba561268aa9baa8a993f9e9a598a1f80e3c4b8452bc3f47e486b1a67550056b4", @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000c00)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r7) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="14000000", @ANYRES16=r8, @ANYBLOB='ya\x00\x00\x00 \x00\x00\x00\x00~'], 0x14}}, 0x4000054) kernel console output (not intermixed with test programs): x52a/0x960 [ 359.898439][T16699] ksys_write+0xda/0x1a0 [ 359.898470][T16699] __x64_sys_write+0x40/0x50 [ 359.898578][T16699] x64_sys_call+0x2802/0x3000 [ 359.898601][T16699] do_syscall_64+0xd2/0x200 [ 359.898723][T16699] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 359.898758][T16699] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 359.898802][T16699] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 359.898831][T16699] RIP: 0033:0x7fc5677fe1ff [ 359.898851][T16699] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 359.898924][T16699] RSP: 002b:00007fc566267000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 359.898955][T16699] RAX: ffffffffffffffda RBX: 00007fc567a55fa0 RCX: 00007fc5677fe1ff [ 359.898972][T16699] RDX: 000000000000005e RSI: 0000200000000440 RDI: 00000000000000c8 [ 359.898987][T16699] RBP: 00007fc566267090 R08: 0000000000000000 R09: 0000000000000000 [ 359.899001][T16699] R10: 000000000000005e R11: 0000000000000293 R12: 0000000000000001 [ 359.899012][T16699] R13: 00007fc567a56038 R14: 00007fc567a55fa0 R15: 00007fffdadb49a8 [ 359.899106][T16699] [ 360.316402][T16719] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4488'. [ 360.789115][T16734] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4493'. [ 360.819819][ T5111] hid-generic 0009:0001:0006.0010: unexpected long global item [ 360.829040][ T5111] hid-generic 0009:0001:0006.0010: probe with driver hid-generic failed with error -22 [ 361.042613][ T29] kauditd_printk_skb: 450 callbacks suppressed [ 361.042697][ T29] audit: type=1326 audit(2000000277.890:50486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16749 comm="syz.0.4498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7490dbf749 code=0x7ffc0000 [ 361.074203][T16750] audit: audit_lost=5 audit_rate_limit=0 audit_backlog_limit=64 [ 361.076392][ T29] audit: type=1326 audit(2000000277.890:50487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16749 comm="syz.0.4498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7490dbf749 code=0x7ffc0000 [ 361.081917][T16750] audit: out of memory in audit_log_start [ 361.112076][ T29] audit: type=1326 audit(2000000277.890:50488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16749 comm="syz.0.4498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7490dbf749 code=0x7ffc0000 [ 361.136453][ T29] audit: type=1326 audit(2000000277.890:50489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16749 comm="syz.0.4498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7490dbf749 code=0x7ffc0000 [ 361.160737][ T29] audit: type=1326 audit(2000000277.909:50490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16749 comm="syz.0.4498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7490dbf749 code=0x7ffc0000 [ 361.184469][ T29] audit: type=1326 audit(2000000277.909:50491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16749 comm="syz.0.4498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7490dbf749 code=0x7ffc0000 [ 361.208993][ T29] audit: type=1326 audit(2000000277.909:50492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16749 comm="syz.0.4498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7490dbf749 code=0x7ffc0000 [ 361.233307][ T29] audit: type=1326 audit(2000000277.909:50493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16749 comm="syz.0.4498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7490dbf749 code=0x7ffc0000 [ 361.673670][T16769] lo speed is unknown, defaulting to 1000 [ 362.110459][T16783] tipc: Enabled bearer , priority 0 [ 362.212313][T16785] siw: device registration error -23 [ 362.324462][T16793] lo speed is unknown, defaulting to 1000 [ 362.342436][T16795] lo speed is unknown, defaulting to 1000 [ 362.460717][T16807] random: crng reseeded on system resumption [ 362.925066][T16781] tipc: Resetting bearer [ 362.943852][T16781] tipc: Disabling bearer [ 362.998878][T16822] lo speed is unknown, defaulting to 1000 [ 363.154226][T16829] __nla_validate_parse: 5 callbacks suppressed [ 363.154244][T16829] netlink: 172 bytes leftover after parsing attributes in process `syz.1.4527'. [ 363.253340][T16835] FAULT_INJECTION: forcing a failure. [ 363.253340][T16835] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 363.266478][T16835] CPU: 0 UID: 0 PID: 16835 Comm: syz.1.4530 Not tainted syzkaller #0 PREEMPT(voluntary) [ 363.266585][T16835] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 363.266596][T16835] Call Trace: [ 363.266674][T16835] [ 363.266681][T16835] __dump_stack+0x1d/0x30 [ 363.266700][T16835] dump_stack_lvl+0xe8/0x140 [ 363.266717][T16835] dump_stack+0x15/0x1b [ 363.266732][T16835] should_fail_ex+0x265/0x280 [ 363.266774][T16835] should_fail+0xb/0x20 [ 363.266788][T16835] should_fail_usercopy+0x1a/0x20 [ 363.266806][T16835] _copy_from_user+0x1c/0xb0 [ 363.266828][T16835] kstrtouint_from_user+0x69/0xf0 [ 363.266845][T16835] ? 0xffffffff81000000 [ 363.266856][T16835] ? selinux_file_permission+0x1e4/0x320 [ 363.266989][T16835] proc_fail_nth_write+0x50/0x160 [ 363.267018][T16835] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 363.267127][T16835] vfs_write+0x269/0x960 [ 363.267149][T16835] ? vfs_read+0x4e6/0x770 [ 363.267169][T16835] ? __rcu_read_unlock+0x4f/0x70 [ 363.267254][T16835] ? __fget_files+0x184/0x1c0 [ 363.267280][T16835] ksys_write+0xda/0x1a0 [ 363.267302][T16835] __x64_sys_write+0x40/0x50 [ 363.267401][T16835] x64_sys_call+0x2802/0x3000 [ 363.267420][T16835] do_syscall_64+0xd2/0x200 [ 363.267438][T16835] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 363.267524][T16835] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 363.267555][T16835] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 363.267582][T16835] RIP: 0033:0x7feb826fe1ff [ 363.267622][T16835] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 363.267637][T16835] RSP: 002b:00007feb81167030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 363.267654][T16835] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007feb826fe1ff [ 363.267687][T16835] RDX: 0000000000000001 RSI: 00007feb811670a0 RDI: 0000000000000006 [ 363.267697][T16835] RBP: 00007feb81167090 R08: 0000000000000000 R09: 0000000000000000 [ 363.267707][T16835] R10: 0000000000000024 R11: 0000000000000293 R12: 0000000000000001 [ 363.267717][T16835] R13: 00007feb82956038 R14: 00007feb82955fa0 R15: 00007ffc093d0bc8 [ 363.267734][T16835] [ 363.555298][T16843] siw: device registration error -23 [ 363.611905][T16853] 9pnet_fd: Insufficient options for proto=fd [ 363.633799][T16847] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 363.642721][T16847] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 363.698945][T16858] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 363.718266][T16858] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 363.856425][T16869] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4546'. [ 364.200381][T16874] siw: device registration error -23 [ 364.753151][T16901] lo speed is unknown, defaulting to 1000 [ 365.093118][ T5111] hid-generic 0009:0001:0006.0011: unexpected long global item [ 365.101503][ T5111] hid-generic 0009:0001:0006.0011: probe with driver hid-generic failed with error -22 [ 365.566137][T16932] netlink: 172 bytes leftover after parsing attributes in process `syz.3.4571'. [ 365.899973][ T5111] hid-generic 0009:0001:0006.0012: unexpected long global item [ 365.907920][ T5111] hid-generic 0009:0001:0006.0012: probe with driver hid-generic failed with error -22 [ 366.378945][T16961] netlink: 172 bytes leftover after parsing attributes in process `syz.1.4582'. [ 366.403308][ T29] kauditd_printk_skb: 239 callbacks suppressed [ 366.403326][ T29] audit: type=1400 audit(2000000282.914:50733): avc: denied { create } for pid=16962 comm="syz.1.4583" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 366.430092][ T29] audit: type=1400 audit(2000000282.914:50734): avc: denied { setopt } for pid=16962 comm="syz.1.4583" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 366.454300][ T29] audit: type=1400 audit(2000000282.951:50735): avc: denied { create } for pid=16964 comm="syz.1.4584" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 366.476174][ T29] audit: type=1400 audit(2000000282.951:50736): avc: denied { write } for pid=16964 comm="syz.1.4584" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 366.497382][ T29] audit: type=1400 audit(2000000282.951:50737): avc: denied { nlmsg_write } for pid=16964 comm="syz.1.4584" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 366.829057][ T29] audit: type=1326 audit(2000000283.307:50738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16952 comm="syz.3.4580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5677ff749 code=0x7ffc0000 [ 366.917749][ T5111] hid-generic 0009:0001:0006.0013: unexpected long global item [ 366.917882][ T5111] hid-generic 0009:0001:0006.0013: probe with driver hid-generic failed with error -22 [ 366.995875][ T29] audit: type=1326 audit(2000000283.466:50739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16973 comm="syz.4.4588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a44fff749 code=0x7ffc0000 [ 366.995964][ T29] audit: type=1326 audit(2000000283.466:50740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16973 comm="syz.4.4588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a44fff749 code=0x7ffc0000 [ 366.995993][ T29] audit: type=1326 audit(2000000283.466:50741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16973 comm="syz.4.4588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a44fff749 code=0x7ffc0000 [ 366.998251][ T29] audit: type=1400 audit(2000000283.466:50742): avc: denied { read append } for pid=16983 comm="syz.0.4593" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 367.111023][T16988] netlink: 172 bytes leftover after parsing attributes in process `syz.3.4594'. [ 367.202391][T16998] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 367.537803][T17007] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4601'. [ 367.543709][T17007] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4601'. [ 367.563536][ T3411] hid-generic 0009:0001:0006.0014: unexpected long global item [ 367.577992][ T3411] hid-generic 0009:0001:0006.0014: probe with driver hid-generic failed with error -22 [ 367.628467][T17017] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 367.637379][T17017] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 367.749668][T17019] netlink: 172 bytes leftover after parsing attributes in process `syz.2.4605'. [ 368.072409][T17030] lo speed is unknown, defaulting to 1000 [ 368.215213][ T10] hid-generic 0009:0001:0006.0015: unexpected long global item [ 368.223729][ T10] hid-generic 0009:0001:0006.0015: probe with driver hid-generic failed with error -22 [ 368.328551][T17050] netlink: 172 bytes leftover after parsing attributes in process `syz.0.4617'. [ 368.516841][T17070] tipc: Enabled bearer , priority 0 [ 368.788460][T17075] tipc: Enabled bearer , priority 0 [ 369.283442][T17077] lo speed is unknown, defaulting to 1000 [ 369.321213][T17064] tipc: Resetting bearer [ 369.332864][T17064] tipc: Disabling bearer [ 369.347851][ T10] hid-generic 0009:0001:0006.0016: unexpected long global item [ 369.356702][ T10] hid-generic 0009:0001:0006.0016: probe with driver hid-generic failed with error -22 [ 369.417801][T17086] netlink: 172 bytes leftover after parsing attributes in process `syz.0.4629'. [ 369.469677][T17092] lo speed is unknown, defaulting to 1000 [ 369.524372][T15072] tipc: Resetting bearer [ 369.590680][T17073] tipc: Resetting bearer [ 369.602315][T17073] tipc: Disabling bearer [ 369.626834][T17103] lo speed is unknown, defaulting to 1000 [ 369.815215][T17115] tipc: Enabled bearer , priority 0 [ 369.880928][T17118] netlink: 172 bytes leftover after parsing attributes in process `syz.4.4641'. [ 370.438602][T17124] lo speed is unknown, defaulting to 1000 [ 370.515203][T17132] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17132 comm=syz.4.4644 [ 370.662149][ T52] tipc: Resetting bearer [ 370.668636][T17113] tipc: Resetting bearer [ 370.684510][T17113] tipc: Disabling bearer [ 370.727021][T17138] lo speed is unknown, defaulting to 1000 [ 371.970327][ T29] kauditd_printk_skb: 1068 callbacks suppressed [ 371.970345][ T29] audit: type=1400 audit(2000000288.031:51811): avc: denied { open } for pid=17151 comm="syz.0.4652" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 371.970375][ T29] audit: type=1400 audit(2000000288.031:51812): avc: denied { perfmon } for pid=17151 comm="syz.0.4652" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 371.970410][ T29] audit: type=1400 audit(2000000288.031:51813): avc: denied { kernel } for pid=17151 comm="syz.0.4652" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 371.970438][ T29] audit: type=1400 audit(2000000288.096:51814): avc: denied { prog_load } for pid=17151 comm="syz.0.4652" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 371.970478][ T29] audit: type=1400 audit(2000000288.096:51815): avc: denied { bpf } for pid=17151 comm="syz.0.4652" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 371.970540][ T29] audit: type=1400 audit(2000000288.096:51816): avc: denied { map_create } for pid=17153 comm="syz.1.4653" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 371.970565][ T29] audit: type=1400 audit(2000000288.096:51817): avc: denied { prog_run } for pid=17153 comm="syz.1.4653" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 371.970592][ T29] audit: type=1400 audit(2000000288.106:51818): avc: denied { map_read map_write } for pid=17153 comm="syz.1.4653" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 371.970616][ T29] audit: type=1400 audit(2000000288.106:51819): avc: denied { write } for pid=17153 comm="syz.1.4653" name="001" dev="devtmpfs" ino=168 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 371.970705][ T29] audit: type=1400 audit(2000000288.115:51820): avc: denied { create } for pid=17153 comm="syz.1.4653" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 372.053375][T17161] netlink: 172 bytes leftover after parsing attributes in process `syz.3.4655'. [ 372.420427][T17177] tipc: Enabled bearer , priority 0 [ 372.729701][T17179] lo speed is unknown, defaulting to 1000 [ 372.860319][T17193] netlink: 172 bytes leftover after parsing attributes in process `syz.4.4668'. [ 372.952184][T17196] netlink: 172 bytes leftover after parsing attributes in process `syz.4.4669'. [ 373.017671][T17201] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 373.027419][T17201] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 373.165904][T17175] tipc: Resetting bearer [ 373.222377][T17175] tipc: Disabling bearer [ 373.258447][T17205] 9pnet_fd: Insufficient options for proto=fd [ 373.267719][T17203] lo speed is unknown, defaulting to 1000 [ 373.376119][ T1028] hid-generic 0009:0001:0006.0017: unexpected long global item [ 373.389701][ T1028] hid-generic 0009:0001:0006.0017: probe with driver hid-generic failed with error -22 [ 373.517160][T17221] netlink: 172 bytes leftover after parsing attributes in process `syz.1.4680'. [ 373.770691][T17231] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4684'. [ 373.855205][T17231] bond1: entered promiscuous mode [ 373.855303][T17231] bond1: entered allmulticast mode [ 373.857685][T17231] 8021q: adding VLAN 0 to HW filter on device bond1 [ 373.972197][T17237] tipc: Enabled bearer , priority 0 [ 374.034616][T17231] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4684'. [ 374.035071][T17231] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4684'. [ 374.170186][ T3424] hid-generic 0009:0001:0006.0018: unexpected long global item [ 374.170286][ T3424] hid-generic 0009:0001:0006.0018: probe with driver hid-generic failed with error -22 [ 374.430665][T17259] lo speed is unknown, defaulting to 1000 [ 374.590433][T17279] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4700'. [ 374.608378][ T3411] hid-generic 0009:0001:0006.0019: unexpected long global item [ 374.632039][ T3411] hid-generic 0009:0001:0006.0019: probe with driver hid-generic failed with error -22 [ 374.654096][T17233] tipc: Resetting bearer [ 374.670345][T17233] tipc: Disabling bearer [ 374.804994][T17301] lo speed is unknown, defaulting to 1000 [ 374.945229][T17312] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4712'. [ 375.103462][T17328] netlink: 172 bytes leftover after parsing attributes in process `syz.2.4716'. [ 375.302127][T17340] lo speed is unknown, defaulting to 1000 [ 375.326075][T17344] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4724'. [ 375.656333][T17373] lo speed is unknown, defaulting to 1000 [ 375.759488][ T3424] hid-generic 0009:0001:0006.001A: unexpected long global item [ 375.768532][ T3424] hid-generic 0009:0001:0006.001A: probe with driver hid-generic failed with error -22 [ 376.435418][T17414] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 376.435517][T17414] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 376.485796][ T1028] hid-generic 0009:0001:0006.001B: unexpected long global item [ 376.485950][ T1028] hid-generic 0009:0001:0006.001B: probe with driver hid-generic failed with error -22 [ 376.701300][ T1028] hid-generic 0009:0001:0006.001C: unexpected long global item [ 376.701416][ T1028] hid-generic 0009:0001:0006.001C: probe with driver hid-generic failed with error -22 [ 376.839203][T17433] lo speed is unknown, defaulting to 1000 [ 377.190290][ T5111] hid-generic 0009:0001:0006.001D: unexpected long global item [ 377.190443][ T5111] hid-generic 0009:0001:0006.001D: probe with driver hid-generic failed with error -22 [ 377.347649][ T29] kauditd_printk_skb: 1483 callbacks suppressed [ 377.347664][ T29] audit: type=1326 audit(2000000293.158:53304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17462 comm="syz.4.4773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a44fff749 code=0x7ffc0000 [ 377.347833][ T29] audit: type=1326 audit(2000000293.158:53305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17462 comm="syz.4.4773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a44fff749 code=0x7ffc0000 [ 377.355115][ T29] audit: type=1326 audit(2000000293.158:53306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17462 comm="syz.4.4773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a44fff749 code=0x7ffc0000 [ 377.355153][ T29] audit: type=1326 audit(2000000293.158:53307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17462 comm="syz.4.4773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a44fff749 code=0x7ffc0000 [ 377.355289][ T29] audit: type=1326 audit(2000000293.158:53308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17462 comm="syz.4.4773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9a44fff749 code=0x7ffc0000 [ 377.355426][ T29] audit: type=1326 audit(2000000293.158:53309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17462 comm="syz.4.4773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a44fff749 code=0x7ffc0000 [ 377.355580][ T29] audit: type=1326 audit(2000000293.158:53310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17462 comm="syz.4.4773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a44fff749 code=0x7ffc0000 [ 377.355697][ T29] audit: type=1326 audit(2000000293.158:53311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17462 comm="syz.4.4773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a44fff749 code=0x7ffc0000 [ 377.355777][ T29] audit: type=1326 audit(2000000293.158:53312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17462 comm="syz.4.4773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9a44fff749 code=0x7ffc0000 [ 377.356133][ T29] audit: type=1326 audit(2000000293.158:53313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17462 comm="syz.4.4773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a44fff749 code=0x7ffc0000 [ 378.117396][T17488] netlink: 172 bytes leftover after parsing attributes in process `syz.0.4782'. [ 378.150690][ T1028] hid-generic 0009:0001:0006.001E: unexpected long global item [ 378.150850][ T1028] hid-generic 0009:0001:0006.001E: probe with driver hid-generic failed with error -22 [ 379.785208][T17499] netlink: 27 bytes leftover after parsing attributes in process `syz.0.4786'. [ 379.995214][T17530] netlink: 172 bytes leftover after parsing attributes in process `syz.1.4799'. [ 380.045942][T17534] netlink: 172 bytes leftover after parsing attributes in process `syz.1.4801'. [ 380.105712][ T5111] hid-generic 0009:0001:0006.001F: unexpected long global item [ 380.105789][ T5111] hid-generic 0009:0001:0006.001F: probe with driver hid-generic failed with error -22 [ 380.157616][T17547] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4807'. [ 380.341861][T17567] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 380.341961][T17567] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 380.380264][T17570] netlink: 172 bytes leftover after parsing attributes in process `syz.1.4814'. [ 380.464814][ T1028] hid-generic 0009:0001:0006.0020: unexpected long global item [ 380.472813][ T1028] hid-generic 0009:0001:0006.0020: probe with driver hid-generic failed with error -22 [ 380.631594][T17584] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4820'. [ 380.823731][ T5111] hid-generic 0009:0001:0006.0021: unexpected long global item [ 380.831960][ T5111] hid-generic 0009:0001:0006.0021: probe with driver hid-generic failed with error -22 [ 382.178960][ T1028] hid-generic 0009:0001:0006.0022: unexpected long global item [ 382.179079][ T1028] hid-generic 0009:0001:0006.0022: probe with driver hid-generic failed with error -22 [ 382.218688][T17645] netlink: 172 bytes leftover after parsing attributes in process `syz.0.4841'. [ 382.322700][T17655] lo speed is unknown, defaulting to 1000 [ 382.387709][T17662] lo speed is unknown, defaulting to 1000 [ 382.482302][T17668] lo speed is unknown, defaulting to 1000 [ 382.668812][ T1028] hid-generic 0009:0001:0006.0023: unexpected long global item [ 382.668928][ T1028] hid-generic 0009:0001:0006.0023: probe with driver hid-generic failed with error -22 [ 382.673768][T17681] netlink: 172 bytes leftover after parsing attributes in process `syz.4.4855'. [ 382.706732][ T29] kauditd_printk_skb: 1862 callbacks suppressed [ 382.706749][ T29] audit: type=1326 audit(2000000298.163:55176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17635 comm="syz.2.4838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f5172872005 code=0x7ffc0000 [ 382.709703][ T29] audit: type=1326 audit(2000000298.163:55177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17635 comm="syz.2.4838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f5172872005 code=0x7ffc0000 [ 382.711622][ T29] audit: type=1326 audit(2000000298.163:55178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17635 comm="syz.2.4838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f5172872005 code=0x7ffc0000 [ 382.712877][ T29] audit: type=1326 audit(2000000298.163:55179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17635 comm="syz.2.4838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f5172872005 code=0x7ffc0000 [ 382.717327][ T29] audit: type=1326 audit(2000000298.172:55180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17635 comm="syz.2.4838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f5172872005 code=0x7ffc0000 [ 382.720853][ T29] audit: type=1326 audit(2000000298.172:55181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17635 comm="syz.2.4838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f5172872005 code=0x7ffc0000 [ 382.723125][ T29] audit: type=1326 audit(2000000298.172:55182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17635 comm="syz.2.4838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f5172872005 code=0x7ffc0000 [ 382.760012][T17687] lo speed is unknown, defaulting to 1000 [ 382.863500][ T29] audit: type=1326 audit(2000000298.303:55183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17635 comm="syz.2.4838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f517283f749 code=0x7ffc0000 [ 382.877983][ T29] audit: type=1326 audit(2000000298.322:55184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17635 comm="syz.2.4838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f517283f749 code=0x7ffc0000 [ 382.912479][ T3411] hid-generic 0009:0001:0006.0024: unexpected long global item [ 382.912562][ T3411] hid-generic 0009:0001:0006.0024: probe with driver hid-generic failed with error -22 [ 382.944847][T17699] lo speed is unknown, defaulting to 1000 [ 383.201627][ T29] audit: type=1400 audit(2000000298.612:55185): avc: denied { create } for pid=17703 comm="syz.3.4864" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 383.280697][T17712] netlink: 172 bytes leftover after parsing attributes in process `syz.2.4868'. [ 383.381021][T17721] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 383.390412][T17721] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 383.392912][T17720] lo speed is unknown, defaulting to 1000 [ 383.421790][ T1028] hid-generic 0009:0001:0006.0025: unexpected long global item [ 383.430668][ T1028] hid-generic 0009:0001:0006.0025: probe with driver hid-generic failed with error -22 [ 383.528067][T17740] lo speed is unknown, defaulting to 1000 [ 383.593939][T17747] lo speed is unknown, defaulting to 1000 [ 383.701057][T17756] netlink: 172 bytes leftover after parsing attributes in process `syz.3.4885'. [ 383.833668][ T1028] hid-generic 0009:0001:0006.0026: unexpected long global item [ 383.833857][ T1028] hid-generic 0009:0001:0006.0026: probe with driver hid-generic failed with error -22 [ 384.009705][T17779] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4896'. [ 384.117926][ T1028] hid-generic 0009:0001:0006.0027: unexpected long global item [ 384.118066][ T1028] hid-generic 0009:0001:0006.0027: probe with driver hid-generic failed with error -22 [ 384.209439][T17795] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 384.209617][T17795] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 384.261657][T17802] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4908'. [ 384.332373][T17809] lo speed is unknown, defaulting to 1000 [ 384.440013][T17821] netlink: 172 bytes leftover after parsing attributes in process `syz.2.4916'. [ 384.573347][ T5111] hid-generic 0009:0001:0006.0028: unexpected long global item [ 384.581060][ T5111] hid-generic 0009:0001:0006.0028: probe with driver hid-generic failed with error -22 [ 385.088198][T17862] netlink: 172 bytes leftover after parsing attributes in process `syz.0.4933'. [ 385.587510][T17885] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 385.587595][T17885] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 385.905054][T17896] lo speed is unknown, defaulting to 1000 [ 386.298417][T17908] netlink: 172 bytes leftover after parsing attributes in process `syz.2.4950'. [ 386.360261][T17914] netlink: 172 bytes leftover after parsing attributes in process `syz.4.4954'. [ 386.938760][T17937] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4964'. [ 387.055218][T17941] netlink: 172 bytes leftover after parsing attributes in process `syz.0.4966'. [ 387.238516][T17955] lo speed is unknown, defaulting to 1000 [ 387.255444][T17960] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4976'. [ 387.307091][T17965] netlink: 172 bytes leftover after parsing attributes in process `syz.3.4978'. [ 387.499036][T17990] tipc: Enabled bearer , priority 0 [ 387.537078][T17994] tipc: Enabled bearer , priority 0 [ 387.607868][T18000] lo speed is unknown, defaulting to 1000 [ 387.716085][T18005] lo speed is unknown, defaulting to 1000 [ 388.120358][ T29] kauditd_printk_skb: 798 callbacks suppressed [ 388.120391][ T29] audit: type=1326 audit(2000000303.224:55984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18021 comm="syz.2.4999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f517283f749 code=0x7ffc0000 [ 388.150562][ T29] audit: type=1326 audit(2000000303.224:55985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18021 comm="syz.2.4999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f517283f749 code=0x7ffc0000 [ 388.150607][ T29] audit: type=1326 audit(2000000303.233:55986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18021 comm="syz.2.4999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f517283f749 code=0x7ffc0000 [ 388.150647][ T29] audit: type=1326 audit(2000000303.233:55987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18021 comm="syz.2.4999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f517283f749 code=0x7ffc0000 [ 388.150685][ T29] audit: type=1326 audit(2000000303.233:55988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18021 comm="syz.2.4999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f517283f749 code=0x7ffc0000 [ 388.150750][ T29] audit: type=1326 audit(2000000303.233:55989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18021 comm="syz.2.4999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f517283f749 code=0x7ffc0000 [ 388.150779][ T29] audit: type=1326 audit(2000000303.233:55990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18021 comm="syz.2.4999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f517283f749 code=0x7ffc0000 [ 388.150823][ T29] audit: type=1326 audit(2000000303.233:55991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18021 comm="syz.2.4999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f517283f749 code=0x7ffc0000 [ 388.150852][ T29] audit: type=1326 audit(2000000303.233:55992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18021 comm="syz.2.4999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f517283f749 code=0x7ffc0000 [ 388.150905][ T29] audit: type=1326 audit(2000000303.233:55993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18021 comm="syz.2.4999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f517283f749 code=0x7ffc0000 [ 388.328316][T17974] tipc: Resetting bearer [ 388.372685][T17974] tipc: Disabling bearer [ 388.398047][T17982] tipc: Resetting bearer [ 388.418969][T17982] tipc: Disabling bearer [ 388.425518][ T5111] hid-generic 0009:0001:0006.0029: item fetching failed at offset 35/107 [ 388.425685][ T5111] hid-generic 0009:0001:0006.0029: probe with driver hid-generic failed with error -22 [ 388.473594][T18035] lo speed is unknown, defaulting to 1000 [ 388.667947][T18041] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 388.668022][T18041] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 388.720292][T18045] lo speed is unknown, defaulting to 1000 [ 388.771153][T18035] block device autoloading is deprecated and will be removed. [ 388.985578][T18062] netlink: 172 bytes leftover after parsing attributes in process `syz.2.5012'. [ 389.043866][ T5111] hid-generic 0009:0001:0006.002A: item fetching failed at offset 35/54 [ 389.043963][ T5111] hid-generic 0009:0001:0006.002A: probe with driver hid-generic failed with error -22 [ 389.084855][T18070] loop2: detected capacity change from 0 to 1024 [ 389.091822][T18070] /dev/loop2: Can't open blockdev [ 389.141206][T18072] lo speed is unknown, defaulting to 1000 [ 389.354011][T18088] tipc: Enabled bearer , priority 0 [ 389.408222][T18094] netlink: 172 bytes leftover after parsing attributes in process `syz.1.5027'. [ 389.577657][ T5111] hid-generic 0009:0001:0006.002B: item fetching failed at offset 35/54 [ 389.577831][ T5111] hid-generic 0009:0001:0006.002B: probe with driver hid-generic failed with error -22 [ 389.599176][ T115] tipc: Resetting bearer [ 389.863155][T18120] netlink: 172 bytes leftover after parsing attributes in process `syz.4.5039'. [ 390.047975][ T10] hid-generic 0009:0001:0006.002C: unexpected long global item [ 390.058165][ T10] hid-generic 0009:0001:0006.002C: probe with driver hid-generic failed with error -22 [ 390.111558][T18076] tipc: Resetting bearer [ 390.124106][T18076] tipc: Disabling bearer [ 390.223763][T18148] loop2: detected capacity change from 0 to 1024 [ 390.224285][T18148] EXT4-fs (loop2): bad geometry: first data block 0 is beyond end of filesystem (0) [ 390.328390][T18158] lo speed is unknown, defaulting to 1000 [ 390.761691][T18168] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 390.761753][T18168] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 390.861545][T18171] tipc: Enabled bearer , priority 0 [ 391.058999][T18179] lo speed is unknown, defaulting to 1000 [ 391.086073][ T10] hid-generic 0009:0001:0006.002D: hidraw0: HID v0.02 Device [syz1] on syz0 [ 391.364328][T18202] lo speed is unknown, defaulting to 1000 [ 391.533534][T18218] lo speed is unknown, defaulting to 1000 [ 391.674471][T18169] tipc: Resetting bearer [ 391.689804][T18169] tipc: Disabling bearer [ 391.778990][T18229] lo speed is unknown, defaulting to 1000 [ 392.163322][T18239] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5083'. [ 393.085209][T18270] loop2: detected capacity change from 0 to 512 [ 393.093949][T18270] EXT4-fs error (device loop2): ext4_xattr_inode_iget:441: inode #11: comm syz.2.5096: ea_inode with extended attributes [ 393.106950][T18270] EXT4-fs error (device loop2): ext4_xattr_inode_iget:446: comm syz.2.5096: error while reading EA inode 11 err=-117 [ 393.120421][T18270] EXT4-fs (loop2): 1 orphan inode deleted [ 393.127381][T18270] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 393.176901][T11561] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 393.195705][ T10] hid-generic 0009:0001:0006.002E: unexpected long global item [ 393.203569][ T10] hid-generic 0009:0001:0006.002E: probe with driver hid-generic failed with error -22 [ 393.468241][ T29] kauditd_printk_skb: 1423 callbacks suppressed [ 393.468255][ T29] audit: type=1326 audit(2000000308.229:57415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18287 comm="syz.1.5101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7feb82732005 code=0x7ffc0000 [ 393.474789][ T29] audit: type=1326 audit(2000000308.229:57416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18287 comm="syz.1.5101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7feb82732005 code=0x7ffc0000 [ 393.500215][ T29] audit: type=1326 audit(2000000308.266:57417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18287 comm="syz.1.5101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7feb82732005 code=0x7ffc0000 [ 393.524922][ T29] audit: type=1326 audit(2000000308.285:57418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18287 comm="syz.1.5101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7feb82732005 code=0x7ffc0000 [ 393.549539][ T29] audit: type=1326 audit(2000000308.313:57419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18287 comm="syz.1.5101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7feb82732005 code=0x7ffc0000 [ 393.573633][ T29] audit: type=1326 audit(2000000308.332:57420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18287 comm="syz.1.5101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7feb82732005 code=0x7ffc0000 [ 393.574527][ T29] audit: type=1326 audit(2000000308.332:57421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18287 comm="syz.1.5101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7feb82732005 code=0x7ffc0000 [ 393.645441][ T29] audit: type=1326 audit(2000000308.360:57422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18287 comm="syz.1.5101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7feb82732005 code=0x7ffc0000 [ 393.645548][ T29] audit: type=1326 audit(2000000308.360:57423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18287 comm="syz.1.5101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7feb82732005 code=0x7ffc0000 [ 393.645649][ T29] audit: type=1326 audit(2000000308.360:57424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18287 comm="syz.1.5101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7feb82732005 code=0x7ffc0000 [ 394.278487][ T1028] hid-generic 0009:0001:0006.002F: unexpected long global item [ 394.286695][ T1028] hid-generic 0009:0001:0006.002F: probe with driver hid-generic failed with error -22 [ 394.336136][T18319] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5112'. [ 394.395646][T18321] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35600 sclass=netlink_route_socket pid=18321 comm=syz.1.5113 [ 394.532395][T18334] netlink: 172 bytes leftover after parsing attributes in process `syz.1.5118'. [ 394.959507][ T1028] hid-generic 0009:0001:0006.0030: unexpected long global item [ 394.969467][ T1028] hid-generic 0009:0001:0006.0030: probe with driver hid-generic failed with error -22 [ 395.020173][T18351] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5123'. [ 395.039942][T18353] netlink: 172 bytes leftover after parsing attributes in process `syz.0.5124'. [ 395.450612][T18368] lo speed is unknown, defaulting to 1000 [ 395.489265][T18367] loop2: detected capacity change from 0 to 128 [ 395.526399][T18377] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5134'. [ 395.579423][T18381] netlink: 172 bytes leftover after parsing attributes in process `syz.2.5135'. [ 395.685374][T18387] lo speed is unknown, defaulting to 1000 [ 395.813414][ T3411] hid-generic 0009:0001:0006.0031: unexpected long global item [ 395.821468][ T3411] hid-generic 0009:0001:0006.0031: probe with driver hid-generic failed with error -22 [ 395.873942][T18405] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5145'. [ 395.896510][T18408] loop2: detected capacity change from 0 to 512 [ 395.945495][T18408] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.5144: couldn't read orphan inode 26 (err -116) [ 395.968930][T18408] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 395.981640][T18408] ext4 filesystem being mounted at /482/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 396.063443][T18420] 9pnet_fd: Insufficient options for proto=fd [ 396.182647][T18430] lo speed is unknown, defaulting to 1000 [ 396.252127][ T5111] hid-generic 0009:0001:0006.0032: unexpected long global item [ 396.252329][ T5111] hid-generic 0009:0001:0006.0032: probe with driver hid-generic failed with error -22 [ 396.273043][T18440] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5157'. [ 396.438810][T18449] FAULT_INJECTION: forcing a failure. [ 396.438810][T18449] name failslab, interval 1, probability 0, space 0, times 0 [ 396.438842][T18449] CPU: 0 UID: 0 PID: 18449 Comm: syz.4.5161 Not tainted syzkaller #0 PREEMPT(voluntary) [ 396.438926][T18449] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 396.438942][T18449] Call Trace: [ 396.438961][T18449] [ 396.438970][T18449] __dump_stack+0x1d/0x30 [ 396.438997][T18449] dump_stack_lvl+0xe8/0x140 [ 396.439021][T18449] dump_stack+0x15/0x1b [ 396.439122][T18449] should_fail_ex+0x265/0x280 [ 396.439141][T18449] should_failslab+0x8c/0xb0 [ 396.439176][T18449] __kmalloc_noprof+0xa5/0x570 [ 396.439213][T18449] ? usb_alloc_urb+0x42/0xc0 [ 396.439266][T18449] usb_alloc_urb+0x42/0xc0 [ 396.439313][T18449] usb_control_msg+0xd2/0x250 [ 396.439351][T18449] hub_ext_port_status+0xc0/0x480 [ 396.439421][T18449] hub_activate+0x5be/0x10c0 [ 396.439454][T18449] hub_resume+0x47/0x1e0 [ 396.439477][T18449] ? mutex_lock+0xd/0x30 [ 396.439517][T18449] usb_resume_both+0x329/0x640 [ 396.439605][T18449] ? __pfx_usb_runtime_resume+0x10/0x10 [ 396.439693][T18449] usb_runtime_resume+0x21/0x30 [ 396.439720][T18449] __rpm_callback+0x2ab/0x6e0 [ 396.439745][T18449] ? __update_runtime_status+0xe8/0x1c0 [ 396.439791][T18449] ? __pfx_usb_runtime_resume+0x10/0x10 [ 396.439825][T18449] rpm_resume+0x904/0xd20 [ 396.439854][T18449] ? klist_dec_and_del+0xba/0x270 [ 396.439892][T18449] __pm_runtime_resume+0xd6/0x100 [ 396.439944][T18449] usb_autoresume_device+0x23/0xc0 [ 396.440017][T18449] usbdev_open+0x121/0x450 [ 396.440054][T18449] chrdev_open+0x2eb/0x3a0 [ 396.440143][T18449] do_dentry_open+0x649/0xa20 [ 396.440168][T18449] ? __pfx_chrdev_open+0x10/0x10 [ 396.440273][T18449] vfs_open+0x37/0x1e0 [ 396.440298][T18449] path_openat+0x1c5e/0x2170 [ 396.440387][T18449] do_filp_open+0x109/0x230 [ 396.440432][T18449] do_sys_openat2+0xa6/0x110 [ 396.440462][T18449] __x64_sys_openat+0xf2/0x120 [ 396.440566][T18449] x64_sys_call+0x2eab/0x3000 [ 396.440597][T18449] do_syscall_64+0xd2/0x200 [ 396.440627][T18449] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 396.440690][T18449] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 396.440736][T18449] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 396.440772][T18449] RIP: 0033:0x7f9a44ffdf90 [ 396.440794][T18449] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 69 95 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 bc 95 02 00 8b 44 [ 396.440817][T18449] RSP: 002b:00007f9a43a45b70 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 396.440842][T18449] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f9a44ffdf90 [ 396.440859][T18449] RDX: 0000000000000002 RSI: 00007f9a43a45c10 RDI: 00000000ffffff9c [ 396.440876][T18449] RBP: 00007f9a43a45c10 R08: 0000000000000000 R09: 0000000000000000 [ 396.440962][T18449] R10: 0000000000000000 R11: 0000000000000293 R12: cccccccccccccccd [ 396.440979][T18449] R13: 00007f9a45256128 R14: 00007f9a45256090 R15: 00007ffe87aeece8 [ 396.441006][T18449] [ 396.441039][T18449] hub 6-0:1.0: hub_ext_port_status failed (err = -12) [ 396.824427][T11561] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 397.033084][ T3398] hid-generic 0009:0001:0006.0033: unexpected long global item [ 397.033221][ T3398] hid-generic 0009:0001:0006.0033: probe with driver hid-generic failed with error -22 [ 397.181340][T18473] lo speed is unknown, defaulting to 1000 [ 397.253710][T18485] block device autoloading is deprecated and will be removed. [ 397.290620][T18489] lo speed is unknown, defaulting to 1000 [ 397.791985][T18492] block device autoloading is deprecated and will be removed. [ 397.816744][ T3398] hid-generic 0009:0001:0006.0034: unexpected long global item [ 397.824554][ T3398] hid-generic 0009:0001:0006.0034: probe with driver hid-generic failed with error -22 [ 398.174358][T18507] loop4: detected capacity change from 0 to 512 [ 398.223444][T18507] EXT4-fs error (device loop4): ext4_xattr_inode_iget:441: inode #11: comm syz.4.5184: ea_inode with extended attributes [ 398.223598][T18507] EXT4-fs error (device loop4): ext4_xattr_inode_iget:446: comm syz.4.5184: error while reading EA inode 11 err=-117 [ 398.223914][T18507] EXT4-fs (loop4): 1 orphan inode deleted [ 398.224306][T18507] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 398.445185][T13091] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 398.495403][T18520] lo speed is unknown, defaulting to 1000 [ 398.566528][T18526] loop4: detected capacity change from 0 to 1024 [ 398.566839][T18526] EXT4-fs: Ignoring removed mblk_io_submit option [ 398.567505][T18526] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 398.569139][T18526] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 398.860280][T18542] block device autoloading is deprecated and will be removed. [ 398.881308][T13091] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 399.004336][T18556] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5202'. [ 399.196799][T18570] netlink: 172 bytes leftover after parsing attributes in process `syz.0.5207'. [ 399.284593][T18572] loop0: detected capacity change from 0 to 128 [ 399.439270][T18585] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5214'. [ 399.494362][T18591] lo speed is unknown, defaulting to 1000 [ 399.588470][T18598] loop2: detected capacity change from 0 to 128 [ 399.589635][ T29] kauditd_printk_skb: 1591 callbacks suppressed [ 399.589652][ T29] audit: type=1326 audit(2000000313.954:59016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18588 comm="syz.0.5216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7490dbf749 code=0x7ffc0000 [ 399.626957][ T29] audit: type=1326 audit(2000000313.963:59017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18588 comm="syz.0.5216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7490dbf749 code=0x7ffc0000 [ 399.626993][ T29] audit: type=1326 audit(2000000313.963:59018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18588 comm="syz.0.5216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7490dbf749 code=0x7ffc0000 [ 399.627159][ T29] audit: type=1326 audit(2000000313.963:59019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18588 comm="syz.0.5216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7490dbf749 code=0x7ffc0000 [ 399.627185][ T29] audit: type=1326 audit(2000000313.963:59020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18588 comm="syz.0.5216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7490dbf749 code=0x7ffc0000 [ 399.627225][ T29] audit: type=1326 audit(2000000313.963:59021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18588 comm="syz.0.5216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7490dbf749 code=0x7ffc0000 [ 399.627379][ T29] audit: type=1326 audit(2000000313.963:59022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18588 comm="syz.0.5216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7490dbf749 code=0x7ffc0000 [ 399.627411][ T29] audit: type=1326 audit(2000000313.963:59023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18588 comm="syz.0.5216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7490dbf749 code=0x7ffc0000 [ 399.627497][ T29] audit: type=1326 audit(2000000313.963:59024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18588 comm="syz.0.5216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7490dbf749 code=0x7ffc0000 [ 399.627522][ T29] audit: type=1326 audit(2000000313.973:59025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18588 comm="syz.0.5216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7490dbf749 code=0x7ffc0000 [ 399.772502][ T3398] hid-generic 0009:0001:0006.0035: unexpected long global item [ 399.870700][ T3398] hid-generic 0009:0001:0006.0035: probe with driver hid-generic failed with error -22 [ 399.918028][T18612] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5226'. [ 399.991549][T18620] netlink: 172 bytes leftover after parsing attributes in process `syz.1.5230'. [ 400.070319][T18624] lo speed is unknown, defaulting to 1000 [ 400.191238][ T5111] hid-generic 0009:0001:0006.0036: unexpected long global item [ 400.191321][ T5111] hid-generic 0009:0001:0006.0036: probe with driver hid-generic failed with error -22 [ 400.265789][T18635] SELinux: failed to load policy [ 400.433270][T18646] netlink: 172 bytes leftover after parsing attributes in process `syz.4.5241'. [ 401.065274][T18669] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5247'. [ 401.145412][T18675] lo speed is unknown, defaulting to 1000 [ 401.335211][T18679] netlink: 172 bytes leftover after parsing attributes in process `syz.3.5252'. [ 401.561018][T18695] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5258'. [ 401.744926][ T3424] hid-generic 0009:0001:0006.0037: unexpected long global item [ 401.745130][ T3424] hid-generic 0009:0001:0006.0037: probe with driver hid-generic failed with error -22 [ 402.450584][T18725] lo speed is unknown, defaulting to 1000 [ 402.519119][ T3424] hid-generic 0009:0001:0006.0038: unexpected long global item [ 402.528029][ T3424] hid-generic 0009:0001:0006.0038: probe with driver hid-generic failed with error -22 [ 402.554625][T18736] netlink: 172 bytes leftover after parsing attributes in process `syz.3.5275'. [ 402.831928][ T3411] hid-generic 0009:0001:0006.0039: unexpected long global item [ 402.839830][ T3411] hid-generic 0009:0001:0006.0039: probe with driver hid-generic failed with error -22 [ 403.538256][ T3411] hid-generic 0009:0001:0006.003A: unexpected long global item [ 403.538379][ T3411] hid-generic 0009:0001:0006.003A: probe with driver hid-generic failed with error -22 [ 403.587520][ T3398] hid-generic 0009:0001:0006.003B: unexpected long global item [ 403.587648][ T3398] hid-generic 0009:0001:0006.003B: probe with driver hid-generic failed with error -22 [ 403.655502][ T3398] hid-generic 0009:0001:0006.003C: unexpected long global item [ 403.655740][ T3398] hid-generic 0009:0001:0006.003C: probe with driver hid-generic failed with error -22 [ 403.737385][T18803] loop2: detected capacity change from 0 to 512 [ 403.745823][T18803] EXT4-fs (loop2): orphan cleanup on readonly fs [ 403.746160][T18803] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.5300: couldn't read orphan inode 26 (err -116) [ 403.746405][T18803] EXT4-fs (loop2): Remounting filesystem read-only [ 403.746903][T18803] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 403.826475][T11561] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 403.987224][T18810] ªªªªªª: renamed from wg2 (while UP) [ 404.012491][ T3398] hid-generic 0009:0001:0006.003D: unexpected long global item [ 404.012588][ T3398] hid-generic 0009:0001:0006.003D: probe with driver hid-generic failed with error -22 [ 404.100078][ T3424] hid-generic 0009:0001:0006.003E: unexpected long global item [ 404.100262][ T3424] hid-generic 0009:0001:0006.003E: probe with driver hid-generic failed with error -22 [ 404.179462][T18831] loop0: detected capacity change from 0 to 1024 [ 404.180129][T18831] EXT4-fs: Ignoring removed mblk_io_submit option [ 404.194134][T18831] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 404.204081][T18831] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 404.363721][T12922] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 404.612578][ T3398] hid-generic 0009:0001:0006.003F: unexpected long global item [ 404.620400][ T3398] hid-generic 0009:0001:0006.003F: probe with driver hid-generic failed with error -22 [ 404.762344][T18854] SELinux: Context ¸DGýþsîÃA) is not valid (left unmapped). [ 405.078094][ T29] kauditd_printk_skb: 1241 callbacks suppressed [ 405.078175][ T29] audit: type=1326 audit(2000000319.090:60265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18866 comm="syz.3.5324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5677ff749 code=0x7ffc0000 [ 405.078207][ T29] audit: type=1326 audit(2000000319.090:60266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18866 comm="syz.3.5324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5677ff749 code=0x7ffc0000 [ 405.078447][ T29] audit: type=1326 audit(2000000319.090:60267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18866 comm="syz.3.5324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5677ff749 code=0x7ffc0000 [ 405.078661][ T29] audit: type=1326 audit(2000000319.090:60268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18866 comm="syz.3.5324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5677ff749 code=0x7ffc0000 [ 405.179318][ T29] audit: type=1326 audit(2000000319.090:60269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18866 comm="syz.3.5324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc5677ff749 code=0x7ffc0000 [ 405.204085][ T29] audit: type=1326 audit(2000000319.099:60270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18866 comm="syz.3.5324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5677ff749 code=0x7ffc0000 [ 405.204128][ T29] audit: type=1326 audit(2000000319.099:60271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18866 comm="syz.3.5324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5677ff749 code=0x7ffc0000 [ 405.251287][ T29] audit: type=1326 audit(2000000319.099:60272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18866 comm="syz.3.5324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5677ff749 code=0x7ffc0000 [ 405.251395][ T29] audit: type=1326 audit(2000000319.099:60273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18866 comm="syz.3.5324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc5677ff749 code=0x7ffc0000 [ 405.251419][ T29] audit: type=1326 audit(2000000319.099:60274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18866 comm="syz.3.5324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5677ff749 code=0x7ffc0000 [ 405.446697][ T3398] hid-generic 0009:0001:0006.0040: unexpected long global item [ 405.446888][ T3398] hid-generic 0009:0001:0006.0040: probe with driver hid-generic failed with error -22 [ 405.910003][T18894] loop2: detected capacity change from 0 to 512 [ 405.930384][T18894] EXT4-fs error (device loop2): ext4_xattr_inode_iget:441: inode #11: comm syz.2.5334: ea_inode with extended attributes [ 405.930588][T18894] EXT4-fs error (device loop2): ext4_xattr_inode_iget:446: comm syz.2.5334: error while reading EA inode 11 err=-117 [ 405.930730][T18894] EXT4-fs (loop2): 1 orphan inode deleted [ 405.931123][T18894] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 405.975189][T18897] lo speed is unknown, defaulting to 1000 [ 406.030589][T11561] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 406.045557][ T5111] hid-generic 0009:0001:0006.0041: unexpected long global item [ 406.054567][ T5111] hid-generic 0009:0001:0006.0041: probe with driver hid-generic failed with error -22 [ 406.059247][T18897] block device autoloading is deprecated and will be removed. [ 406.130585][ T3398] hid-generic 0009:0001:0006.0042: unexpected long global item [ 406.130698][ T3398] hid-generic 0009:0001:0006.0042: probe with driver hid-generic failed with error -22 [ 406.880834][T18932] lo speed is unknown, defaulting to 1000 [ 407.207205][ T3398] hid-generic 0009:0001:0006.0043: unexpected long global item [ 407.215070][ T3398] hid-generic 0009:0001:0006.0043: probe with driver hid-generic failed with error -22 [ 407.273338][ T3398] hid-generic 0009:0001:0006.0044: unexpected long global item [ 407.282440][ T3398] hid-generic 0009:0001:0006.0044: probe with driver hid-generic failed with error -22 [ 407.293268][T18955] Driver unsupported XDP return value 0 on prog (id 3570) dev N/A, expect packet loss! [ 407.395986][T18967] tipc: Enabled bearer , priority 0 [ 407.499964][T18970] lo speed is unknown, defaulting to 1000 [ 408.189065][T18982] loop2: detected capacity change from 0 to 128 [ 408.223226][T18959] tipc: Disabling bearer [ 408.288521][ T3424] hid-generic 0009:0001:0006.0045: unexpected long global item [ 408.288698][ T3424] hid-generic 0009:0001:0006.0045: probe with driver hid-generic failed with error -22 [ 408.299274][ T3424] hid-generic 0009:0001:0006.0046: unexpected long global item [ 408.299421][ T3424] hid-generic 0009:0001:0006.0046: probe with driver hid-generic failed with error -22 [ 408.353468][T18998] loop0: detected capacity change from 0 to 512 [ 408.365585][T18998] EXT4-fs error (device loop0): ext4_xattr_inode_iget:441: inode #11: comm syz.0.5371: ea_inode with extended attributes [ 408.366510][T18998] EXT4-fs error (device loop0): ext4_xattr_inode_iget:446: comm syz.0.5371: error while reading EA inode 11 err=-117 [ 408.366837][T18998] EXT4-fs (loop0): 1 orphan inode deleted [ 408.368973][T18998] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 408.390561][T19001] lo speed is unknown, defaulting to 1000 [ 408.494033][T12922] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 408.689343][T19026] tipc: Enabled bearer , priority 0 [ 409.519987][T19017] tipc: Disabling bearer [ 409.754016][T19060] lo speed is unknown, defaulting to 1000 [ 410.416636][T19099] loop2: detected capacity change from 0 to 256 [ 410.435475][T19099] FAT-fs (loop2): Directory bread(block 64) failed [ 410.442277][T19099] FAT-fs (loop2): Directory bread(block 65) failed [ 410.448815][T19099] FAT-fs (loop2): Directory bread(block 66) failed [ 410.455989][T19099] FAT-fs (loop2): Directory bread(block 67) failed [ 410.462550][T19099] FAT-fs (loop2): Directory bread(block 68) failed [ 410.469092][T19099] FAT-fs (loop2): Directory bread(block 69) failed [ 410.476335][T19099] FAT-fs (loop2): Directory bread(block 70) failed [ 410.482860][T19099] FAT-fs (loop2): Directory bread(block 71) failed [ 410.489445][T19099] FAT-fs (loop2): Directory bread(block 72) failed [ 410.496658][T19099] FAT-fs (loop2): Directory bread(block 73) failed [ 410.671820][T19101] FAULT_INJECTION: forcing a failure. [ 410.671820][T19101] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 410.685671][T19101] CPU: 0 UID: 0 PID: 19101 Comm: syz.2.5405 Not tainted syzkaller #0 PREEMPT(voluntary) [ 410.685718][T19101] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 410.685729][T19101] Call Trace: [ 410.685735][T19101] [ 410.685742][T19101] __dump_stack+0x1d/0x30 [ 410.685762][T19101] dump_stack_lvl+0xe8/0x140 [ 410.685780][T19101] dump_stack+0x15/0x1b [ 410.685794][T19101] should_fail_ex+0x265/0x280 [ 410.685924][T19101] should_fail+0xb/0x20 [ 410.685938][T19101] should_fail_usercopy+0x1a/0x20 [ 410.685956][T19101] _copy_to_user+0x20/0xa0 [ 410.686054][T19101] simple_read_from_buffer+0xb5/0x130 [ 410.686078][T19101] proc_fail_nth_read+0x10e/0x150 [ 410.686108][T19101] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 410.686216][T19101] vfs_read+0x1a8/0x770 [ 410.686243][T19101] ? __rcu_read_unlock+0x4f/0x70 [ 410.686277][T19101] ? __fget_files+0x184/0x1c0 [ 410.686309][T19101] ksys_read+0xda/0x1a0 [ 410.686403][T19101] __x64_sys_read+0x40/0x50 [ 410.686425][T19101] x64_sys_call+0x27c0/0x3000 [ 410.686445][T19101] do_syscall_64+0xd2/0x200 [ 410.686463][T19101] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 410.686566][T19101] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 410.686598][T19101] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 410.686625][T19101] RIP: 0033:0x7f517283e15c [ 410.686645][T19101] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 410.686701][T19101] RSP: 002b:00007f517125d030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 410.686722][T19101] RAX: ffffffffffffffda RBX: 00007f5172a96180 RCX: 00007f517283e15c [ 410.686735][T19101] RDX: 000000000000000f RSI: 00007f517125d0a0 RDI: 0000000000000007 [ 410.686746][T19101] RBP: 00007f517125d090 R08: 0000000000000000 R09: 0000000000000000 [ 410.686757][T19101] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 410.686771][T19101] R13: 00007f5172a96218 R14: 00007f5172a96180 R15: 00007ffcdd0b6db8 [ 410.686802][T19101] [ 410.949342][T19103] lo speed is unknown, defaulting to 1000 [ 410.964259][ T29] kauditd_printk_skb: 1251 callbacks suppressed [ 410.964284][ T29] audit: type=1400 audit(2000000324.591:61526): avc: denied { unmount } for pid=11561 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 411.167223][T19134] loop0: detected capacity change from 0 to 512 [ 411.176087][T19134] EXT4-fs error (device loop0): ext4_xattr_inode_iget:441: inode #11: comm syz.0.5419: ea_inode with extended attributes [ 411.190746][T19134] EXT4-fs error (device loop0): ext4_xattr_inode_iget:446: comm syz.0.5419: error while reading EA inode 11 err=-117 [ 411.203519][T19134] EXT4-fs (loop0): 1 orphan inode deleted [ 411.209809][T19134] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 411.429145][T12922] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 411.532239][ T29] audit: type=1326 audit(2000000325.133:61527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19147 comm="syz.0.5421" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7490dbf749 code=0x0 [ 411.943706][ T29] audit: type=1326 audit(2000000325.517:61528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19153 comm="syz.2.5422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f517283f749 code=0x7ffc0000 [ 411.967722][ T29] audit: type=1326 audit(2000000325.517:61529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19153 comm="syz.2.5422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f517283f749 code=0x7ffc0000 [ 411.991447][ T29] audit: type=1326 audit(2000000325.526:61530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19153 comm="syz.2.5422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7f517283f749 code=0x7ffc0000 [ 412.015140][ T29] audit: type=1326 audit(2000000325.526:61531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19153 comm="syz.2.5422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f517283f749 code=0x7ffc0000 [ 412.039178][ T29] audit: type=1326 audit(2000000325.526:61532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19153 comm="syz.2.5422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f517283f749 code=0x7ffc0000 [ 412.063279][ T29] audit: type=1326 audit(2000000325.526:61533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19153 comm="syz.2.5422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f517283f749 code=0x7ffc0000 [ 412.086874][ T29] audit: type=1326 audit(2000000325.526:61534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19153 comm="syz.2.5422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f517283f749 code=0x7ffc0000 [ 412.110562][ T29] audit: type=1326 audit(2000000325.536:61535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19153 comm="syz.2.5422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f517283f749 code=0x7ffc0000 [ 412.152513][T19158] lo speed is unknown, defaulting to 1000 [ 412.332418][T19176] lo speed is unknown, defaulting to 1000 [ 412.462954][ T3424] hid-generic 0009:0001:0006.0047: unexpected long global item [ 412.470900][ T3424] hid-generic 0009:0001:0006.0047: probe with driver hid-generic failed with error -22 [ 412.501655][T19199] loop0: detected capacity change from 0 to 512 [ 412.511378][T19199] EXT4-fs error (device loop0): ext4_xattr_inode_iget:441: inode #11: comm syz.0.5439: ea_inode with extended attributes [ 412.524759][T19199] EXT4-fs error (device loop0): ext4_xattr_inode_iget:446: comm syz.0.5439: error while reading EA inode 11 err=-117 [ 412.537687][T19199] EXT4-fs (loop0): 1 orphan inode deleted [ 412.544053][T19199] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 412.757363][T12922] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 412.794349][T19210] __nla_validate_parse: 3 callbacks suppressed [ 412.794361][T19210] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5441'. [ 412.846758][T19212] loop0: detected capacity change from 0 to 128 [ 413.006068][T19220] lo speed is unknown, defaulting to 1000 [ 413.030626][T19222] lo speed is unknown, defaulting to 1000 [ 413.217894][ T3398] hid-generic 0009:0001:0006.0048: unexpected long global item [ 413.231679][ T3398] hid-generic 0009:0001:0006.0048: probe with driver hid-generic failed with error -22 [ 413.290740][T19235] lo speed is unknown, defaulting to 1000 [ 413.304854][T19241] loop2: detected capacity change from 0 to 512 [ 413.324690][T19241] EXT4-fs error (device loop2): ext4_xattr_inode_iget:441: inode #11: comm syz.2.5453: ea_inode with extended attributes [ 413.343819][T19241] EXT4-fs error (device loop2): ext4_xattr_inode_iget:446: comm syz.2.5453: error while reading EA inode 11 err=-117 [ 413.364809][T19241] EXT4-fs (loop2): 1 orphan inode deleted [ 413.372160][T19241] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 413.592592][T11561] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 414.199998][ T3398] hid-generic 0009:0001:0006.0049: unexpected long global item [ 414.208652][ T3398] hid-generic 0009:0001:0006.0049: probe with driver hid-generic failed with error -22 [ 414.801051][T19303] lo speed is unknown, defaulting to 1000 [ 415.061883][T19307] xt_connbytes: Forcing CT accounting to be enabled [ 415.069030][T19307] Cannot find set identified by id 0 to match [ 415.104937][ T3398] hid-generic 0009:0001:0006.004A: unexpected long global item [ 415.112945][ T3398] hid-generic 0009:0001:0006.004A: probe with driver hid-generic failed with error -22 [ 415.245412][T19323] loop4: detected capacity change from 0 to 128 [ 415.303564][T19329] tipc: Enabled bearer , priority 0 [ 415.319098][T19328] tipc: Resetting bearer [ 415.341108][T19328] tipc: Disabling bearer [ 415.393977][T19334] loop4: detected capacity change from 0 to 128 [ 416.096557][ T3398] hid-generic 0009:0001:0006.004B: unexpected long global item [ 416.104805][ T3398] hid-generic 0009:0001:0006.004B: probe with driver hid-generic failed with error -22 [ 416.489083][T19369] netlink: 'syz.0.5491': attribute type 1 has an invalid length. [ 416.508151][T19369] bond1: entered promiscuous mode [ 416.516040][T19369] 8021q: adding VLAN 0 to HW filter on device bond1 [ 416.566011][ T29] kauditd_printk_skb: 201 callbacks suppressed [ 416.572506][ T29] audit: type=1400 audit(2000000329.830:61737): avc: denied { read } for pid=19372 comm="syz.2.5492" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 416.611133][T19369] 8021q: adding VLAN 0 to HW filter on device bond1 [ 416.633861][ T29] audit: type=1400 audit(2000000329.867:61738): avc: denied { write } for pid=19372 comm="syz.2.5492" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 416.663771][T19369] bond1: (slave vxcan11): The slave device specified does not support setting the MAC address [ 416.674151][T19369] bond1: (slave vxcan11): Setting fail_over_mac to active for active-backup mode [ 416.697670][T19369] bond1: (slave vxcan11): making interface the new active one [ 416.705554][T19369] vxcan11: entered promiscuous mode [ 416.720431][T19369] bond1: (slave vxcan11): Enslaving as an active interface with an up link [ 416.751283][T19373] lo speed is unknown, defaulting to 1000 [ 416.829429][T19384] loop0: detected capacity change from 0 to 128 [ 416.921178][ T29] audit: type=1326 audit(2000000330.176:61739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19389 comm="syz.4.5497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a44fff749 code=0x7ffc0000 [ 416.922687][ T29] audit: type=1326 audit(2000000330.176:61740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19389 comm="syz.4.5497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a44fff749 code=0x7ffc0000 [ 416.993204][ T29] audit: type=1326 audit(2000000330.195:61741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19388 comm="syz.0.5496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7490dbf749 code=0x7ffc0000 [ 417.016961][ T29] audit: type=1326 audit(2000000330.195:61742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19388 comm="syz.0.5496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7490dbf749 code=0x7ffc0000 [ 417.040755][ T29] audit: type=1326 audit(2000000330.195:61743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19388 comm="syz.0.5496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7f7490dbf749 code=0x7ffc0000 [ 417.040829][ T29] audit: type=1326 audit(2000000330.195:61744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19388 comm="syz.0.5496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7490dbf749 code=0x7ffc0000 [ 417.040918][ T29] audit: type=1326 audit(2000000330.195:61745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19388 comm="syz.0.5496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7490dbf749 code=0x7ffc0000 [ 417.040960][ T29] audit: type=1326 audit(2000000330.195:61746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19388 comm="syz.0.5496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7490dbf749 code=0x7ffc0000 [ 417.278685][T19411] lo speed is unknown, defaulting to 1000 [ 417.467615][T19425] loop2: detected capacity change from 0 to 128 [ 417.540254][T19432] tipc: Enabled bearer , priority 0 [ 417.646894][T19436] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5511'. [ 417.646974][T19436] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5511'. [ 417.647065][T19436] netlink: 'syz.2.5511': attribute type 6 has an invalid length. [ 417.666699][ T52] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 417.679869][T19436] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5511'. [ 417.686291][ T52] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 417.691839][T19436] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5511'. [ 417.700999][ T52] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 417.701134][ T52] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 417.728218][T19436] netlink: 'syz.2.5511': attribute type 6 has an invalid length. [ 418.279171][T19478] tipc: Enabled bearer , priority 0 [ 418.366852][T19428] tipc: Disabling bearer [ 418.801599][T15072] tipc: Resetting bearer [ 418.827070][T19496] netlink: 'syz.3.5534': attribute type 1 has an invalid length. [ 418.835635][T19496] bond1: entered promiscuous mode [ 418.841174][T19496] 8021q: adding VLAN 0 to HW filter on device bond1 [ 418.859816][T19496] 8021q: adding VLAN 0 to HW filter on device bond1 [ 418.860427][T19496] bond1: (slave vxcan17): The slave device specified does not support setting the MAC address [ 418.877665][T19496] bond1: (slave vxcan17): Setting fail_over_mac to active for active-backup mode [ 418.881023][T19496] bond1: (slave vxcan17): making interface the new active one [ 418.895322][T19496] vxcan17: entered promiscuous mode [ 418.903259][T19496] bond1: (slave vxcan17): Enslaving as an active interface with an up link [ 419.075779][T19474] tipc: Resetting bearer [ 419.110415][T19474] tipc: Disabling bearer [ 419.917471][T19547] lo speed is unknown, defaulting to 1000 [ 420.969447][T19593] loop0: detected capacity change from 0 to 128 [ 421.029135][T19597] lo speed is unknown, defaulting to 1000 [ 421.447298][T19629] lo speed is unknown, defaulting to 1000 [ 421.509572][T19635] lo speed is unknown, defaulting to 1000 [ 421.605834][T19643] lo speed is unknown, defaulting to 1000 [ 421.801227][T19661] lo speed is unknown, defaulting to 1000 [ 422.060414][ T29] kauditd_printk_skb: 419 callbacks suppressed [ 422.060512][ T29] audit: type=1326 audit(2000000334.975:62166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19667 comm="syz.0.5595" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7490dbf749 code=0x0 [ 422.384630][ T29] audit: type=1326 audit(2000000335.284:62167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19680 comm="syz.4.5600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a44fff749 code=0x7ffc0000 [ 422.384845][ T29] audit: type=1326 audit(2000000335.284:62168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19680 comm="syz.4.5600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a44fff749 code=0x7ffc0000 [ 422.384947][ T29] audit: type=1326 audit(2000000335.284:62169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19680 comm="syz.4.5600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a44fff749 code=0x7ffc0000 [ 422.385052][ T29] audit: type=1326 audit(2000000335.284:62170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19680 comm="syz.4.5600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f9a44fff749 code=0x7ffc0000 [ 422.385353][ T29] audit: type=1326 audit(2000000335.284:62171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19680 comm="syz.4.5600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a44fff749 code=0x7ffc0000 [ 422.385400][ T29] audit: type=1326 audit(2000000335.284:62172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19680 comm="syz.4.5600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a44fff749 code=0x7ffc0000 [ 422.385460][ T29] audit: type=1326 audit(2000000335.284:62173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19680 comm="syz.4.5600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a44fff749 code=0x7ffc0000 [ 422.385591][ T29] audit: type=1326 audit(2000000335.284:62174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19680 comm="syz.4.5600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=311 compat=0 ip=0x7f9a44fff749 code=0x7ffc0000 [ 422.425199][ T29] audit: type=1326 audit(2000000335.312:62175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19680 comm="syz.4.5600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a44fff749 code=0x7ffc0000 [ 422.739460][T19691] lo speed is unknown, defaulting to 1000 [ 422.824657][T19697] lo speed is unknown, defaulting to 1000 [ 422.842666][T19696] lo speed is unknown, defaulting to 1000 [ 423.009023][ T5111] hid-generic 0009:0001:0006.004C: item fetching failed at offset 35/54 [ 423.018653][ T5111] hid-generic 0009:0001:0006.004C: probe with driver hid-generic failed with error -22 [ 423.059327][ T5111] hid-generic 0009:0001:0006.004D: hidraw0: HID v0.02 Device [syz1] on syz0 [ 423.919453][T19757] loop2: detected capacity change from 0 to 512 [ 423.928695][T19757] EXT4-fs error (device loop2): ext4_xattr_inode_iget:441: inode #11: comm syz.2.5629: ea_inode with extended attributes [ 423.928902][T19757] EXT4-fs error (device loop2): ext4_xattr_inode_iget:446: comm syz.2.5629: error while reading EA inode 11 err=-117 [ 423.929067][T19757] EXT4-fs (loop2): 1 orphan inode deleted [ 423.929568][T19757] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 424.012168][T19762] lo speed is unknown, defaulting to 1000 [ 424.092333][T19769] lo speed is unknown, defaulting to 1000 [ 424.179222][T19781] tipc: Enabled bearer , priority 0 [ 424.198288][T11561] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 424.231972][T19783] lo speed is unknown, defaulting to 1000 [ 424.417697][T19798] tipc: Enabled bearer , priority 0 [ 424.672515][ T3398] hid-generic 0009:0001:0006.004E: hidraw0: HID v0.02 Device [syz1] on syz0 [ 424.977010][T19771] tipc: Resetting bearer [ 425.009050][T19771] tipc: Disabling bearer [ 425.193663][T15073] tipc: Resetting bearer [ 425.204652][T19791] tipc: Resetting bearer [ 425.236760][T19791] tipc: Disabling bearer [ 425.360204][T19822] loop4: detected capacity change from 0 to 128 [ 425.366722][T19824] lo speed is unknown, defaulting to 1000 [ 425.982591][T19871] loop0: detected capacity change from 0 to 1024 [ 425.990219][T19871] journal_path: Non-blockdev passed as './file1' [ 425.996656][T19871] EXT4-fs: error: could not find journal device path [ 426.185572][T19874] lo speed is unknown, defaulting to 1000 [ 426.260236][T19874] loop0: detected capacity change from 0 to 128 [ 426.462050][T19886] lo speed is unknown, defaulting to 1000 [ 426.598998][T19908] loop0: detected capacity change from 0 to 1024 [ 426.614545][T19908] journal_path: Non-blockdev passed as './file1' [ 426.620935][T19908] EXT4-fs: error: could not find journal device path [ 427.451206][T19941] loop4: detected capacity change from 0 to 1024 [ 427.458231][T19941] journal_path: Non-blockdev passed as './file1' [ 427.464655][T19941] EXT4-fs: error: could not find journal device path [ 427.625317][T19950] lo speed is unknown, defaulting to 1000 [ 427.661565][ T29] kauditd_printk_skb: 202 callbacks suppressed [ 427.661584][ T29] audit: type=1326 audit(2000000340.214:62378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19955 comm="syz.3.5687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5677ff749 code=0x7ffc0000 [ 427.691751][ T29] audit: type=1326 audit(2000000340.214:62379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19955 comm="syz.3.5687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5677ff749 code=0x7ffc0000 [ 427.739898][ T29] audit: type=1326 audit(2000000340.223:62380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19955 comm="syz.3.5687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc5677ff749 code=0x7ffc0000 [ 427.763774][ T29] audit: type=1326 audit(2000000340.223:62381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19955 comm="syz.3.5687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5677ff749 code=0x7ffc0000 [ 427.787848][ T29] audit: type=1326 audit(2000000340.223:62382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19955 comm="syz.3.5687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5677ff749 code=0x7ffc0000 [ 427.811680][ T29] audit: type=1326 audit(2000000340.251:62383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19955 comm="syz.3.5687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc5677ff749 code=0x7ffc0000 [ 427.811814][ T29] audit: type=1326 audit(2000000340.251:62384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19955 comm="syz.3.5687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5677ff749 code=0x7ffc0000 [ 427.811851][ T29] audit: type=1326 audit(2000000340.251:62385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19955 comm="syz.3.5687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5677ff749 code=0x7ffc0000 [ 427.811891][ T29] audit: type=1326 audit(2000000340.251:62386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19955 comm="syz.3.5687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc5677ff749 code=0x7ffc0000 [ 427.906607][ T29] audit: type=1326 audit(2000000340.251:62387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19955 comm="syz.3.5687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5677ff749 code=0x7ffc0000 [ 429.376104][T20025] loop2: detected capacity change from 0 to 128 [ 430.027876][T20035] loop0: detected capacity change from 0 to 128 [ 430.379291][T20057] lo speed is unknown, defaulting to 1000 [ 431.200942][T20081] loop4: detected capacity change from 0 to 512 [ 431.210371][T20081] EXT4-fs error (device loop4): ext4_xattr_inode_iget:441: inode #11: comm syz.4.5725: ea_inode with extended attributes [ 431.223590][T20081] EXT4-fs error (device loop4): ext4_xattr_inode_iget:446: comm syz.4.5725: error while reading EA inode 11 err=-117 [ 431.239982][T20081] EXT4-fs (loop4): 1 orphan inode deleted [ 431.258331][T20081] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 431.491142][T20099] FAULT_INJECTION: forcing a failure. [ 431.491142][T20099] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 431.504435][T20099] CPU: 1 UID: 0 PID: 20099 Comm: syz.3.5731 Not tainted syzkaller #0 PREEMPT(voluntary) [ 431.504461][T20099] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 431.504478][T20099] Call Trace: [ 431.504485][T20099] [ 431.504493][T20099] __dump_stack+0x1d/0x30 [ 431.504521][T20099] dump_stack_lvl+0xe8/0x140 [ 431.504548][T20099] dump_stack+0x15/0x1b [ 431.504570][T20099] should_fail_ex+0x265/0x280 [ 431.504595][T20099] should_fail+0xb/0x20 [ 431.504626][T20099] should_fail_usercopy+0x1a/0x20 [ 431.504648][T20099] copy_folio_from_iter_atomic+0x278/0x11b0 [ 431.504688][T20099] ? shmem_write_begin+0xa8/0x190 [ 431.504713][T20099] ? shmem_write_begin+0xe1/0x190 [ 431.504737][T20099] generic_perform_write+0x2c2/0x490 [ 431.504772][T20099] shmem_file_write_iter+0xc5/0xf0 [ 431.504804][T20099] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 431.504871][T20099] vfs_write+0x52a/0x960 [ 431.504912][T20099] __x64_sys_pwrite64+0xfd/0x150 [ 431.504948][T20099] x64_sys_call+0xc4d/0x3000 [ 431.505053][T20099] do_syscall_64+0xd2/0x200 [ 431.505079][T20099] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 431.505115][T20099] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 431.505235][T20099] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 431.505256][T20099] RIP: 0033:0x7fc5677ff749 [ 431.505351][T20099] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 431.505383][T20099] RSP: 002b:00007fc566267038 EFLAGS: 00000246 ORIG_RAX: 0000000000000012 [ 431.505460][T20099] RAX: ffffffffffffffda RBX: 00007fc567a55fa0 RCX: 00007fc5677ff749 [ 431.505475][T20099] RDX: 00000000200000c1 RSI: 00002000000000c0 RDI: 0000000000000004 [ 431.505487][T20099] RBP: 00007fc566267090 R08: 0000000000000000 R09: 0000000000000000 [ 431.505498][T20099] R10: 0000000000009000 R11: 0000000000000246 R12: 0000000000000002 [ 431.505510][T20099] R13: 00007fc567a56038 R14: 00007fc567a55fa0 R15: 00007fffdadb49a8 [ 431.505536][T20099] [ 431.538338][T20103] loop2: detected capacity change from 0 to 128 [ 431.572040][T13091] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 431.932164][T20117] loop4: detected capacity change from 0 to 1024 [ 431.932579][T20117] journal_path: Non-blockdev passed as './file1' [ 431.932600][T20117] EXT4-fs: error: could not find journal device path [ 432.018910][T20125] hub 9-0:1.0: USB hub found [ 432.019077][T20125] hub 9-0:1.0: 8 ports detected [ 432.114831][T20132] loop4: detected capacity change from 0 to 128 [ 432.341694][T20152] tipc: Enabled bearer , priority 0 [ 432.662189][T20158] program syz.0.5756 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 432.932054][T20160] loop2: detected capacity change from 0 to 128 [ 433.061798][T15073] tipc: Resetting bearer [ 433.147988][T20148] tipc: Resetting bearer [ 433.198279][T20148] tipc: Disabling bearer [ 433.384331][ T29] kauditd_printk_skb: 183 callbacks suppressed [ 433.384420][ T29] audit: type=1326 audit(2000000345.574:62571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20181 comm="syz.4.5765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a44fff749 code=0x7ffc0000 [ 433.415035][ T29] audit: type=1326 audit(2000000345.574:62572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20181 comm="syz.4.5765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a44fff749 code=0x7ffc0000 [ 433.415084][ T29] audit: type=1326 audit(2000000345.574:62573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20181 comm="syz.4.5765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a44fff749 code=0x7ffc0000 [ 433.415168][ T29] audit: type=1326 audit(2000000345.574:62574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20181 comm="syz.4.5765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a44fff749 code=0x7ffc0000 [ 433.415230][ T29] audit: type=1326 audit(2000000345.574:62575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20181 comm="syz.4.5765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f9a44fff749 code=0x7ffc0000 [ 433.415361][ T29] audit: type=1326 audit(2000000345.574:62576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20181 comm="syz.4.5765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a44fff749 code=0x7ffc0000 [ 433.415416][ T29] audit: type=1326 audit(2000000345.574:62577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20181 comm="syz.4.5765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a44fff749 code=0x7ffc0000 [ 433.415474][ T29] audit: type=1326 audit(2000000345.574:62578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20181 comm="syz.4.5765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a44fff749 code=0x7ffc0000 [ 433.415590][ T29] audit: type=1326 audit(2000000345.574:62579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20181 comm="syz.4.5765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=311 compat=0 ip=0x7f9a44fff749 code=0x7ffc0000 [ 433.415707][ T29] audit: type=1326 audit(2000000345.574:62580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20181 comm="syz.4.5765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a44fff749 code=0x7ffc0000 [ 433.920338][T20198] hub 9-0:1.0: USB hub found [ 433.920514][T20198] hub 9-0:1.0: 8 ports detected [ 434.332443][T20210] lo speed is unknown, defaulting to 1000 [ 434.376588][ T52] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 434.386917][ T52] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 434.484182][T20210] chnl_net:caif_netlink_parms(): no params data found [ 434.502512][ T52] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 434.512920][ T52] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 434.565014][ T52] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 434.575609][ T52] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 434.652644][ T52] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 434.662984][ T52] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 434.679609][T20210] bridge0: port 1(bridge_slave_0) entered blocking state [ 434.687484][T20210] bridge0: port 1(bridge_slave_0) entered disabled state [ 434.699144][T20210] bridge_slave_0: entered allmulticast mode [ 434.708818][T20210] bridge_slave_0: entered promiscuous mode [ 434.718236][T20210] bridge0: port 2(bridge_slave_1) entered blocking state [ 434.725341][T20210] bridge0: port 2(bridge_slave_1) entered disabled state [ 434.785829][T20210] bridge_slave_1: entered allmulticast mode [ 434.796021][T20210] bridge_slave_1: entered promiscuous mode [ 434.950979][T20210] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 435.025691][ T52] bridge_slave_1: left allmulticast mode [ 435.025711][ T52] bridge_slave_1: left promiscuous mode [ 435.025831][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 435.038307][ T52] bridge_slave_0: left allmulticast mode [ 435.038348][ T52] bridge_slave_0: left promiscuous mode [ 435.038476][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 435.402480][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 435.422361][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 435.435677][ T52] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 435.447681][ T52] bond0 (unregistering): Released all slaves [ 435.477739][T20210] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 435.594830][ T52] tipc: Left network mode [ 435.610431][T20210] team0: Port device team_slave_0 added [ 435.623850][T20210] team0: Port device team_slave_1 added [ 435.625810][T20259] 9pnet_fd: Insufficient options for proto=fd [ 435.663199][ T52] hsr_slave_0: left promiscuous mode [ 435.669983][ T52] hsr_slave_1: left promiscuous mode [ 435.670470][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 435.670483][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 435.671117][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 435.671131][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 435.674345][ T52] veth1_macvtap: left promiscuous mode [ 435.674501][ T52] veth0_macvtap: left promiscuous mode [ 435.674583][ T52] veth1_vlan: left promiscuous mode [ 435.674613][ T52] veth0_vlan: left promiscuous mode [ 435.867930][ T52] team0 (unregistering): Port device team_slave_1 removed [ 435.885028][ T52] team0 (unregistering): Port device team_slave_0 removed [ 435.953065][T20267] hub 9-0:1.0: USB hub found [ 435.963781][T20210] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 435.971536][T20210] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 435.998242][T20210] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 436.014956][T20267] hub 9-0:1.0: 8 ports detected [ 436.040636][T20210] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 436.047684][T20210] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 436.074309][T20210] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 436.076239][T20270] netlink: 48 bytes leftover after parsing attributes in process `syz.0.5791'. [ 436.128428][T20261] lo speed is unknown, defaulting to 1000 [ 436.188883][T20210] hsr_slave_0: entered promiscuous mode [ 436.195275][T20210] hsr_slave_1: entered promiscuous mode [ 436.201428][T20210] debugfs: 'hsr0' already exists in 'hsr' [ 436.207320][T20210] Cannot create hsr debugfs directory [ 436.244748][T20280] loop0: detected capacity change from 0 to 512 [ 436.261703][T20280] EXT4-fs error (device loop0): ext4_xattr_inode_iget:441: inode #11: comm syz.0.5794: ea_inode with extended attributes [ 436.286134][T20280] EXT4-fs error (device loop0): ext4_xattr_inode_iget:446: comm syz.0.5794: error while reading EA inode 11 err=-117 [ 436.301384][T20280] EXT4-fs (loop0): 1 orphan inode deleted [ 436.307857][T20280] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 436.528194][T12922] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 436.600309][T20210] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 436.609868][T20210] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 436.621006][T20210] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 436.631918][T20210] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 436.849374][T20300] lo speed is unknown, defaulting to 1000 [ 436.921825][T20300] loop4: detected capacity change from 0 to 128 [ 437.756188][T20210] 8021q: adding VLAN 0 to HW filter on device bond0 [ 437.832728][T20210] 8021q: adding VLAN 0 to HW filter on device team0 [ 437.848817][T20325] loop0: detected capacity change from 0 to 1024 [ 437.884179][T20325] journal_path: Non-blockdev passed as './file1' [ 437.890628][T20325] EXT4-fs: error: could not find journal device path [ 437.907125][T15072] bridge0: port 1(bridge_slave_0) entered blocking state [ 437.914311][T15072] bridge0: port 1(bridge_slave_0) entered forwarding state [ 437.949791][T15072] bridge0: port 2(bridge_slave_1) entered blocking state [ 437.956954][T15072] bridge0: port 2(bridge_slave_1) entered forwarding state [ 438.087413][T20329] netlink: 72 bytes leftover after parsing attributes in process `syz.4.5807'. [ 438.176750][T20210] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 438.275047][T20210] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 438.476457][T20210] veth0_vlan: entered promiscuous mode [ 438.505626][T20210] veth1_vlan: entered promiscuous mode [ 438.553079][T20210] veth0_macvtap: entered promiscuous mode [ 438.570823][T20210] veth1_macvtap: entered promiscuous mode [ 438.601964][T20210] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 438.627944][T20210] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 438.657664][ T115] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 438.685532][ T115] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 438.715540][ T115] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 438.724652][ T115] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 438.738779][ T29] kauditd_printk_skb: 24 callbacks suppressed [ 438.738866][ T29] audit: type=1400 audit(2000000350.579:62605): avc: denied { mounton } for pid=20210 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 438.769002][ T29] audit: type=1400 audit(2000000350.579:62606): avc: denied { mount } for pid=20210 comm="syz-executor" name="/" dev="gadgetfs" ino=3854 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 438.806784][ T29] audit: type=1326 audit(2000000350.645:62607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20350 comm="syz.3.5810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5677ff749 code=0x7ffc0000 [ 438.831187][ T29] audit: type=1326 audit(2000000350.645:62608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20350 comm="syz.3.5810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5677ff749 code=0x7ffc0000 [ 438.855923][ T29] audit: type=1326 audit(2000000350.645:62609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20350 comm="syz.3.5810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5677ff749 code=0x7ffc0000 [ 438.880194][ T29] audit: type=1326 audit(2000000350.645:62610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20350 comm="syz.3.5810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fc5677ff749 code=0x7ffc0000 [ 438.904586][ T29] audit: type=1326 audit(2000000350.645:62611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20350 comm="syz.3.5810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5677ff749 code=0x7ffc0000 [ 438.928876][ T29] audit: type=1326 audit(2000000350.645:62612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20350 comm="syz.3.5810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5677ff749 code=0x7ffc0000 [ 438.953182][ T29] audit: type=1326 audit(2000000350.645:62613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20350 comm="syz.3.5810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5677ff749 code=0x7ffc0000 [ 438.977573][ T29] audit: type=1326 audit(2000000350.645:62614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20350 comm="syz.3.5810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=311 compat=0 ip=0x7fc5677ff749 code=0x7ffc0000 [ 439.064647][T20360] loop4: detected capacity change from 0 to 512 [ 439.073412][T20360] EXT4-fs error (device loop4): ext4_xattr_inode_iget:441: inode #11: comm syz.4.5813: ea_inode with extended attributes [ 439.087225][T20360] EXT4-fs error (device loop4): ext4_xattr_inode_iget:446: comm syz.4.5813: error while reading EA inode 11 err=-117 [ 439.105572][T20362] tipc: Started in network mode [ 439.110632][T20362] tipc: Node identity 42c36ebddfd2, cluster identity 4711 [ 439.117876][T20362] tipc: Enabled bearer , priority 0 [ 439.168303][T20360] EXT4-fs (loop4): 1 orphan inode deleted [ 439.181360][T20365] netlink: 48 bytes leftover after parsing attributes in process `syz.3.5815'. [ 439.191164][T20360] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 439.290607][T20381] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5818'. [ 439.301484][T20366] lo speed is unknown, defaulting to 1000 [ 439.353431][T20384] loop0: detected capacity change from 0 to 128 [ 439.385140][T20366] chnl_net:caif_netlink_parms(): no params data found [ 439.436409][T20366] bridge0: port 1(bridge_slave_0) entered blocking state [ 439.444450][T20366] bridge0: port 1(bridge_slave_0) entered disabled state [ 439.451793][T20366] bridge_slave_0: entered allmulticast mode [ 439.453086][T13091] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 439.458474][T20366] bridge_slave_0: entered promiscuous mode [ 439.486232][ T115] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 439.500852][T20366] bridge0: port 2(bridge_slave_1) entered blocking state [ 439.509040][T20366] bridge0: port 2(bridge_slave_1) entered disabled state [ 439.517135][T20366] bridge_slave_1: entered allmulticast mode [ 439.526270][T20366] bridge_slave_1: entered promiscuous mode [ 439.534863][T20395] lo speed is unknown, defaulting to 1000 [ 439.540824][T20395] lo speed is unknown, defaulting to 1000 [ 439.553697][T20395] lo speed is unknown, defaulting to 1000 [ 439.563312][T20395] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 439.575797][ T115] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 439.589895][T20366] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 439.599446][T20395] lo speed is unknown, defaulting to 1000 [ 439.607684][T20366] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 439.623089][T20395] lo speed is unknown, defaulting to 1000 [ 439.630500][T20395] lo speed is unknown, defaulting to 1000 [ 439.631796][T20366] team0: Port device team_slave_0 added [ 439.642057][T20395] lo speed is unknown, defaulting to 1000 [ 439.643297][T20366] team0: Port device team_slave_1 added [ 439.654399][T20395] lo speed is unknown, defaulting to 1000 [ 439.665854][T20395] lo speed is unknown, defaulting to 1000 [ 439.675064][ T115] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 439.699551][T20366] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 439.706634][T20366] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 439.733428][T20366] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 439.747099][T20366] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 439.754840][T20366] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 439.781487][T20366] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 439.806499][ T3398] lo speed is unknown, defaulting to 1000 [ 439.820591][ T115] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 439.842022][T20366] hsr_slave_0: entered promiscuous mode [ 439.848343][T20366] hsr_slave_1: entered promiscuous mode [ 439.854379][T20366] debugfs: 'hsr0' already exists in 'hsr' [ 439.860123][T20366] Cannot create hsr debugfs directory [ 439.898952][T20354] tipc: Resetting bearer [ 439.929046][T20354] tipc: Disabling bearer [ 439.985072][ T115] bridge_slave_1: left allmulticast mode [ 439.991417][ T115] bridge_slave_1: left promiscuous mode [ 439.997197][ T115] bridge0: port 2(bridge_slave_1) entered disabled state [ 440.005590][ T115] bridge_slave_0: left allmulticast mode [ 440.011967][ T115] bridge_slave_0: left promiscuous mode [ 440.017716][ T115] bridge0: port 1(bridge_slave_0) entered disabled state [ 440.106913][ T115] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 440.117030][ T115] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 440.126951][ T115] bond0 (unregistering): Released all slaves [ 440.136194][ T115] bond1 (unregistering): Released all slaves [ 440.172141][T20416] lo speed is unknown, defaulting to 1000 [ 440.181762][T20416] lo speed is unknown, defaulting to 1000 [ 440.193177][ T115] tipc: Left network mode [ 440.206615][ T115] hsr_slave_0: left promiscuous mode [ 440.212644][ T115] hsr_slave_1: left promiscuous mode [ 440.218455][ T115] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 440.226017][ T115] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 440.234297][ T115] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 440.241725][ T115] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 440.250243][ T115] veth1_macvtap: left promiscuous mode [ 440.250268][ T115] veth0_macvtap: left promiscuous mode [ 440.250358][ T115] veth1_vlan: left promiscuous mode [ 440.250391][ T115] veth0_vlan: left promiscuous mode [ 440.355083][ T115] team0 (unregistering): Port device team_slave_1 removed [ 440.362615][ T115] team0 (unregistering): Port device team_slave_0 removed [ 440.599311][T20366] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 440.608796][T20366] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 440.620601][T20366] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 440.630282][T20366] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 440.675835][T20366] 8021q: adding VLAN 0 to HW filter on device bond0 [ 440.684925][T20366] 8021q: adding VLAN 0 to HW filter on device team0 [ 440.687808][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 440.687854][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 440.691728][T15072] bridge0: port 2(bridge_slave_1) entered blocking state [ 440.691834][T15072] bridge0: port 2(bridge_slave_1) entered forwarding state [ 440.816018][T20366] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 440.919695][T20366] veth0_vlan: entered promiscuous mode [ 440.930617][T20366] veth1_vlan: entered promiscuous mode [ 440.946879][T20366] veth0_macvtap: entered promiscuous mode [ 440.950472][T20366] veth1_macvtap: entered promiscuous mode [ 440.967696][T20366] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 440.973692][T20366] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 440.988581][ T115] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 440.988653][ T115] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 440.988769][ T115] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 440.988943][ T115] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 441.542830][T20473] lo speed is unknown, defaulting to 1000 [ 441.543472][T20473] lo speed is unknown, defaulting to 1000 [ 441.649905][T20482] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5841'. [ 441.649923][T20482] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5841'. [ 441.650100][T20482] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5841'. [ 441.650116][T20482] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5841'. [ 441.775784][T20490] loop0: detected capacity change from 0 to 512 [ 441.787653][T20490] EXT4-fs error (device loop0): ext4_xattr_inode_iget:441: inode #11: comm syz.0.5845: ea_inode with extended attributes [ 441.795527][T20490] EXT4-fs error (device loop0): ext4_xattr_inode_iget:446: comm syz.0.5845: error while reading EA inode 11 err=-117 [ 441.813269][T20490] EXT4-fs (loop0): 1 orphan inode deleted [ 441.813971][T20490] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 442.051713][T12922] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 442.111713][T20505] loop0: detected capacity change from 0 to 4096 [ 442.119940][T20505] EXT4-fs (loop0): can't mount with data=, fs mounted w/o journal [ 442.305005][T20516] netlink: 52 bytes leftover after parsing attributes in process `syz.3.5850'. [ 442.405878][T20519] lo speed is unknown, defaulting to 1000 [ 442.411961][T20519] lo speed is unknown, defaulting to 1000 [ 442.429780][T20527] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5854'. [ 442.438807][T20527] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5854'. [ 442.472833][T20527] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5854'. [ 442.481774][T20527] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5854'. [ 443.593257][T20566] lo speed is unknown, defaulting to 1000 [ 443.600226][T20566] lo speed is unknown, defaulting to 1000 [ 443.672521][T20576] loop0: detected capacity change from 0 to 128 [ 443.794073][T20587] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5875'. [ 444.092532][ T29] kauditd_printk_skb: 179 callbacks suppressed [ 444.092550][ T29] audit: type=1400 audit(2000000355.594:62794): avc: denied { create } for pid=20599 comm="syz.3.5881" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 444.118957][ T29] audit: type=1400 audit(2000000355.594:62795): avc: denied { setopt } for pid=20599 comm="syz.3.5881" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 444.138752][ T29] audit: type=1400 audit(2000000355.594:62796): avc: denied { write } for pid=20599 comm="syz.3.5881" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 444.158363][ T29] audit: type=1400 audit(2000000355.594:62797): avc: denied { connect } for pid=20599 comm="syz.3.5881" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 444.178419][ T29] audit: type=1400 audit(2000000355.594:62798): avc: denied { name_connect } for pid=20599 comm="syz.3.5881" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 444.198827][ T29] audit: type=1400 audit(2000000355.594:62799): avc: denied { shutdown } for pid=20599 comm="syz.3.5881" laddr=fe80::f lport=57153 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 444.213281][T20607] lo speed is unknown, defaulting to 1000 [ 444.221147][ T29] audit: type=1400 audit(2000000355.594:62800): avc: denied { setopt } for pid=20599 comm="syz.3.5881" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 444.227862][T20607] lo speed is unknown, defaulting to 1000 [ 444.246588][ T29] audit: type=1400 audit(2000000355.594:62801): avc: denied { create } for pid=20599 comm="syz.3.5881" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 444.272996][ T29] audit: type=1400 audit(2000000355.678:62802): avc: denied { read write } for pid=20603 comm="syz.0.5882" name="virtual_nci" dev="devtmpfs" ino=132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 444.296965][ T29] audit: type=1400 audit(2000000355.678:62803): avc: denied { open } for pid=20603 comm="syz.0.5882" path="/dev/virtual_nci" dev="devtmpfs" ino=132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 444.367395][T20618] lo speed is unknown, defaulting to 1000 [ 444.376144][T20618] lo speed is unknown, defaulting to 1000 [ 444.426709][T20621] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 444.443965][T20621] siw: device registration error -23 [ 444.482889][T20621] loop4: detected capacity change from 0 to 512 [ 445.057089][T20653] lo speed is unknown, defaulting to 1000 [ 445.063302][T20653] lo speed is unknown, defaulting to 1000 [ 445.722770][T20669] loop2: detected capacity change from 0 to 512 [ 445.731739][T20669] EXT4-fs error (device loop2): ext4_xattr_inode_iget:441: inode #11: comm syz.2.5902: ea_inode with extended attributes [ 445.744803][T20669] EXT4-fs error (device loop2): ext4_xattr_inode_iget:446: comm syz.2.5902: error while reading EA inode 11 err=-117 [ 445.757454][T20669] EXT4-fs (loop2): 1 orphan inode deleted [ 445.763701][T20669] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 445.978997][T20210] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 447.355198][T20766] loop4: detected capacity change from 0 to 512 [ 447.378708][T20766] EXT4-fs error (device loop4): ext4_xattr_inode_iget:441: inode #11: comm syz.4.5931: ea_inode with extended attributes [ 447.415193][T20754] lo speed is unknown, defaulting to 1000 [ 447.417440][T20766] EXT4-fs error (device loop4): ext4_xattr_inode_iget:446: comm syz.4.5931: error while reading EA inode 11 err=-117 [ 447.421870][T20754] lo speed is unknown, defaulting to 1000 [ 447.458334][T20766] EXT4-fs (loop4): 1 orphan inode deleted [ 447.474907][T20766] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 447.511923][T20754] chnl_net:caif_netlink_parms(): no params data found [ 447.550390][T20754] bridge0: port 1(bridge_slave_0) entered blocking state [ 447.557548][T20754] bridge0: port 1(bridge_slave_0) entered disabled state [ 447.564755][T20754] bridge_slave_0: entered allmulticast mode [ 447.571432][T20754] bridge_slave_0: entered promiscuous mode [ 447.578585][T20754] bridge0: port 2(bridge_slave_1) entered blocking state [ 447.585677][T20754] bridge0: port 2(bridge_slave_1) entered disabled state [ 447.593335][T20754] bridge_slave_1: entered allmulticast mode [ 447.600094][T20754] bridge_slave_1: entered promiscuous mode [ 447.619305][T20754] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 447.630104][T20754] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 447.650432][T20754] team0: Port device team_slave_0 added [ 447.657341][T20754] team0: Port device team_slave_1 added [ 447.674507][T20754] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 447.681628][T20754] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 447.708018][T20754] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 447.719482][T20754] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 447.726495][T20754] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 447.752451][T20754] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 447.771093][ T1882] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 447.796278][T20754] hsr_slave_0: entered promiscuous mode [ 447.802622][T20754] hsr_slave_1: entered promiscuous mode [ 447.808617][T20754] debugfs: 'hsr0' already exists in 'hsr' [ 447.814393][T20754] Cannot create hsr debugfs directory [ 447.822315][ T1882] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 447.858302][ T1882] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 447.910620][ T1882] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 447.987904][ T1882] bridge_slave_1: left allmulticast mode [ 447.993646][ T1882] bridge_slave_1: left promiscuous mode [ 447.999367][ T1882] bridge0: port 2(bridge_slave_1) entered disabled state [ 448.007403][ T1882] bridge_slave_0: left allmulticast mode [ 448.013117][ T1882] bridge_slave_0: left promiscuous mode [ 448.018891][ T1882] bridge0: port 1(bridge_slave_0) entered disabled state [ 448.102316][ T1882] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 448.112415][ T1882] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 448.122163][ T1882] bond0 (unregistering): Released all slaves [ 448.131996][ T1882] bond1 (unregistering): (slave vxcan17): Releasing backup interface [ 448.140159][ T1882] vxcan17: left promiscuous mode [ 448.146341][ T1882] bond1 (unregistering): Released all slaves [ 448.191955][ T1882] tipc: Left network mode [ 448.200343][ T1882] hsr_slave_0: left promiscuous mode [ 448.206064][ T1882] hsr_slave_1: left promiscuous mode [ 448.211839][ T1882] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 448.219429][ T1882] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 448.226941][ T1882] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 448.234365][ T1882] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 448.244753][ T1882] veth1_macvtap: left promiscuous mode [ 448.250284][ T1882] veth0_macvtap: left promiscuous mode [ 448.255814][ T1882] veth1_vlan: left promiscuous mode [ 448.261124][ T1882] veth0_vlan: left promiscuous mode [ 448.293111][T13091] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 448.404575][ T1882] team0 (unregistering): Port device team_slave_1 removed [ 448.412630][ T1882] team0 (unregistering): Port device team_slave_0 removed [ 448.471468][T20797] lo speed is unknown, defaulting to 1000 [ 448.471815][T20797] lo speed is unknown, defaulting to 1000 [ 448.537438][T20802] lo speed is unknown, defaulting to 1000 [ 448.566908][T20802] lo speed is unknown, defaulting to 1000 [ 448.615636][T20814] tipc: Started in network mode [ 448.620559][T20814] tipc: Node identity 3a35a8beb0e3, cluster identity 4711 [ 448.627809][T20814] tipc: Enabled bearer , priority 0 [ 448.639455][T20813] tipc: Resetting bearer [ 448.667796][T20813] tipc: Disabling bearer [ 448.681018][T20819] loop4: detected capacity change from 0 to 512 [ 448.683146][T20819] EXT4-fs error (device loop4): ext4_xattr_inode_iget:441: inode #11: comm syz.4.5945: ea_inode with extended attributes [ 448.704989][T20819] EXT4-fs error (device loop4): ext4_xattr_inode_iget:446: comm syz.4.5945: error while reading EA inode 11 err=-117 [ 448.718251][T20819] EXT4-fs (loop4): 1 orphan inode deleted [ 448.718945][T20819] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 448.748875][T20822] __nla_validate_parse: 8 callbacks suppressed [ 448.748894][T20822] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5946'. [ 448.775553][T20754] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 448.789835][T20754] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 448.792514][T20754] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 448.807176][T20754] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 449.255681][T20832] loop0: detected capacity change from 0 to 512 [ 449.264010][T20832] EXT4-fs error (device loop0): ext4_xattr_inode_iget:441: inode #11: comm syz.0.5948: ea_inode with extended attributes [ 449.277537][T20832] EXT4-fs error (device loop0): ext4_xattr_inode_iget:446: comm syz.0.5948: error while reading EA inode 11 err=-117 [ 449.290300][T20832] EXT4-fs (loop0): 1 orphan inode deleted [ 449.296409][T20832] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 449.694468][T13091] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 449.711247][T12922] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 449.714103][T20754] 8021q: adding VLAN 0 to HW filter on device bond0 [ 449.757120][T20754] 8021q: adding VLAN 0 to HW filter on device team0 [ 449.763794][ T29] kauditd_printk_skb: 245 callbacks suppressed [ 449.763894][ T29] audit: type=1326 audit(2000000360.889:63049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20852 comm="syz.0.5952" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7490dbf749 code=0x0 [ 449.797976][ T115] bridge0: port 1(bridge_slave_0) entered blocking state [ 449.805213][ T115] bridge0: port 1(bridge_slave_0) entered forwarding state [ 449.859258][T20754] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 449.869800][T20754] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 449.871164][T20865] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5956'. [ 449.887891][ T29] audit: type=1326 audit(2000000361.010:63050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20867 comm="syz.1.5957" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe7b2c4f749 code=0x0 [ 449.917815][ T115] bridge0: port 2(bridge_slave_1) entered blocking state [ 449.924945][ T115] bridge0: port 2(bridge_slave_1) entered forwarding state [ 449.944049][ T29] audit: type=1400 audit(2000000361.066:63051): avc: denied { create } for pid=20852 comm="syz.0.5952" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 449.964567][ T29] audit: type=1400 audit(2000000361.076:63052): avc: denied { setopt } for pid=20852 comm="syz.0.5952" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 449.984809][ T29] audit: type=1326 audit(2000000361.076:63053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20852 comm="syz.0.5952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7490dbf749 code=0x7ffc0000 [ 450.008538][ T29] audit: type=1326 audit(2000000361.076:63054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20852 comm="syz.0.5952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7490dbf749 code=0x7ffc0000 [ 450.032355][ T29] audit: type=1326 audit(2000000361.076:63055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20852 comm="syz.0.5952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7490dbf749 code=0x7ffc0000 [ 450.056204][ T29] audit: type=1326 audit(2000000361.076:63056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20852 comm="syz.0.5952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7490dbf749 code=0x7ffc0000 [ 450.080013][ T29] audit: type=1326 audit(2000000361.076:63057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20852 comm="syz.0.5952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7490dbf749 code=0x7ffc0000 [ 450.103841][ T29] audit: type=1326 audit(2000000361.076:63058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20852 comm="syz.0.5952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7490dc1667 code=0x7ffc0000 [ 450.108412][T20754] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 450.206621][T20754] veth0_vlan: entered promiscuous mode [ 450.215157][T20754] veth1_vlan: entered promiscuous mode [ 450.240120][T20754] veth0_macvtap: entered promiscuous mode [ 450.247793][T20754] veth1_macvtap: entered promiscuous mode [ 450.260190][T20754] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 450.271995][T20754] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 450.284221][T15072] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 450.294809][T20891] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5959'. [ 450.305279][T15073] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 450.315185][T15073] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 450.327649][T15073] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 451.024564][T20932] lo speed is unknown, defaulting to 1000 [ 451.031496][T20932] lo speed is unknown, defaulting to 1000 [ 451.065085][T20932] ================================================================== [ 451.073226][T20932] BUG: KCSAN: data-race in mas_state_walk / mas_wr_store_entry [ 451.080784][T20932] [ 451.083157][T20932] write to 0xffff888117a4cd00 of 8 bytes by task 20930 on cpu 0: [ 451.090880][T20932] mas_wr_store_entry+0x1e0d/0x2750 [ 451.096094][T20932] mas_store_prealloc+0x760/0xa90 [ 451.101138][T20932] vma_iter_store_new+0x1c5/0x200 [ 451.106180][T20932] vma_complete+0x125/0x580 [ 451.110698][T20932] __split_vma+0x591/0x650 [ 451.115145][T20932] vma_modify+0x21e/0xc80 [ 451.119484][T20932] vma_modify_flags+0x101/0x130 [ 451.124347][T20932] mprotect_fixup+0x2cc/0x570 [ 451.129042][T20932] do_mprotect_pkey+0x6d6/0x980 [ 451.134426][T20932] __x64_sys_mprotect+0x48/0x60 [ 451.139294][T20932] x64_sys_call+0x2752/0x3000 [ 451.144032][T20932] do_syscall_64+0xd2/0x200 [ 451.148553][T20932] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 451.154469][T20932] [ 451.156805][T20932] read to 0xffff888117a4cd00 of 8 bytes by task 20932 on cpu 1: [ 451.164441][T20932] mas_state_walk+0x485/0x650 [ 451.169140][T20932] mas_walk+0x60/0x150 [ 451.173217][T20932] lock_vma_under_rcu+0x95/0x1b0 [ 451.178354][T20932] do_user_addr_fault+0x233/0x1080 [ 451.183572][T20932] exc_page_fault+0x62/0xa0 [ 451.188102][T20932] asm_exc_page_fault+0x26/0x30 [ 451.192956][T20932] [ 451.195278][T20932] value changed: 0xffff888117a4cc0e -> 0xffff888117a4cd00 [ 451.202381][T20932] [ 451.204707][T20932] Reported by Kernel Concurrency Sanitizer on: [ 451.210877][T20932] CPU: 1 UID: 0 PID: 20932 Comm: syz.2.5972 Not tainted syzkaller #0 PREEMPT(voluntary) [ 451.220692][T20932] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 451.230770][T20932] ================================================================== [ 451.245360][T20935] loop2: detected capacity change from 0 to 128 [ 451.258243][T20937] loop4: detected capacity change from 0 to 512 [ 451.271310][T20937] EXT4-fs error (device loop4): ext4_xattr_inode_iget:441: inode #11: comm syz.4.5973: ea_inode with extended attributes [ 451.286575][T20937] EXT4-fs error (device loop4): ext4_xattr_inode_iget:446: comm syz.4.5973: error while reading EA inode 11 err=-117 [ 451.299188][T20937] EXT4-fs (loop4): 1 orphan inode deleted [ 451.305418][T20937] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 451.576862][T13091] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.