last executing test programs: 3.375695503s ago: executing program 2 (id=1731): r0 = gettid() ioctl$int_in(0xffffffffffffffff, 0x5452, 0x0) ppoll(&(0x7f0000000100)=[{0xffffffffffffffff, 0x1000}], 0x1, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r1, &(0x7f0000000080), &(0x7f0000000280)=@udp}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) r3 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r3, &(0x7f0000000280)={0x2, 0x4, @multicast1}, 0x10) sendmmsg$inet(r3, &(0x7f0000004540)=[{{&(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0xb87, 0x0}, 0xee0000b0}, {{0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000001100)="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", 0xc3}, {&(0x7f0000000d80)="7d68e6de85f9b0cbc9d710267f321ec64eab043ecad9af7e01e9463218ec45924a99867163e468d36a682fadd749caa325e685d75559a87139e02fae7271be8f55671cfd32a09896278d1941370174720838039d0989bc3394b8a4c4f4a30f0496be313d6d60fe47966c634a3ee1f659e8ef310647725bda0130d5de5028220a4cf5fc808a75694738ee26cb21302b4bba4265b845a5d5dce706d9820c6936b122f9658446d74a9016b94424971dd443a6907eb5c73b6b200e92b23f2c36a214729b0bc231511e4c", 0xc8}, {&(0x7f0000000380)="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", 0x9fd}], 0x3}}, {{0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000001700)="a6", 0x1}], 0x300}}], 0x3, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) tkill(r0, 0x13) 1.328762707s ago: executing program 4 (id=1779): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000540)='inet_sock_set_state\x00', r1}, 0x10) r2 = socket$inet_sctp(0x2, 0x5, 0x84) close(r2) 1.283809642s ago: executing program 4 (id=1781): sendmsg$AUDIT_MAKE_EQUIV(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x28, 0x3f7, 0x800, 0x70bd28, 0x25dfdbfc, {0x7, 0x7, './file0', './file0'}}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x40) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="f8000000160085"], 0xf8}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[], 0x134}, 0x1, 0x8000000}, 0x0) (fail_nth: 7) 1.228420627s ago: executing program 4 (id=1783): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000380)=[{0x200000000006, 0x1, 0x7, 0x7ffc1ffb}]}) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x42, 0x61) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1a, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xdb, '\x00', 0x0, @tracing=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0xce56fe61a68fc369, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) r3 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x300, 0x198, 0xffffffff, 0xffffffff, 0x198, 0xffffffff, 0x268, 0xffffff7a, 0xffffffff, 0x268, 0xffffffff, 0x7fffffe, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x0, 'veth1\x00', 'veth0_to_team\x00', {}, {}, 0x0, 0x0, 0x41}, 0x6, 0x130, 0x198, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "00000100cbd047da9ca965f96ad5801f0514d363ee84bb895919d9490f6785fba3c4a44f1e25ecefef2a2d6054f5260ece5ce1a56a5ef73be11d65bfe8c37674024c183ebacdf741cea92ded3a9ca54de15dd9ec8ef62f9e000000000000000000ffffff7f00", 0x7d}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x2, 0x0, 'snmp_trap\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x360) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1d, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x9}, 0x94) socket$packet(0x11, 0xa, 0x300) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb, 0x0, &(0x7f0000000000)="219a53f271a76d2608004c", 0x0, 0xcff, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xd9}, 0x50) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x1c}}, 0x0) 897.33609ms ago: executing program 0 (id=1789): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000f1ffff000000000000100000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000000e}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0x101}, 0x18) r1 = syz_io_uring_setup(0x43b5, &(0x7f0000000540)={0x0, 0xc50e, 0x10000, 0x2, 0x3e8}, &(0x7f0000000380)=0x0, &(0x7f00000000c0)=0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000b, 0x100010, 0xffffffffffffffff, 0xec776000) syz_io_uring_submit(r2, r3, &(0x7f0000000300)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x2, 0xa3d8, &(0x7f00000005c0)=[{&(0x7f0000000240)="5db5bd", 0x3}], 0x10000000000002a8, 0x8, 0x1, {0x2}}) io_uring_enter(r1, 0x29ab, 0xd480, 0x2f, 0x0, 0x0) r4 = getpid() sched_setscheduler(r4, 0x5, &(0x7f0000000040)=0xd4000000) ptrace$setregset(0x4205, r4, 0x2, &(0x7f00000001c0)={&(0x7f0000000100)="63d8f0b9c1a976765fd55a3daa7e571323ce067e917cc660f3ae959b0ef05071bc01a9a4206516ba9bd6046c9efc84eb691cbddbe1fdf3653bf3f78fde96fd60768c33064bac1e5e4dd6f221303f858ffded92b86d1a4a8888b7f16045b3377e4ee98effc8ec6bb217375198f2df24972381a86888efc3e4b1c33a04bfbe1fc17ca72fc93d8da0eb6de578bf09395181c257bbc65a7696432d6def3fc423e42188ee5d060e004d1a439aefea476f36fce88bbc5a8d953cd7d6369ebe", 0xbc}) ptrace$getsig(0x4202, r4, 0xfffffffffffffffa, 0x0) pwritev(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x4f}, {&(0x7f0000000140)="de", 0x1}], 0x2, 0x0, 0x0) 844.044146ms ago: executing program 0 (id=1791): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000540)='inet_sock_set_state\x00', r1}, 0x10) r2 = socket$inet_sctp(0x2, 0x5, 0x84) close(r2) 823.187828ms ago: executing program 0 (id=1793): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{}, 0x0, &(0x7f0000000180)}, 0xffffffffffffff6e) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='\v\x00'], 0x50) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) close(r2) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x8901, 0x0) ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x110c23003f) ioctl$TUNGETVNETLE(r2, 0x40047451, &(0x7f0000000180)) ioctl$TUNGETVNETLE(r2, 0x40047451, &(0x7f00000002c0)) 729.120587ms ago: executing program 3 (id=1794): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000012c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r2, 0x84, 0x81, &(0x7f0000000000)='\x00\x00\x00\x00', 0x4) r3 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f00000001c0)=0x8) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) dup2(r2, r5) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r2, 0x84, 0x17, &(0x7f00000002c0)=ANY=[@ANYRES32=r4, @ANYBLOB="02"], 0x9) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r5, 0x84, 0x19, &(0x7f0000000140)={r4, 0x2}, 0x8) 728.744377ms ago: executing program 3 (id=1795): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1, 0x4, 0x7fe2, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000180)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000540)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffe00}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x18) umount2(0x0, 0x9) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB, @ANYRESOCT], 0x5c}}, 0x0) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000), 0x5c) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000340)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x8044) 691.080301ms ago: executing program 0 (id=1796): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000080)='sys_enter\x00', r1}, 0x10) setfsgid(0x0) 660.008454ms ago: executing program 0 (id=1797): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000012c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r2, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) r3 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, 0x0, &(0x7f00000001c0)) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) dup2(r2, r4) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r2, 0x84, 0x17, &(0x7f00000002c0)=ANY=[@ANYRES32, @ANYBLOB="02"], 0x9) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r4, 0x84, 0x19, &(0x7f0000000140)={0x0, 0x2}, 0x8) 632.731567ms ago: executing program 3 (id=1798): syz_open_pts(0xffffffffffffffff, 0x401) socket$tipc(0x1e, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x14, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x42, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) syz_clone3(&(0x7f0000001e80)={0x166002400, 0x0, 0x0, 0x0, {0xa}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="00042c3d7000fddbdf2508000000a6c794180050ebdb3373aed36f1a662976b3579026d29015b630b74e76d4b9059099ec6f478c50f0f57f90e14a5353201fdb519acaf02ccb1ad7a6aa8faab159db60804dc087f4dfda2e2d63a5127259d2ace66715a2bd35076662390fa708f0db64189abe83b50ea7033a7765c048b0de2adc2a589f094eead974f8fa"], 0x14}, 0x1, 0x0, 0x0, 0x48004}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40000, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x9080, 0x0, 0x800000, 0x7, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0x1, 0xffffffffffffffff, 0x8) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)}], 0x1}, 0x48000) 549.657286ms ago: executing program 0 (id=1809): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="1800000000000004000000000000000085000000230000009551804e616350e76c59c74065cfd552f580b164938cf4fd52f9a1bfb95fec5179caf5725dbc1f27a8dad87c9e35df9a271b259602ada091fd843efbdbb1a3b499ffa32453d4a96d8da243f3f3f58f3a63a5b2020397fb4d182d7ac3314013784987975afe6e4a4883f7d0938699dd37f7910a8a6b2f4ea9ee24307690ae75e84821fab1f6cb3c3454d965edd64c62c7ef55d0b135857ddff43449cbcce4c9c300000000000000000000000000428cd25690cd2b94cbfd8bf4fdc291e38d82574121885ef35983569f958dad3f9a6c940bd7c854a71b44bfedebe0adca7ed4dc3e669c6cf9d9091b8d7f09be779dc6", @ANYRES8], &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000380)='file_check_and_advance_wb_err\x00', r0}, 0x18) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x0) gettid() timer_create(0x4, &(0x7f0000533fa0)={0x0, 0x22, 0x1, @thr={&(0x7f0000004140)="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", &(0x7f0000000740)="221c1c4e099c3d0353ac158088ac0be88a942134c9e1b482e04f42eed493c319e9a61f812a5afdc20dfcd13b1609d913df83c0b97ff6b136df9d97134c5f10254733b33dc2f5089bd26e4028a90129c563c289535882d756cfc1e5f747e9ee0cc7f6002722d7f4e68ebfaf7ff89581246c98589ae73a935f8d55b52b65fec186d618a6797b33541ad780ef7b61"}}, &(0x7f0000000480)=0x0) timer_settime(r2, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f00000005c0), 0x80, 0x1, 0x0, 0x0, 0x0) prctl$PR_MCE_KILL(0x4e, 0x1, 0x0) write$cgroup_int(r1, &(0x7f0000000040)=0xfe8e, 0x12) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0xc369d000) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000200)={0x6, &(0x7f0000000340)=[{0x4, 0xbe, 0x10, 0x8}, {0x7, 0x7, 0xc4, 0x80000000}, {0x0, 0x3, 0x6, 0x9}, {0x8, 0x8, 0x5, 0x6}, {0xfff7, 0x0, 0x0, 0x6}, {0x9, 0x3, 0x0, 0x3}]}) munlockall() ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000001100)={0x0, 0x0, "d3ce1169accb11843f2815a027f58a19713acaf4a8c7cc0e3ba1d941138e5e432bb7afb446d98f52dd7b8b7d59269e3c455468498b9cf7adff5481b19a6fa465280be94ca3b6dc83532aa0e6ceae57e6d1ae8b2e7cfa97a5ac43d38f50cd1c80b3a4249f9ec6c5103e7ba77e77991fc5900e3782cb6df94128206b516e5230e912d28c17bc1ff202a8a706bd12218327a80ae05c1602d79d60b81bc50cc151a361b43c0c5f7217cdf95d89f1d7fff87e96f918680ee65c312bc4e4293b9f8b40ea7e37c4032e7c07dbc7eb6cac72321bef83b4d6b1eddda1c710d9b8b951e3f178d8f17f3e9f879420c0a1c36aeb3335e1365b43910ef0e8d3fe357709a9e5c8", "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"}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000a80)='kfree\x00', 0xffffffffffffffff, 0x0, 0xfffffffffffffffd}, 0x18) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'syztnl1\x00', &(0x7f0000000040)={'syztnl0\x00', 0x0, 0x29, 0x0, 0x7, 0x6426, 0x4a, @mcast1, @empty, 0x7, 0x7800, 0xffffff77, 0xffffffff}}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r4, 0x2) syz_emit_ethernet(0x4a, &(0x7f00000002c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x56, &(0x7f00000003c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0086dd600a3ff200200600fe8000000000000000000000000000bbfe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="80c5c1ad593185d5181a8e140039d938ddbee6a5a07129db0386ad59210090780000080a"], 0x0) mmap$perf(&(0x7f00001a2000/0x1000)=nil, 0x1000, 0x2000001, 0x10010, r1, 0x859b) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010007000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000048000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0c00098008000140000000075c0000000e0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xec}}, 0x0) 313.095459ms ago: executing program 2 (id=1803): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x14, 0xc, &(0x7f0000000d80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe90}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000840), 0x81, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000002, 0x13, r2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r3 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x9, 0x7, 0x0, 0x0, 0x0, 0x40008, 0x518, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0xed}, 0x4c58, 0xd, 0x0, 0x0, 0x8, 0x4ac, 0xb, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000003, 0x11, r3, 0xc266c000) 312.540689ms ago: executing program 4 (id=1804): prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{}, 0x0, &(0x7f0000000180)}, 0xffffffffffffff6e) bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) close(r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x8901, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110c23003f) ioctl$TUNGETVNETLE(r0, 0x40047451, &(0x7f0000000180)) ioctl$TUNGETVNETLE(r0, 0x40047451, &(0x7f00000002c0)) 279.775712ms ago: executing program 1 (id=1805): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000540)='inet_sock_set_state\x00', r1}, 0x10) r2 = socket$inet_sctp(0x2, 0x5, 0x84) close(r2) 279.315112ms ago: executing program 3 (id=1806): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000012c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r2, 0x84, 0x81, &(0x7f0000000000)='\x00\x00\x00\x00\x00\x00', 0x6) r3 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f00000001c0)=0x8) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) dup2(r2, r5) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r2, 0x84, 0x17, &(0x7f00000002c0)=ANY=[@ANYRES32=r4, @ANYBLOB="02"], 0x9) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r5, 0x84, 0x19, &(0x7f0000000140)={r4, 0x2}, 0x8) 249.580725ms ago: executing program 4 (id=1807): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000080)='sys_enter\x00', r1}, 0x10) setfsgid(0x0) 248.695545ms ago: executing program 1 (id=1818): unshare(0x20000400) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYRES32=r0, @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$kcm(0x29, 0x2, 0x0) sendmmsg$inet(r2, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000080)="da", 0x1}], 0x1, &(0x7f0000000040)=ANY=[], 0xd0}}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000001c0)='/', 0x1}], 0x1}}], 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0b0000000e000000cc0002000600000005"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000200)='P', &(0x7f0000000740), 0x4af, r4}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000001c0)={0x0, &(0x7f0000000080)=""/231, &(0x7f0000000180), &(0x7f0000000240), 0x2, r4}, 0x38) 241.138246ms ago: executing program 2 (id=1808): unshare(0x20000400) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$kcm(0x29, 0x2, 0x0) sendmmsg$inet(r2, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000080)="da", 0x1}], 0x1, &(0x7f0000000040)=ANY=[], 0xd0}}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000001c0)='/', 0x1}], 0x1}}], 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0b0000000e000000cc0002000600000005"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000200)='P', &(0x7f0000000740), 0x4af, r4}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000001c0)={0x0, &(0x7f0000000080)=""/231, &(0x7f0000000180), &(0x7f0000000240), 0x2, r4}, 0x38) 181.144632ms ago: executing program 3 (id=1810): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000012c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r2, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) r3 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, 0x0, &(0x7f00000001c0)) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) dup2(r2, r4) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r2, 0x84, 0x17, &(0x7f00000002c0)=ANY=[@ANYRES32, @ANYBLOB="02"], 0x9) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r4, 0x84, 0x19, &(0x7f0000000140)={0x0, 0x2}, 0x8) 180.770452ms ago: executing program 4 (id=1811): r0 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x410000) pwritev(r0, &(0x7f0000001700)=[{&(0x7f0000000700)="30e363082993671813af9490c162e0e8efac543e6ea512ec715c845e8afc", 0x1e}], 0x1, 0x2, 0xffffffcd) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1, 0x0, 0x400000000082}, 0x18) socket$netlink(0x10, 0x3, 0x10) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x9, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1d, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r5}, 0x18) perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x82, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) ioctl$TIOCPKT(r6, 0x5420, &(0x7f0000000200)=0x1b) socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000840)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x3}, 0x0, 0x10000, 0x8, 0x1, 0x400000000008, 0x2020006, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000780)=ANY=[@ANYBLOB="02030003200000002cbd7000fcdbdf2502000900080000000a0000000000000005000600000000000a0000000000000000000000000000000000000000000034fbffffff000000000200010000ee40000400050c0000000005000500000000000a000000000000000000000000000000000000000000000107000000000000001000080088"], 0x100}, 0x1, 0x7}, 0x14) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r9 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x21, 0x0, 0x0, 0x0, 0x0, 0x828c0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x8, 0x4}, 0x26, 0x0, 0x0, 0x8, 0x405, 0x8, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) ioctl$PERF_EVENT_IOC_SET_BPF(r9, 0x40042408, 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 172.322683ms ago: executing program 3 (id=1812): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x18) syz_clone(0xae12e400, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = mq_open(&(0x7f0000001880)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\x1c`\xbd\xe1e\x80\x7f\xd2&l0\xc1b\xac\x8b\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL%Jw\x99y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3\x05\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xc8\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xc7\xa7\x82\xb9V}`\xb7\xfc@\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5m\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v>\x9b\n0\xb2 h\xad5\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\'/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f9\xce\x1eYV\xa2\xc4\x03PV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x9b\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xd1\x06F\xef\xbd\xeb\xf0\'\f\f\x003\xecp\x18\x9e\x1d\xeaH\xdaQ%+\xf4\xae\xab0\b\x17W\xba\xaf4E\xe62\xefm\xdd+\xb2\x1b:\xc0cc\x97\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x97s\x03`\xba\xf1\xdb\x05\xe5C)\x8f\xbchyL1:\xc2\xea\x8a\xfc\tq\xfa\xec&\xc7\xde\xf4\xf2\xb9\xe1\xa1\x80)1\xbe@Bt\xb7\xce\xc9\xee\xa8v\t\xfa,\xa2\x9a\xa3\\\xfbM\xb5\xfd\xa9\xe3\x9f\xf7\x85\x87w\x1d]& 8\xb5\xba\xea\xad\xa9\xd4V\xf1\xe9\xaaT\xc8\xff\xaf\xef\x91\xca\x9c\x80\xbeYd]\xfb\x1a\x96?\xb6\xd7{X\xa1H\xeb\xce\xd7\xb7\xf7\x15\xd6\x88\x91\xef{\xf8K@\xb6ch\x1e\x16\xd5m@\xa8\x91\xa5\xc5@\xa7\x00\xab\xc5\xc8\xc8\x9c\xe3:\xac\x1eG\xa0e\'/\x15G\x8e\xe5\x16\xd5S ]\xf8\xa1\xa46\x9a\xf0d!\xc8\x81S\xbc\x18\xdf\xa0\xfek\xb0(\xf7\xba5\x8e\xe5A\xd5l\xfbp\xcb\xa8\xf0b\x91\xc4\xd3+)Sy\x81\xe3\r%C\x03enM\xf1\xdf\xe3b\xb7\x9b\f\x82\xb1z\xcf^\x06\xcd\xa2\x96\xe3\xd5\xbd@1\xbe\x02\xad\\\x89\xd0\xe0\xa8\x11\xb4B\\\x14\\\xed5\x9c\xd7n\x8d\xec\xb5\xcc\xf8q', 0x42, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000840), 0x0) read(r1, &(0x7f0000000680)=""/219, 0xdb) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r1, 0xc0605345, 0x0) mq_unlink(&(0x7f0000000000)='eth0\x00') bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{0x1}, &(0x7f0000000040), 0x0}, 0x20) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'veth1_to_hsr\x00', 0x0}) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) sendto$packet(r2, &(0x7f00000000c0)="3f031c000302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x100000000000000, &(0x7f0000000540)={0xc9, 0x0, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) 169.873483ms ago: executing program 2 (id=1813): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0x2000080, 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000001940), 0x100000, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={0x0, r1}, 0x18) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000001980)={{0x1, 0x1, 0x1018, 0xffffffffffffffff, {0x5}}, './file0\x00'}) 163.255994ms ago: executing program 1 (id=1814): unshare(0x20000400) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$kcm(0x29, 0x2, 0x0) sendmmsg$inet(r2, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000080)="da", 0x1}], 0x1, &(0x7f0000000040)=ANY=[], 0xd0}}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000001c0)='/', 0x1}], 0x1}}], 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0b0000000e000000cc0002000600000005"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000200)='P', &(0x7f0000000740), 0x4af, r4}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000001c0)={0x0, &(0x7f0000000080)=""/231, &(0x7f0000000180), &(0x7f0000000240), 0x2, r4}, 0x38) 144.557316ms ago: executing program 2 (id=1815): unshare(0x20000400) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$kcm(0x29, 0x2, 0x0) sendmmsg$inet(r2, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000080)="da", 0x1}], 0x1, &(0x7f0000000040)=ANY=[], 0xd0}}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000001c0)='/', 0x1}], 0x1}}], 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0b0000000e000000cc0002000600000005"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000200)='P', &(0x7f0000000740), 0x4af, r4}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000001c0)={0x0, &(0x7f0000000080)=""/231, &(0x7f0000000180), &(0x7f0000000240), 0x2, r4}, 0x38) 72.113863ms ago: executing program 1 (id=1816): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000012c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r2, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) r3 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f00000001c0)=0x8) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) dup2(r2, r5) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r2, 0x84, 0x17, &(0x7f00000002c0)=ANY=[@ANYRES32=r4, @ANYBLOB="02"], 0x9) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r5, 0x84, 0x19, &(0x7f0000000140)={r4, 0x2}, 0x8) 71.392393ms ago: executing program 2 (id=1817): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000040)=0x80000001, 0x4) sendto$inet6(r0, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x7, &(0x7f0000000140)=0x9, 0x4) sendto$inet6(r0, &(0x7f00000000c0)="4435c61bc9a1f1ed51c7b06188c682bd59fde0261c9bc2b1f66724ea0287fb6effd2c318abfa442135afa8ca2b68dacbb4a1aa65f9c177dc50967e99edcce6e8900d450fcd9980371cd431b9c1ad0766a9cb142c1ac79715905c856c9e549753967a92c7024ac039", 0xffffffffffffff1d, 0x850, 0x0, 0x0) 34.225227ms ago: executing program 1 (id=1819): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0b0000000e000000cc0002000600000005"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000200)='P', &(0x7f0000000740), 0x4af, r2}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000001c0)={0x0, &(0x7f0000000080)=""/231, &(0x7f0000000180), &(0x7f0000000240), 0x2, r2}, 0x38) 0s ago: executing program 1 (id=1820): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000012c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/14, @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r2, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) r3 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f00000001c0)=0x8) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) dup2(r2, r5) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r2, 0x84, 0x17, &(0x7f00000002c0)=ANY=[@ANYRES32=r4, @ANYBLOB="02"], 0x9) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r5, 0x84, 0x19, &(0x7f0000000140)={r4, 0x2}, 0x8) kernel console output (not intermixed with test programs): s an active interface with an up link [ 79.193007][ T5820] vlan2: entered allmulticast mode [ 79.199225][ T5820] bond0: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 79.241032][ T5819] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 79.250791][ T29] kauditd_printk_skb: 599 callbacks suppressed [ 79.250825][ T29] audit: type=1400 audit(1763047910.049:4050): avc: denied { append } for pid=5818 comm="syz.3.784" name="ptp0" dev="devtmpfs" ino=246 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 79.437264][ T29] audit: type=1326 audit(1763047910.239:4051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5831 comm="syz.3.789" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa64544f6c9 code=0x0 [ 79.489096][ T5834] loop1: detected capacity change from 0 to 512 [ 79.495970][ T5834] EXT4-fs: quotafile must be on filesystem root [ 79.516674][ T29] audit: type=1400 audit(1763047910.319:4052): avc: denied { create } for pid=5831 comm="!$&]" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 79.552002][ T29] audit: type=1400 audit(1763047910.319:4053): avc: denied { ioctl } for pid=5831 comm="!$&]" path="socket:[11956]" dev="sockfs" ino=11956 ioctlcmd=0x8982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 79.576236][ T29] audit: type=1400 audit(1763047910.319:4054): avc: denied { getopt } for pid=5831 comm="!$&]" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 79.595273][ T29] audit: type=1326 audit(1763047910.319:4055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5831 comm="pimreg0" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa64544f6c9 code=0x0 [ 79.641607][ T5839] nft_compat: unsupported protocol 0 [ 79.641660][ T29] audit: type=1326 audit(1763047910.439:4056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5831 comm="syz.3.789" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa64544f6c9 code=0x0 [ 79.686789][ T29] audit: type=1326 audit(1763047910.479:4057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5831 comm="syz.3.789" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa64544f6c9 code=0x0 [ 79.719741][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.765051][ T29] audit: type=1326 audit(1763047910.559:4058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5831 comm="syz.3.789" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa64544f6c9 code=0x0 [ 79.789030][ T5847] loop2: detected capacity change from 0 to 128 [ 79.826117][ T5847] FAT-fs (loop2): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 79.886533][ T29] audit: type=1326 audit(1763047910.689:4059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5853 comm="syz.2.797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d08bdf6c9 code=0x7ffc0000 [ 79.921829][ T5854] loop2: detected capacity change from 0 to 512 [ 79.930016][ T5854] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 1, start 00000101) [ 79.953659][ T5856] IPv6: Can't replace route, no match found [ 80.098121][ T5878] lo speed is unknown, defaulting to 1000 [ 80.152034][ T5893] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5893 comm=syz.2.813 [ 80.225608][ T5893] lo speed is unknown, defaulting to 1000 [ 80.324406][ T5905] netlink: 'syz.4.816': attribute type 10 has an invalid length. [ 80.411929][ T5914] __nla_validate_parse: 4 callbacks suppressed [ 80.411945][ T5914] netlink: 4 bytes leftover after parsing attributes in process `syz.1.817'. [ 80.435915][ T5914] bridge_slave_1: left allmulticast mode [ 80.442029][ T5914] bridge_slave_1: left promiscuous mode [ 80.447802][ T5914] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.463655][ T5914] bridge_slave_0: left allmulticast mode [ 80.469440][ T5914] bridge_slave_0: left promiscuous mode [ 80.475197][ T5914] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.646867][ T5943] loop2: detected capacity change from 0 to 128 [ 80.675544][ T5943] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 80.702702][ T5943] ext4 filesystem being mounted at /167/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 80.741074][ T5951] netlink: 'syz.3.831': attribute type 10 has an invalid length. [ 80.749631][ T5943] netlink: 'syz.2.829': attribute type 1 has an invalid length. [ 80.771032][ T5943] bond0: entered promiscuous mode [ 80.776498][ T5943] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.785234][ T5951] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 80.882793][ T3312] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 80.959124][ T5956] lo speed is unknown, defaulting to 1000 [ 80.970706][ T5963] netlink: 28 bytes leftover after parsing attributes in process `syz.3.836'. [ 80.998410][ T5975] netlink: 12 bytes leftover after parsing attributes in process `syz.0.840'. [ 81.005058][ T299] Bluetooth: hci0: Frame reassembly failed (-84) [ 81.028729][ T5963] rdma_op ffff888102a61580 conn xmit_rdma 0000000000000000 [ 81.076756][ T5981] netlink: 7 bytes leftover after parsing attributes in process `syz.0.842'. [ 81.085911][ T5981] netlink: 16 bytes leftover after parsing attributes in process `syz.0.842'. [ 81.130917][ T5989] netlink: 8 bytes leftover after parsing attributes in process `syz.0.846'. [ 81.150028][ T5991] loop2: detected capacity change from 0 to 512 [ 81.166683][ T5991] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.179381][ T5991] ext4 filesystem being mounted at /173/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 81.391135][ T6004] netlink: 'syz.2.847': attribute type 27 has an invalid length. [ 81.472128][ T6004] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.479527][ T6004] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.597309][ T6004] bond0: left promiscuous mode [ 81.636695][ T12] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.806225][ T12] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.870335][ T12] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.880423][ T12] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.070267][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.090288][ T6024] FAULT_INJECTION: forcing a failure. [ 82.090288][ T6024] name failslab, interval 1, probability 0, space 0, times 0 [ 82.103237][ T6024] CPU: 0 UID: 0 PID: 6024 Comm: syz.0.860 Not tainted syzkaller #0 PREEMPT(voluntary) [ 82.103271][ T6024] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 82.103284][ T6024] Call Trace: [ 82.103289][ T6024] [ 82.103297][ T6024] __dump_stack+0x1d/0x30 [ 82.103396][ T6024] dump_stack_lvl+0xe8/0x140 [ 82.103423][ T6024] dump_stack+0x15/0x1b [ 82.103491][ T6024] should_fail_ex+0x265/0x280 [ 82.103516][ T6024] should_failslab+0x8c/0xb0 [ 82.103617][ T6024] kmem_cache_alloc_noprof+0x50/0x480 [ 82.103653][ T6024] ? copy_fs_struct+0x31/0x110 [ 82.103769][ T6024] copy_fs_struct+0x31/0x110 [ 82.103809][ T6024] copy_fs+0x58/0xf0 [ 82.103845][ T6024] copy_process+0xc85/0x2000 [ 82.103907][ T6024] kernel_clone+0x16c/0x5c0 [ 82.103947][ T6024] ? vfs_write+0x7e8/0x960 [ 82.103982][ T6024] __x64_sys_clone+0xe6/0x120 [ 82.104082][ T6024] x64_sys_call+0x119c/0x3000 [ 82.104135][ T6024] do_syscall_64+0xd2/0x200 [ 82.104157][ T6024] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 82.104189][ T6024] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 82.104358][ T6024] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.104388][ T6024] RIP: 0033:0x7f3fbee4f6c9 [ 82.104408][ T6024] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 82.104431][ T6024] RSP: 002b:00007f3fbd8b6fe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 82.104502][ T6024] RAX: ffffffffffffffda RBX: 00007f3fbf0a5fa0 RCX: 00007f3fbee4f6c9 [ 82.104519][ T6024] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000011 [ 82.104538][ T6024] RBP: 00007f3fbd8b7090 R08: 0000000000000000 R09: 0000000000000000 [ 82.104553][ T6024] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 82.104565][ T6024] R13: 00007f3fbf0a6038 R14: 00007f3fbf0a5fa0 R15: 00007fff7bad5e98 [ 82.104584][ T6024] [ 82.315562][ T6027] netlink: 7 bytes leftover after parsing attributes in process `syz.1.862'. [ 82.324781][ T6027] netlink: 8 bytes leftover after parsing attributes in process `syz.1.862'. [ 82.453342][ T6047] netlink: 'syz.4.868': attribute type 10 has an invalid length. [ 82.521561][ T6049] loop2: detected capacity change from 0 to 1024 [ 82.537257][ T6049] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 82.643396][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.679464][ T6070] netlink: 7 bytes leftover after parsing attributes in process `syz.4.876'. [ 82.689103][ T6070] netlink: 8 bytes leftover after parsing attributes in process `syz.4.876'. [ 82.806009][ T6077] loop2: detected capacity change from 0 to 1024 [ 82.813049][ T6077] ext4: Unknown parameter 'mask' [ 82.824317][ T6077] loop2: detected capacity change from 0 to 512 [ 82.960516][ T6084] netlink: 'syz.4.881': attribute type 10 has an invalid length. [ 83.014968][ T3643] Bluetooth: hci0: command 0x1003 tx timeout [ 83.020045][ T3577] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 83.067266][ T6093] loop3: detected capacity change from 0 to 128 [ 83.074653][ T6093] FAT-fs (loop3): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 83.328039][ T6118] netlink: 'syz.0.895': attribute type 13 has an invalid length. [ 83.788865][ T6163] pimreg: entered allmulticast mode [ 84.219960][ T6196] FAULT_INJECTION: forcing a failure. [ 84.219960][ T6196] name failslab, interval 1, probability 0, space 0, times 0 [ 84.232782][ T6196] CPU: 0 UID: 0 PID: 6196 Comm: syz.0.927 Not tainted syzkaller #0 PREEMPT(voluntary) [ 84.232844][ T6196] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 84.232860][ T6196] Call Trace: [ 84.232869][ T6196] [ 84.232877][ T6196] __dump_stack+0x1d/0x30 [ 84.232948][ T6196] dump_stack_lvl+0xe8/0x140 [ 84.232967][ T6196] dump_stack+0x15/0x1b [ 84.232983][ T6196] should_fail_ex+0x265/0x280 [ 84.233041][ T6196] should_failslab+0x8c/0xb0 [ 84.233070][ T6196] __kvmalloc_node_noprof+0x12e/0x670 [ 84.233101][ T6196] ? nf_hook_entries_grow+0x1c1/0x460 [ 84.233135][ T6196] nf_hook_entries_grow+0x1c1/0x460 [ 84.233317][ T6196] __nf_register_net_hook+0x18e/0x480 [ 84.233338][ T6196] nf_register_net_hook+0x88/0x130 [ 84.233355][ T6196] nf_register_net_hooks+0x44/0x150 [ 84.233374][ T6196] nf_ct_netns_do_get+0x2b1/0x380 [ 84.233542][ T6196] ? nf_register_net_hook+0x9e/0x130 [ 84.233566][ T6196] nf_ct_netns_get+0x87/0xc0 [ 84.233608][ T6196] connlimit_mt_check+0x4a/0x150 [ 84.233711][ T6196] xt_check_match+0x2ad/0x4f0 [ 84.233741][ T6196] ? strnlen+0x28/0x50 [ 84.233771][ T6196] ? strcmp+0x22/0x50 [ 84.233790][ T6196] ? xt_find_match+0x1d1/0x210 [ 84.233853][ T6196] translate_table+0xa9c/0xf90 [ 84.233881][ T6196] do_ipt_set_ctl+0x66f/0x820 [ 84.233970][ T6196] ? _raw_spin_unlock_bh+0x36/0x40 [ 84.234008][ T6196] ? tcp_release_cb+0xf1/0x370 [ 84.234031][ T6196] nf_setsockopt+0x199/0x1b0 [ 84.234053][ T6196] ip_setsockopt+0x102/0x110 [ 84.234143][ T6196] tcp_setsockopt+0x98/0xb0 [ 84.234169][ T6196] sock_common_setsockopt+0x69/0x80 [ 84.234193][ T6196] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 84.234218][ T6196] __sys_setsockopt+0x184/0x200 [ 84.234330][ T6196] __x64_sys_setsockopt+0x64/0x80 [ 84.234401][ T6196] x64_sys_call+0x20ec/0x3000 [ 84.234466][ T6196] do_syscall_64+0xd2/0x200 [ 84.234485][ T6196] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 84.234511][ T6196] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 84.234591][ T6196] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.234612][ T6196] RIP: 0033:0x7f3fbee4f6c9 [ 84.234625][ T6196] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 84.234716][ T6196] RSP: 002b:00007f3fbd8b7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 84.234738][ T6196] RAX: ffffffffffffffda RBX: 00007f3fbf0a5fa0 RCX: 00007f3fbee4f6c9 [ 84.234750][ T6196] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000004 [ 84.234760][ T6196] RBP: 00007f3fbd8b7090 R08: 0000000000000570 R09: 0000000000000000 [ 84.234771][ T6196] R10: 0000200000001640 R11: 0000000000000246 R12: 0000000000000001 [ 84.234782][ T6196] R13: 00007f3fbf0a6038 R14: 00007f3fbf0a5fa0 R15: 00007fff7bad5e98 [ 84.234799][ T6196] [ 84.522528][ T6196] xt_connlimit: cannot load conntrack support for proto=2 [ 84.605906][ T29] kauditd_printk_skb: 544 callbacks suppressed [ 84.605924][ T29] audit: type=1326 audit(1763047915.399:4604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6207 comm="syz.0.932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fbee4f6c9 code=0x7ffc0000 [ 84.635734][ T29] audit: type=1326 audit(1763047915.409:4605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6207 comm="syz.0.932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fbee4f6c9 code=0x7ffc0000 [ 84.690155][ T29] audit: type=1326 audit(1763047915.459:4606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6207 comm="syz.0.932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f3fbee4f6c9 code=0x7ffc0000 [ 84.694257][ T6205] syzkaller0: entered promiscuous mode [ 84.713590][ T29] audit: type=1326 audit(1763047915.469:4607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6207 comm="syz.0.932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f3fbee4f703 code=0x7ffc0000 [ 84.719220][ T6205] syzkaller0: entered allmulticast mode [ 84.742374][ T29] audit: type=1326 audit(1763047915.469:4608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6207 comm="syz.0.932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f3fbee4e17f code=0x7ffc0000 [ 84.771233][ T29] audit: type=1326 audit(1763047915.469:4609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6207 comm="syz.0.932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f3fbee4f757 code=0x7ffc0000 [ 84.794678][ T29] audit: type=1326 audit(1763047915.469:4610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6207 comm="syz.0.932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3fbee4df10 code=0x7ffc0000 [ 84.818060][ T29] audit: type=1326 audit(1763047915.469:4611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6207 comm="syz.0.932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f3fbee4e32a code=0x7ffc0000 [ 84.841602][ T29] audit: type=1326 audit(1763047915.469:4612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6207 comm="syz.0.932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fbee4f6c9 code=0x7ffc0000 [ 84.856103][ T6216] loop3: detected capacity change from 0 to 512 [ 84.864975][ T29] audit: type=1326 audit(1763047915.469:4613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6207 comm="syz.0.932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fbee4f6c9 code=0x7ffc0000 [ 84.915861][ T6214] xt_CT: You must specify a L4 protocol and not use inversions on it [ 84.957109][ T6213] lo speed is unknown, defaulting to 1000 [ 84.994057][ T6216] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 85.040488][ T6226] netlink: 'syz.2.934': attribute type 10 has an invalid length. [ 85.048369][ T6226] netlink: 'syz.2.934': attribute type 16 has an invalid length. [ 85.095051][ T6225] xt_CT: You must specify a L4 protocol and not use inversions on it [ 85.257466][ T6234] IPv6: Can't replace route, no match found [ 85.271728][ T1038] hid_parser_main: 19 callbacks suppressed [ 85.271828][ T1038] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 85.285134][ T1038] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 85.292573][ T1038] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 85.300138][ T1038] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 85.307596][ T1038] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 85.315121][ T1038] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 85.322578][ T1038] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 85.330008][ T1038] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 85.337464][ T1038] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 85.345536][ T1038] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 85.353143][ T1038] hid-generic 0000:0000:0000.0002: item fetching failed at offset 40/43 [ 85.365140][ T1038] hid-generic 0000:0000:0000.0002: probe with driver hid-generic failed with error -22 [ 85.429860][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.667037][ T6252] loop1: detected capacity change from 0 to 512 [ 85.709767][ T6252] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 85.788103][ T6252] ext4 filesystem being mounted at /164/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 85.895235][ T6252] __nla_validate_parse: 11 callbacks suppressed [ 85.895254][ T6252] netlink: 131740 bytes leftover after parsing attributes in process `syz.1.946'. [ 85.925949][ T6261] loop3: detected capacity change from 0 to 8192 [ 85.950806][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.963838][ T6246] 9pnet_fd: Insufficient options for proto=fd [ 85.983085][ T6261] loop3: p1 < > p2 < > p3 p4 < > [ 85.988309][ T6261] loop3: partition table partially beyond EOD, truncated [ 85.996821][ T6261] loop3: p1 start 67108864 is beyond EOD, truncated [ 86.010000][ T6261] loop3: p3 start 100859904 is beyond EOD, truncated [ 86.076985][ T6271] netlink: 40 bytes leftover after parsing attributes in process `+}[@'. [ 86.100315][ T6261] netlink: 16 bytes leftover after parsing attributes in process `syz.3.948'. [ 86.248504][ T6294] loop2: detected capacity change from 0 to 128 [ 86.269477][ T6296] xt_CT: You must specify a L4 protocol and not use inversions on it [ 86.275443][ T6295] IPv6: Can't replace route, no match found [ 86.364953][ T6305] loop2: detected capacity change from 0 to 764 [ 86.375676][ T6310] FAULT_INJECTION: forcing a failure. [ 86.375676][ T6310] name failslab, interval 1, probability 0, space 0, times 0 [ 86.388374][ T6310] CPU: 0 UID: 0 PID: 6310 Comm: syz.0.966 Not tainted syzkaller #0 PREEMPT(voluntary) [ 86.388410][ T6310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 86.388427][ T6310] Call Trace: [ 86.388509][ T6310] [ 86.388516][ T6310] __dump_stack+0x1d/0x30 [ 86.388542][ T6310] dump_stack_lvl+0xe8/0x140 [ 86.388565][ T6310] dump_stack+0x15/0x1b [ 86.388685][ T6310] should_fail_ex+0x265/0x280 [ 86.388711][ T6310] should_failslab+0x8c/0xb0 [ 86.388744][ T6310] kmem_cache_alloc_noprof+0x50/0x480 [ 86.388783][ T6310] ? __anon_vma_prepare+0x70/0x2f0 [ 86.388812][ T6310] __anon_vma_prepare+0x70/0x2f0 [ 86.388873][ T6310] do_wp_page+0x18ee/0x2510 [ 86.388900][ T6310] ? __rcu_read_lock+0x37/0x50 [ 86.388938][ T6310] handle_mm_fault+0x77d/0x2be0 [ 86.388964][ T6310] ? vma_start_read+0x141/0x1f0 [ 86.389003][ T6310] do_user_addr_fault+0x630/0x1080 [ 86.389035][ T6310] ? fpregs_assert_state_consistent+0xb4/0xe0 [ 86.389182][ T6310] exc_page_fault+0x62/0xa0 [ 86.389301][ T6310] asm_exc_page_fault+0x26/0x30 [ 86.389322][ T6310] RIP: 0033:0x7f3fbed10933 [ 86.389336][ T6310] Code: 1f 84 00 00 00 00 00 3d 00 01 00 00 75 29 45 31 f6 48 83 c4 18 44 89 f0 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 40 00 49 8b 0f <44> 88 34 01 49 83 47 10 01 eb 92 66 90 8d 90 ff fe ff ff 83 fa 1c [ 86.389354][ T6310] RSP: 002b:00007f3fbd8b64a0 EFLAGS: 00010202 [ 86.389428][ T6310] RAX: 0000000000000400 RBX: 00007f3fbd8b6540 RCX: 00007f3fb5497000 [ 86.389445][ T6310] RDX: 00007f3fbd8b66e0 RSI: 0000000000000009 RDI: 00007f3fbd8b65e0 [ 86.389462][ T6310] RBP: 00000000000000f9 R08: 0000000000000008 R09: 00000000000000aa [ 86.389476][ T6310] R10: 00000000000000c0 R11: 00007f3fbd8b6540 R12: 0000000000000001 [ 86.389492][ T6310] R13: 00007f3fbeeedc40 R14: 0000000000000020 R15: 00007f3fbd8b65e0 [ 86.389517][ T6310] [ 86.389529][ T6310] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 86.587276][ T6285] FAULT_INJECTION: forcing a failure. [ 86.587276][ T6285] name failslab, interval 1, probability 0, space 0, times 0 [ 86.600020][ T6285] CPU: 1 UID: 0 PID: 6285 Comm: syz.1.957 Not tainted syzkaller #0 PREEMPT(voluntary) [ 86.600084][ T6285] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 86.600145][ T6285] Call Trace: [ 86.600153][ T6285] [ 86.600162][ T6285] __dump_stack+0x1d/0x30 [ 86.600187][ T6285] dump_stack_lvl+0xe8/0x140 [ 86.600208][ T6285] dump_stack+0x15/0x1b [ 86.600239][ T6285] should_fail_ex+0x265/0x280 [ 86.600259][ T6285] should_failslab+0x8c/0xb0 [ 86.600301][ T6285] __kvmalloc_node_noprof+0x12e/0x670 [ 86.600365][ T6285] ? bpf_test_run_xdp_live+0x119/0x11c0 [ 86.600414][ T6285] bpf_test_run_xdp_live+0x119/0x11c0 [ 86.600453][ T6285] ? __pfx_autoremove_wake_function+0x10/0x10 [ 86.600486][ T6285] ? 0xffffffffa0205300 [ 86.600526][ T6285] ? synchronize_rcu+0x45/0x320 [ 86.600546][ T6285] ? 0xffffffffa0205300 [ 86.600558][ T6285] ? 0xffffffffa0205300 [ 86.600571][ T6285] ? bpf_dispatcher_change_prog+0x6ec/0x7f0 [ 86.600604][ T6285] ? 0xffffffffa0205300 [ 86.600629][ T6285] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 86.600686][ T6285] bpf_prog_test_run_xdp+0x525/0x970 [ 86.600747][ T6285] ? _kstrtol+0x51/0x90 [ 86.600785][ T6285] ? __rcu_read_unlock+0x4f/0x70 [ 86.600876][ T6285] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 86.600926][ T6285] bpf_prog_test_run+0x22a/0x390 [ 86.600959][ T6285] __sys_bpf+0x4c0/0x7c0 [ 86.600992][ T6285] __x64_sys_bpf+0x41/0x50 [ 86.601069][ T6285] x64_sys_call+0x2aee/0x3000 [ 86.601216][ T6285] do_syscall_64+0xd2/0x200 [ 86.601240][ T6285] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 86.601282][ T6285] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 86.601330][ T6285] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.601372][ T6285] RIP: 0033:0x7fa8b0bdf6c9 [ 86.601391][ T6285] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 86.601415][ T6285] RSP: 002b:00007fa8af63f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 86.601440][ T6285] RAX: ffffffffffffffda RBX: 00007fa8b0e35fa0 RCX: 00007fa8b0bdf6c9 [ 86.601458][ T6285] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 86.601553][ T6285] RBP: 00007fa8af63f090 R08: 0000000000000000 R09: 0000000000000000 [ 86.601569][ T6285] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 86.601585][ T6285] R13: 00007fa8b0e36038 R14: 00007fa8b0e35fa0 R15: 00007ffc23523628 [ 86.601611][ T6285] [ 86.923717][ T6315] tipc: Started in network mode [ 86.928690][ T6315] tipc: Node identity 4242292cb9fa, cluster identity 4711 [ 86.935920][ T6315] tipc: Enabled bearer , priority 0 [ 86.986218][ T6314] tipc: Resetting bearer [ 87.032079][ T6314] tipc: Disabling bearer [ 87.064049][ T6333] netlink: 4 bytes leftover after parsing attributes in process `syz.4.974'. [ 87.125206][ T6333] bond0: (slave bond_slave_1): Releasing backup interface [ 87.134275][ T6339] random: crng reseeded on system resumption [ 87.188818][ T6345] FAULT_INJECTION: forcing a failure. [ 87.188818][ T6345] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 87.202173][ T6345] CPU: 0 UID: 0 PID: 6345 Comm: syz.0.980 Not tainted syzkaller #0 PREEMPT(voluntary) [ 87.202205][ T6345] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 87.202217][ T6345] Call Trace: [ 87.202223][ T6345] [ 87.202231][ T6345] __dump_stack+0x1d/0x30 [ 87.202259][ T6345] dump_stack_lvl+0xe8/0x140 [ 87.202287][ T6345] dump_stack+0x15/0x1b [ 87.202356][ T6345] should_fail_ex+0x265/0x280 [ 87.202378][ T6345] should_fail_alloc_page+0xf2/0x100 [ 87.202421][ T6345] __alloc_frozen_pages_noprof+0xff/0x360 [ 87.202452][ T6345] alloc_pages_mpol+0xb3/0x260 [ 87.202475][ T6345] alloc_pages_noprof+0x90/0x130 [ 87.202567][ T6345] pte_alloc_one+0x1e/0xd0 [ 87.202592][ T6345] __pte_alloc+0x32/0x290 [ 87.202663][ T6345] handle_mm_fault+0x1c18/0x2be0 [ 87.202697][ T6345] ? vma_start_read+0x141/0x1f0 [ 87.202733][ T6345] do_user_addr_fault+0x630/0x1080 [ 87.202757][ T6345] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 87.202824][ T6345] exc_page_fault+0x62/0xa0 [ 87.202867][ T6345] asm_exc_page_fault+0x26/0x30 [ 87.202890][ T6345] RIP: 0033:0x7f3fbed109d6 [ 87.202906][ T6345] Code: f0 72 6e 48 63 cd 48 01 c1 49 39 4f 08 72 4c 8d 4d ff 85 ed 74 33 66 0f 1f 44 00 00 48 39 f0 72 1b 4d 8b 07 49 89 c1 49 29 f1 <47> 0f b6 0c 08 45 84 c9 74 08 45 88 0c 00 49 8b 47 10 48 83 c0 01 [ 87.202925][ T6345] RSP: 002b:00007f3fbd8b64a0 EFLAGS: 00010246 [ 87.203001][ T6345] RAX: 0000000000000001 RBX: 00007f3fbd8b6540 RCX: 0000000000000101 [ 87.203015][ T6345] RDX: 0000000000000010 RSI: 0000000000000001 RDI: 00007f3fbd8b65e0 [ 87.203027][ T6345] RBP: 0000000000000102 R08: 00007f3fb5497000 R09: 0000000000000000 [ 87.203087][ T6345] R10: 0000000000000000 R11: 00007f3fbd8b6550 R12: 0000000000000001 [ 87.203103][ T6345] R13: 00007f3fbeeedc40 R14: 0000000000000000 R15: 00007f3fbd8b65e0 [ 87.203127][ T6345] [ 87.203139][ T6345] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 87.272776][ T6329] loop2: detected capacity change from 0 to 512 [ 87.432454][ T6329] EXT4-fs error (device loop2): ext4_orphan_get:1418: comm syz.2.973: bad orphan inode 11862016 [ 87.466504][ T6329] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 87.478593][ T6357] netlink: 'syz.1.981': attribute type 12 has an invalid length. [ 87.479801][ T6329] ext4 filesystem being mounted at /198/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 87.532377][ T6363] netlink: 'syz.0.983': attribute type 10 has an invalid length. [ 87.570992][ T6360] xt_CT: You must specify a L4 protocol and not use inversions on it [ 87.623048][ T6367] sctp: [Deprecated]: syz.1.986 (pid 6367) Use of int in maxseg socket option. [ 87.623048][ T6367] Use struct sctp_assoc_value instead [ 87.657787][ T6367] team0 (unregistering): Port device team_slave_0 removed [ 87.681862][ T6367] team0 (unregistering): Port device team_slave_1 removed [ 87.706353][ T6367] team0 (unregistering): Port device dummy0 removed [ 87.744942][ T3427] syz!: Port: 1 Link DOWN [ 87.803476][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 87.862981][ T6385] FAULT_INJECTION: forcing a failure. [ 87.862981][ T6385] name failslab, interval 1, probability 0, space 0, times 0 [ 87.875737][ T6385] CPU: 0 UID: 0 PID: 6385 Comm: syz.1.995 Not tainted syzkaller #0 PREEMPT(voluntary) [ 87.875772][ T6385] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 87.875801][ T6385] Call Trace: [ 87.875811][ T6385] [ 87.875821][ T6385] __dump_stack+0x1d/0x30 [ 87.875849][ T6385] dump_stack_lvl+0xe8/0x140 [ 87.875878][ T6385] dump_stack+0x15/0x1b [ 87.875901][ T6385] should_fail_ex+0x265/0x280 [ 87.875928][ T6385] should_failslab+0x8c/0xb0 [ 87.876021][ T6385] __kvmalloc_node_noprof+0x12e/0x670 [ 87.876138][ T6385] ? nf_hook_entries_grow+0x1c1/0x460 [ 87.876188][ T6385] nf_hook_entries_grow+0x1c1/0x460 [ 87.876233][ T6385] __nf_register_net_hook+0x18e/0x480 [ 87.876314][ T6385] nf_register_net_hook+0x88/0x130 [ 87.876360][ T6385] nf_register_net_hooks+0x44/0x150 [ 87.876403][ T6385] nf_ct_netns_do_get+0x2b1/0x380 [ 87.876452][ T6385] nf_ct_netns_get+0x87/0xc0 [ 87.876513][ T6385] conntrack_mt_check+0x35/0xa0 [ 87.876614][ T6385] xt_check_match+0x2ad/0x4f0 [ 87.876656][ T6385] ? xt_find_match+0x1d1/0x210 [ 87.876719][ T6385] ? xt_find_match+0x1b5/0x210 [ 87.876752][ T6385] translate_table+0xa9c/0xf90 [ 87.876788][ T6385] ? _copy_from_user+0x89/0xb0 [ 87.876884][ T6385] do_ipt_set_ctl+0x66f/0x820 [ 87.876910][ T6385] ? lock_sock_nested+0x112/0x140 [ 87.876948][ T6385] nf_setsockopt+0x199/0x1b0 [ 87.877054][ T6385] ip_setsockopt+0x102/0x110 [ 87.877090][ T6385] udp_setsockopt+0x99/0xb0 [ 87.877121][ T6385] sock_common_setsockopt+0x69/0x80 [ 87.877155][ T6385] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 87.877198][ T6385] __sys_setsockopt+0x184/0x200 [ 87.877232][ T6385] __x64_sys_setsockopt+0x64/0x80 [ 87.877276][ T6385] x64_sys_call+0x20ec/0x3000 [ 87.877307][ T6385] do_syscall_64+0xd2/0x200 [ 87.877332][ T6385] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 87.877434][ T6385] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 87.877544][ T6385] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.877569][ T6385] RIP: 0033:0x7fa8b0bdf6c9 [ 87.877597][ T6385] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 87.877669][ T6385] RSP: 002b:00007fa8af63f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 87.877694][ T6385] RAX: ffffffffffffffda RBX: 00007fa8b0e35fa0 RCX: 00007fa8b0bdf6c9 [ 87.877709][ T6385] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000003 [ 87.877721][ T6385] RBP: 00007fa8af63f090 R08: 0000000000000538 R09: 0000000000000000 [ 87.877732][ T6385] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 87.877745][ T6385] R13: 00007fa8b0e36038 R14: 00007fa8b0e35fa0 R15: 00007ffc23523628 [ 87.877824][ T6385] [ 88.149864][ T6385] xt_conntrack: cannot load conntrack support for proto=2 [ 88.306091][ T6404] netlink: 'syz.0.1004': attribute type 1 has an invalid length. [ 88.327933][ T6398] loop2: detected capacity change from 0 to 2048 [ 88.339116][ T6406] ref_ctr_offset mismatch. inode: 0x41f offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x418 [ 88.398044][ T6398] Alternate GPT is invalid, using primary GPT. [ 88.404497][ T6398] loop2: p1 p2 p3 [ 88.408287][ T6398] loop2: partition table partially beyond EOD, truncated [ 88.697101][ T6429] lo speed is unknown, defaulting to 1000 [ 88.804124][ T6430] xt_CT: You must specify a L4 protocol and not use inversions on it [ 89.071670][ T6439] loop3: detected capacity change from 0 to 512 [ 89.087839][ T6439] EXT4-fs: Ignoring removed bh option [ 89.093388][ T6439] EXT4-fs: Ignoring removed mblk_io_submit option [ 89.128690][ T6439] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 89.157707][ T6439] ext4 filesystem being mounted at /196/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 89.174090][ T6445] loop2: detected capacity change from 0 to 512 [ 89.189681][ T6445] ------------[ cut here ]------------ [ 89.195320][ T6445] EA inode 11 i_nlink=2 [ 89.195647][ T6445] WARNING: CPU: 1 PID: 6445 at fs/ext4/xattr.c:1058 ext4_xattr_inode_update_ref+0x36a/0x380 [ 89.210018][ T6445] Modules linked in: [ 89.214021][ T6445] CPU: 1 UID: 0 PID: 6445 Comm: syz.2.1021 Not tainted syzkaller #0 PREEMPT(voluntary) [ 89.224298][ T6445] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 89.234396][ T6445] RIP: 0010:ext4_xattr_inode_update_ref+0x36a/0x380 [ 89.241055][ T6445] Code: 90 49 8d 7e 40 e8 06 fa b8 ff 4d 8b 6e 40 4c 89 e7 e8 1a f5 b8 ff 41 8b 56 48 48 c7 c7 d5 d2 55 86 4c 89 ee e8 87 f5 67 ff 90 <0f> 0b 90 90 e9 ff fe ff ff e8 08 e4 b5 03 0f 1f 84 00 00 00 00 00 [ 89.260795][ T6445] RSP: 0018:ffffc90010ecb5a0 EFLAGS: 00010246 [ 89.266901][ T6445] RAX: 291d82b508fe8b00 RBX: ffff888105582468 RCX: 0000000000080000 [ 89.275001][ T6445] RDX: ffffc90002e56000 RSI: 0000000000003d42 RDI: 0000000000003d43 [ 89.282995][ T6445] RBP: 0000000000000002 R08: 0001c90010ecb427 R09: 0000000000000000 [ 89.291039][ T6445] R10: 00000000ffffffff R11: 0000000000000002 R12: ffff888105582418 [ 89.299074][ T6445] R13: 000000000000000b R14: ffff8881055823d0 R15: 0000000000000001 [ 89.307206][ T6445] FS: 00007f5d0763f6c0(0000) GS:ffff8882aef13000(0000) knlGS:0000000000000000 [ 89.316288][ T6445] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 89.322924][ T6445] CR2: 00007f5d08bc29e0 CR3: 00000001389f0000 CR4: 00000000003506f0 [ 89.330947][ T6445] Call Trace: [ 89.334247][ T6445] [ 89.337223][ T6445] ext4_xattr_set_entry+0x77f/0x1020 [ 89.342615][ T6445] ext4_xattr_ibody_set+0x184/0x3c0 [ 89.347912][ T6445] ext4_expand_extra_isize_ea+0xcbb/0x11f0 [ 89.353845][ T6445] __ext4_expand_extra_isize+0x246/0x280 [ 89.359546][ T6445] __ext4_mark_inode_dirty+0x29d/0x3f0 [ 89.365215][ T6445] ext4_evict_inode+0x80e/0xd90 [ 89.370188][ T6445] ? __pfx_ext4_evict_inode+0x10/0x10 [ 89.375785][ T6445] evict+0x2e3/0x550 [ 89.379705][ T6445] ? __dquot_initialize+0x146/0x7c0 [ 89.384980][ T6445] iput+0x4ed/0x650 [ 89.388899][ T6445] ext4_process_orphan+0x1a9/0x1c0 [ 89.394193][ T6445] ext4_orphan_cleanup+0x6a8/0xa00 [ 89.399373][ T6445] ext4_fill_super+0x3483/0x3810 [ 89.404366][ T6445] ? snprintf+0x86/0xb0 [ 89.408601][ T6445] ? set_blocksize+0x1a8/0x310 [ 89.413390][ T6445] ? sb_set_blocksize+0xe3/0x100 [ 89.418537][ T6445] ? setup_bdev_super+0x30e/0x370 [ 89.423602][ T6445] ? __pfx_ext4_fill_super+0x10/0x10 [ 89.428940][ T6445] get_tree_bdev_flags+0x291/0x300 [ 89.434124][ T6445] ? __pfx_ext4_fill_super+0x10/0x10 [ 89.439506][ T6445] get_tree_bdev+0x1f/0x30 [ 89.443995][ T6445] ext4_get_tree+0x1c/0x30 [ 89.448514][ T6445] vfs_get_tree+0x57/0x1d0 [ 89.452982][ T6445] do_new_mount+0x24d/0x660 [ 89.457532][ T6445] path_mount+0x4a5/0xb70 [ 89.461894][ T6445] ? user_path_at+0x109/0x130 [ 89.466715][ T6445] __se_sys_mount+0x28c/0x2e0 [ 89.471431][ T6445] __x64_sys_mount+0x67/0x80 [ 89.476078][ T6445] x64_sys_call+0x2b51/0x3000 [ 89.480830][ T6445] do_syscall_64+0xd2/0x200 [ 89.485399][ T6445] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 89.491501][ T6445] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 89.497321][ T6445] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 89.503256][ T6445] RIP: 0033:0x7f5d08be0e6a [ 89.507717][ T6445] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 89.527410][ T6445] RSP: 002b:00007f5d0763ee68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 89.535884][ T6445] RAX: ffffffffffffffda RBX: 00007f5d0763eef0 RCX: 00007f5d08be0e6a [ 89.543879][ T6445] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007f5d0763eeb0 [ 89.551894][ T6445] RBP: 0000200000000180 R08: 00007f5d0763eef0 R09: 0000000000800700 [ 89.560061][ T6445] R10: 0000000000800700 R11: 0000000000000246 R12: 00002000000001c0 [ 89.568132][ T6445] R13: 00007f5d0763eeb0 R14: 000000000000046f R15: 000000000000002c [ 89.576156][ T6445] [ 89.579187][ T6445] ---[ end trace 0000000000000000 ]--- [ 89.586392][ T6439] EXT4-fs error (device loop3): __ext4_remount:6748: comm syz.3.1018: Abort forced by user [ 89.596591][ T6439] EXT4-fs (loop3): Remounting filesystem read-only [ 89.603138][ T6439] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 89.611580][ T6445] EXT4-fs error (device loop2): ext4_xattr_inode_iget:441: inode #18: comm syz.2.1021: iget: bad extra_isize 90 (inode size 256) [ 89.649427][ T6445] EXT4-fs (loop2): Remounting filesystem read-only [ 89.667726][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.699295][ T6445] EXT4-fs warning (device loop2): ext4_evict_inode:274: xattr delete (err -30) [ 89.731007][ T29] kauditd_printk_skb: 709 callbacks suppressed [ 89.731025][ T29] audit: type=1326 audit(1763047920.529:5323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6458 comm="syz.0.1026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fbee4f6c9 code=0x7ffc0000 [ 89.740004][ T6445] EXT4-fs (loop2): 1 orphan inode deleted [ 89.791841][ T29] audit: type=1326 audit(1763047920.529:5324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6458 comm="syz.0.1026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fbee4f6c9 code=0x7ffc0000 [ 89.815435][ T29] audit: type=1326 audit(1763047920.569:5325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6458 comm="syz.0.1026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f3fbee4f6c9 code=0x7ffc0000 [ 89.816941][ T6445] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 89.838809][ T29] audit: type=1326 audit(1763047920.569:5326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6458 comm="syz.0.1026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fbee4f6c9 code=0x7ffc0000 [ 89.838879][ T29] audit: type=1326 audit(1763047920.569:5327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6458 comm="syz.0.1026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fbee4f6c9 code=0x7ffc0000 [ 89.838913][ T29] audit: type=1326 audit(1763047920.569:5328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6458 comm="syz.0.1026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=193 compat=0 ip=0x7f3fbee4f6c9 code=0x7ffc0000 [ 89.903371][ T6467] FAULT_INJECTION: forcing a failure. [ 89.903371][ T6467] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 89.921555][ T29] audit: type=1326 audit(1763047920.569:5329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6458 comm="syz.0.1026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fbee4f6c9 code=0x7ffc0000 [ 89.934622][ T6467] CPU: 1 UID: 0 PID: 6467 Comm: syz.0.1029 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 89.934717][ T6467] Tainted: [W]=WARN [ 89.934727][ T6467] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 89.934745][ T6467] Call Trace: [ 89.934755][ T6467] [ 89.934766][ T6467] __dump_stack+0x1d/0x30 [ 89.934800][ T6467] dump_stack_lvl+0xe8/0x140 [ 89.934937][ T6467] dump_stack+0x15/0x1b [ 89.934961][ T6467] should_fail_ex+0x265/0x280 [ 89.934990][ T6467] should_fail+0xb/0x20 [ 89.935050][ T6467] should_fail_usercopy+0x1a/0x20 [ 89.935080][ T6467] _copy_from_iter+0xd2/0xe80 [ 89.935114][ T6467] ? skb_set_owner_w+0x16a/0x1c0 [ 89.935142][ T6467] ? sock_alloc_send_pskb+0x44c/0x4e0 [ 89.935247][ T6467] skb_copy_datagram_from_iter+0xb1/0x490 [ 89.935278][ T6467] ? sock_def_readable+0xaf/0x190 [ 89.935309][ T6467] ? __rcu_read_unlock+0x4f/0x70 [ 89.935409][ T6467] ? skb_put+0xa9/0xf0 [ 89.935459][ T6467] unix_stream_sendmsg+0x62c/0xb90 [ 89.935520][ T6467] ? __pfx_unix_stream_sendmsg+0x10/0x10 [ 89.935576][ T6467] __sock_sendmsg+0x145/0x180 [ 89.935668][ T6467] ____sys_sendmsg+0x31e/0x4e0 [ 89.935719][ T6467] ___sys_sendmsg+0x17b/0x1d0 [ 89.935788][ T6467] __x64_sys_sendmsg+0xd4/0x160 [ 89.935849][ T6467] x64_sys_call+0x191e/0x3000 [ 89.935885][ T6467] do_syscall_64+0xd2/0x200 [ 89.935914][ T6467] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 89.935955][ T6467] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 89.936140][ T6467] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 89.936172][ T6467] RIP: 0033:0x7f3fbee4f6c9 [ 89.936195][ T6467] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 89.936274][ T6467] RSP: 002b:00007f3fbd8b7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 89.936301][ T6467] RAX: ffffffffffffffda RBX: 00007f3fbf0a5fa0 RCX: 00007f3fbee4f6c9 [ 89.936319][ T6467] RDX: 0000000000000003 RSI: 0000200000000980 RDI: 0000000000000003 [ 89.936394][ T6467] RBP: 00007f3fbd8b7090 R08: 0000000000000000 R09: 0000000000000000 [ 89.936412][ T6467] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 89.936501][ T6467] R13: 00007f3fbf0a6038 R14: 00007f3fbf0a5fa0 R15: 00007fff7bad5e98 [ 89.936528][ T6467] [ 90.076787][ T6468] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1030'. [ 90.081700][ T29] audit: type=1326 audit(1763047920.569:5330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6458 comm="syz.0.1026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fbee4f6c9 code=0x7ffc0000 [ 90.100734][ T6468] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1030'. [ 90.103413][ T29] audit: type=1326 audit(1763047920.759:5331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6464 comm="syz.1.1030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8b0bdf6c9 code=0x7ffc0000 [ 90.185978][ T6465] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 90.193728][ T29] audit: type=1326 audit(1763047920.759:5332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6464 comm="syz.1.1030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8b0bdf6c9 code=0x7ffc0000 [ 90.282619][ T6475] ref_ctr_offset mismatch. inode: 0x435 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x418 [ 90.357655][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.471459][ T6499] can0: slcan on ptm0. [ 90.482108][ T6499] IPv6: Can't replace route, no match found [ 90.545200][ T6507] loop1: detected capacity change from 0 to 512 [ 90.552121][ T6502] xt_CT: You must specify a L4 protocol and not use inversions on it [ 90.568947][ T6507] EXT4-fs: Ignoring removed nomblk_io_submit option [ 90.582526][ T6507] EXT4-fs error (device loop1): ext4_expand_extra_isize_ea:2803: inode #11: comm syz.1.1046: corrupted xattr block 95: invalid header [ 90.597142][ T6497] can0 (unregistered): slcan off ptm0. [ 90.603042][ T6511] lo speed is unknown, defaulting to 1000 [ 90.609344][ T6511] lo speed is unknown, defaulting to 1000 [ 90.615099][ T6507] EXT4-fs (loop1): Remounting filesystem read-only [ 90.615121][ T6507] EXT4-fs warning (device loop1): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 90.615156][ T6507] EXT4-fs (loop1): 1 orphan inode deleted [ 90.615707][ T6507] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 90.622491][ T6511] lo speed is unknown, defaulting to 1000 [ 90.657337][ T6511] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 90.667580][ T6511] lo speed is unknown, defaulting to 1000 [ 90.673905][ T6511] lo speed is unknown, defaulting to 1000 [ 90.680200][ T6511] lo speed is unknown, defaulting to 1000 [ 90.680666][ T6511] lo speed is unknown, defaulting to 1000 [ 90.689679][ T6507] EXT4-fs (loop1): shut down requested (1) [ 90.692221][ T6511] lo speed is unknown, defaulting to 1000 [ 90.731645][ T6511] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1047'. [ 90.744657][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.793952][ T6522] loop3: detected capacity change from 0 to 512 [ 90.807377][ T6524] ref_ctr_offset mismatch. inode: 0x407 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x418 [ 90.811340][ T6522] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 90.859913][ T6522] EXT4-fs (loop3): 1 truncate cleaned up [ 90.894419][ T6522] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 91.130130][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.186054][ T6546] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1060'. [ 91.269048][ T6546] team0: Port device team_slave_1 removed [ 91.286845][ T6549] loop3: detected capacity change from 0 to 1024 [ 91.304493][ T6549] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 91.345082][ T6549] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 91.363347][ T6549] EXT4-fs (loop3): orphan cleanup on readonly fs [ 91.384075][ T6549] EXT4-fs error (device loop3): __ext4_get_inode_loc:4832: comm syz.3.1060: Invalid inode table block 0 in block_group 0 [ 91.421203][ T6549] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 91.440784][ T6549] EXT4-fs error (device loop3): ext4_quota_write:7334: inode #3: comm syz.3.1060: mark_inode_dirty error [ 91.452373][ T6549] EXT4-fs error (device loop3): ext4_acquire_dquot:6945: comm syz.3.1060: Failed to acquire dquot type 0 [ 91.463931][ T6549] EXT4-fs error (device loop3): __ext4_get_inode_loc:4832: comm syz.3.1060: Invalid inode table block 0 in block_group 0 [ 91.478701][ T6549] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 91.489484][ T6549] EXT4-fs error (device loop3): ext4_ext_truncate:4475: inode #15: comm syz.3.1060: mark_inode_dirty error [ 91.514925][ T6549] EXT4-fs error (device loop3): __ext4_get_inode_loc:4832: comm syz.3.1060: Invalid inode table block 0 in block_group 0 [ 91.535190][ T6549] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 91.554978][ T6549] EXT4-fs error (device loop3) in ext4_orphan_del:301: Corrupt filesystem [ 91.555589][ T6562] netlink: 'syz.0.1066': attribute type 13 has an invalid length. [ 91.571554][ T6549] EXT4-fs error (device loop3): __ext4_get_inode_loc:4832: comm syz.3.1060: Invalid inode table block 0 in block_group 0 [ 91.594783][ T6549] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 91.605285][ T6549] EXT4-fs error (device loop3): ext4_truncate:4637: inode #15: comm syz.3.1060: mark_inode_dirty error [ 91.619322][ T6549] EXT4-fs error (device loop3) in ext4_process_orphan:343: Corrupt filesystem [ 91.630634][ T6549] EXT4-fs (loop3): 1 truncate cleaned up [ 91.636882][ T6549] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 91.662585][ T6568] loop1: detected capacity change from 0 to 512 [ 91.726638][ T803] lo speed is unknown, defaulting to 1000 [ 91.798515][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.824548][ T6577] loop1: detected capacity change from 0 to 128 [ 91.840798][ T6579] loop3: detected capacity change from 0 to 512 [ 91.842360][ T6577] FAT-fs (loop1): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 91.848115][ T6579] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 91.877594][ T6577] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 91.885506][ T6577] FAT-fs (loop1): Filesystem has been set read-only [ 91.902484][ T6577] syz.1.1070: attempt to access beyond end of device [ 91.902484][ T6577] loop1: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 91.931682][ T6583] program syz.1.1070 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 91.941840][ T6577] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 91.949747][ T6577] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 91.990392][ T6577] syz.1.1070: attempt to access beyond end of device [ 91.990392][ T6577] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 92.029675][ T6577] syz.1.1070: attempt to access beyond end of device [ 92.029675][ T6577] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 92.171006][ T6603] xt_CT: You must specify a L4 protocol and not use inversions on it [ 92.233313][ T6605] netlink: 'syz.2.1080': attribute type 10 has an invalid length. [ 92.243549][ T6605] netlink: 'syz.2.1080': attribute type 10 has an invalid length. [ 92.258138][ T6605] team0: Port device dummy0 removed [ 92.267038][ T6605] .`: (slave dummy0): Enslaving as an active interface with an up link [ 92.305184][ T6605] netlink: 'syz.2.1080': attribute type 10 has an invalid length. [ 92.313136][ T6605] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1080'. [ 92.368282][ T6605] team0: Failed to send port change of device geneve1 via netlink (err -105) [ 92.389142][ T6605] team0: Failed to send options change via netlink (err -105) [ 92.396711][ T6605] team0: Port device geneve1 added [ 92.427686][ T3468] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.457286][ T6613] 9pnet_fd: Insufficient options for proto=fd [ 92.483706][ T3468] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.512972][ T3468] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.535650][ T3468] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.633140][ T6622] loop2: detected capacity change from 0 to 512 [ 92.689826][ T6622] EXT4-fs (loop2): too many log groups per flexible block group [ 92.699917][ T6621] lo speed is unknown, defaulting to 1000 [ 92.719817][ T6622] EXT4-fs (loop2): failed to initialize mballoc (-12) [ 92.729176][ T6621] lo speed is unknown, defaulting to 1000 [ 92.759831][ T6622] EXT4-fs (loop2): mount failed [ 92.890059][ T6628] ref_ctr_offset mismatch. inode: 0x4a7 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x418 [ 93.022389][ T6635] loop2: detected capacity change from 0 to 1024 [ 93.073527][ T6635] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 93.177341][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.308253][ T6661] loop1: detected capacity change from 0 to 1024 [ 93.335873][ T6661] EXT4-fs: Ignoring removed orlov option [ 93.367250][ T6661] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 93.512373][ T6675] xt_CT: You must specify a L4 protocol and not use inversions on it [ 93.889561][ T6695] netlink: 'syz.2.1109': attribute type 4 has an invalid length. [ 93.909424][ T6695] netlink: 'syz.2.1109': attribute type 4 has an invalid length. [ 93.936080][ T803] lo speed is unknown, defaulting to 1000 [ 93.941903][ T803] syz0: Port: 1 Link ACTIVE [ 94.236362][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.278057][ T6720] FAULT_INJECTION: forcing a failure. [ 94.278057][ T6720] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 94.291251][ T6720] CPU: 0 UID: 0 PID: 6720 Comm: syz.1.1118 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 94.291388][ T6720] Tainted: [W]=WARN [ 94.291395][ T6720] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 94.291409][ T6720] Call Trace: [ 94.291417][ T6720] [ 94.291426][ T6720] __dump_stack+0x1d/0x30 [ 94.291457][ T6720] dump_stack_lvl+0xe8/0x140 [ 94.291486][ T6720] dump_stack+0x15/0x1b [ 94.291511][ T6720] should_fail_ex+0x265/0x280 [ 94.291615][ T6720] should_fail+0xb/0x20 [ 94.291637][ T6720] should_fail_usercopy+0x1a/0x20 [ 94.291667][ T6720] copy_folio_from_iter_atomic+0x278/0x11b0 [ 94.291757][ T6720] ? shmem_write_begin+0xa8/0x190 [ 94.291784][ T6720] ? shmem_write_begin+0xe1/0x190 [ 94.291847][ T6720] generic_perform_write+0x2c2/0x490 [ 94.291884][ T6720] shmem_file_write_iter+0xc5/0xf0 [ 94.291921][ T6720] do_iter_readv_writev+0x4a1/0x540 [ 94.291966][ T6720] vfs_writev+0x2df/0x8b0 [ 94.292038][ T6720] __se_sys_pwritev2+0xfc/0x1c0 [ 94.292082][ T6720] __x64_sys_pwritev2+0x67/0x80 [ 94.292123][ T6720] x64_sys_call+0x2c59/0x3000 [ 94.292169][ T6720] do_syscall_64+0xd2/0x200 [ 94.292197][ T6720] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 94.292238][ T6720] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 94.292333][ T6720] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.292363][ T6720] RIP: 0033:0x7fa8b0bdf6c9 [ 94.292379][ T6720] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 94.292477][ T6720] RSP: 002b:00007fa8af63f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 94.292504][ T6720] RAX: ffffffffffffffda RBX: 00007fa8b0e35fa0 RCX: 00007fa8b0bdf6c9 [ 94.292522][ T6720] RDX: 0000000000000001 RSI: 00002000000001c0 RDI: 0000000000000004 [ 94.292536][ T6720] RBP: 00007fa8af63f090 R08: 0000000000000000 R09: 0000000000000000 [ 94.292613][ T6720] R10: 0000000000000e7b R11: 0000000000000246 R12: 0000000000000001 [ 94.292631][ T6720] R13: 00007fa8b0e36038 R14: 00007fa8b0e35fa0 R15: 00007ffc23523628 [ 94.292657][ T6720] [ 94.520975][ T6722] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1120'. [ 94.652681][ T6730] ref_ctr_offset mismatch. inode: 0x4db offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x418 [ 94.720287][ T6734] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1124'. [ 94.748870][ T29] kauditd_printk_skb: 410 callbacks suppressed [ 94.748914][ T29] audit: type=1326 audit(1763047925.549:5741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6735 comm="syz.2.1125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d08bdf6c9 code=0x7ffc0000 [ 94.789798][ T29] audit: type=1326 audit(1763047925.579:5742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6735 comm="syz.2.1125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5d08bdf6c9 code=0x7ffc0000 [ 94.813504][ T29] audit: type=1326 audit(1763047925.579:5743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6735 comm="syz.2.1125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d08bdf6c9 code=0x7ffc0000 [ 94.837171][ T29] audit: type=1326 audit(1763047925.579:5744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6735 comm="syz.2.1125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d08bdf6c9 code=0x7ffc0000 [ 94.860729][ T29] audit: type=1326 audit(1763047925.579:5745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6735 comm="syz.2.1125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5d08bdf6c9 code=0x7ffc0000 [ 94.884236][ T29] audit: type=1326 audit(1763047925.579:5746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6735 comm="syz.2.1125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d08bdf6c9 code=0x7ffc0000 [ 94.908476][ T29] audit: type=1326 audit(1763047925.579:5747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6735 comm="syz.2.1125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d08bdf6c9 code=0x7ffc0000 [ 94.932066][ T29] audit: type=1326 audit(1763047925.579:5748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6735 comm="syz.2.1125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5d08bdf6c9 code=0x7ffc0000 [ 94.955670][ T29] audit: type=1326 audit(1763047925.579:5749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6735 comm="syz.2.1125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d08bdf6c9 code=0x7ffc0000 [ 94.979129][ T29] audit: type=1326 audit(1763047925.579:5750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6735 comm="syz.2.1125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d08bdf6c9 code=0x7ffc0000 [ 95.029306][ T6740] loop3: detected capacity change from 0 to 512 [ 95.056138][ T6736] random: crng reseeded on system resumption [ 95.072384][ T6740] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 223 vs 220 free clusters [ 95.091487][ T6740] EXT4-fs (loop3): Remounting filesystem read-only [ 95.098286][ T6740] EXT4-fs warning (device loop3): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 95.108552][ T6740] EXT4-fs (loop3): 1 orphan inode deleted [ 95.114603][ T6740] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 95.194795][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.226912][ T6761] xt_CT: You must specify a L4 protocol and not use inversions on it [ 95.242038][ T6757] netlink: 'syz.2.1131': attribute type 6 has an invalid length. [ 95.271216][ T6757] IPv6: Can't replace route, no match found [ 95.320787][ T6757] 9p: Unknown access argument o: -22 [ 96.065175][ T6800] lo speed is unknown, defaulting to 1000 [ 96.071444][ T6800] lo speed is unknown, defaulting to 1000 [ 96.087674][ T6810] ref_ctr_offset mismatch. inode: 0x506 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x418 [ 96.173061][ T6803] lo speed is unknown, defaulting to 1000 [ 96.179466][ T6803] lo speed is unknown, defaulting to 1000 [ 96.398581][ T6835] netlink: 'syz.2.1154': attribute type 10 has an invalid length. [ 96.424404][ T6835] .`: (slave dummy0): Releasing backup interface [ 96.441433][ T6836] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1156'. [ 96.444929][ T6838] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1157'. [ 96.475364][ T6835] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 96.487050][ T6835] team0: Failed to send options change via netlink (err -105) [ 96.494815][ T6835] team0: Port device dummy0 added [ 96.504523][ T6838] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 96.526836][ T6838] bond_slave_0: left promiscuous mode [ 96.562728][ T6838] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 96.571378][ T6849] ref_ctr_offset mismatch. inode: 0x46d offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x418 [ 96.595210][ T6838] bond_slave_1: left promiscuous mode [ 96.629126][ T6838] .` (unregistering): Released all slaves [ 96.648061][ T6854] loop2: detected capacity change from 0 to 512 [ 96.669765][ T6854] ext3: Unknown parameter 'obj_user' [ 96.704821][ T6854] loop2: detected capacity change from 0 to 512 [ 96.735876][ T6854] ext4: Unknown parameter 'euid' [ 96.785392][ T6865] FAULT_INJECTION: forcing a failure. [ 96.785392][ T6865] name failslab, interval 1, probability 0, space 0, times 0 [ 96.798307][ T6865] CPU: 1 UID: 0 PID: 6865 Comm: syz.1.1166 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 96.798341][ T6865] Tainted: [W]=WARN [ 96.798348][ T6865] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 96.798408][ T6865] Call Trace: [ 96.798416][ T6865] [ 96.798426][ T6865] __dump_stack+0x1d/0x30 [ 96.798458][ T6865] dump_stack_lvl+0xe8/0x140 [ 96.798485][ T6865] dump_stack+0x15/0x1b [ 96.798509][ T6865] should_fail_ex+0x265/0x280 [ 96.798580][ T6865] should_failslab+0x8c/0xb0 [ 96.798627][ T6865] __kmalloc_node_noprof+0xaa/0x580 [ 96.798669][ T6865] ? crypto_create_tfm_node+0x5c/0x250 [ 96.798704][ T6865] crypto_create_tfm_node+0x5c/0x250 [ 96.798845][ T6865] ? crypto_mod_get+0x5a/0x90 [ 96.798907][ T6865] crypto_spawn_tfm2+0x43/0x80 [ 96.798935][ T6865] ? __pfx_lskcipher_init_tfm_simple+0x10/0x10 [ 96.798980][ T6865] lskcipher_init_tfm_simple+0x26/0x60 [ 96.799017][ T6865] ? __pfx_lskcipher_init_tfm_simple+0x10/0x10 [ 96.799103][ T6865] crypto_lskcipher_init_tfm+0x6c/0x80 [ 96.799144][ T6865] crypto_create_tfm_node+0x108/0x250 [ 96.799189][ T6865] crypto_init_lskcipher_ops_sg+0x3f/0xa0 [ 96.799242][ T6865] crypto_skcipher_init_tfm+0xb6/0x140 [ 96.799286][ T6865] crypto_create_tfm_node+0x108/0x250 [ 96.799328][ T6865] crypto_spawn_tfm2+0x43/0x80 [ 96.799368][ T6865] crypto_authenc_init_tfm+0x50/0x100 [ 96.799404][ T6865] ? __pfx_crypto_authenc_init_tfm+0x10/0x10 [ 96.799441][ T6865] crypto_aead_init_tfm+0xa0/0xc0 [ 96.799476][ T6865] crypto_create_tfm_node+0x108/0x250 [ 96.799599][ T6865] crypto_spawn_tfm2+0x43/0x80 [ 96.799625][ T6865] aead_init_geniv+0xe7/0x140 [ 96.799702][ T6865] ? __pfx_aead_init_geniv+0x10/0x10 [ 96.799744][ T6865] crypto_aead_init_tfm+0xa0/0xc0 [ 96.799779][ T6865] crypto_create_tfm_node+0x108/0x250 [ 96.799902][ T6865] crypto_alloc_tfm_node+0xdc/0x2b0 [ 96.799970][ T6865] crypto_alloc_aead+0x2d/0x40 [ 96.800003][ T6865] esp_init_state+0x3f3/0xa00 [ 96.800117][ T6865] __xfrm_init_state+0x740/0xbb0 [ 96.800180][ T6865] xfrm_init_state+0x1a/0x80 [ 96.800217][ T6865] pfkey_add+0xebc/0x12e0 [ 96.800260][ T6865] pfkey_sendmsg+0x718/0x900 [ 96.800357][ T6865] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 96.800394][ T6865] __sock_sendmsg+0x145/0x180 [ 96.800428][ T6865] ____sys_sendmsg+0x31e/0x4e0 [ 96.800557][ T6865] ___sys_sendmsg+0x17b/0x1d0 [ 96.800599][ T6865] __x64_sys_sendmsg+0xd4/0x160 [ 96.800630][ T6865] x64_sys_call+0x191e/0x3000 [ 96.800661][ T6865] do_syscall_64+0xd2/0x200 [ 96.800733][ T6865] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 96.800772][ T6865] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 96.800827][ T6865] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.800883][ T6865] RIP: 0033:0x7fa8b0bdf6c9 [ 96.800903][ T6865] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 96.800928][ T6865] RSP: 002b:00007fa8af63f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 96.801010][ T6865] RAX: ffffffffffffffda RBX: 00007fa8b0e35fa0 RCX: 00007fa8b0bdf6c9 [ 96.801028][ T6865] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004 [ 96.801044][ T6865] RBP: 00007fa8af63f090 R08: 0000000000000000 R09: 0000000000000000 [ 96.801061][ T6865] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 96.801078][ T6865] R13: 00007fa8b0e36038 R14: 00007fa8b0e35fa0 R15: 00007ffc23523628 [ 96.801103][ T6865] [ 97.143856][ T6867] netlink: 83992 bytes leftover after parsing attributes in process `syz.3.1167'. [ 97.166879][ T6867] netlink: zone id is out of range [ 97.172074][ T6867] netlink: zone id is out of range [ 97.183333][ T6867] netlink: zone id is out of range [ 97.188941][ T6867] netlink: zone id is out of range [ 97.202364][ T6867] netlink: set zone limit has 8 unknown bytes [ 97.294399][ T6881] netlink: 'syz.1.1170': attribute type 10 has an invalid length. [ 97.482152][ T6891] lo speed is unknown, defaulting to 1000 [ 97.539618][ T6891] lo speed is unknown, defaulting to 1000 [ 97.679085][ T6924] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 97.707810][ T6928] netlink: 'syz.3.1189': attribute type 10 has an invalid length. [ 97.826382][ T6938] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1195'. [ 97.869057][ T6939] ref_ctr_offset mismatch. inode: 0x4b1 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x418 [ 97.934416][ T6947] ------------[ cut here ]------------ [ 97.940084][ T6947] verifier bug: REG INVARIANTS VIOLATION (true_reg2): range bounds violation u64=[0x17, 0x10] s64=[0x17, 0x10] u32=[0x17, 0x10] s32=[0x17, 0x10] var_off=(0x10, 0x0) [ 97.957738][ T6947] WARNING: CPU: 1 PID: 6947 at kernel/bpf/verifier.c:2721 reg_bounds_sanity_check+0x673/0x680 [ 97.968362][ T6947] Modules linked in: [ 97.972619][ T6947] CPU: 1 UID: 0 PID: 6947 Comm: syz.2.1199 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 97.984175][ T6947] Tainted: [W]=WARN [ 97.988041][ T6947] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 97.998386][ T6947] RIP: 0010:reg_bounds_sanity_check+0x673/0x680 [ 98.004725][ T6947] Code: 7c 24 18 41 ff 74 24 20 55 41 56 4d 89 ee 53 48 8b 5c 24 30 ff 74 24 40 ff 74 24 50 ff 74 24 30 e8 b2 f6 ba ff 48 83 c4 38 90 <0f> 0b 90 90 e9 02 fb ff ff 0f 1f 40 00 90 90 90 90 90 90 90 90 90 [ 98.024637][ T6947] RSP: 0018:ffffc90012e1f408 EFLAGS: 00010282 [ 98.030944][ T6947] RAX: 5cc23e16c0d3ba00 RBX: ffff88811a3f28b0 RCX: 0000000000080000 [ 98.038994][ T6947] RDX: ffffc90002e56000 RSI: 000000000000b38b RDI: 000000000000b38c [ 98.047030][ T6947] RBP: 0000000000000010 R08: 0001c90012e1f257 R09: 0000000000000000 [ 98.050179][ T6938] Set syz1 is full, maxelem 65536 reached [ 98.055046][ T6947] R10: 00000000ffffffff R11: 0000000000000002 R12: ffff88811a3f2870 [ 98.055064][ T6947] R13: ffff88810d560000 R14: ffff88810d560000 R15: ffff88811a3f28a8 [ 98.055078][ T6947] FS: 00007f5d0763f6c0(0000) GS:ffff8882aef13000(0000) knlGS:0000000000000000 [ 98.055095][ T6947] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 98.092850][ T6947] CR2: 0000200000001000 CR3: 000000011b79e000 CR4: 00000000003506f0 [ 98.100890][ T6947] DR0: 0000200000000300 DR1: 0000000000000000 DR2: 0000000000000000 [ 98.109026][ T6947] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 98.117068][ T6947] Call Trace: [ 98.120395][ T6947] [ 98.123356][ T6947] reg_set_min_max+0x1eb/0x260 [ 98.123623][ T6954] loop2: detected capacity change from 0 to 512 [ 98.128168][ T6947] check_cond_jmp_op+0x1370/0x19e0 [ 98.128213][ T6947] do_check+0x3363/0x8460 [ 98.128255][ T6947] do_check_common+0xc5e/0x12b0 [ 98.148883][ T6947] bpf_check+0xaaae/0xd9d0 [ 98.153354][ T6947] ? __alloc_frozen_pages_noprof+0x188/0x360 [ 98.159456][ T6947] ? __vmap_pages_range_noflush+0xbc4/0xcf0 [ 98.165501][ T6947] ? _find_next_zero_bit+0x29/0xa0 [ 98.170660][ T6947] ? pcpu_block_update_hint_alloc+0x63d/0x660 [ 98.176849][ T6947] ? pcpu_block_update_hint_alloc+0x63d/0x660 [ 98.182957][ T6947] ? css_rstat_updated+0xb7/0x240 [ 98.183178][ T6954] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 98.188043][ T6947] ? __rcu_read_unlock+0x4f/0x70 [ 98.201800][ T6947] ? pcpu_memcg_post_alloc_hook+0xf1/0x150 [ 98.207720][ T6947] ? bpf_prog_alloc+0x5b/0x150 [ 98.212628][ T6947] ? pcpu_alloc_noprof+0xd29/0x1250 [ 98.218052][ T6947] ? should_fail_ex+0x30/0x280 [ 98.223097][ T6947] ? should_failslab+0x8c/0xb0 [ 98.227937][ T6947] ? __kmalloc_noprof+0x2a2/0x570 [ 98.233013][ T6947] ? security_bpf_prog_load+0x60/0x140 [ 98.233866][ T6954] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps block group descriptors [ 98.238624][ T6947] ? selinux_bpf_prog_load+0xad/0xd0 [ 98.249449][ T6954] EXT4-fs (loop2): group descriptors corrupted! [ 98.254714][ T6947] ? security_bpf_prog_load+0x9e/0x140 [ 98.266469][ T6947] bpf_prog_load+0xf6e/0x1100 [ 98.271251][ T6947] ? security_bpf+0x2b/0x90 [ 98.275813][ T6947] __sys_bpf+0x469/0x7c0 [ 98.280095][ T6947] __x64_sys_bpf+0x41/0x50 [ 98.284562][ T6947] x64_sys_call+0x2aee/0x3000 [ 98.289412][ T6947] do_syscall_64+0xd2/0x200 [ 98.293941][ T6947] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 98.300083][ T6947] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 98.306007][ T6947] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.312072][ T6947] RIP: 0033:0x7f5d08bdf6c9 [ 98.316540][ T6947] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 98.336359][ T6947] RSP: 002b:00007f5d0763f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 98.344816][ T6947] RAX: ffffffffffffffda RBX: 00007f5d08e35fa0 RCX: 00007f5d08bdf6c9 [ 98.352995][ T6947] RDX: 0000000000000048 RSI: 00002000000017c0 RDI: 0000000000000005 [ 98.361035][ T6947] RBP: 00007f5d08c61f91 R08: 0000000000000000 R09: 0000000000000000 [ 98.369193][ T6947] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 98.378079][ T6947] R13: 00007f5d08e36038 R14: 00007f5d08e35fa0 R15: 00007ffc0940c748 [ 98.386110][ T6947] [ 98.389156][ T6947] ---[ end trace 0000000000000000 ]--- [ 98.444250][ T6963] ªªªªªª: renamed from dummy0 [ 98.458390][ T6963] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1204'. [ 98.478978][ T6963] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1204'. [ 98.504472][ T6958] lo speed is unknown, defaulting to 1000 [ 98.516679][ T6968] loop1: detected capacity change from 0 to 1024 [ 98.527037][ T6958] lo speed is unknown, defaulting to 1000 [ 98.542380][ T6968] EXT4-fs error (device loop1): ext4_acquire_dquot:6945: comm syz.1.1206: Failed to acquire dquot type 0 [ 98.599132][ T6968] EXT4-fs error (device loop1): mb_free_blocks:2017: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 98.615711][ T6960] lo speed is unknown, defaulting to 1000 [ 98.634432][ T6960] lo speed is unknown, defaulting to 1000 [ 98.650739][ T6968] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #13: comm syz.1.1206: corrupted inode contents [ 98.673604][ T6963] loop3: detected capacity change from 0 to 8192 [ 98.694208][ T6968] EXT4-fs error (device loop1): ext4_dirty_inode:6517: inode #13: comm syz.1.1206: mark_inode_dirty error [ 98.730586][ T6968] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #13: comm syz.1.1206: corrupted inode contents [ 98.764192][ T6968] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #13: comm syz.1.1206: mark_inode_dirty error [ 98.808163][ T6980] netlink: 'syz.4.1208': attribute type 12 has an invalid length. [ 98.817651][ T6968] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #13: comm syz.1.1206: corrupted inode contents [ 98.873335][ T6968] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #13: comm syz.1.1206: mark_inode_dirty error [ 98.885319][ T6982] loop2: detected capacity change from 0 to 1024 [ 98.903008][ T6968] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #13: comm syz.1.1206: corrupted inode contents [ 98.906247][ T6982] ext4: Unknown parameter 'uid<00000000000000000000' [ 98.938993][ T6968] EXT4-fs error (device loop1) in ext4_orphan_del:301: Corrupt filesystem [ 98.959410][ T6982] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1211'. [ 98.984717][ T6968] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #13: comm syz.1.1206: corrupted inode contents [ 99.013207][ T6998] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 99.022243][ T6982] loop2: detected capacity change from 0 to 512 [ 99.030222][ T6968] EXT4-fs error (device loop1): ext4_truncate:4637: inode #13: comm syz.1.1206: mark_inode_dirty error [ 99.030404][ T6968] EXT4-fs error (device loop1) in ext4_process_orphan:343: Corrupt filesystem [ 99.031176][ T6968] EXT4-fs (loop1): 1 truncate cleaned up [ 99.032803][ T6998] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 99.039044][ T6982] EXT4-fs error (device loop2): ext4_acquire_dquot:6945: comm syz.2.1211: Failed to acquire dquot type 1 [ 99.039520][ T6982] EXT4-fs (loop2): 1 truncate cleaned up [ 99.040067][ T6982] ext4 filesystem being mounted at /245/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 99.121243][ T7002] binfmt_misc: register: failed to install interpreter file ./file0 [ 99.220828][ T7014] ref_ctr_offset mismatch. inode: 0x4ac offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x418 [ 99.309142][ T7025] Invalid logical block size (8) [ 99.502762][ T7050] ref_ctr_offset mismatch. inode: 0x53c offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x418 [ 99.572114][ T7052] netlink: 'syz.4.1238': attribute type 10 has an invalid length. [ 99.775840][ T29] kauditd_printk_skb: 176 callbacks suppressed [ 99.775855][ T29] audit: type=1326 audit(1763047930.579:5923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7084 comm="syz.4.1253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb9bf8f6c9 code=0x7ffc0000 [ 99.824913][ T29] audit: type=1326 audit(1763047930.609:5924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7084 comm="syz.4.1253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdb9bf8f6c9 code=0x7ffc0000 [ 99.848422][ T29] audit: type=1326 audit(1763047930.609:5925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7084 comm="syz.4.1253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb9bf8f6c9 code=0x7ffc0000 [ 99.871966][ T29] audit: type=1326 audit(1763047930.609:5926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7084 comm="syz.4.1253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb9bf8f6c9 code=0x7ffc0000 [ 99.895440][ T29] audit: type=1326 audit(1763047930.609:5927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7084 comm="syz.4.1253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fdb9bf8f6c9 code=0x7ffc0000 [ 99.918889][ T29] audit: type=1326 audit(1763047930.609:5928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7084 comm="syz.4.1253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb9bf8f6c9 code=0x7ffc0000 [ 99.942378][ T29] audit: type=1326 audit(1763047930.609:5929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7084 comm="syz.4.1253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb9bf8f6c9 code=0x7ffc0000 [ 99.966003][ T29] audit: type=1326 audit(1763047930.609:5930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7084 comm="syz.4.1253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7fdb9bf8f6c9 code=0x7ffc0000 [ 99.989608][ T29] audit: type=1326 audit(1763047930.609:5931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7084 comm="syz.4.1253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb9bf8f6c9 code=0x7ffc0000 [ 100.013025][ T29] audit: type=1326 audit(1763047930.609:5932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7084 comm="syz.4.1253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb9bf8f6c9 code=0x7ffc0000 [ 100.267750][ T7119] loop2: detected capacity change from 0 to 512 [ 100.288387][ T7109] lo speed is unknown, defaulting to 1000 [ 100.294788][ T7109] lo speed is unknown, defaulting to 1000 [ 100.297678][ T7119] EXT4-fs: Ignoring removed bh option [ 100.315712][ T7119] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 100.334073][ T7119] EXT4-fs (loop2): 1 truncate cleaned up [ 100.356591][ T7119] EXT4-fs mount: 4 callbacks suppressed [ 100.356611][ T7119] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 100.364273][ T7128] syzkaller0: entered promiscuous mode [ 100.379870][ T7128] syzkaller0: entered allmulticast mode [ 100.385383][ T7095] EXT4-fs (loop2): resizing filesystem from 256 to 1 blocks [ 100.392975][ T7095] EXT4-fs warning (device loop2): ext4_resize_fs:2042: can't shrink FS - resize aborted [ 100.404793][ T7130] loop3: detected capacity change from 0 to 128 [ 100.460872][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.535351][ T7141] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1272'. [ 100.544359][ T7141] bridge_slave_1: left allmulticast mode [ 100.550272][ T7141] bridge_slave_1: left promiscuous mode [ 100.556204][ T7141] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.579350][ T7141] bridge_slave_0: left allmulticast mode [ 100.585110][ T7141] bridge_slave_0: left promiscuous mode [ 100.590880][ T7141] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.774954][ T7147] lo speed is unknown, defaulting to 1000 [ 100.791576][ T7147] lo speed is unknown, defaulting to 1000 [ 100.856536][ T7165] random: crng reseeded on system resumption [ 100.940793][ T7173] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1286'. [ 100.964699][ T7173] SELinux: policydb version 1280 does not match my version range 15-35 [ 100.988823][ T7173] SELinux: failed to load policy [ 101.026820][ T7175] netlink: 'syz.0.1287': attribute type 13 has an invalid length. [ 101.036777][ T7173] loop2: detected capacity change from 0 to 1024 [ 101.051302][ T7173] ext2: Unknown parameter 'fsuuid' [ 101.051488][ T7175] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.063819][ T7175] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.088043][ T7174] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 101.100238][ T7178] lo speed is unknown, defaulting to 1000 [ 101.107568][ T7178] lo speed is unknown, defaulting to 1000 [ 101.247646][ T7179] lo speed is unknown, defaulting to 1000 [ 101.265861][ T7179] lo speed is unknown, defaulting to 1000 [ 101.400036][ T7200] IPv6: NLM_F_CREATE should be specified when creating new route [ 101.415384][ T7200] IPv6: Can't replace route, no match found [ 101.437056][ T7204] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1300'. [ 101.437056][ T7202] netlink: 'syz.0.1299': attribute type 10 has an invalid length. [ 101.488325][ T7213] FAULT_INJECTION: forcing a failure. [ 101.488325][ T7213] name failslab, interval 1, probability 0, space 0, times 0 [ 101.501054][ T7213] CPU: 0 UID: 0 PID: 7213 Comm: syz.1.1302 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 101.501114][ T7213] Tainted: [W]=WARN [ 101.501123][ T7213] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 101.501140][ T7213] Call Trace: [ 101.501148][ T7213] [ 101.501157][ T7213] __dump_stack+0x1d/0x30 [ 101.501187][ T7213] dump_stack_lvl+0xe8/0x140 [ 101.501215][ T7213] dump_stack+0x15/0x1b [ 101.501287][ T7213] should_fail_ex+0x265/0x280 [ 101.501313][ T7213] should_failslab+0x8c/0xb0 [ 101.501352][ T7213] kmem_cache_alloc_noprof+0x50/0x480 [ 101.501469][ T7213] ? alloc_empty_file+0x76/0x200 [ 101.501492][ T7213] ? mntput+0x4b/0x80 [ 101.501517][ T7213] alloc_empty_file+0x76/0x200 [ 101.501585][ T7213] path_openat+0x68/0x2170 [ 101.501621][ T7213] ? _parse_integer_limit+0x170/0x190 [ 101.501667][ T7213] ? kstrtoull+0x111/0x140 [ 101.501705][ T7213] ? kstrtouint+0x76/0xc0 [ 101.501862][ T7213] do_filp_open+0x109/0x230 [ 101.501905][ T7213] do_sys_openat2+0xa6/0x110 [ 101.501934][ T7213] __x64_sys_openat+0xf2/0x120 [ 101.501969][ T7213] x64_sys_call+0x2eab/0x3000 [ 101.502000][ T7213] do_syscall_64+0xd2/0x200 [ 101.502027][ T7213] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 101.502064][ T7213] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 101.502203][ T7213] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.502233][ T7213] RIP: 0033:0x7fa8b0bdf6c9 [ 101.502253][ T7213] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 101.502278][ T7213] RSP: 002b:00007fa8af63f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 101.502335][ T7213] RAX: ffffffffffffffda RBX: 00007fa8b0e35fa0 RCX: 00007fa8b0bdf6c9 [ 101.502351][ T7213] RDX: 000000000000403f RSI: 0000200000005c40 RDI: ffffffffffffff9c [ 101.502367][ T7213] RBP: 00007fa8af63f090 R08: 0000000000000000 R09: 0000000000000000 [ 101.502384][ T7213] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 101.502445][ T7213] R13: 00007fa8b0e36038 R14: 00007fa8b0e35fa0 R15: 00007ffc23523628 [ 101.502471][ T7213] [ 101.503702][ T7210] loop3: detected capacity change from 0 to 2048 [ 101.723638][ T7210] EXT4-fs: Ignoring removed oldalloc option [ 101.729793][ T7210] ext4: Unknown parameter 'noacl' [ 102.329416][ T7281] ref_ctr_offset mismatch. inode: 0x5cc offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x418 [ 102.664636][ T7304] netlink: 'syz.4.1342': attribute type 10 has an invalid length. [ 102.708324][ T7313] ref_ctr_offset mismatch. inode: 0x52d offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x418 [ 103.029257][ T7345] ref_ctr_offset mismatch. inode: 0x6cf offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x418 [ 103.301626][ T7370] netlink: 'syz.2.1360': attribute type 10 has an invalid length. [ 103.317710][ T7365] batadv_slave_1: entered promiscuous mode [ 103.336362][ T7370] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 103.365114][ T7368] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1371'. [ 103.461857][ T7377] ref_ctr_offset mismatch. inode: 0x6f8 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x418 [ 103.597738][ T7399] loop2: detected capacity change from 0 to 512 [ 103.605893][ T7399] EXT4-fs: dax option not supported [ 103.641615][ T7396] netlink: 'syz.4.1383': attribute type 10 has an invalid length. [ 103.678064][ T7413] ref_ctr_offset mismatch. inode: 0x5fd offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x418 [ 103.814434][ T7427] loop1: detected capacity change from 0 to 512 [ 103.829688][ T7427] EXT4-fs: dax option not supported [ 103.890945][ T7440] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1404'. [ 103.905846][ T7440] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1404'. [ 103.925327][ T7441] netlink: 'syz.4.1401': attribute type 10 has an invalid length. [ 103.948706][ T7443] ref_ctr_offset mismatch. inode: 0x556 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x418 [ 104.111251][ T7465] batadv_slave_0: Caught tx_queue_len zero misconfig [ 104.169256][ T7474] netlink: 'syz.4.1420': attribute type 10 has an invalid length. [ 104.250035][ T7485] ref_ctr_offset mismatch. inode: 0x56b offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x418 [ 104.357634][ T7493] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.374275][ T7498] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=23 sclass=netlink_route_socket pid=7498 comm=syz.4.1427 [ 104.398180][ T7470] loop3: detected capacity change from 0 to 512 [ 104.416779][ T7498] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1427'. [ 104.453196][ T7493] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.464093][ T7470] EXT4-fs error (device loop3): ext4_orphan_get:1418: comm +}[@: bad orphan inode 11862016 [ 104.490875][ T7470] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 104.503703][ T7470] ext4 filesystem being mounted at /252/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 104.530860][ T7493] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.604170][ T7493] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.663105][ T7528] ref_ctr_offset mismatch. inode: 0x65f offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x418 [ 104.687549][ T299] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.707428][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 104.709454][ T3468] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.742477][ T3468] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.758798][ T3468] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.802903][ T7542] netlink: 'syz.3.1440': attribute type 10 has an invalid length. [ 104.815034][ T7543] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1442'. [ 104.868492][ T29] kauditd_printk_skb: 412 callbacks suppressed [ 104.868512][ T29] audit: type=1326 audit(1763047935.669:6345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7553 comm="syz.2.1449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d08bdf6c9 code=0x7ffc0000 [ 104.901246][ T7555] loop2: detected capacity change from 0 to 1024 [ 104.908331][ T7555] EXT4-fs: Ignoring removed orlov option [ 104.909827][ T29] audit: type=1326 audit(1763047935.669:6346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7553 comm="syz.2.1449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d08bdf6c9 code=0x7ffc0000 [ 104.937609][ T29] audit: type=1326 audit(1763047935.669:6347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7553 comm="syz.2.1449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f5d08bdf6c9 code=0x7ffc0000 [ 104.961126][ T29] audit: type=1326 audit(1763047935.669:6348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7553 comm="syz.2.1449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f5d08bdf703 code=0x7ffc0000 [ 104.984420][ T29] audit: type=1326 audit(1763047935.669:6349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7553 comm="syz.2.1449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f5d08bde17f code=0x7ffc0000 [ 105.007777][ T29] audit: type=1326 audit(1763047935.699:6350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7553 comm="syz.2.1449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f5d08bdf757 code=0x7ffc0000 [ 105.031189][ T29] audit: type=1326 audit(1763047935.699:6351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7553 comm="syz.2.1449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5d08bddf10 code=0x7ffc0000 [ 105.041277][ T7555] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.054717][ T29] audit: type=1326 audit(1763047935.699:6352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7553 comm="syz.2.1449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f5d08bdf2cb code=0x7ffc0000 [ 105.090520][ T29] audit: type=1326 audit(1763047935.709:6353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7553 comm="syz.2.1449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f5d08bde32a code=0x7ffc0000 [ 105.090966][ T7534] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1442'. [ 105.114006][ T29] audit: type=1326 audit(1763047935.709:6354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7553 comm="syz.2.1449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f5d08bde32a code=0x7ffc0000 [ 105.160856][ T7534] team0: entered promiscuous mode [ 105.166042][ T7534] team0: entered allmulticast mode [ 105.173341][ T7534] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.206716][ T7565] xt_CT: You must specify a L4 protocol and not use inversions on it [ 105.210555][ T7564] ref_ctr_offset mismatch. inode: 0x750 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x418 [ 105.273563][ T7571] netlink: 'syz.3.1454': attribute type 27 has an invalid length. [ 105.322174][ T7574] loop1: detected capacity change from 0 to 512 [ 105.505817][ T7587] netlink: 'syz.1.1459': attribute type 10 has an invalid length. [ 105.673186][ T7571] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.680473][ T7571] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.606308][ T7571] veth5: left promiscuous mode [ 106.611152][ T7571] veth5: left allmulticast mode [ 106.617327][ T7571] bond0: left promiscuous mode [ 106.622179][ T7571] gretap1: left promiscuous mode [ 106.665232][ T7589] netlink: 'syz.4.1462': attribute type 12 has an invalid length. [ 106.672766][ T7610] program syz.3.1463 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 106.694263][ T12] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.710976][ T7610] loop3: detected capacity change from 0 to 1024 [ 106.725062][ T7610] EXT4-fs: Ignoring removed nomblk_io_submit option [ 106.729610][ T12] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.748302][ T12] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.758369][ T7610] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 106.771159][ T12] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.952565][ T7627] lo speed is unknown, defaulting to 1000 [ 106.962773][ T7627] lo speed is unknown, defaulting to 1000 [ 107.012622][ T7630] lo speed is unknown, defaulting to 1000 [ 107.028935][ T7630] lo speed is unknown, defaulting to 1000 [ 107.160399][ T7647] ref_ctr_offset mismatch. inode: 0x7a3 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x418 [ 107.336664][ T7659] xt_CONNSECMARK: invalid mode: 0 [ 107.524088][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.543980][ T7663] FAULT_INJECTION: forcing a failure. [ 107.543980][ T7663] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 107.557333][ T7663] CPU: 0 UID: 0 PID: 7663 Comm: syz.3.1483 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 107.557373][ T7663] Tainted: [W]=WARN [ 107.557394][ T7663] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 107.557405][ T7663] Call Trace: [ 107.557411][ T7663] [ 107.557418][ T7663] __dump_stack+0x1d/0x30 [ 107.557438][ T7663] dump_stack_lvl+0xe8/0x140 [ 107.557457][ T7663] dump_stack+0x15/0x1b [ 107.557472][ T7663] should_fail_ex+0x265/0x280 [ 107.557525][ T7663] should_fail+0xb/0x20 [ 107.557539][ T7663] should_fail_usercopy+0x1a/0x20 [ 107.557599][ T7663] _copy_from_user+0x1c/0xb0 [ 107.557722][ T7663] memdup_user+0x5e/0xd0 [ 107.557746][ T7663] autofs_dev_ioctl+0x167/0x6a0 [ 107.557766][ T7663] ? __pfx_autofs_dev_ioctl+0x10/0x10 [ 107.557784][ T7663] __se_sys_ioctl+0xce/0x140 [ 107.557804][ T7663] __x64_sys_ioctl+0x43/0x50 [ 107.557833][ T7663] x64_sys_call+0x1816/0x3000 [ 107.557861][ T7663] do_syscall_64+0xd2/0x200 [ 107.557881][ T7663] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 107.557962][ T7663] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 107.558021][ T7663] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.558040][ T7663] RIP: 0033:0x7fa64544f6c9 [ 107.558056][ T7663] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 107.558073][ T7663] RSP: 002b:00007fa643eaf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 107.558090][ T7663] RAX: ffffffffffffffda RBX: 00007fa6456a5fa0 RCX: 00007fa64544f6c9 [ 107.558103][ T7663] RDX: 0000200000001980 RSI: 00000000c0189374 RDI: 0000000000000006 [ 107.558114][ T7663] RBP: 00007fa643eaf090 R08: 0000000000000000 R09: 0000000000000000 [ 107.558198][ T7663] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 107.558224][ T7663] R13: 00007fa6456a6038 R14: 00007fa6456a5fa0 R15: 00007fff08c3a5f8 [ 107.558242][ T7663] [ 107.754723][ T7560] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 107.786912][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.931108][ T7687] ref_ctr_offset mismatch. inode: 0x66f offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x418 [ 107.966632][ T7693] netlink: 'syz.3.1498': attribute type 6 has an invalid length. [ 107.990702][ T7693] loop3: detected capacity change from 0 to 512 [ 108.008968][ T7693] EXT4-fs error (device loop3): ext4_xattr_inode_iget:441: inode #18: comm syz.3.1498: iget: bad extra_isize 90 (inode size 256) [ 108.034129][ T7693] EXT4-fs (loop3): Remounting filesystem read-only [ 108.041164][ T7693] EXT4-fs warning (device loop3): ext4_evict_inode:274: xattr delete (err -30) [ 108.052417][ T7693] EXT4-fs (loop3): 1 orphan inode deleted [ 108.058768][ T7693] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 108.085334][ T7703] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 108.097196][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.115054][ T7696] lo speed is unknown, defaulting to 1000 [ 108.121314][ T7696] lo speed is unknown, defaulting to 1000 [ 108.131623][ T7710] netlink: 7 bytes leftover after parsing attributes in process `syz.4.1506'. [ 108.208139][ T7701] lo speed is unknown, defaulting to 1000 [ 108.223224][ T7701] lo speed is unknown, defaulting to 1000 [ 108.229807][ T7712] netlink: 40 bytes leftover after parsing attributes in process `+}[@'. [ 108.407765][ T7730] loop2: detected capacity change from 0 to 8192 [ 108.445596][ T7730] loop2: p1 < > p2 < > p3 p4 < > [ 108.450672][ T7730] loop2: partition table partially beyond EOD, truncated [ 108.461500][ T7730] loop2: p1 start 67108864 is beyond EOD, truncated [ 108.475520][ T7730] loop2: p3 start 100859904 is beyond EOD, truncated [ 108.589130][ T7738] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1510'. [ 109.039588][ T7742] ref_ctr_offset mismatch. inode: 0x5ad offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x418 [ 109.120194][ T7752] netlink: 7 bytes leftover after parsing attributes in process `syz.4.1518'. [ 109.139740][ T7754] loop1: detected capacity change from 0 to 1024 [ 109.148023][ T7754] EXT4-fs: Ignoring removed orlov option [ 109.161372][ T7754] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 109.253253][ T7756] lo speed is unknown, defaulting to 1000 [ 109.267069][ T7756] lo speed is unknown, defaulting to 1000 [ 109.303826][ T7770] xt_CT: You must specify a L4 protocol and not use inversions on it [ 109.320851][ T7763] lo speed is unknown, defaulting to 1000 [ 109.327735][ T7763] lo speed is unknown, defaulting to 1000 [ 109.383950][ T7773] netlink: 'syz.2.1527': attribute type 10 has an invalid length. [ 109.523303][ T7780] ref_ctr_offset mismatch. inode: 0x5ab offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x418 [ 109.784926][ T7802] netlink: 'syz.2.1540': attribute type 10 has an invalid length. [ 109.836433][ T7804] lo speed is unknown, defaulting to 1000 [ 109.863324][ T7804] lo speed is unknown, defaulting to 1000 [ 109.925530][ T7814] netlink: 'syz.2.1545': attribute type 3 has an invalid length. [ 109.936279][ T7805] lo speed is unknown, defaulting to 1000 [ 109.942653][ T7805] lo speed is unknown, defaulting to 1000 [ 109.965357][ T7814] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1545'. [ 110.017881][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.041734][ T7824] FAULT_INJECTION: forcing a failure. [ 110.041734][ T7824] name failslab, interval 1, probability 0, space 0, times 0 [ 110.054422][ T7824] CPU: 0 UID: 0 PID: 7824 Comm: syz.3.1549 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 110.054553][ T7824] Tainted: [W]=WARN [ 110.054561][ T7824] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 110.054575][ T7824] Call Trace: [ 110.054582][ T7824] [ 110.054590][ T7824] __dump_stack+0x1d/0x30 [ 110.054665][ T7824] dump_stack_lvl+0xe8/0x140 [ 110.054687][ T7824] dump_stack+0x15/0x1b [ 110.054786][ T7824] should_fail_ex+0x265/0x280 [ 110.054807][ T7824] should_failslab+0x8c/0xb0 [ 110.054843][ T7824] kmem_cache_alloc_bulk_noprof+0x50/0x3d0 [ 110.054952][ T7824] ? bpf_test_run_xdp_live+0x857/0x11c0 [ 110.055050][ T7824] bpf_test_run_xdp_live+0xdbd/0x11c0 [ 110.055164][ T7824] ? synchronize_rcu+0x45/0x320 [ 110.055186][ T7824] ? bpf_test_run_xdp_live+0x354/0x11c0 [ 110.055241][ T7824] bpf_prog_test_run_xdp+0x525/0x970 [ 110.055352][ T7824] ? _kstrtol+0x51/0x90 [ 110.055386][ T7824] ? __rcu_read_unlock+0x4f/0x70 [ 110.055417][ T7824] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 110.055506][ T7824] bpf_prog_test_run+0x22a/0x390 [ 110.055531][ T7824] __sys_bpf+0x4c0/0x7c0 [ 110.055578][ T7824] __x64_sys_bpf+0x41/0x50 [ 110.055612][ T7824] x64_sys_call+0x2aee/0x3000 [ 110.055636][ T7824] do_syscall_64+0xd2/0x200 [ 110.055658][ T7824] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 110.055722][ T7824] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 110.055758][ T7824] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.055781][ T7824] RIP: 0033:0x7fa64544f6c9 [ 110.055797][ T7824] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 110.055816][ T7824] RSP: 002b:00007fa643eaf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 110.055868][ T7824] RAX: ffffffffffffffda RBX: 00007fa6456a5fa0 RCX: 00007fa64544f6c9 [ 110.055911][ T7824] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 110.055924][ T7824] RBP: 00007fa643eaf090 R08: 0000000000000000 R09: 0000000000000000 [ 110.055998][ T7824] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 110.056010][ T7824] R13: 00007fa6456a6038 R14: 00007fa6456a5fa0 R15: 00007fff08c3a5f8 [ 110.056031][ T7824] [ 110.343961][ T7830] ref_ctr_offset mismatch. inode: 0x82d offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x418 [ 110.416552][ T7833] netlink: 'syz.3.1553': attribute type 10 has an invalid length. [ 110.579497][ T7862] ref_ctr_offset mismatch. inode: 0x858 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x418 [ 110.675035][ T7870] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1570'. [ 110.702344][ T7871] netlink: 'syz.4.1568': attribute type 10 has an invalid length. [ 110.812343][ T7889] ref_ctr_offset mismatch. inode: 0x63d offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x418 [ 110.956251][ T7899] netlink: 'syz.2.1584': attribute type 10 has an invalid length. [ 111.044681][ T29] kauditd_printk_skb: 137 callbacks suppressed [ 111.044700][ T29] audit: type=1400 audit(1763047941.839:6492): avc: denied { create } for pid=7900 comm="syz.1.1585" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 111.080308][ T7901] loop1: detected capacity change from 0 to 1024 [ 111.087706][ T7901] EXT4-fs: Ignoring removed orlov option [ 111.094033][ T7901] EXT4-fs (loop1): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 111.106673][ T7901] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 111.120270][ T29] audit: type=1400 audit(1763047941.919:6493): avc: denied { append } for pid=7900 comm="syz.1.1585" name="file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 111.150550][ T7901] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 63 with max blocks 65 with error 28 [ 111.163091][ T7901] EXT4-fs (loop1): This should not happen!! Data will be lost [ 111.163091][ T7901] [ 111.172778][ T7901] EXT4-fs (loop1): Total free blocks count 0 [ 111.178841][ T7901] EXT4-fs (loop1): Free/Dirty block details [ 111.184929][ T7901] EXT4-fs (loop1): free_blocks=0 [ 111.190080][ T7901] EXT4-fs (loop1): dirty_blocks=0 [ 111.195148][ T7901] EXT4-fs (loop1): Block reservation details [ 111.201159][ T7901] EXT4-fs (loop1): i_reserved_data_blocks=0 [ 111.210413][ T7922] ref_ctr_offset mismatch. inode: 0x663 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x418 [ 111.294283][ T7934] netlink: 'syz.4.1597': attribute type 10 has an invalid length. [ 111.392335][ T7951] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 111.409994][ T29] audit: type=1326 audit(1763047942.209:6494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7945 comm="syz.4.1603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb9bf8f6c9 code=0x7ffc0000 [ 111.434590][ T29] audit: type=1326 audit(1763047942.219:6495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7945 comm="syz.4.1603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdb9bf8f6c9 code=0x7ffc0000 [ 111.458077][ T29] audit: type=1326 audit(1763047942.219:6496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7945 comm="syz.4.1603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb9bf8f6c9 code=0x7ffc0000 [ 111.482087][ T29] audit: type=1326 audit(1763047942.219:6497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7945 comm="syz.4.1603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb9bf8f6c9 code=0x7ffc0000 [ 111.505781][ T29] audit: type=1326 audit(1763047942.219:6498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7945 comm="syz.4.1603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdb9bf8f6c9 code=0x7ffc0000 [ 111.529380][ T29] audit: type=1326 audit(1763047942.219:6499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7945 comm="syz.4.1603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb9bf8f6c9 code=0x7ffc0000 [ 111.552854][ T29] audit: type=1326 audit(1763047942.219:6500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7945 comm="syz.4.1603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb9bf8f6c9 code=0x7ffc0000 [ 111.576345][ T29] audit: type=1326 audit(1763047942.219:6501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7945 comm="syz.4.1603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdb9bf8f6c9 code=0x7ffc0000 [ 111.658567][ T7961] SELinux: security_context_str_to_sid ( ) failed with errno=-22 [ 111.683630][ T7963] ref_ctr_offset mismatch. inode: 0x688 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x418 [ 111.810984][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.850467][ T7990] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1616'. [ 111.898498][ T8002] ref_ctr_offset mismatch. inode: 0x6be offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x418 [ 111.909965][ T8005] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 112.079989][ T8021] FAULT_INJECTION: forcing a failure. [ 112.079989][ T8021] name failslab, interval 1, probability 0, space 0, times 0 [ 112.084496][ T7977] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1616'. [ 112.092854][ T8021] CPU: 0 UID: 0 PID: 8021 Comm: syz.0.1632 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 112.092898][ T8021] Tainted: [W]=WARN [ 112.092909][ T8021] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 112.092927][ T8021] Call Trace: [ 112.092957][ T8021] [ 112.092967][ T8021] __dump_stack+0x1d/0x30 [ 112.093001][ T8021] dump_stack_lvl+0xe8/0x140 [ 112.093032][ T8021] dump_stack+0x15/0x1b [ 112.093059][ T8021] should_fail_ex+0x265/0x280 [ 112.093091][ T8021] should_failslab+0x8c/0xb0 [ 112.093134][ T8021] __kmalloc_cache_node_noprof+0x54/0x4a0 [ 112.093212][ T8021] ? __get_vm_area_node+0x106/0x1d0 [ 112.093259][ T8021] __get_vm_area_node+0x106/0x1d0 [ 112.093303][ T8021] __vmalloc_node_range_noprof+0x28c/0xed0 [ 112.093430][ T8021] ? n_tty_open+0x1b/0xf0 [ 112.093485][ T8021] ? vsnprintf+0x829/0x890 [ 112.093587][ T8021] ? klist_dec_and_del+0xba/0x270 [ 112.093623][ T8021] ? _raw_spin_unlock+0x26/0x50 [ 112.093659][ T8021] ? kobject_put+0x10b/0x190 [ 112.093695][ T8021] ? n_tty_open+0x1b/0xf0 [ 112.093754][ T8021] vzalloc_noprof+0x82/0xc0 [ 112.093797][ T8021] ? n_tty_open+0x1b/0xf0 [ 112.093836][ T8021] n_tty_open+0x1b/0xf0 [ 112.093934][ T8021] tty_ldisc_setup+0x83/0x220 [ 112.093968][ T8021] tty_init_dev+0x183/0x330 [ 112.093998][ T8021] tty_open+0x6c7/0xaf0 [ 112.094039][ T8021] chrdev_open+0x2eb/0x3a0 [ 112.094190][ T8021] do_dentry_open+0x649/0xa20 [ 112.094214][ T8021] ? __pfx_chrdev_open+0x10/0x10 [ 112.094284][ T8021] vfs_open+0x37/0x1e0 [ 112.094311][ T8021] path_openat+0x1c5e/0x2170 [ 112.094483][ T8021] do_filp_open+0x109/0x230 [ 112.094531][ T8021] do_sys_openat2+0xa6/0x110 [ 112.094561][ T8021] __x64_sys_openat+0xf2/0x120 [ 112.094593][ T8021] x64_sys_call+0x2eab/0x3000 [ 112.094625][ T8021] do_syscall_64+0xd2/0x200 [ 112.094654][ T8021] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 112.094761][ T8021] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 112.094874][ T8021] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.094904][ T8021] RIP: 0033:0x7f3fbee4f6c9 [ 112.094926][ T8021] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 112.094953][ T8021] RSP: 002b:00007f3fbd8b7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 112.094980][ T8021] RAX: ffffffffffffffda RBX: 00007f3fbf0a5fa0 RCX: 00007f3fbee4f6c9 [ 112.095028][ T8021] RDX: 00000000000c4000 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 112.095046][ T8021] RBP: 00007f3fbd8b7090 R08: 0000000000000000 R09: 0000000000000000 [ 112.095064][ T8021] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 112.095081][ T8021] R13: 00007f3fbf0a6038 R14: 00007f3fbf0a5fa0 R15: 00007fff7bad5e98 [ 112.095106][ T8021] [ 112.095239][ T8021] syz.0.1632: vmalloc error: size 8904, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 112.155179][ T7977] team1: entered promiscuous mode [ 112.155821][ T8021] ,cpuset= [ 112.161521][ T7977] team1: entered allmulticast mode [ 112.166745][ T8021] /,mems_allowed=0 [ 112.166832][ T8021] CPU: 0 UID: 0 PID: 8021 Comm: syz.0.1632 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 112.166886][ T8021] Tainted: [W]=WARN [ 112.166898][ T8021] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 112.166955][ T8021] Call Trace: [ 112.166964][ T8021] [ 112.167027][ T8021] __dump_stack+0x1d/0x30 [ 112.167058][ T8021] dump_stack_lvl+0xe8/0x140 [ 112.167088][ T8021] dump_stack+0x15/0x1b [ 112.167114][ T8021] warn_alloc+0x12b/0x1a0 [ 112.167170][ T8021] __vmalloc_node_range_noprof+0x2b1/0xed0 [ 112.167225][ T8021] ? vsnprintf+0x829/0x890 [ 112.167264][ T8021] ? klist_dec_and_del+0xba/0x270 [ 112.167300][ T8021] ? _raw_spin_unlock+0x26/0x50 [ 112.167351][ T8021] ? kobject_put+0x10b/0x190 [ 112.167387][ T8021] ? n_tty_open+0x1b/0xf0 [ 112.167428][ T8021] vzalloc_noprof+0x82/0xc0 [ 112.167481][ T8021] ? n_tty_open+0x1b/0xf0 [ 112.167583][ T8021] n_tty_open+0x1b/0xf0 [ 112.167622][ T8021] tty_ldisc_setup+0x83/0x220 [ 112.167654][ T8021] tty_init_dev+0x183/0x330 [ 112.167730][ T8021] tty_open+0x6c7/0xaf0 [ 112.167774][ T8021] chrdev_open+0x2eb/0x3a0 [ 112.167816][ T8021] do_dentry_open+0x649/0xa20 [ 112.167915][ T8021] ? __pfx_chrdev_open+0x10/0x10 [ 112.168005][ T8021] vfs_open+0x37/0x1e0 [ 112.168030][ T8021] path_openat+0x1c5e/0x2170 [ 112.168074][ T8021] do_filp_open+0x109/0x230 [ 112.168187][ T8021] do_sys_openat2+0xa6/0x110 [ 112.168218][ T8021] __x64_sys_openat+0xf2/0x120 [ 112.168318][ T8021] x64_sys_call+0x2eab/0x3000 [ 112.168400][ T8021] do_syscall_64+0xd2/0x200 [ 112.168429][ T8021] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 112.168479][ T8021] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 112.168527][ T8021] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.168573][ T8021] RIP: 0033:0x7f3fbee4f6c9 [ 112.168596][ T8021] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 112.168622][ T8021] RSP: 002b:00007f3fbd8b7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 112.168648][ T8021] RAX: ffffffffffffffda RBX: 00007f3fbf0a5fa0 RCX: 00007f3fbee4f6c9 [ 112.168666][ T8021] RDX: 00000000000c4000 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 112.168760][ T8021] RBP: 00007f3fbd8b7090 R08: 0000000000000000 R09: 0000000000000000 [ 112.168778][ T8021] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 112.168795][ T8021] R13: 00007f3fbf0a6038 R14: 00007f3fbf0a5fa0 R15: 00007fff7bad5e98 [ 112.168822][ T8021] [ 112.168831][ T8021] Mem-Info: [ 112.182305][ T7977] 8021q: adding VLAN 0 to HW filter on device team1 [ 112.186455][ T8021] active_anon:5594 inactive_anon:4 isolated_anon:0 [ 112.186455][ T8021] active_file:20662 inactive_file:2531 isolated_file:0 [ 112.186455][ T8021] unevictable:0 dirty:513 writeback:0 [ 112.186455][ T8021] slab_reclaimable:3308 slab_unreclaimable:17115 [ 112.186455][ T8021] mapped:32971 shmem:1480 pagetables:1216 [ 112.186455][ T8021] sec_pagetables:0 bounce:0 [ 112.186455][ T8021] kernel_misc_reclaimable:0 [ 112.186455][ T8021] free:1878891 free_pcp:10669 free_cma:0 [ 112.699877][ T8021] Node 0 active_anon:17040kB inactive_anon:16kB active_file:82648kB inactive_file:10124kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:126548kB dirty:2052kB writeback:0kB shmem:700kB kernel_stack:4080kB pagetables:5096kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 112.727390][ T8021] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 112.757415][ T8021] lowmem_reserve[]: 0 2881 7859 7859 [ 112.762804][ T8021] Node 0 DMA32 free:2946728kB boost:0kB min:4132kB low:7060kB high:9988kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2950256kB mlocked:0kB bounce:0kB free_pcp:3528kB local_pcp:3528kB free_cma:0kB [ 112.794163][ T8021] lowmem_reserve[]: 0 0 4978 4978 [ 112.799309][ T8021] Node 0 Normal free:4561504kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:17128kB inactive_anon:16kB active_file:82648kB inactive_file:10016kB unevictable:0kB writepending:2036kB zspages:0kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:36016kB local_pcp:11964kB free_cma:0kB [ 112.832538][ T8021] lowmem_reserve[]: 0 0 0 0 [ 112.837136][ T8021] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 112.849883][ T8021] Node 0 DMA32: 2*4kB (M) 2*8kB (M) 5*16kB (M) 2*32kB (M) 4*64kB (M) 2*128kB (M) 2*256kB (M) 3*512kB (M) 3*1024kB (M) 2*2048kB (M) 717*4096kB (M) = 2946728kB [ 112.866134][ T8021] Node 0 Normal: 1158*4kB (UM) 1105*8kB (UME) 846*16kB (UM) 598*32kB (UM) 479*64kB (UM) 303*128kB (UME) 181*256kB (UM) 109*512kB (UM) 42*1024kB (UME) 8*2048kB (UM) 1046*4096kB (UM) = 4561536kB [ 112.885371][ T8021] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 112.894805][ T8021] 23332 total pagecache pages [ 112.899508][ T8021] 4 pages in swap cache [ 112.903709][ T8021] Free swap = 124980kB [ 112.907893][ T8021] Total swap = 124996kB [ 112.912043][ T8021] 2097051 pages RAM [ 112.915873][ T8021] 0 pages HighMem/MovableOnly [ 112.920798][ T8021] 81087 pages reserved [ 112.924908][ T8021] ttyS ttyS3: ldisc open failed (-12), clearing slot 3 [ 113.067186][ T8037] lo speed is unknown, defaulting to 1000 [ 113.067843][ T8037] lo speed is unknown, defaulting to 1000 [ 113.107621][ T8041] netlink: 'syz.2.1640': attribute type 10 has an invalid length. [ 113.134436][ T8038] lo speed is unknown, defaulting to 1000 [ 113.134989][ T8038] lo speed is unknown, defaulting to 1000 [ 114.545624][ T8068] ref_ctr_offset mismatch. inode: 0x8a4 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x418 [ 114.772177][ T8093] ref_ctr_offset mismatch. inode: 0x8e2 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x418 [ 114.786905][ T8015] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 115.246485][ T8127] ref_ctr_offset mismatch. inode: 0x6ed offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x418 [ 115.362897][ T8132] netlink: 'syz.3.1676': attribute type 10 has an invalid length. [ 115.385903][ T8119] lo speed is unknown, defaulting to 1000 [ 115.414376][ T8119] lo speed is unknown, defaulting to 1000 [ 115.547080][ T8123] lo speed is unknown, defaulting to 1000 [ 115.578620][ T8123] lo speed is unknown, defaulting to 1000 [ 115.679435][ T8139] hub 6-0:1.0: USB hub found [ 115.697296][ T8139] hub 6-0:1.0: 8 ports detected [ 116.258706][ T8167] netlink: 'syz.2.1692': attribute type 16 has an invalid length. [ 116.266614][ T8167] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1692'. [ 116.291297][ T8167] FAULT_INJECTION: forcing a failure. [ 116.291297][ T8167] name failslab, interval 1, probability 0, space 0, times 0 [ 116.304175][ T8167] CPU: 1 UID: 0 PID: 8167 Comm: syz.2.1692 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 116.304214][ T8167] Tainted: [W]=WARN [ 116.304220][ T8167] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 116.304277][ T8167] Call Trace: [ 116.304286][ T8167] [ 116.304296][ T8167] __dump_stack+0x1d/0x30 [ 116.304324][ T8167] dump_stack_lvl+0xe8/0x140 [ 116.304469][ T8167] dump_stack+0x15/0x1b [ 116.304506][ T8167] should_fail_ex+0x265/0x280 [ 116.304526][ T8167] should_failslab+0x8c/0xb0 [ 116.304564][ T8167] __kmalloc_noprof+0xa5/0x570 [ 116.304605][ T8167] ? fib_nl2rule+0x215/0xc50 [ 116.304637][ T8167] fib_nl2rule+0x215/0xc50 [ 116.304745][ T8167] fib_newrule+0x2c1/0x930 [ 116.304773][ T8167] ? avc_has_perm_noaudit+0x1b1/0x200 [ 116.304892][ T8167] fib_nl_newrule+0x46/0x60 [ 116.304923][ T8167] ? __pfx_fib_nl_newrule+0x10/0x10 [ 116.304956][ T8167] rtnetlink_rcv_msg+0x5fe/0x6d0 [ 116.304988][ T8167] ? avc_has_perm_noaudit+0x1b1/0x200 [ 116.305023][ T8167] netlink_rcv_skb+0x123/0x220 [ 116.305120][ T8167] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 116.305183][ T8167] rtnetlink_rcv+0x1c/0x30 [ 116.305212][ T8167] netlink_unicast+0x5c0/0x690 [ 116.305255][ T8167] netlink_sendmsg+0x58b/0x6b0 [ 116.305283][ T8167] ? __pfx_netlink_sendmsg+0x10/0x10 [ 116.305343][ T8167] __sock_sendmsg+0x145/0x180 [ 116.305412][ T8167] ____sys_sendmsg+0x31e/0x4e0 [ 116.305461][ T8167] ___sys_sendmsg+0x17b/0x1d0 [ 116.305582][ T8167] __x64_sys_sendmsg+0xd4/0x160 [ 116.305655][ T8167] x64_sys_call+0x191e/0x3000 [ 116.305684][ T8167] do_syscall_64+0xd2/0x200 [ 116.305710][ T8167] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 116.305804][ T8167] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 116.305942][ T8167] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.305969][ T8167] RIP: 0033:0x7f5d08bdf6c9 [ 116.305988][ T8167] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 116.306057][ T8167] RSP: 002b:00007f5d0763f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 116.306081][ T8167] RAX: ffffffffffffffda RBX: 00007f5d08e35fa0 RCX: 00007f5d08bdf6c9 [ 116.306094][ T8167] RDX: 0000000000000000 RSI: 0000200000000940 RDI: 0000000000000006 [ 116.306106][ T8167] RBP: 00007f5d0763f090 R08: 0000000000000000 R09: 0000000000000000 [ 116.306118][ T8167] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 116.306131][ T8167] R13: 00007f5d08e36038 R14: 00007f5d08e35fa0 R15: 00007ffc0940c748 [ 116.306170][ T8167] [ 116.458776][ T29] kauditd_printk_skb: 86 callbacks suppressed [ 116.458855][ T29] audit: type=1326 audit(1763047947.259:6588): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8142 comm="syz.3.1681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa64544f6c9 code=0x7ffc0000 [ 116.572954][ T8170] lo speed is unknown, defaulting to 1000 [ 116.585659][ T29] audit: type=1326 audit(1763047947.259:6589): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8142 comm="syz.3.1681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa64544f6c9 code=0x7ffc0000 [ 116.587405][ T29] audit: type=1326 audit(1763047947.269:6590): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8142 comm="syz.3.1681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=152 compat=0 ip=0x7fa64544f6c9 code=0x7ffc0000 [ 116.615732][ T8170] lo speed is unknown, defaulting to 1000 [ 116.638997][ T29] audit: type=1326 audit(1763047947.269:6591): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8142 comm="syz.3.1681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa64544f6c9 code=0x7ffc0000 [ 116.639048][ T29] audit: type=1326 audit(1763047947.269:6592): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8142 comm="syz.3.1681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa64544f6c9 code=0x7ffc0000 [ 116.639087][ T29] audit: type=1326 audit(1763047947.279:6593): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8142 comm="syz.3.1681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=25 compat=0 ip=0x7fa64544f6c9 code=0x7ffc0000 [ 116.716164][ T29] audit: type=1326 audit(1763047947.299:6594): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8142 comm="syz.3.1681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa64544f6c9 code=0x7ffc0000 [ 116.740042][ T29] audit: type=1326 audit(1763047947.299:6595): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8142 comm="syz.3.1681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa64544f6c9 code=0x7ffc0000 [ 116.764005][ T29] audit: type=1326 audit(1763047947.299:6596): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8142 comm="syz.3.1681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa64544f6c9 code=0x7ffc0000 [ 116.787837][ T29] audit: type=1326 audit(1763047947.299:6597): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8142 comm="syz.3.1681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa64544f6c9 code=0x7ffc0000 [ 116.818375][ T8173] lo speed is unknown, defaulting to 1000 [ 116.849571][ T8173] lo speed is unknown, defaulting to 1000 [ 116.882509][ T8185] netlink: 'syz.4.1697': attribute type 6 has an invalid length. [ 116.921413][ T8185] IPv6: Can't replace route, no match found [ 116.944531][ T8193] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 116.956953][ T8185] 9p: Unknown access argument o: -22 [ 117.114459][ T8213] netlink: 'syz.1.1706': attribute type 10 has an invalid length. [ 117.417865][ T8230] lo speed is unknown, defaulting to 1000 [ 117.424106][ T8230] lo speed is unknown, defaulting to 1000 [ 117.652787][ T8236] lo speed is unknown, defaulting to 1000 [ 117.663685][ T8251] netlink: 'syz.3.1724': attribute type 10 has an invalid length. [ 117.688685][ T8236] lo speed is unknown, defaulting to 1000 [ 117.904034][ T8269] ref_ctr_offset mismatch. inode: 0x72a offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x418 [ 117.932220][ T8270] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 118.298723][ T8291] netlink: 'syz.3.1739': attribute type 6 has an invalid length. [ 118.322425][ T8291] IPv6: Can't replace route, no match found [ 118.344891][ T8291] 9p: Unknown access argument o: -22 [ 118.362558][ T8227] lo speed is unknown, defaulting to 1000 [ 118.379631][ T8227] lo speed is unknown, defaulting to 1000 [ 118.461168][ T8300] ref_ctr_offset mismatch. inode: 0x659 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x418 [ 118.587645][ T8305] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1745'. [ 119.003442][ T8341] loop3: detected capacity change from 0 to 1024 [ 119.013671][ T8341] EXT4-fs: Ignoring removed orlov option [ 119.026553][ T8346] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1761'. [ 119.027251][ T8341] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 119.121549][ T8355] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1763'. [ 119.134980][ T12] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 119.135026][ T8355] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1763'. [ 119.172649][ T5341] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 119.190623][ T5341] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 119.204031][ T8356] xt_CT: You must specify a L4 protocol and not use inversions on it [ 119.224999][ T5341] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 119.235802][ T8359] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1764'. [ 119.245691][ T8359] netlink: 'syz.0.1764': attribute type 10 has an invalid length. [ 119.292529][ T8361] FAULT_INJECTION: forcing a failure. [ 119.292529][ T8361] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 119.305671][ T8361] CPU: 0 UID: 0 PID: 8361 Comm: syz.0.1765 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 119.305712][ T8361] Tainted: [W]=WARN [ 119.305760][ T8361] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 119.305772][ T8361] Call Trace: [ 119.305778][ T8361] [ 119.305862][ T8361] __dump_stack+0x1d/0x30 [ 119.305885][ T8361] dump_stack_lvl+0xe8/0x140 [ 119.305914][ T8361] dump_stack+0x15/0x1b [ 119.305940][ T8361] should_fail_ex+0x265/0x280 [ 119.305959][ T8361] should_fail+0xb/0x20 [ 119.306009][ T8361] should_fail_usercopy+0x1a/0x20 [ 119.306029][ T8361] _copy_to_user+0x20/0xa0 [ 119.306062][ T8361] copy_siginfo_to_user+0x22/0xb0 [ 119.306086][ T8361] x64_setup_rt_frame+0x2b5/0x580 [ 119.306110][ T8361] arch_do_signal_or_restart+0x23e/0x440 [ 119.306136][ T8361] exit_to_user_mode_loop+0x77/0x110 [ 119.306208][ T8361] do_syscall_64+0x1d6/0x200 [ 119.306303][ T8361] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 119.306329][ T8361] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 119.306372][ T8361] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.306392][ T8361] RIP: 0033:0x7f3fbee4f6c7 [ 119.306406][ T8361] Code: ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 [ 119.306423][ T8361] RSP: 002b:00007f3fbd8b7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 119.306505][ T8361] RAX: 0000000000000000 RBX: 00007f3fbf0a5fa0 RCX: 00007f3fbee4f6c9 [ 119.306517][ T8361] RDX: 0000000000001001 RSI: 00002000000019c0 RDI: 0000000000000004 [ 119.306528][ T8361] RBP: 00007f3fbd8b7090 R08: 0000000000000000 R09: 0000000000000000 [ 119.306539][ T8361] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 119.306551][ T8361] R13: 00007f3fbf0a6038 R14: 00007f3fbf0a5fa0 R15: 00007fff7bad5e98 [ 119.306585][ T8361] [ 119.779196][ T8374] netlink: 'syz.1.1771': attribute type 6 has an invalid length. [ 119.788041][ T8374] IPv6: Can't replace route, no match found [ 119.795553][ T8374] 9p: Unknown access argument o: -22 [ 119.877547][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.073859][ T8401] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1782'. [ 120.097711][ T8401] netlink: 'syz.1.1782': attribute type 10 has an invalid length. [ 120.123531][ T8397] lo speed is unknown, defaulting to 1000 [ 120.154882][ T8397] lo speed is unknown, defaulting to 1000 [ 120.224565][ T8411] xt_CT: You must specify a L4 protocol and not use inversions on it [ 120.259017][ T8404] lo speed is unknown, defaulting to 1000 [ 120.268927][ T8404] lo speed is unknown, defaulting to 1000 [ 120.319500][ T8418] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 120.626132][ T8436] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1795'. [ 120.645355][ T8436] netlink: 'syz.3.1795': attribute type 10 has an invalid length. [ 120.815138][ T8447] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 120.844674][ T8442] lo speed is unknown, defaulting to 1000 [ 120.864614][ T8442] lo speed is unknown, defaulting to 1000 [ 120.925377][ T8443] lo speed is unknown, defaulting to 1000 [ 120.931878][ T8443] lo speed is unknown, defaulting to 1000 [ 121.284475][ T8444] ================================================================== [ 121.292620][ T8444] BUG: KCSAN: data-race in file_update_time / shmem_fallocate [ 121.300123][ T8444] [ 121.302476][ T8444] write to 0xffff88811b37e6bc of 4 bytes by task 8476 on cpu 1: [ 121.310148][ T8444] shmem_fallocate+0x2df/0x840 [ 121.314949][ T8444] vfs_fallocate+0x3b6/0x400 [ 121.319588][ T8444] madvise_vma_behavior+0x1920/0x1cf0 [ 121.325011][ T8444] madvise_do_behavior+0x5b7/0x970 [ 121.330165][ T8444] do_madvise+0x10e/0x190 [ 121.334526][ T8444] __x64_sys_madvise+0x64/0x80 [ 121.339314][ T8444] x64_sys_call+0x1f1a/0x3000 [ 121.344007][ T8444] do_syscall_64+0xd2/0x200 [ 121.348527][ T8444] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.354431][ T8444] [ 121.356765][ T8444] read to 0xffff88811b37e6bc of 4 bytes by task 8444 on cpu 0: [ 121.364314][ T8444] file_update_time+0x87/0x2b0 [ 121.369104][ T8444] fault_dirty_shared_page+0xd9/0x3c0 [ 121.374496][ T8444] handle_mm_fault+0x165d/0x2be0 [ 121.379446][ T8444] do_user_addr_fault+0x630/0x1080 [ 121.384566][ T8444] exc_page_fault+0x62/0xa0 [ 121.389096][ T8444] asm_exc_page_fault+0x26/0x30 [ 121.393959][ T8444] [ 121.396297][ T8444] value changed: 0x01c6d633 -> 0x04c1c6b4 [ 121.402014][ T8444] [ 121.404344][ T8444] Reported by Kernel Concurrency Sanitizer on: [ 121.410509][ T8444] CPU: 0 UID: 0 PID: 8444 Comm: syz.0.1809 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 121.421809][ T8444] Tainted: [W]=WARN [ 121.425625][ T8444] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 121.435696][ T8444] ==================================================================