last executing test programs: 2.749185828s ago: executing program 1 (id=433): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000008385000000710000"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r0, 0x0, 0x100000000}, 0x18) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r2, 0x560a, &(0x7f00000006c0)={0x4, 0x0, 0x0, 0x0, 0x104, 0x3}) r3 = memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9bX\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x2) fallocate(r3, 0x0, 0x0, 0x509a) ioctl$TCSETS2(r2, 0x402c542b, &(0x7f0000000040)={0x5, 0x2, 0xf, 0xfe74, 0x8, "2c277bd72c6157ca4381fbdd4a7c9d6a6f0da7", 0xffffffff, 0x91}) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000980)='mm_page_free\x00', 0xffffffffffffffff, 0x0, 0x6}, 0x18) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r6 = socket$key(0xf, 0x3, 0x2) close(r6) getpeername$l2tp(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @empty}, &(0x7f00000003c0)=0x10) rseq(0x0, 0x0, 0x0, 0x0) r7 = syz_clone(0x80200, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r7, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYRESHEX, @ANYRESHEX=r3, @ANYRESHEX=r4, @ANYRES8=r5, @ANYRES32, @ANYRES16=r1], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) time(0x0) semget$private(0x0, 0x4000000009, 0x0) 2.61016783s ago: executing program 1 (id=435): openat$sysfs(0xffffffffffffff9c, 0x0, 0x149a82, 0x1a3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) getpid() bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x4, 0x0, &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ffd}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000000)={0x200000, 0x200000, 0xa, 0x0, 0x8}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000002600)="89000000120081ae08060cdc030000007f1be3f74001000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c000140060404000004000031007a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) r1 = socket(0x1e, 0x4, 0x0) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e21, 0x4, @remote, 0x9}, 0x1c) r2 = socket(0x9, 0x2, 0x10) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) r4 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x58, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r6, {0x0, 0x7}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x0, 0x4, 0xae, 0x2, 0xe, 0x450e}, [@TCA_NETEM_CORRUPT={0xc, 0x4, {0x3, 0x9}}]}}}]}, 0x58}}, 0x44080) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xd0f, 0x70bd29, 0x25dfdbfb, {0x60, 0x0, 0x0, 0x0, {0x0, 0x10}, {0xffe0, 0xa}, {0xa, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x55}, 0x20008004) recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 1.876667849s ago: executing program 4 (id=453): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1e, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x52, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$unix(0x1, 0x2, 0x0) bind$unix(r1, &(0x7f0000003000)=@abs={0x1, 0x0, 0x4e21}, 0x6e) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000003000)=@abs={0x1, 0x0, 0x4e20}, 0x6e) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') pread64(r3, &(0x7f0000000280)=""/172, 0xac, 0x6) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffea4, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000010000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='attr/exec\x00') writev(r5, &(0x7f0000000240)=[{&(0x7f0000000080)='=', 0x1}], 0x1) 1.876504349s ago: executing program 2 (id=454): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x19, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x4, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {r0}}, './file0\x00'}) ioctl$SIOCX25GDTEFACILITIES(r4, 0x89ea, &(0x7f0000000080)) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x30, 0x10, 0x403, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x74, r1, 0x22820, 0x55007}, [@IFLA_CARRIER={0x5, 0x21, 0x7}, @IFLA_TXQLEN={0x8, 0xd, 0x7d631b68}]}, 0x30}, 0x1, 0x0, 0x0, 0x41}, 0x24040840) 1.808293894s ago: executing program 4 (id=455): bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x23, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000050000000000000000001811", @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e8500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = dup(r0) write$P9_RLERRORu(r1, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000100)={0xe, 0x3, 0xfa00, @id_afonly={&(0x7f0000000380)=0x1}}, 0x20) write$binfmt_elf64(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) lstat(&(0x7f0000000440)='./file0\x00', 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000014c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r2, 0xfeffff, 0x113, 0x0, &(0x7f0000000700)="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", 0x0, 0xf0, 0x0, 0xc8, 0x6a, &(0x7f0000000100)="1eea90be6643c3872dc979a0f89030dffb98cc303991efabbc7c8ceea05917425222df1b2da6d9999d4b26b3220f2a02f56d3651f2cc8535c5da57de055ea26ac497e585be3a900dc342c2e012a1da499bfe0d95a512b6126db5848db13dd4baff7bb897507fe1f934bfe2590d724c2b3c3dea4b11ff7829c812caa2ef086a440630a26dbe323915b9d4f0d8510eeccac079fd14c20a138bd56853b111cf87baf46a84073bf02c78ec94199d232fe50ef86e162b896d00000000000000000088367551569708837e", &(0x7f0000000080)="3ca023d0611b8397aadba615973af1e35a0f53d6e40353b75c8fa0cee09e947ed6086967271c8e22b4f2889b19708683a06405d4f2e10af9cee2e2971d470abb46f948c7744bdd1d56e03c766ccc84eb2be3e3364e8f54ddfbcef0e82f277aa3074d2d4dd1be5c063578", 0x4}, 0x50) 1.805050894s ago: executing program 4 (id=457): sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x18) r6 = socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0xb, 0x100010, 0xffffffffffffffff, 0xb4c52000) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='X'], 0x58}, 0x1, 0x0, 0x0, 0x90}, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x20880, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r7 = accept4$tipc(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x800) sendmsg$tipc(r7, &(0x7f0000000700)={&(0x7f00000001c0)=@name={0x1e, 0x2, 0x0, {{0x2, 0x2}, 0x4}}, 0x10, &(0x7f0000000340)=[{&(0x7f00000004c0)="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", 0xfe}, {&(0x7f00000002c0)="479c78750bd03f09c0d55a173d02ec87a027dfdbdf53f7ea2be93f03347aa176536413f82c96914e03126b99622471bac2f0a8fbac041221c99dce54e5ccbb6b1b8d08db52f4b00036fcf733694ec1edac000ee2ecba8faec140aecb5f086bf052eee16718ee7d4197e0af25", 0x6c}, {&(0x7f0000000680)="ec73a7b1bc691fe4b7cec2f21532afb15c97fc65c041c36fbd6006e8a8b423ade91ce318be828758d7ddf08add9e3b01923cd64cef2f9b19e028ff9b3dd481c5659c6db28110edced454f711ff32a94734c7f7e26ded0010eb1962cc7fa448e7986d9d349057316aefa148de784852aad12b9974a1503c1888e6", 0x7a}], 0x3, &(0x7f00000007c0)="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", 0xfe, 0x20044000}, 0x80) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f00000008c0)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r8}, 0x10) r9 = syz_pidfd_open(r0, 0x0) pidfd_getfd(r9, r9, 0x0) 1.692837414s ago: executing program 2 (id=458): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setsig(r1, 0xa, 0x13) fcntl$setlease(r1, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) fcntl$setlease(r1, 0x400, 0x2) 1.544080646s ago: executing program 2 (id=462): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r0}, &(0x7f0000000380), &(0x7f00000003c0)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000480)='kfree\x00', r2, 0x0, 0x7fffffffffffffff}, 0x18) r3 = openat$selinux_access(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$selinux_access(r3, &(0x7f0000000540)=ANY=[@ANYBLOB="756e636f6e66696e65645f753a73797374656d5f723a696e736d6f645f743a73302d73303a63302e63313032332073797374656d5f753a73797374656d5f723a6b65726e656c5f743a733020303030303030303030303030303030333433373800ed95ea485197fd0e96b5e737511cea80e390a2fbb1a9832391ec3ee0647e20"], 0x61) 1.512513178s ago: executing program 2 (id=463): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='mm_page_free\x00', r0}, 0x18) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_misc(r2, &(0x7f0000000000), 0xfffffecc) splice(r1, 0x0, r3, 0x0, 0x7fff, 0x0) 1.226529612s ago: executing program 1 (id=464): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000010a850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000ac0)={&(0x7f0000000b00)='kmem_cache_free\x00', r0}, 0x10) openat$sndseq(0xffffffffffffff9c, 0x0, 0x48100) r1 = socket$inet6(0xa, 0x3, 0x8) recvfrom(r1, 0x0, 0x0, 0x40000100, 0x0, 0x0) sendmmsg$inet6(r1, &(0x7f0000004580)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='$\x00\x00'], 0x28}}], 0x1, 0x0) 1.190962124s ago: executing program 0 (id=466): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x23, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000014c0)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000702000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff6d6405000000000065040400010000000404000001000000b7050000400000006a0a80fe000000008500000053000000b7000000000000009500001000000000a80501363034fdb117168bd07ba00af739d1a1ee35fe163a255c33282044b32495ef8ab9adc67ccc945f105d802f5132143c0a9fc7a84452569957c1002ed7d4d8e17f791f4798c8eb483e9973320d046c3126c6afcfd84de03352c69b3edff5be26f8ffa5f8f2879021c2ea53ea79acd7fb38dd1abb75aa393cea26d465637d11f705000000473e7b7c4ae7dd5e4dee88518ddf12dddd4bfc6a4dd3b6beba51074229b0d4b504516c4c3e5d1aa044d8d00728141cd67bcd68f253288e655c6b34e02e90637ef2912ba7de26ff2357ef17f95a25780c3a057844f226ef4e912f01a201e694e3806e8c70e8b69524cd19f7525d8d66bb766f7f3f918c86a70252236800001897133af94a5a4cfc794d8b9d7c33632152c48eaf302f0b2e0c252b00000000000000006f1bbefbe08de65e3762e194ba4cae8b13535d7d11ee917bca4885bbf597a14ab2458efce78510d86272d88e0c8088f404f011289ebc5623faa1182632161e073af1d69a2e36bed435000025ecd201d2ffb0a7fa4f5d11060cdcf071defd0a8be3b69ce3e4f361aca75827426dde87fdf4617222674280f55e98107450c19b9d86329bd5b4697336112b0b8754ce3574046bf6114d1a88597850b77378fa8edfff8faf8b8ec039bab385cac0535373bb8fab90539b1a65ddff841eb671f3faf37ebdfccea0c002ad2b42047c9ec43193ccf617dbf8a12b4f189edbf9fb7c42b1f435ccd4d96822e6b70100912c92e3943e9c4f45d8bcd528fa8a3ea847f10e9b2506f3bb506f1d7fbde8010000000000a073d0de5538ab42e170b3baae34c35987b0dda497ac3f5e97e6e6aeea15c6d5ed24310100000003bb6030f84b63aaf8690db0221b1705c501f802ff59b4e683efa4b6e77e042072bd2ac37d413008ec9eb8166f6e28b49a77ed91befc65315896f88a8fb1dd679fb4c515f8b7a5b7aca6a251a89d47b728502f7e621cc0e3ba04000000c149ee6601728c750d304197c22da8650579475afd96187d881e93b42a5fdfd686d8900c44c67133dad58037fda65885a15a429edfe3027a5ebf95254744f10fd607bc3300b94932b8d944e0b083bbd86b19cb074577a25ff581d92af08a06f857310a2f14326b0b290205e91a682e00c8762cbc6b904c980eef6e6a1def886c95676dce6a8194479700a02b92bdc8d05eae1f24fdd7b80d1bb404c22f681594de2ebb9687219de8d73ac83823feb402a2415a9850d5f0183ec67be96dc0e4c2d7acf1dfe79d6771903b76e21190c22d641030e1ddacf006c3116e1803af20a5f2b5f7ba58aca5bcabbbab24414a3810788e5503e4be66d683daac5f0001000077339b4200000000108a3c87b19d5b9a00c75d84a92d6dcf00ba96edf35ede0e2b57c26e94801b498924166bde57d5f24258d9fd028096cc15a8b912b494d4bbe609031ea1ca65a548971d5d16296dd08e020000007a27310d5d01f8a8a0f5212d7f628f554afea715ccbc66cbb1016490f5d579308cb3188cf2fcaf67e0c16443d526ba4b968f07ae362c2133c168313e84beb871203880dd453c45d0a137d7f5a8b039dbfa62fb2b4214f8e69f967bf1fbd89e77fcca110000000800000000000000f8877994ebdc35f7efd41e3babd9b3782edd6776d5b6cb4ecd72c9de9b5503747d71440378cf2c2c7ea2dc5febb654a867f853713cf4c0bb322fbbe446d18dee4c821275ef18259cafc346c8b3b9fb0f3adcf6ea310a6b9a3f59e29a5909ea047fb61affb4bc8bbea1fb761b8933795b1a91358a7791aa843d07020e8bb6fc18458c49ac6313e7165b7d9f65e94a62b69f1011b94340cdb7303f01e5cdb5682ddf73d65c3de1d88dd7496d6345d5b9de0223988056a53e19a8b96b9640bc6c09d3c2ff894d626b57c776ed53f94d5e22ff148061b37f72bd92924cb1d0a725e19b264346b7cae0251a850de78316503f3c3d395c7e3f04fc8d52583327cd2341ce4b2d092815376299686f41353b2823814563011a2223b9dd00000000000000000000003a131374a3371cb3e2a9bb4d798b91cefa444501f40b7c9589e8c0bb6c82123d2b45ce905d0903b32ecf30e828c71a07a83f3275f3d661d1af0ffbd5d7f0"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r2, 0xfeffff, 0x113, 0x0, &(0x7f0000000700)="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", 0x0, 0xf0, 0x0, 0xc8, 0x6a, &(0x7f0000000100)="1eea90be6643c3872dc979a0f89030dffb98cc303991efabbc7c8ceea05917425222df1b2da6d9999d4b26b3220f2a02f56d3651f2cc8535c5da57de055ea26ac497e585be3a900dc342c2e012a1da499bfe0d95a512b6126db5848db13dd4baff7bb897507fe1f934bfe2590d724c2b3c3dea4b11ff7829c812caa2ef086a440630a26dbe323915b9d4f0d8510eeccac079fd14c20a138bd56853b111cf87baf46a84073bf02c78ec94199d232fe50ef86e162b896d00000000000000000088367551569708837e", &(0x7f0000000080)="3ca023d0611b8397aadba615973af1e35a0f53d6e40353b75c8fa0cee09e947ed6086967271c8e22b4f2889b19708683a06405d4f2e10af9cee2e2971d470abb46f948c7744bdd1d56e03c766ccc84eb2be3e3364e8f54ddfbcef0e82f277aa3074d2d4dd1be5c063578", 0x4}, 0x50) 1.190794804s ago: executing program 0 (id=467): bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xd, 0x0, &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x23, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = dup(r0) write$P9_RLERRORu(r1, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000100)={0xe, 0x3, 0xfa00, @id_afonly={&(0x7f0000000380)=0x1}}, 0x20) write$binfmt_elf64(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) lstat(&(0x7f0000000440)='./file0\x00', 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000014c0)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000702000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff6d6405000000000065040400010000000404000001000000b7050000400000006a0a80fe000000008500000053000000b7000000000000009500001000000000a80501363034fdb117168bd07ba00af739d1a1ee35fe163a255c33282044b32495ef8ab9adc67ccc945f105d802f5132143c0a9fc7a84452569957c1002ed7d4d8e17f791f4798c8eb483e9973320d046c3126c6afcfd84de03352c69b3edff5be26f8ffa5f8f2879021c2ea53ea79acd7fb38dd1abb75aa393cea26d465637d11f705000000473e7b7c4ae7dd5e4dee88518ddf12dddd4bfc6a4dd3b6beba51074229b0d4b504516c4c3e5d1aa044d8d00728141cd67bcd68f253288e655c6b34e02e90637ef2912ba7de26ff2357ef17f95a25780c3a057844f226ef4e912f01a201e694e3806e8c70e8b69524cd19f7525d8d66bb766f7f3f918c86a70252236800001897133af94a5a4cfc794d8b9d7c33632152c48eaf302f0b2e0c252b00000000000000006f1bbefbe08de65e3762e194ba4cae8b13535d7d11ee917bca4885bbf597a14ab2458efce78510d86272d88e0c8088f404f011289ebc5623faa1182632161e073af1d69a2e36bed435000025ecd201d2ffb0a7fa4f5d11060cdcf071defd0a8be3b69ce3e4f361aca75827426dde87fdf4617222674280f55e98107450c19b9d86329bd5b4697336112b0b8754ce3574046bf6114d1a88597850b77378fa8edfff8faf8b8ec039bab385cac0535373bb8fab90539b1a65ddff841eb671f3faf37ebdfccea0c002ad2b42047c9ec43193ccf617dbf8a12b4f189edbf9fb7c42b1f435ccd4d96822e6b70100912c92e3943e9c4f45d8bcd528fa8a3ea847f10e9b2506f3bb506f1d7fbde8010000000000a073d0de5538ab42e170b3baae34c35987b0dda497ac3f5e97e6e6aeea15c6d5ed24310100000003bb6030f84b63aaf8690db0221b1705c501f802ff59b4e683efa4b6e77e042072bd2ac37d413008ec9eb8166f6e28b49a77ed91befc65315896f88a8fb1dd679fb4c515f8b7a5b7aca6a251a89d47b728502f7e621cc0e3ba04000000c149ee6601728c750d304197c22da8650579475afd96187d881e93b42a5fdfd686d8900c44c67133dad58037fda65885a15a429edfe3027a5ebf95254744f10fd607bc3300b94932b8d944e0b083bbd86b19cb074577a25ff581d92af08a06f857310a2f14326b0b290205e91a682e00c8762cbc6b904c980eef6e6a1def886c95676dce6a8194479700a02b92bdc8d05eae1f24fdd7b80d1bb404c22f681594de2ebb9687219de8d73ac83823feb402a2415a9850d5f0183ec67be96dc0e4c2d7acf1dfe79d6771903b76e21190c22d641030e1ddacf006c3116e1803af20a5f2b5f7ba58aca5bcabbbab24414a3810788e5503e4be66d683daac5f0001000077339b4200000000108a3c87b19d5b9a00c75d84a92d6dcf00ba96edf35ede0e2b57c26e94801b498924166bde57d5f24258d9fd028096cc15a8b912b494d4bbe609031ea1ca65a548971d5d16296dd08e020000007a27310d5d01f8a8a0f5212d7f628f554afea715ccbc66cbb1016490f5d579308cb3188cf2fcaf67e0c16443d526ba4b968f07ae362c2133c168313e84beb871203880dd453c45d0a137d7f5a8b039dbfa62fb2b4214f8e69f967bf1fbd89e77fcca110000000800000000000000f8877994ebdc35f7efd41e3babd9b3782edd6776d5b6cb4ecd72c9de9b5503747d71440378cf2c2c7ea2dc5febb654a867f853713cf4c0bb322fbbe446d18dee4c821275ef18259cafc346c8b3b9fb0f3adcf6ea310a6b9a3f59e29a5909ea047fb61affb4bc8bbea1fb761b8933795b1a91358a7791aa843d07020e8bb6fc18458c49ac6313e7165b7d9f65e94a62b69f1011b94340cdb7303f01e5cdb5682ddf73d65c3de1d88dd7496d6345d5b9de0223988056a53e19a8b96b9640bc6c09d3c2ff894d626b57c776ed53f94d5e22ff148061b37f72bd92924cb1d0a725e19b264346b7cae0251a850de78316503f3c3d395c7e3f04fc8d52583327cd2341ce4b2d092815376299686f41353b2823814563011a2223b9dd00000000000000000000003a131374a3371cb3e2a9bb4d798b91cefa444501f40b7c9589e8c0bb6c82123d2b45ce905d0903b32ecf30e828c71a07a83f3275f3d661d1af0ffbd5d7f0"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r2, 0xfeffff, 0x113, 0x0, &(0x7f0000000700)="c45c57ce395de5b289f07d637a223920f181c2e57d71483cfb2d075a3ff07258e080a194805cdb0c26d3f7ffb1e0d9cf4fa36dcb2168b72de48ac8f93e6804f1c4d70898d0810e044d7e1778eaac5dfdcc9f1208905522025bcfdf1b6f969b094d5c022c2b7ffefde71e0627b9a2069cc1e0175c4b8860aad4b0a103c589f676b6c4e85eb3950c533b6e62c39ccf9ae9bfe54ee5887358d44f46337fbe090d7c7e55847edee8130ffd3d1e719e01a68b0e691c0d35b0b56e0b514036342fd56f08ac0083f3c2fe41a1295a3d23cf3d160d4fd90f66beba68860456ed41272e1e68d16c2564c85f5556e18784113c493d13253e14d6eb891707fba3c30d07d5ee8619e4426cafec4cf6a3723c455d09b586b248", 0x0, 0xf0, 0x0, 0xc8, 0x6a, &(0x7f0000000100)="1eea90be6643c3872dc979a0f89030dffb98cc303991efabbc7c8ceea05917425222df1b2da6d9999d4b26b3220f2a02f56d3651f2cc8535c5da57de055ea26ac497e585be3a900dc342c2e012a1da499bfe0d95a512b6126db5848db13dd4baff7bb897507fe1f934bfe2590d724c2b3c3dea4b11ff7829c812caa2ef086a440630a26dbe323915b9d4f0d8510eeccac079fd14c20a138bd56853b111cf87baf46a84073bf02c78ec94199d232fe50ef86e162b896d00000000000000000088367551569708837e", &(0x7f0000000080)="3ca023d0611b8397aadba615973af1e35a0f53d6e40353b75c8fa0cee09e947ed6086967271c8e22b4f2889b19708683a06405d4f2e10af9cee2e2971d470abb46f948c7744bdd1d56e03c766ccc84eb2be3e3364e8f54ddfbcef0e82f277aa3074d2d4dd1be5c063578", 0x4}, 0x50) 1.189746035s ago: executing program 1 (id=468): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x412a00, 0x149) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000140)={0x80, 0x6, 0x4, 0x4, 0x17, "b5c60db09b5e4f8d84266188f7bd1a02a92b4a"}) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/54, 0x328000, 0x1000, 0x10, 0x1}, 0x20) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000800000000100000028"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3, 0x0, 0x800000000000000}, 0x18) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={0x20, 0x2e, 0x21, 0x0, 0x0, {0x19}, [@generic="a890bf6b68b722a6fbc30c"]}, 0x20}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000500)={0x1, &(0x7f00000004c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) add_key$keyring(0x0, &(0x7f00000002c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00'}, 0x10) r5 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r5, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x40, 0x0, 0x0) socket(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x10, 0xe, &(0x7f0000000b00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000040)=0x2) readv(r6, &(0x7f00000001c0)=[{&(0x7f0000001300)=""/238, 0xee}, {&(0x7f0000000780)=""/207, 0xcf}, {&(0x7f0000000600)=""/180, 0xb4}], 0x3) r7 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setsig(r7, 0xa, 0x13) fcntl$setlease(r7, 0x400, 0x0) timer_create(0x0, &(0x7f00000005c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)=0x0) timer_settime(r8, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000008000000000018000380140003801000018004000300080001"], 0x44}}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)={0x38, r9, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x38}}, 0x0) syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0) 1.132814509s ago: executing program 0 (id=469): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f00000000c0)}) setfsgid(0x0) 1.11436069s ago: executing program 0 (id=470): r0 = socket$kcm(0xa, 0x1, 0x106) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) close(r0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'vlan1\x00', 0x10}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89b0, &(0x7f0000000080)) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) bind$inet6(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x10000, 0x0) syz_open_procfs(0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000e60000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3, 0x0, 0x4f33}, 0x18) sendmsg$key(0xffffffffffffffff, &(0x7f00000007c0)={0x400000000000000, 0x0, 0x0}, 0x40080) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0xc9028ba210c11f8b) (fail_nth: 3) 872.54124ms ago: executing program 0 (id=471): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x1510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x2, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0x7fffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001380)={&(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x0, 0x3a, 0x0, 0x1}, 0x28) listen(r0, 0xfff) syz_extract_tcp_res(&(0x7f00000001c0)={0x41424344}, 0x8, 0x1) syz_emit_ethernet(0x4a, &(0x7f0000000540)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4a3ff2", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, r1, 0x0, 0x0, 0x5, 0x14}}}}}}}, 0x0) symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') r2 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x3}, &(0x7f00000000c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000300)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x81}) io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0xfffffdcf) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000040)=@v3={0x3000000, [{}, {0x8de6}]}, 0x18, 0x0) 786.024717ms ago: executing program 4 (id=472): socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000280)='+}[@\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x3, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r4 = dup(r3) write$P9_RLERRORu(r4, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe935"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000440)=ANY=[@ANYRESOCT=r0, @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x3c}}, 0x0) recvmmsg(r6, &(0x7f00000002c0), 0x220, 0x100, 0x0) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c000000020681010000000000000000000000000500050002000000050001000700000005000400030000000900020073797a310000000011000300686173683a6e65742c6e6574"], 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x800) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)={0x50, 0x9, 0x6, 0x201, 0x0, 0x0, {0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x64010101}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4) r7 = socket$caif_seqpacket(0x25, 0x5, 0x0) sendmsg$inet(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000680)}, 0x94) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x11, 0xb, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x18) syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578ac010902"], 0x0) 697.248614ms ago: executing program 0 (id=474): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000010a850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) unshare(0x2a020400) r1 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) flistxattr(r1, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000ac0)={&(0x7f0000000b00)='kmem_cache_free\x00', r0}, 0x10) openat$sndseq(0xffffffffffffff9c, 0x0, 0x48100) r2 = socket$inet6(0xa, 0x3, 0x8) recvfrom(r2, 0x0, 0x0, 0x40000100, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000004580)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='$\x00\x00'], 0x28}}], 0x1, 0x0) 656.895917ms ago: executing program 2 (id=476): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x41, 0x1, 0x0, 0x0, 0x0, 0x5, 0x100, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x800000000003}, 0x1100, 0x5dd8, 0x800, 0x3, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) io_setup(0x401, &(0x7f0000000300)) 627.64985ms ago: executing program 2 (id=477): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000efffffff850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='sys_enter\x00', r2}, 0x10) timer_create(0x2, 0x0, &(0x7f00000001c0)=0x0) timer_gettime(r3, &(0x7f0000000400)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x17, 0x0, 0x0, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xce9d8d60ab13d530, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f00000004c0)='dctcp\x00', 0x6) bind$inet6(r5, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c) accept(0xffffffffffffffff, &(0x7f0000000280)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, &(0x7f00000003c0)=0x80) r7 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r8, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f00000001c0)={r9, 0x6b9f}, 0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000600)=@assoc_value={r9, 0x8}, 0x8) r10 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000000200000014000200626f6e643000000000000000000000000900010073797ab000"], 0x40}}, 0x0) sendmsg$SMC_PNETID_DEL(r6, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x3c, r7, 0x20, 0x70bd2a, 0x25dfdbfc, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'ip6gretap0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x4048844) setsockopt$inet6_tcp_int(r5, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r5, &(0x7f0000000240)=':', 0x1, 0x20000041, &(0x7f00000001c0)={0xa, 0x2, 0x2, @empty}, 0x1c) sendmsg$OSF_MSG_REMOVE(r5, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4010}, 0x4010) writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000080)="f1", 0x1}], 0x1) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8946, &(0x7f0000000400)='{\x05T\x82\x89\x98Yi:') 483.845032ms ago: executing program 3 (id=480): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f00000000c0)}) setfsgid(0x0) 471.770833ms ago: executing program 3 (id=481): r0 = socket(0xa, 0x3, 0x87) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="fd6e72876820c0d0623335d83e047ef744901bcc3879ab2dc3f541c8626a72ca5bf4ab52a8c013b745682c5fa741019e134353def2a50a94f3b40d99543c6404f562ac92d768909fdbae19ffe972ed8c173c1de555ac8cbb127579339bcc1eec64b78a9bafce88f482c11c76cb9c32a1cc5f034512829b99d4349cec3cfd9d38538d00000000cd2ebc8d1ebb041415324f481afac7021df055bab3693ecbe6d3a78b29fd724eb328f5de39c80fc649e78083b0", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000fdffffff18110000", @ANYRES32=r2, @ANYBLOB="00acb27f0c000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000e9ff9400000000000000bf9100000000003b0a00000000000000b7000000000000009500"/96], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffee1, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) r4 = openat$sysfs(0xffffff9c, &(0x7f00000037c0)='/sys/kernel/notes', 0x0, 0x0) r5 = syz_io_uring_setup(0xbdc, &(0x7f0000000080)={0x0, 0xec21, 0x80, 0x1, 0x40000333}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x2000, @fd=r4, 0x0, &(0x7f0000000600), 0x0, 0x0, 0x1}) syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f0000000180)='./file2\x00', 0x420c, &(0x7f0000003240)=ANY=[], 0x6, 0x36e, &(0x7f00000007c0)="$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") r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r8}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) io_uring_enter(r5, 0x847ba, 0x2000, 0xe, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000180)={@private1, 0x18, r9}) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r10}, 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="0decd531b64a49c3b8439c604701e239e5a1568ad9361a1968e64709a2f09d0ac2a763fae4ff611b742e0343e5348a7a84d987700794f100", @ANYRES16=r12, @ANYBLOB="050300000000000000000700000008000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x24044080) r13 = socket$nl_route(0x10, 0x3, 0x0) r14 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f00000001c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="3800000055002f03020000000000000007000000", @ANYRES32=r15, @ANYBLOB="200001"], 0x38}}, 0x0) 388.605429ms ago: executing program 3 (id=482): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) r2 = pidfd_getfd(r1, r1, 0x0) setns(r2, 0x66020000) 332.804563ms ago: executing program 3 (id=483): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000064000000030a017f7f00000000000000050000000900010073797a30000000000900030073797a300000000008000a400000000328000480080002400000001208000140000000000d0003"], 0xac}, 0x1, 0x0, 0x0, 0xc0c1}, 0x0) (fail_nth: 8) 144.997179ms ago: executing program 3 (id=484): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, 0xffffffffffffffff, 0x0, 0x100000000}, 0x18) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r1, 0x560a, &(0x7f00000006c0)={0x4, 0x0, 0x0, 0x0, 0x104, 0x3}) r2 = memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9bX\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x2) fallocate(r2, 0x0, 0x0, 0x509a) ioctl$TCSETS2(r1, 0x402c542b, &(0x7f0000000040)={0x5, 0x2, 0xf, 0xfe74, 0x8, "2c277bd72c6157ca4381fbdd4a7c9d6a6f0da7", 0xffffffff, 0x91}) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000980)='mm_page_free\x00', 0xffffffffffffffff, 0x0, 0x6}, 0x18) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = socket$key(0xf, 0x3, 0x2) close(r5) getpeername$l2tp(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @empty}, &(0x7f00000003c0)=0x10) rseq(0x0, 0x0, 0x0, 0x0) r6 = syz_clone(0x80200, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r6, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYRESHEX, @ANYRESHEX=r2, @ANYRESHEX=r3, @ANYRES8=r4, @ANYRES32, @ANYRES16=r0], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) time(0x0) semget$private(0x0, 0x4000000009, 0x0) 129.97228ms ago: executing program 1 (id=485): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) clock_gettime(0xfffffffffffffffc, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000840)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0xff, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000"], 0x7c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) 115.664081ms ago: executing program 1 (id=486): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) futex(0x0, 0x1, 0x800001, 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a000000050000000200000007"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000740), 0x75, r0}, 0x38) r1 = io_uring_setup(0x28fe, &(0x7f0000000080)={0x0, 0x0, 0x2}) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r1, 0x11, &(0x7f00000002c0), 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x42442, 0x44) ioctl$EXT4_IOC_SWAP_BOOT(r3, 0x6611) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) fcntl$setpipe(r4, 0x407, 0x8001a0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x17, 0x10, &(0x7f0000000300)=ANY=[@ANYBLOB="180000001d8aebb968821451b04d98dedba4723a", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000000957300000000000bf91000000000000b7020000020000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000380)='GPL\x00', 0x7, 0x3d, &(0x7f00000003c0)=""/61, 0x1f00, 0x10, '\x00', r2, @fallback=0x29, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000500)={0x1, 0xb, 0x7, 0x4}, 0x10, 0xffffffffffffffff, r4, 0x4, &(0x7f0000000540)=[r0, r5, r0], &(0x7f0000000580)=[{0x0, 0x4, 0xa, 0x1}, {0x1, 0x1, 0xf, 0xb}, {0x1, 0x1, 0x5, 0xc}, {0x5, 0x2, 0xd, 0x6}], 0x10, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000818110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000280)='xen_mc_entry\x00', r6}, 0x18) socket$inet6_sctp(0xa, 0x5, 0x84) mq_open(&(0x7f0000000140)='batadv_slave_1\x00', 0x8c2, 0x30, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1500000010"], 0x48) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newlink={0x4c, 0x10, 0x401, 0x70bd2d, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @gre={{0x8}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e20}, @IFLA_GRE_REMOTE={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x3}}]}}}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x4c}}, 0x0) r10 = mq_open(&(0x7f0000000000)='batadv_slave_1\x00', 0x40, 0xad, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000240)={'macvlan1\x00', 0x0}) r13 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x135}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ENCODING_SA={0x5, 0x6, 0x2}]}}}, @IFLA_LINK={0x8, 0x5, r12}]}, 0x44}}, 0x0) mq_timedreceive(r10, &(0x7f00000000c0)=""/61, 0xfffffffffffffd88, 0x3, 0x0) 98.472823ms ago: executing program 3 (id=487): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000740)='./file0\x00', 0x759, &(0x7f0000000780)={[{@noload}, {@max_batch_time={'max_batch_time', 0x3d, 0x7}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x40}}, {@errors_remount}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x8}, 0x0}, {@data_journal}, {@journal_dev={'journal_dev', 0x3d, 0xf}}, {@i_version}, {@nobarrier}, {@debug}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0xb6a}}, {@data_err_ignore}], [], 0x2c}, 0x2, 0x4f9, &(0x7f0000000200)="$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") r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x62, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0xc}, 0x0, 0x0, 0x800003, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) futex(&(0x7f000000cffc)=0x1, 0x1, 0x800001, 0x0, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x21, &(0x7f0000000000)=0xfffffffe, 0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000200100000102"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bc00551a000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) mremap(&(0x7f00003ef000/0x3000)=nil, 0x3000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x18) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000480)=0x17fe, 0x4) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x2d) r6 = memfd_secret(0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) mq_timedreceive(r6, &(0x7f0000000300)=""/98, 0x62, 0x7, &(0x7f0000000380)={0x0, 0x3938700}) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000280)={r7, r6, 0x2e, 0x4608, @void}, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), r1) sendmsg$TIPC_CMD_GET_MAX_PORTS(r1, &(0x7f0000000200)={&(0x7f0000000100), 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r8, 0x8, 0x70bd28, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x5000}, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000001880)={'bond_slave_0\x00'}) 959.71µs ago: executing program 4 (id=488): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000440)='kfree\x00', r1, 0x0, 0x5}, 0x18) unshare(0x2040400) r2 = fsopen(&(0x7f0000000440)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) unshare(0x2000400) fsmount(r2, 0x0, 0x0) 0s ago: executing program 4 (id=489): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) (async) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, 0x0, 0x0) (async) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x7fa962bfffff, 0x13012, r0, 0x0) (async) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40081c4}, 0x44000) (async) r1 = getpid() r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r2, 0x0, 0xc8, &(0x7f0000003d40), 0x4) (async) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) r4 = socket$igmp(0x2, 0x3, 0x2) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, 0x0) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000002540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) (async) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000a88000/0x2000)=nil, 0x3) (async) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x1, 0x0, 0x0, @vifc_lcl_ifindex, @dev={0xac, 0x14, 0x14, 0x2e}}, 0x10) (async) setsockopt$inet_mreq(r3, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x2e, &(0x7f0000000180)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x6, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x80, 0x2, 0x0, @empty, @multicast1=0xe0000300, {[@timestamp_addr={0x44, 0x4, 0x7f}]}}, @echo_reply={0x0, 0x0, 0x0, 0x64, 0xd2}}}}}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r4, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xfffffff7, 0x4, 0x40000006}, 0x3c) (async) r7 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000104a5270b7357000000925e4a44", @ANYRES32, @ANYBLOB="0dfa130016000000240012000c00010000000000000000000c0002f60800000001180000080001"], 0x44}}, 0x0) (async) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000280)={r7, 0x7, 0x104, 0xfffffffe}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB='H'], 0x48}, 0x1, 0x0, 0x0, 0x20004810}, 0x0) (async) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) ptrace(0x11, r1) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.68' (ED25519) to the list of known hosts. [ 25.811200][ T29] audit: type=1400 audit(1755821885.874:62): avc: denied { mounton } for pid=3289 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 25.812039][ T3289] cgroup: Unknown subsys name 'net' [ 25.835354][ T29] audit: type=1400 audit(1755821885.874:63): avc: denied { mount } for pid=3289 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 25.864000][ T29] audit: type=1400 audit(1755821885.934:64): avc: denied { unmount } for pid=3289 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 25.982923][ T3289] cgroup: Unknown subsys name 'cpuset' [ 25.989597][ T3289] cgroup: Unknown subsys name 'rlimit' [ 26.137811][ T29] audit: type=1400 audit(1755821886.204:65): avc: denied { setattr } for pid=3289 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 26.161759][ T29] audit: type=1400 audit(1755821886.204:66): avc: denied { create } for pid=3289 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 26.182717][ T29] audit: type=1400 audit(1755821886.204:67): avc: denied { write } for pid=3289 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 26.189707][ T3293] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 26.203580][ T29] audit: type=1400 audit(1755821886.204:68): avc: denied { read } for pid=3289 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 26.232480][ T29] audit: type=1400 audit(1755821886.204:69): avc: denied { mounton } for pid=3289 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 26.257798][ T29] audit: type=1400 audit(1755821886.204:70): avc: denied { mount } for pid=3289 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 26.281368][ T29] audit: type=1400 audit(1755821886.274:71): avc: denied { relabelto } for pid=3293 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 26.318767][ T3289] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 27.411834][ T3299] chnl_net:caif_netlink_parms(): no params data found [ 27.495648][ T3299] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.502810][ T3299] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.510159][ T3299] bridge_slave_0: entered allmulticast mode [ 27.516852][ T3299] bridge_slave_0: entered promiscuous mode [ 27.535504][ T3299] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.543157][ T3299] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.550303][ T3299] bridge_slave_1: entered allmulticast mode [ 27.556891][ T3299] bridge_slave_1: entered promiscuous mode [ 27.563402][ T3301] chnl_net:caif_netlink_parms(): no params data found [ 27.596928][ T3299] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 27.621575][ T3299] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 27.647056][ T3299] team0: Port device team_slave_0 added [ 27.657499][ T3299] team0: Port device team_slave_1 added [ 27.665811][ T3309] chnl_net:caif_netlink_parms(): no params data found [ 27.674268][ T3303] chnl_net:caif_netlink_parms(): no params data found [ 27.704714][ T3299] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.711666][ T3299] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.737694][ T3299] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.759427][ T3301] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.766542][ T3301] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.774378][ T3301] bridge_slave_0: entered allmulticast mode [ 27.780789][ T3301] bridge_slave_0: entered promiscuous mode [ 27.790026][ T3299] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.797126][ T3299] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.823276][ T3299] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.845097][ T3301] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.852229][ T3301] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.859431][ T3301] bridge_slave_1: entered allmulticast mode [ 27.866042][ T3301] bridge_slave_1: entered promiscuous mode [ 27.910991][ T3301] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 27.929713][ T3299] hsr_slave_0: entered promiscuous mode [ 27.936436][ T3299] hsr_slave_1: entered promiscuous mode [ 27.945860][ T3301] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 27.969255][ T3300] chnl_net:caif_netlink_parms(): no params data found [ 27.988980][ T3309] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.996112][ T3309] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.003585][ T3309] bridge_slave_0: entered allmulticast mode [ 28.010261][ T3309] bridge_slave_0: entered promiscuous mode [ 28.017486][ T3309] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.025280][ T3309] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.034536][ T3309] bridge_slave_1: entered allmulticast mode [ 28.041192][ T3309] bridge_slave_1: entered promiscuous mode [ 28.055572][ T3303] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.062744][ T3303] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.070071][ T3303] bridge_slave_0: entered allmulticast mode [ 28.076993][ T3303] bridge_slave_0: entered promiscuous mode [ 28.089655][ T3301] team0: Port device team_slave_0 added [ 28.102458][ T3303] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.109651][ T3303] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.116944][ T3303] bridge_slave_1: entered allmulticast mode [ 28.123411][ T3303] bridge_slave_1: entered promiscuous mode [ 28.133677][ T3301] team0: Port device team_slave_1 added [ 28.164964][ T3309] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 28.179115][ T3303] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 28.195007][ T3309] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 28.205838][ T3303] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 28.225163][ T3301] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 28.232315][ T3301] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.258496][ T3301] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 28.283572][ T3301] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 28.290972][ T3301] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.318152][ T3301] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 28.334288][ T3303] team0: Port device team_slave_0 added [ 28.340523][ T3309] team0: Port device team_slave_0 added [ 28.360232][ T3303] team0: Port device team_slave_1 added [ 28.366817][ T3309] team0: Port device team_slave_1 added [ 28.389452][ T3300] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.396720][ T3300] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.404355][ T3300] bridge_slave_0: entered allmulticast mode [ 28.410901][ T3300] bridge_slave_0: entered promiscuous mode [ 28.438883][ T3300] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.446135][ T3300] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.453608][ T3300] bridge_slave_1: entered allmulticast mode [ 28.460034][ T3300] bridge_slave_1: entered promiscuous mode [ 28.466458][ T3309] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 28.473528][ T3309] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.499784][ T3309] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 28.520682][ T3301] hsr_slave_0: entered promiscuous mode [ 28.527076][ T3301] hsr_slave_1: entered promiscuous mode [ 28.533150][ T3301] debugfs: 'hsr0' already exists in 'hsr' [ 28.538876][ T3301] Cannot create hsr debugfs directory [ 28.544881][ T3303] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 28.551821][ T3303] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.578475][ T3303] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 28.593964][ T3309] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 28.601125][ T3309] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.627545][ T3309] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 28.644670][ T3303] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 28.651793][ T3303] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.678497][ T3303] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 28.702619][ T3300] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 28.722402][ T3300] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 28.740525][ T3303] hsr_slave_0: entered promiscuous mode [ 28.746534][ T3303] hsr_slave_1: entered promiscuous mode [ 28.752471][ T3303] debugfs: 'hsr0' already exists in 'hsr' [ 28.758208][ T3303] Cannot create hsr debugfs directory [ 28.805688][ T3300] team0: Port device team_slave_0 added [ 28.814188][ T3300] team0: Port device team_slave_1 added [ 28.822371][ T3309] hsr_slave_0: entered promiscuous mode [ 28.828255][ T3309] hsr_slave_1: entered promiscuous mode [ 28.834403][ T3309] debugfs: 'hsr0' already exists in 'hsr' [ 28.840298][ T3309] Cannot create hsr debugfs directory [ 28.862350][ T3299] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 28.871136][ T3299] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 28.895481][ T3299] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 28.914243][ T3300] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 28.921203][ T3300] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.947350][ T3300] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 28.959125][ T3299] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 28.980910][ T3300] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 28.987983][ T3300] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.013933][ T3300] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.071230][ T3300] hsr_slave_0: entered promiscuous mode [ 29.077739][ T3300] hsr_slave_1: entered promiscuous mode [ 29.083688][ T3300] debugfs: 'hsr0' already exists in 'hsr' [ 29.089392][ T3300] Cannot create hsr debugfs directory [ 29.117089][ T3301] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 29.134841][ T3301] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 29.153366][ T3301] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 29.163299][ T3301] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 29.205262][ T3303] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 29.215366][ T3303] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 29.236258][ T3303] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 29.244825][ T3303] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 29.267806][ T3309] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 29.277119][ T3309] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 29.285639][ T3309] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 29.294098][ T3309] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 29.324352][ T3300] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 29.334987][ T3300] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 29.343992][ T3300] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 29.353026][ T3300] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 29.366391][ T3299] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.387795][ T3299] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.408450][ T3301] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.421660][ T146] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.428913][ T146] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.449515][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.456596][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.476955][ T3301] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.495260][ T146] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.502527][ T146] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.521227][ T2094] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.528331][ T2094] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.558523][ T3303] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.570830][ T3300] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.590012][ T3301] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 29.613644][ T3300] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.626310][ T3303] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.639695][ T146] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.647187][ T146] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.663128][ T3299] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.681972][ T3303] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 29.692573][ T3303] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 29.705077][ T2094] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.712142][ T2094] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.721277][ T2094] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.728336][ T2094] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.747120][ T3309] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.762872][ T2094] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.769952][ T2094] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.781956][ T3309] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.794482][ T3301] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.837608][ T2094] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.844708][ T2094] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.861425][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.868610][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.902747][ T3303] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.961320][ T3300] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.988734][ T3301] veth0_vlan: entered promiscuous mode [ 30.010784][ T3301] veth1_vlan: entered promiscuous mode [ 30.035759][ T3309] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.048996][ T3299] veth0_vlan: entered promiscuous mode [ 30.070511][ T3301] veth0_macvtap: entered promiscuous mode [ 30.084544][ T3303] veth0_vlan: entered promiscuous mode [ 30.091568][ T3299] veth1_vlan: entered promiscuous mode [ 30.100334][ T3303] veth1_vlan: entered promiscuous mode [ 30.114938][ T3301] veth1_macvtap: entered promiscuous mode [ 30.126092][ T3299] veth0_macvtap: entered promiscuous mode [ 30.148448][ T3299] veth1_macvtap: entered promiscuous mode [ 30.163456][ T3301] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.180472][ T3301] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.192594][ T3299] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.202957][ T51] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.213058][ T3299] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.231937][ T3309] veth0_vlan: entered promiscuous mode [ 30.238158][ T51] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.256986][ T51] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.266387][ T3303] veth0_macvtap: entered promiscuous mode [ 30.276517][ T3300] veth0_vlan: entered promiscuous mode [ 30.282480][ T51] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.294823][ T3303] veth1_macvtap: entered promiscuous mode [ 30.302821][ T51] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.316598][ T3309] veth1_vlan: entered promiscuous mode [ 30.323534][ T51] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.333186][ T3300] veth1_vlan: entered promiscuous mode [ 30.346203][ T51] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.355682][ T51] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.370335][ T3309] veth0_macvtap: entered promiscuous mode [ 30.386479][ T3299] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 30.393369][ T3303] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.414884][ T3309] veth1_macvtap: entered promiscuous mode [ 30.433562][ T3303] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.443549][ T3300] veth0_macvtap: entered promiscuous mode [ 30.459754][ T3309] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.468475][ T3300] veth1_macvtap: entered promiscuous mode [ 30.477829][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.488026][ T3309] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.502782][ T3471] loop0: detected capacity change from 0 to 128 [ 30.511531][ T3300] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.527264][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.558372][ T3300] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.569177][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.602259][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.603415][ T3477] loop3: detected capacity change from 0 to 128 [ 30.634433][ T1698] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.638261][ T3471] syz.0.1: attempt to access beyond end of device [ 30.638261][ T3471] loop0: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 30.662526][ T3438] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.674069][ T1698] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.693565][ T3482] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 30.713376][ T3471] syz.0.1: attempt to access beyond end of device [ 30.713376][ T3471] loop0: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 30.751140][ T3477] syz.3.6: attempt to access beyond end of device [ 30.751140][ T3477] loop3: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 30.751723][ T1698] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.778971][ T3471] syz.0.1: attempt to access beyond end of device [ 30.778971][ T3471] loop0: rw=2049, sector=177, nr_sectors = 8 limit=128 [ 30.798614][ T3477] syz.3.6: attempt to access beyond end of device [ 30.798614][ T3477] loop3: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 30.819233][ T29] kauditd_printk_skb: 83 callbacks suppressed [ 30.819246][ T29] audit: type=1400 audit(1755821890.884:155): avc: denied { mounton } for pid=3485 comm="syz.1.7" path="/1/file0" dev="tmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 30.824979][ T3477] syz.3.6: attempt to access beyond end of device [ 30.824979][ T3477] loop3: rw=2049, sector=177, nr_sectors = 8 limit=128 [ 30.833649][ T29] audit: type=1400 audit(1755821890.894:156): avc: denied { mount } for pid=3485 comm="syz.1.7" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 30.853228][ T3471] syz.0.1: attempt to access beyond end of device [ 30.853228][ T3471] loop0: rw=2049, sector=193, nr_sectors = 8 limit=128 [ 30.861370][ T1698] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.895603][ T3492] loop4: detected capacity change from 0 to 128 [ 30.921544][ T3477] syz.3.6: attempt to access beyond end of device [ 30.921544][ T3477] loop3: rw=2049, sector=193, nr_sectors = 8 limit=128 [ 30.932235][ T29] audit: type=1400 audit(1755821890.984:157): avc: denied { create } for pid=3485 comm="syz.1.7" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 30.955479][ T29] audit: type=1400 audit(1755821890.984:158): avc: denied { write } for pid=3485 comm="syz.1.7" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 30.990770][ T3477] syz.3.6: attempt to access beyond end of device [ 30.990770][ T3477] loop3: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 31.007214][ T1698] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.017621][ T3471] syz.0.1: attempt to access beyond end of device [ 31.017621][ T3471] loop0: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 31.022354][ T1698] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.044226][ T29] audit: type=1400 audit(1755821891.104:159): avc: denied { create } for pid=3486 comm="syz.2.8" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 31.063837][ T29] audit: type=1400 audit(1755821891.104:160): avc: denied { write } for pid=3486 comm="syz.2.8" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 31.111626][ T1698] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.179892][ T29] audit: type=1400 audit(1755821891.114:161): avc: denied { unmount } for pid=3303 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 31.200450][ T29] audit: type=1400 audit(1755821891.174:162): avc: denied { unmount } for pid=3299 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 31.215805][ T3500] loop1: detected capacity change from 0 to 128 [ 31.220627][ T29] audit: type=1326 audit(1755821891.234:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3497 comm="syz.0.10" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ca19cebe9 code=0x7ffc0000 [ 31.250331][ T29] audit: type=1326 audit(1755821891.234:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3497 comm="syz.0.10" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ca19cebe9 code=0x7ffc0000 [ 31.460127][ T3508] syz.3.13 uses obsolete (PF_INET,SOCK_PACKET) [ 31.470429][ T3504] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.12'. [ 31.513542][ T3507] netlink: 'syz.4.14': attribute type 10 has an invalid length. [ 31.525769][ T3507] team0: Device hsr_slave_0 failed to register rx_handler [ 31.625689][ T3507] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 31.653859][ T3507] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 31.705028][ T3512] loop0: detected capacity change from 0 to 512 [ 31.711728][ T3512] EXT4-fs: Ignoring removed orlov option [ 31.723962][ T3512] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 31.731253][ T3487] Set syz1 is full, maxelem 65536 reached [ 31.756189][ T3512] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002] [ 31.765631][ T3512] EXT4-fs error (device loop0): ext4_iget_extra_inode:5104: inode #15: comm syz.0.16: corrupted in-inode xattr: e_value size too large [ 31.780942][ T3512] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.16: couldn't read orphan inode 15 (err -117) [ 31.795068][ T3512] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 31.828797][ T3520] loop1: detected capacity change from 0 to 128 [ 31.846671][ T3522] netlink: 27 bytes leftover after parsing attributes in process `syz.3.19'. [ 31.878308][ T3299] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.098567][ T3535] loop0: detected capacity change from 0 to 2048 [ 32.145701][ T3535] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 32.227525][ T3535] EXT4-fs error (device loop0): ext4_lookup:1787: inode #12: comm syz.0.24: iget: bogus i_mode (4355) [ 32.292144][ T3551] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.29'. [ 32.314695][ T3299] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.408347][ T3561] FAULT_INJECTION: forcing a failure. [ 32.408347][ T3561] name failslab, interval 1, probability 0, space 0, times 1 [ 32.421149][ T3561] CPU: 0 UID: 0 PID: 3561 Comm: syz.3.34 Not tainted syzkaller #0 PREEMPT(voluntary) [ 32.421238][ T3561] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 32.421250][ T3561] Call Trace: [ 32.421255][ T3561] [ 32.421262][ T3561] __dump_stack+0x1d/0x30 [ 32.421283][ T3561] dump_stack_lvl+0xe8/0x140 [ 32.421297][ T3561] dump_stack+0x15/0x1b [ 32.421310][ T3561] should_fail_ex+0x265/0x280 [ 32.421342][ T3561] should_failslab+0x8c/0xb0 [ 32.421361][ T3561] kmem_cache_alloc_noprof+0x50/0x310 [ 32.421382][ T3561] ? skb_clone+0x151/0x1f0 [ 32.421398][ T3561] skb_clone+0x151/0x1f0 [ 32.421413][ T3561] __netlink_deliver_tap+0x2c9/0x500 [ 32.421477][ T3561] ? netlink_attachskb+0x2d0/0x610 [ 32.421500][ T3561] netlink_sendskb+0x126/0x150 [ 32.421533][ T3561] netlink_unicast+0x2a2/0x690 [ 32.421556][ T3561] netlink_ack+0x4c8/0x500 [ 32.421571][ T3561] nfnetlink_rcv+0x15c0/0x1690 [ 32.421605][ T3561] netlink_unicast+0x5bd/0x690 [ 32.421639][ T3561] netlink_sendmsg+0x58b/0x6b0 [ 32.421655][ T3561] ? __pfx_netlink_sendmsg+0x10/0x10 [ 32.421712][ T3561] __sock_sendmsg+0x142/0x180 [ 32.421739][ T3561] ____sys_sendmsg+0x31e/0x4e0 [ 32.421850][ T3561] ___sys_sendmsg+0x17b/0x1d0 [ 32.421928][ T3561] __x64_sys_sendmsg+0xd4/0x160 [ 32.421949][ T3561] x64_sys_call+0x191e/0x2ff0 [ 32.421969][ T3561] do_syscall_64+0xd2/0x200 [ 32.421988][ T3561] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 32.422023][ T3561] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 32.422123][ T3561] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 32.422190][ T3561] RIP: 0033:0x7f9b21a1ebe9 [ 32.422204][ T3561] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 32.422294][ T3561] RSP: 002b:00007f9b2047f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 32.422316][ T3561] RAX: ffffffffffffffda RBX: 00007f9b21c45fa0 RCX: 00007f9b21a1ebe9 [ 32.422327][ T3561] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 32.422337][ T3561] RBP: 00007f9b2047f090 R08: 0000000000000000 R09: 0000000000000000 [ 32.422346][ T3561] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 32.422355][ T3561] R13: 00007f9b21c46038 R14: 00007f9b21c45fa0 R15: 00007ffdacf64b78 [ 32.422369][ T3561] [ 32.762388][ T3571] FAULT_INJECTION: forcing a failure. [ 32.762388][ T3571] name failslab, interval 1, probability 0, space 0, times 0 [ 32.775532][ T3571] CPU: 0 UID: 0 PID: 3571 Comm: syz.1.38 Not tainted syzkaller #0 PREEMPT(voluntary) [ 32.775556][ T3571] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 32.775566][ T3571] Call Trace: [ 32.775571][ T3571] [ 32.775577][ T3571] __dump_stack+0x1d/0x30 [ 32.775676][ T3571] dump_stack_lvl+0xe8/0x140 [ 32.775691][ T3571] dump_stack+0x15/0x1b [ 32.775704][ T3571] should_fail_ex+0x265/0x280 [ 32.775720][ T3571] should_failslab+0x8c/0xb0 [ 32.775740][ T3571] kmem_cache_alloc_noprof+0x50/0x310 [ 32.775772][ T3571] ? skb_clone+0x151/0x1f0 [ 32.775791][ T3571] skb_clone+0x151/0x1f0 [ 32.775807][ T3571] pfkey_sendmsg+0x2cc/0x900 [ 32.775826][ T3571] ? avc_has_perm+0x13a/0x180 [ 32.775904][ T3571] ? avc_has_perm+0x171/0x180 [ 32.775930][ T3571] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 32.775952][ T3571] __sock_sendmsg+0x142/0x180 [ 32.775984][ T3571] ____sys_sendmsg+0x31e/0x4e0 [ 32.776003][ T3571] ___sys_sendmsg+0x17b/0x1d0 [ 32.776034][ T3571] __x64_sys_sendmsg+0xd4/0x160 [ 32.776062][ T3571] x64_sys_call+0x191e/0x2ff0 [ 32.776083][ T3571] do_syscall_64+0xd2/0x200 [ 32.776127][ T3571] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 32.776199][ T3571] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 32.776239][ T3571] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 32.776258][ T3571] RIP: 0033:0x7f79c575ebe9 [ 32.776350][ T3571] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 32.776363][ T3571] RSP: 002b:00007f79c41bf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 32.776379][ T3571] RAX: ffffffffffffffda RBX: 00007f79c5985fa0 RCX: 00007f79c575ebe9 [ 32.776391][ T3571] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 32.776458][ T3571] RBP: 00007f79c41bf090 R08: 0000000000000000 R09: 0000000000000000 [ 32.776467][ T3571] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 32.776476][ T3571] R13: 00007f79c5986038 R14: 00007f79c5985fa0 R15: 00007ffe366efcf8 [ 32.776614][ T3571] [ 32.834323][ T3572] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 33.127622][ T3584] loop3: detected capacity change from 0 to 2048 [ 33.221033][ T3584] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 33.226908][ T3592] vhci_hcd: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 33.258230][ T3584] EXT4-fs error (device loop3): ext4_lookup:1787: inode #12: comm syz.3.41: iget: bogus i_mode (4355) [ 33.380259][ T3596] loop2: detected capacity change from 0 to 128 [ 33.394338][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.515708][ T3605] FAULT_INJECTION: forcing a failure. [ 33.515708][ T3605] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 33.528875][ T3605] CPU: 1 UID: 0 PID: 3605 Comm: syz.3.48 Not tainted syzkaller #0 PREEMPT(voluntary) [ 33.528899][ T3605] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 33.528978][ T3605] Call Trace: [ 33.528985][ T3605] [ 33.529057][ T3605] __dump_stack+0x1d/0x30 [ 33.529078][ T3605] dump_stack_lvl+0xe8/0x140 [ 33.529094][ T3605] dump_stack+0x15/0x1b [ 33.529188][ T3605] should_fail_ex+0x265/0x280 [ 33.529206][ T3605] should_fail+0xb/0x20 [ 33.529260][ T3605] should_fail_usercopy+0x1a/0x20 [ 33.529278][ T3605] copy_folio_from_iter_atomic+0x278/0x1170 [ 33.529306][ T3605] ? shmem_write_begin+0xa8/0x190 [ 33.529321][ T3605] ? shmem_write_begin+0xe1/0x190 [ 33.529337][ T3605] generic_perform_write+0x2c2/0x490 [ 33.529389][ T3605] shmem_file_write_iter+0xc5/0xf0 [ 33.529412][ T3605] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 33.529438][ T3605] vfs_write+0x52a/0x960 [ 33.529462][ T3605] ksys_write+0xda/0x1a0 [ 33.529480][ T3605] __x64_sys_write+0x40/0x50 [ 33.529551][ T3605] x64_sys_call+0x27fe/0x2ff0 [ 33.529652][ T3605] do_syscall_64+0xd2/0x200 [ 33.529686][ T3605] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 33.529708][ T3605] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 33.529731][ T3605] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 33.529774][ T3605] RIP: 0033:0x7f9b21a1d69f [ 33.529798][ T3605] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 33.529812][ T3605] RSP: 002b:00007f9b2047ed40 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 33.529828][ T3605] RAX: ffffffffffffffda RBX: 0000000000100000 RCX: 00007f9b21a1d69f [ 33.529839][ T3605] RDX: 0000000000100000 RSI: 00007f9b1805f000 RDI: 0000000000000004 [ 33.529849][ T3605] RBP: 0000000000000000 R08: 0000000000000000 R09: 00000000000005de [ 33.529860][ T3605] R10: 00000000000003bc R11: 0000000000000293 R12: 0000000000000004 [ 33.529933][ T3605] R13: 00007f9b2047edec R14: 00007f9b2047edf0 R15: 00007f9b1805f000 [ 33.529949][ T3605] [ 33.803705][ T3605] loop3: detected capacity change from 0 to 2048 [ 33.853529][ T3605] loop3: p1 < > p3 p4 < > [ 33.858949][ T3605] loop3: p3 start 4284289 is beyond EOD, truncated [ 33.886163][ T3609] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 33.896535][ T3612] FAULT_INJECTION: forcing a failure. [ 33.896535][ T3612] name failslab, interval 1, probability 0, space 0, times 0 [ 33.909510][ T3612] CPU: 1 UID: 0 PID: 3612 Comm: syz.1.51 Not tainted syzkaller #0 PREEMPT(voluntary) [ 33.909534][ T3612] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 33.909545][ T3612] Call Trace: [ 33.909552][ T3612] [ 33.909559][ T3612] __dump_stack+0x1d/0x30 [ 33.909605][ T3612] dump_stack_lvl+0xe8/0x140 [ 33.909641][ T3612] dump_stack+0x15/0x1b [ 33.909712][ T3612] should_fail_ex+0x265/0x280 [ 33.909734][ T3612] should_failslab+0x8c/0xb0 [ 33.909756][ T3612] kmem_cache_alloc_node_noprof+0x57/0x320 [ 33.909859][ T3612] ? __alloc_skb+0x101/0x320 [ 33.909886][ T3612] __alloc_skb+0x101/0x320 [ 33.909909][ T3612] netlink_alloc_large_skb+0xba/0xf0 [ 33.909938][ T3612] netlink_sendmsg+0x3cf/0x6b0 [ 33.909956][ T3612] ? __pfx_netlink_sendmsg+0x10/0x10 [ 33.909980][ T3612] __sock_sendmsg+0x142/0x180 [ 33.910058][ T3612] ____sys_sendmsg+0x31e/0x4e0 [ 33.910125][ T3612] ___sys_sendmsg+0x17b/0x1d0 [ 33.910160][ T3612] __x64_sys_sendmsg+0xd4/0x160 [ 33.910182][ T3612] x64_sys_call+0x191e/0x2ff0 [ 33.910203][ T3612] do_syscall_64+0xd2/0x200 [ 33.910285][ T3612] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 33.910306][ T3612] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 33.910358][ T3612] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 33.910375][ T3612] RIP: 0033:0x7f79c575ebe9 [ 33.910390][ T3612] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 33.910427][ T3612] RSP: 002b:00007f79c41bf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 33.910443][ T3612] RAX: ffffffffffffffda RBX: 00007f79c5985fa0 RCX: 00007f79c575ebe9 [ 33.910455][ T3612] RDX: 0000000000000000 RSI: 0000200000000500 RDI: 0000000000000006 [ 33.910467][ T3612] RBP: 00007f79c41bf090 R08: 0000000000000000 R09: 0000000000000000 [ 33.910478][ T3612] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 33.910490][ T3612] R13: 00007f79c5986038 R14: 00007f79c5985fa0 R15: 00007ffe366efcf8 [ 33.910508][ T3612] [ 34.258556][ T3615] loop1: detected capacity change from 0 to 128 [ 34.284176][ T3619] loop4: detected capacity change from 0 to 512 [ 34.334974][ T3619] ======================================================= [ 34.334974][ T3619] WARNING: The mand mount option has been deprecated and [ 34.334974][ T3619] and is ignored by this kernel. Remove the mand [ 34.334974][ T3619] option from the mount to silence this warning. [ 34.334974][ T3619] ======================================================= [ 34.513697][ T3532] udevd[3532]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 34.524956][ T3292] udevd[3292]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 34.577143][ T3292] udevd[3292]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 34.593199][ T3532] udevd[3532]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 34.712318][ T3619] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 34.723399][ T3619] EXT4-fs (loop4): group descriptors corrupted! [ 34.738754][ T3630] loop1: detected capacity change from 0 to 2048 [ 34.825090][ T3630] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 34.883699][ T3638] loop3: detected capacity change from 0 to 128 [ 34.927205][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.960270][ T3634] loop2: detected capacity change from 0 to 128 [ 35.489023][ T3657] lo speed is unknown, defaulting to 1000 [ 35.545230][ T3663] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 35.577839][ T3664] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 35.628096][ T3667] netlink: 27 bytes leftover after parsing attributes in process `syz.3.69'. [ 35.638710][ T3657] lo speed is unknown, defaulting to 1000 [ 35.653469][ T3665] netlink: 8 bytes leftover after parsing attributes in process `syz.4.65'. [ 35.662413][ T3657] lo speed is unknown, defaulting to 1000 [ 35.702505][ T3663] netlink: 4 bytes leftover after parsing attributes in process `syz.4.65'. [ 35.742588][ T3657] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 35.774786][ T3681] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.74'. [ 35.794932][ T3657] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 35.849701][ T3676] loop0: detected capacity change from 0 to 256 [ 35.859489][ T3657] lo speed is unknown, defaulting to 1000 [ 35.869110][ T29] kauditd_printk_skb: 373 callbacks suppressed [ 35.869124][ T29] audit: type=1326 audit(1755821895.934:538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3674 comm="syz.1.72" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79c575ebe9 code=0x7ffc0000 [ 36.026906][ T3681] netlink: zone id is out of range [ 36.032138][ T3681] netlink: zone id is out of range [ 36.041138][ T29] audit: type=1326 audit(1755821895.934:539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3674 comm="syz.1.72" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79c575ebe9 code=0x7ffc0000 [ 36.092388][ T3681] netlink: zone id is out of range [ 36.103979][ T3681] netlink: zone id is out of range [ 36.109693][ T3681] netlink: zone id is out of range [ 36.124294][ T3657] lo speed is unknown, defaulting to 1000 [ 36.134150][ T3681] netlink: zone id is out of range [ 36.151449][ T3681] netlink: del zone limit has 8 unknown bytes [ 36.160764][ T3657] lo speed is unknown, defaulting to 1000 [ 36.162394][ T29] audit: type=1326 audit(1755821896.164:540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3685 comm="syz.1.75" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79c575ebe9 code=0x7ffc0000 [ 36.190166][ T29] audit: type=1326 audit(1755821896.164:541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3685 comm="syz.1.75" exe="/root/syz-executor" sig=0 arch=c000003e syscall=201 compat=0 ip=0x7f79c575ebe9 code=0x7ffc0000 [ 36.213656][ T29] audit: type=1326 audit(1755821896.164:542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3685 comm="syz.1.75" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79c575ebe9 code=0x7ffc0000 [ 36.237010][ T29] audit: type=1326 audit(1755821896.164:543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3685 comm="syz.1.75" exe="/root/syz-executor" sig=0 arch=c000003e syscall=64 compat=0 ip=0x7f79c575ebe9 code=0x7ffc0000 [ 36.260293][ T29] audit: type=1326 audit(1755821896.164:544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3685 comm="syz.1.75" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79c575ebe9 code=0x7ffc0000 [ 36.272608][ T3657] lo speed is unknown, defaulting to 1000 [ 36.283872][ T29] audit: type=1326 audit(1755821896.164:545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3685 comm="syz.1.75" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79c575ebe9 code=0x7ffc0000 [ 36.313026][ T29] audit: type=1400 audit(1755821896.224:546): avc: denied { read } for pid=3675 comm="syz.0.73" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 36.397283][ T3690] pim6reg: entered allmulticast mode [ 36.404647][ T29] audit: type=1400 audit(1755821896.464:547): avc: denied { setopt } for pid=3689 comm="syz.3.76" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 36.428053][ T3690] pim6reg: left allmulticast mode [ 36.455999][ T3657] lo speed is unknown, defaulting to 1000 [ 36.541736][ T3696] loop1: detected capacity change from 0 to 512 [ 36.608858][ T3696] EXT4-fs (loop1): orphan cleanup on readonly fs [ 36.619040][ T3696] EXT4-fs error (device loop1): ext4_orphan_get:1418: comm syz.1.80: bad orphan inode 13 [ 36.804816][ T3696] ext4_test_bit(bit=12, block=18) = 1 [ 36.810445][ T3696] is_bad_inode(inode)=0 [ 36.814661][ T3696] NEXT_ORPHAN(inode)=2130706432 [ 36.819540][ T3696] max_ino=32 [ 36.822781][ T3696] i_nlink=1 [ 36.846265][ T3696] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 36.986329][ T3696] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 37.003959][ T3718] loop4: detected capacity change from 0 to 256 [ 37.103571][ T3696] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.80: bg 0: block 248: padding at end of block bitmap is not set [ 37.180749][ T3696] EXT4-fs error (device loop1): ext4_acquire_dquot:6937: comm syz.1.80: Failed to acquire dquot type 1 [ 37.203100][ T3722] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 37.239739][ T3696] EXT4-fs warning (device loop1): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 37.249379][ T3730] EXT4-fs error (device loop1): ext4_lookup:1787: inode #15: comm syz.1.80: iget: bad i_size value: 360287970189639690 [ 37.310548][ T3734] pim6reg: entered allmulticast mode [ 37.319546][ T3734] pim6reg: left allmulticast mode [ 37.337582][ T3735] netlink: 'syz.3.93': attribute type 10 has an invalid length. [ 37.347710][ T3735] team0: Device hsr_slave_0 failed to register rx_handler [ 37.416795][ T3735] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 37.425941][ T3737] loop2: detected capacity change from 0 to 128 [ 37.438104][ T3735] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 37.468017][ T3743] EXT4-fs error (device loop1): ext4_lookup:1787: inode #15: comm syz.1.80: iget: bad i_size value: 360287970189639690 [ 37.520527][ T3745] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 37.605322][ T3696] syz.1.80 (3696) used greatest stack depth: 9248 bytes left [ 37.622738][ T3747] netlink: 'syz.4.98': attribute type 10 has an invalid length. [ 37.635364][ T3749] loop0: detected capacity change from 0 to 128 [ 37.691149][ T3749] bio_check_eod: 516 callbacks suppressed [ 37.691166][ T3749] syz.0.99: attempt to access beyond end of device [ 37.691166][ T3749] loop0: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 37.692647][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.700879][ T3747] team0: Device hsr_slave_0 failed to register rx_handler [ 37.750663][ T3749] syz.0.99: attempt to access beyond end of device [ 37.750663][ T3749] loop0: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 37.788817][ T3747] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 37.829994][ T3749] syz.0.99: attempt to access beyond end of device [ 37.829994][ T3749] loop0: rw=2049, sector=177, nr_sectors = 8 limit=128 [ 37.844937][ T3747] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 37.871816][ T3737] syz.2.94: attempt to access beyond end of device [ 37.871816][ T3737] loop2: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 37.909262][ T3749] syz.0.99: attempt to access beyond end of device [ 37.909262][ T3749] loop0: rw=2049, sector=193, nr_sectors = 8 limit=128 [ 37.953481][ T3749] syz.0.99: attempt to access beyond end of device [ 37.953481][ T3749] loop0: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 38.008949][ T3749] syz.0.99: attempt to access beyond end of device [ 38.008949][ T3749] loop0: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 38.055000][ T3749] syz.0.99: attempt to access beyond end of device [ 38.055000][ T3749] loop0: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 38.079447][ T3737] syz.2.94: attempt to access beyond end of device [ 38.079447][ T3737] loop2: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 38.102499][ T3749] syz.0.99: attempt to access beyond end of device [ 38.102499][ T3749] loop0: rw=2049, sector=257, nr_sectors = 8 limit=128 [ 38.245171][ T3763] netlink: 277 bytes leftover after parsing attributes in process `syz.1.102'. [ 38.301352][ T3771] loop0: detected capacity change from 0 to 128 [ 38.309307][ T3769] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 38.643276][ T3794] loop1: detected capacity change from 0 to 128 [ 38.702301][ T3796] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 38.815801][ T3803] loop0: detected capacity change from 0 to 128 [ 39.209008][ T3816] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 39.303694][ T3818] loop0: detected capacity change from 0 to 128 [ 39.347864][ T3820] process 'syz.1.120' launched './file1' with NULL argv: empty string added [ 39.358663][ T3820] vhci_hcd: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 39.688975][ T3847] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 39.746227][ T3859] loop0: detected capacity change from 0 to 1024 [ 39.816945][ T3860] loop4: detected capacity change from 0 to 128 [ 39.829701][ T3859] EXT4-fs: Ignoring removed nomblk_io_submit option [ 39.883881][ T3864] netlink: 27 bytes leftover after parsing attributes in process `syz.3.128'. [ 39.945164][ T3868] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 39.978393][ T3871] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=258 sclass=netlink_route_socket pid=3871 comm=syz.2.131 [ 40.006184][ T3859] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.156000][ T3882] loop2: detected capacity change from 0 to 128 [ 40.249025][ T3886] loop3: detected capacity change from 0 to 512 [ 40.296186][ T3886] EXT4-fs error (device loop3): __ext4_iget:5464: inode #17: block 1803188595: comm syz.3.135: invalid block [ 40.321714][ T3886] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.135: couldn't read orphan inode 17 (err -117) [ 40.378960][ T3886] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.430591][ T3897] loop1: detected capacity change from 0 to 512 [ 40.459329][ T3299] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.534002][ T3886] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000. [ 40.549360][ T3897] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 40.569837][ T3886] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000. [ 40.606749][ T3897] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e12c, mo2=0002] [ 40.651716][ T3886] team0 (unregistering): Port device team_slave_0 removed [ 40.676762][ T3886] team0 (unregistering): Port device team_slave_1 removed [ 40.685814][ T3903] netlink: 'syz.0.140': attribute type 10 has an invalid length. [ 40.690011][ T3897] System zones: 1-12 [ 40.698084][ T3897] EXT4-fs (loop1): orphan cleanup on readonly fs [ 40.706966][ T3903] team0: Device hsr_slave_0 failed to register rx_handler [ 40.715452][ T3897] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.137: bg 0: block 361: padding at end of block bitmap is not set [ 40.760188][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.761848][ T3903] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 40.797687][ T3903] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 40.803629][ T3907] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 40.814224][ T3907] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 40.827980][ T3912] netlink: 'syz.3.141': attribute type 10 has an invalid length. [ 40.842351][ T3897] EXT4-fs (loop1): Remounting filesystem read-only [ 40.844984][ T3912] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 40.851314][ T3897] EXT4-fs (loop1): 1 truncate cleaned up [ 40.857859][ T3912] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 40.877023][ T3897] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 40.982909][ T29] kauditd_printk_skb: 262 callbacks suppressed [ 40.982922][ T29] audit: type=1400 audit(2000000002.170:808): avc: denied { setopt } for pid=3895 comm="syz.1.137" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 41.349008][ T3917] random: crng reseeded on system resumption [ 41.354884][ T29] audit: type=1400 audit(2000000002.530:809): avc: denied { read append } for pid=3914 comm="syz.4.143" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 41.378840][ T29] audit: type=1400 audit(2000000002.530:810): avc: denied { ioctl open } for pid=3914 comm="syz.4.143" path="/dev/snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 41.403058][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 41.434621][ T3917] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 41.455147][ T29] audit: type=1400 audit(2000000002.620:811): avc: denied { watch watch_reads } for pid=3914 comm="syz.4.143" path="/24" dev="tmpfs" ino=141 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 41.478007][ T29] audit: type=1400 audit(2000000002.630:812): avc: denied { setopt } for pid=3914 comm="syz.4.143" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 41.478082][ T29] audit: type=1400 audit(2000000002.630:813): avc: denied { bind } for pid=3914 comm="syz.4.143" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 41.516547][ T29] audit: type=1400 audit(2000000002.630:814): avc: denied { name_bind } for pid=3914 comm="syz.4.143" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 41.538178][ T29] audit: type=1400 audit(2000000002.630:815): avc: denied { node_bind } for pid=3914 comm="syz.4.143" saddr=172.20.20.23 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 41.575737][ T3922] loop1: detected capacity change from 0 to 128 [ 41.577364][ T3929] netlink: 'syz.4.149': attribute type 1 has an invalid length. [ 41.613957][ T3928] Driver unsupported XDP return value 0 on prog (id 162) dev N/A, expect packet loss! [ 41.637038][ T3929] 8021q: adding VLAN 0 to HW filter on device bond1 [ 41.642328][ T29] audit: type=1326 audit(2000000002.810:816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3919 comm="syz.0.147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ca19cebe9 code=0x7ffc0000 [ 41.646385][ T3929] netlink: 8 bytes leftover after parsing attributes in process `syz.4.149'. [ 41.666832][ T29] audit: type=1326 audit(2000000002.810:817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3919 comm="syz.0.147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=201 compat=0 ip=0x7f4ca19cebe9 code=0x7ffc0000 [ 41.713275][ T3929] veth3: entered promiscuous mode [ 41.744193][ T10] hid-generic 0000:0100:0001.0001: unknown main item tag 0x0 [ 41.762445][ T10] hid-generic 0000:0100:0001.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 41.781020][ T3943] loop0: detected capacity change from 0 to 512 [ 41.788884][ T3943] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 41.802211][ T3943] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 41.845988][ T3941] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2570 sclass=netlink_route_socket pid=3941 comm=syz.4.152 [ 41.853187][ T3943] EXT4-fs (loop0): can't mount with data=, fs mounted w/o journal [ 42.120158][ T3959] lo speed is unknown, defaulting to 1000 [ 42.211685][ T3964] netlink: 52 bytes leftover after parsing attributes in process `syz.2.157'. [ 42.220677][ T3964] netlink: 16 bytes leftover after parsing attributes in process `syz.2.157'. [ 42.229596][ T3964] netlink: 52 bytes leftover after parsing attributes in process `syz.2.157'. [ 42.262847][ T3966] netlink: 'syz.2.158': attribute type 10 has an invalid length. [ 42.273410][ T3966] team0: Device hsr_slave_0 failed to register rx_handler [ 42.298724][ T3966] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 42.315275][ T3966] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 42.434135][ T3972] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 42.537164][ T3981] loop1: detected capacity change from 0 to 512 [ 42.582776][ T3981] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.595703][ T3981] ext4 filesystem being mounted at /39/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 42.650877][ T3990] openvswitch: netlink: Message has 6 unknown bytes. [ 42.712457][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.744295][ T3993] loop1: detected capacity change from 0 to 128 [ 42.798249][ T3993] bio_check_eod: 518 callbacks suppressed [ 42.798271][ T3993] syz.1.168: attempt to access beyond end of device [ 42.798271][ T3993] loop1: rw=0, sector=121, nr_sectors = 920 limit=128 [ 42.862529][ T3996] bridge1: entered allmulticast mode [ 42.984957][ T4006] loop0: detected capacity change from 0 to 128 [ 43.018969][ T4010] FAULT_INJECTION: forcing a failure. [ 43.018969][ T4010] name failslab, interval 1, probability 0, space 0, times 0 [ 43.031674][ T4010] CPU: 0 UID: 0 PID: 4010 Comm: syz.1.175 Not tainted syzkaller #0 PREEMPT(voluntary) [ 43.031771][ T4010] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 43.031782][ T4010] Call Trace: [ 43.031789][ T4010] [ 43.031849][ T4010] __dump_stack+0x1d/0x30 [ 43.031868][ T4010] dump_stack_lvl+0xe8/0x140 [ 43.031886][ T4010] dump_stack+0x15/0x1b [ 43.031937][ T4010] should_fail_ex+0x265/0x280 [ 43.031971][ T4010] should_failslab+0x8c/0xb0 [ 43.031990][ T4010] __kvmalloc_node_noprof+0x123/0x4e0 [ 43.032012][ T4010] ? pfifo_fast_init+0x257/0x350 [ 43.032132][ T4010] pfifo_fast_init+0x257/0x350 [ 43.032161][ T4010] qdisc_create_dflt+0xec/0x2d0 [ 43.032254][ T4010] mq_init+0x1b6/0x380 [ 43.032337][ T4010] ? __rcu_read_unlock+0x4f/0x70 [ 43.032360][ T4010] qdisc_create_dflt+0xec/0x2d0 [ 43.032385][ T4010] ? dev_activate+0xbb/0x9e0 [ 43.032403][ T4010] dev_activate+0xde/0x9e0 [ 43.032421][ T4010] ? _raw_spin_unlock_bh+0x36/0x40 [ 43.032502][ T4010] __dev_open+0x472/0x530 [ 43.032529][ T4010] __dev_change_flags+0x163/0x400 [ 43.032609][ T4010] netif_change_flags+0x5a/0xd0 [ 43.032638][ T4010] dev_change_flags+0xce/0x180 [ 43.032661][ T4010] dev_ifsioc+0x44b/0xaa0 [ 43.032678][ T4010] ? __rcu_read_unlock+0x4f/0x70 [ 43.032795][ T4010] dev_ioctl+0x70a/0x960 [ 43.032813][ T4010] sock_do_ioctl+0x197/0x220 [ 43.032834][ T4010] sock_ioctl+0x41b/0x610 [ 43.032856][ T4010] ? __pfx_sock_ioctl+0x10/0x10 [ 43.032894][ T4010] __se_sys_ioctl+0xce/0x140 [ 43.032965][ T4010] __x64_sys_ioctl+0x43/0x50 [ 43.033065][ T4010] x64_sys_call+0x1816/0x2ff0 [ 43.033086][ T4010] do_syscall_64+0xd2/0x200 [ 43.033111][ T4010] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 43.033170][ T4010] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 43.033188][ T4010] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 43.033209][ T4010] RIP: 0033:0x7f79c575ebe9 [ 43.033294][ T4010] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 43.033330][ T4010] RSP: 002b:00007f79c41bf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 43.033380][ T4010] RAX: ffffffffffffffda RBX: 00007f79c5985fa0 RCX: 00007f79c575ebe9 [ 43.033408][ T4010] RDX: 0000200000002280 RSI: 0000000000008914 RDI: 0000000000000004 [ 43.033420][ T4010] RBP: 00007f79c41bf090 R08: 0000000000000000 R09: 0000000000000000 [ 43.033430][ T4010] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 43.033470][ T4010] R13: 00007f79c5986038 R14: 00007f79c5985fa0 R15: 00007ffe366efcf8 [ 43.033516][ T4010] [ 43.289613][ T4010] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 43.319269][ T4010] syzkaller0: entered promiscuous mode [ 43.325080][ T4010] syzkaller0: entered allmulticast mode [ 43.353637][ T4008] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 43.416918][ T4006] syz.0.173: attempt to access beyond end of device [ 43.416918][ T4006] loop0: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 43.431864][ T4006] syz.0.173: attempt to access beyond end of device [ 43.431864][ T4006] loop0: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 43.475283][ T4006] syz.0.173: attempt to access beyond end of device [ 43.475283][ T4006] loop0: rw=2049, sector=177, nr_sectors = 8 limit=128 [ 43.491952][ T4016] netlink: 16 bytes leftover after parsing attributes in process `syz.1.178'. [ 43.529737][ T4006] syz.0.173: attempt to access beyond end of device [ 43.529737][ T4006] loop0: rw=2049, sector=193, nr_sectors = 8 limit=128 [ 43.560227][ T4006] syz.0.173: attempt to access beyond end of device [ 43.560227][ T4006] loop0: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 43.580003][ T4006] syz.0.173: attempt to access beyond end of device [ 43.580003][ T4006] loop0: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 43.593864][ T4006] syz.0.173: attempt to access beyond end of device [ 43.593864][ T4006] loop0: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 43.652240][ T4006] syz.0.173: attempt to access beyond end of device [ 43.652240][ T4006] loop0: rw=2049, sector=257, nr_sectors = 8 limit=128 [ 43.682545][ T4006] syz.0.173: attempt to access beyond end of device [ 43.682545][ T4006] loop0: rw=2049, sector=273, nr_sectors = 8 limit=128 [ 43.725001][ T4033] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 43.733697][ T4033] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 43.978593][ T4035] lo speed is unknown, defaulting to 1000 [ 44.094894][ T4023] Set syz1 is full, maxelem 65536 reached [ 44.472973][ T4042] FAULT_INJECTION: forcing a failure. [ 44.472973][ T4042] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 44.486322][ T4042] CPU: 1 UID: 0 PID: 4042 Comm: syz.1.184 Not tainted syzkaller #0 PREEMPT(voluntary) [ 44.486345][ T4042] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 44.486410][ T4042] Call Trace: [ 44.486414][ T4042] [ 44.486420][ T4042] __dump_stack+0x1d/0x30 [ 44.486433][ T4042] dump_stack_lvl+0xe8/0x140 [ 44.486443][ T4042] dump_stack+0x15/0x1b [ 44.486452][ T4042] should_fail_ex+0x265/0x280 [ 44.486465][ T4042] should_fail+0xb/0x20 [ 44.486503][ T4042] should_fail_usercopy+0x1a/0x20 [ 44.486551][ T4042] _copy_to_user+0x20/0xa0 [ 44.486566][ T4042] simple_read_from_buffer+0xb5/0x130 [ 44.486578][ T4042] proc_fail_nth_read+0x10e/0x150 [ 44.486650][ T4042] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 44.486663][ T4042] vfs_read+0x1a8/0x770 [ 44.486722][ T4042] ? __rcu_read_unlock+0x4f/0x70 [ 44.486733][ T4042] ? __fget_files+0x184/0x1c0 [ 44.486747][ T4042] ksys_read+0xda/0x1a0 [ 44.486812][ T4042] __x64_sys_read+0x40/0x50 [ 44.486823][ T4042] x64_sys_call+0x27bc/0x2ff0 [ 44.486834][ T4042] do_syscall_64+0xd2/0x200 [ 44.486931][ T4042] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 44.486944][ T4042] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 44.486957][ T4042] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 44.486968][ T4042] RIP: 0033:0x7f79c575d5fc [ 44.486977][ T4042] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 44.486987][ T4042] RSP: 002b:00007f79c41bf030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 44.486999][ T4042] RAX: ffffffffffffffda RBX: 00007f79c5985fa0 RCX: 00007f79c575d5fc [ 44.487006][ T4042] RDX: 000000000000000f RSI: 00007f79c41bf0a0 RDI: 0000000000000005 [ 44.487012][ T4042] RBP: 00007f79c41bf090 R08: 0000000000000000 R09: 0000000000000000 [ 44.487074][ T4042] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001 [ 44.487080][ T4042] R13: 00007f79c5986038 R14: 00007f79c5985fa0 R15: 00007ffe366efcf8 [ 44.487090][ T4042] [ 44.721569][ T4051] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 44.913287][ T4059] ieee802154 phy0 wpan0: encryption failed: -22 [ 44.921214][ T4059] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4059 comm=syz.4.190 [ 44.963964][ T4064] loop4: detected capacity change from 0 to 128 [ 45.181403][ T4078] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 45.329604][ T4086] loop4: detected capacity change from 0 to 128 [ 45.336541][ T4086] EXT4-fs: Ignoring removed nobh option [ 45.346608][ T4086] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 45.359134][ T4086] ext4 filesystem being mounted at /40/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 45.796095][ T3300] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 45.813778][ T4091] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4091 comm=syz.4.203 [ 45.840108][ T4093] loop4: detected capacity change from 0 to 128 [ 45.936368][ T4097] random: crng reseeded on system resumption [ 46.033489][ T4103] loop4: detected capacity change from 0 to 128 [ 46.040200][ T4103] EXT4-fs: Ignoring removed nobh option [ 46.051794][ T4103] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 46.068021][ T4103] ext4 filesystem being mounted at /46/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 46.101220][ T3300] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 46.640880][ T4029] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 46.685377][ T29] kauditd_printk_skb: 371 callbacks suppressed [ 46.685389][ T29] audit: type=1326 audit(2000000007.860:1189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4111 comm="syz.2.211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f9d6debe9 code=0x7ffc0000 [ 46.715559][ T29] audit: type=1326 audit(2000000007.860:1190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4111 comm="syz.2.211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f9d6debe9 code=0x7ffc0000 [ 46.739574][ T29] audit: type=1326 audit(2000000007.860:1191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4111 comm="syz.2.211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7f5f9d6debe9 code=0x7ffc0000 [ 46.763188][ T29] audit: type=1326 audit(2000000007.870:1192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4111 comm="syz.2.211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f9d6debe9 code=0x7ffc0000 [ 46.765811][ T4112] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 46.786651][ T29] audit: type=1326 audit(2000000007.870:1193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4111 comm="syz.2.211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f9d6debe9 code=0x7ffc0000 [ 46.786677][ T29] audit: type=1326 audit(2000000007.870:1194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4111 comm="syz.2.211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=158 compat=0 ip=0x7f5f9d6debe9 code=0x7ffc0000 [ 46.786701][ T29] audit: type=1326 audit(2000000007.870:1195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4111 comm="syz.2.211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f9d6debe9 code=0x7ffc0000 [ 46.865210][ T29] audit: type=1326 audit(2000000007.870:1196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4111 comm="syz.2.211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f9d6debe9 code=0x7ffc0000 [ 46.870696][ T4116] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4116 comm=syz.2.215 [ 46.888723][ T29] audit: type=1326 audit(2000000007.870:1197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4111 comm="syz.2.211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7f5f9d6debe9 code=0x7ffc0000 [ 46.888749][ T29] audit: type=1326 audit(2000000007.870:1198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4111 comm="syz.2.211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f9d6debe9 code=0x7ffc0000 [ 46.952810][ T4120] netlink: 8 bytes leftover after parsing attributes in process `syz.3.214'. [ 46.989797][ T4120] loop3: detected capacity change from 0 to 2048 [ 47.003966][ T4125] loop1: detected capacity change from 0 to 512 [ 47.027983][ T4125] EXT4-fs error (device loop1): __ext4_iget:5464: inode #17: block 1803188595: comm syz.1.217: invalid block [ 47.067919][ T4125] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.217: couldn't read orphan inode 17 (err -117) [ 47.085358][ T4125] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.088852][ T4133] loop4: detected capacity change from 0 to 512 [ 47.139407][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.162852][ T4127] loop0: detected capacity change from 0 to 1024 [ 47.169793][ T4127] EXT4-fs: Ignoring removed bh option [ 47.181150][ T4127] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 47.197704][ T4139] loop1: detected capacity change from 0 to 128 [ 47.218986][ T4133] EXT4-fs error (device loop4): __ext4_iget:5464: inode #17: block 1803188595: comm syz.4.219: invalid block [ 47.238396][ C1] hrtimer: interrupt took 37841 ns [ 47.250109][ T4133] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.219: couldn't read orphan inode 17 (err -117) [ 47.256057][ T4137] netlink: 14 bytes leftover after parsing attributes in process `syz.2.222'. [ 47.279378][ T4127] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 47.283171][ T4137] hsr_slave_0: left promiscuous mode [ 47.293935][ T4133] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.303852][ T4127] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 2: comm syz.0.212: lblock 2 mapped to illegal pblock 2 (length 1) [ 47.340909][ T4137] hsr_slave_1: left promiscuous mode [ 47.349081][ T4127] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 48: comm syz.0.212: lblock 0 mapped to illegal pblock 48 (length 1) [ 47.399839][ T4127] EXT4-fs error (device loop0): ext4_acquire_dquot:6937: comm syz.0.212: Failed to acquire dquot type 0 [ 47.430832][ T4133] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000. [ 47.440897][ T4127] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 47.457092][ T4127] EXT4-fs error (device loop0): ext4_evict_inode:254: inode #11: comm syz.0.212: mark_inode_dirty error [ 47.457346][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.469205][ T4127] EXT4-fs warning (device loop0): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 47.490654][ T4146] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4146 comm=syz.3.226 [ 47.517246][ T4127] EXT4-fs (loop0): 1 orphan inode deleted [ 47.536935][ T51] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:3: lblock 1 mapped to illegal pblock 1 (length 1) [ 47.567330][ T4127] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.582891][ T51] EXT4-fs error (device loop0): ext4_release_dquot:6973: comm kworker/u8:3: Failed to release dquot type 0 [ 47.588724][ T4152] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 47.627537][ T4148] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 47.732699][ T4127] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.748732][ T4165] loop4: detected capacity change from 0 to 512 [ 47.756515][ T4127] EXT4-fs error (device loop0): __ext4_get_inode_loc:4861: comm syz.0.212: Invalid inode table block 1 in block_group 0 [ 47.770768][ T4165] EXT4-fs error (device loop4): __ext4_iget:5464: inode #17: block 1803188595: comm syz.4.234: invalid block [ 47.787434][ T4127] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 47.787499][ T4165] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.234: couldn't read orphan inode 17 (err -117) [ 47.810901][ T4169] netlink: 'syz.2.236': attribute type 10 has an invalid length. [ 47.819470][ T4169] team0: Port device hsr_slave_0 added [ 47.826720][ T4165] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.831206][ T4169] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 47.854123][ T4172] mmap: syz.1.235 (4172) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 47.865630][ T4169] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 47.874433][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.875607][ T4127] EXT4-fs error (device loop0): ext4_quota_off:7221: inode #3: comm syz.0.212: mark_inode_dirty error [ 47.969753][ T4184] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 48.050812][ T4194] loop3: detected capacity change from 0 to 128 [ 48.100960][ T4199] loop4: detected capacity change from 0 to 512 [ 48.103274][ T4194] bio_check_eod: 231 callbacks suppressed [ 48.103287][ T4194] syz.3.246: attempt to access beyond end of device [ 48.103287][ T4194] loop3: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 48.128239][ T4199] EXT4-fs error (device loop4): __ext4_iget:5464: inode #17: block 1803188595: comm syz.4.248: invalid block [ 48.152691][ T4194] syz.3.246: attempt to access beyond end of device [ 48.152691][ T4194] loop3: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 48.204894][ T4199] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.248: couldn't read orphan inode 17 (err -117) [ 48.245528][ T4199] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.276719][ T4194] syz.3.246: attempt to access beyond end of device [ 48.276719][ T4194] loop3: rw=2049, sector=177, nr_sectors = 8 limit=128 [ 48.330451][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.353056][ T4194] syz.3.246: attempt to access beyond end of device [ 48.353056][ T4194] loop3: rw=2049, sector=193, nr_sectors = 8 limit=128 [ 48.368899][ T4216] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 48.392393][ T4194] syz.3.246: attempt to access beyond end of device [ 48.392393][ T4194] loop3: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 48.510386][ T4194] syz.3.246: attempt to access beyond end of device [ 48.510386][ T4194] loop3: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 48.555079][ T4226] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 48.571937][ T4227] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4227 comm=syz.0.261 [ 48.583163][ T4226] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 48.663098][ T4230] lo speed is unknown, defaulting to 1000 [ 48.823802][ T4194] syz.3.246: attempt to access beyond end of device [ 48.823802][ T4194] loop3: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 48.998591][ T4194] syz.3.246: attempt to access beyond end of device [ 48.998591][ T4194] loop3: rw=2049, sector=257, nr_sectors = 8 limit=128 [ 49.081535][ T4194] syz.3.246: attempt to access beyond end of device [ 49.081535][ T4194] loop3: rw=2049, sector=273, nr_sectors = 8 limit=128 [ 49.095300][ T4194] syz.3.246: attempt to access beyond end of device [ 49.095300][ T4194] loop3: rw=2049, sector=289, nr_sectors = 8 limit=128 [ 49.108573][ T4243] loop1: detected capacity change from 0 to 512 [ 49.162872][ T4243] EXT4-fs error (device loop1): __ext4_iget:5464: inode #17: block 1803188595: comm syz.1.266: invalid block [ 49.219033][ T4243] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.266: couldn't read orphan inode 17 (err -117) [ 49.340774][ T4243] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.363459][ T4249] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 49.367694][ T4222] Set syz1 is full, maxelem 65536 reached [ 49.386284][ T4243] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000. [ 49.414791][ T4243] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000. [ 49.458590][ T4255] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4255 comm=syz.2.271 [ 49.511097][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.576595][ T4260] loop0: detected capacity change from 0 to 128 [ 49.702448][ T4279] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 49.737860][ T4284] loop2: detected capacity change from 0 to 128 [ 49.877127][ T4293] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4293 comm=syz.1.287 [ 49.973927][ T4297] loop2: detected capacity change from 0 to 128 [ 50.250956][ T4320] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.282120][ T4326] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4326 comm=syz.1.302 [ 50.350141][ T4320] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.409934][ T4335] FAULT_INJECTION: forcing a failure. [ 50.409934][ T4335] name failslab, interval 1, probability 0, space 0, times 0 [ 50.422776][ T4335] CPU: 0 UID: 0 PID: 4335 Comm: syz.3.305 Not tainted syzkaller #0 PREEMPT(voluntary) [ 50.422801][ T4335] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 50.422812][ T4335] Call Trace: [ 50.422818][ T4335] [ 50.422890][ T4335] __dump_stack+0x1d/0x30 [ 50.422976][ T4335] dump_stack_lvl+0xe8/0x140 [ 50.423024][ T4335] dump_stack+0x15/0x1b [ 50.423040][ T4335] should_fail_ex+0x265/0x280 [ 50.423061][ T4335] should_failslab+0x8c/0xb0 [ 50.423127][ T4335] kmem_cache_alloc_noprof+0x50/0x310 [ 50.423148][ T4335] ? alloc_vfsmnt+0x2d/0x300 [ 50.423174][ T4335] alloc_vfsmnt+0x2d/0x300 [ 50.423227][ T4335] vfs_create_mount+0x3b/0x240 [ 50.423277][ T4335] __se_sys_fsmount+0x2d9/0x580 [ 50.423312][ T4335] __x64_sys_fsmount+0x43/0x50 [ 50.423330][ T4335] x64_sys_call+0x2ab3/0x2ff0 [ 50.423347][ T4335] do_syscall_64+0xd2/0x200 [ 50.423415][ T4335] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 50.423461][ T4335] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 50.423556][ T4335] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 50.423574][ T4335] RIP: 0033:0x7f9b21a1ebe9 [ 50.423589][ T4335] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 50.423639][ T4335] RSP: 002b:00007f9b2047f038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b0 [ 50.423660][ T4335] RAX: ffffffffffffffda RBX: 00007f9b21c45fa0 RCX: 00007f9b21a1ebe9 [ 50.423672][ T4335] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000006 [ 50.423683][ T4335] RBP: 00007f9b2047f090 R08: 0000000000000000 R09: 0000000000000000 [ 50.423693][ T4335] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 50.423703][ T4335] R13: 00007f9b21c46038 R14: 00007f9b21c45fa0 R15: 00007ffdacf64b78 [ 50.423718][ T4335] [ 50.648084][ T4320] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.716521][ T4320] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.773916][ T4349] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 50.806123][ T146] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.826848][ T146] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.875418][ T146] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.884068][ T146] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.931149][ T4355] syzkaller0: entered promiscuous mode [ 50.936937][ T4355] syzkaller0: entered allmulticast mode [ 50.989602][ T4357] capability: warning: `syz.2.317' uses deprecated v2 capabilities in a way that may be insecure [ 51.015998][ T4366] loop0: detected capacity change from 0 to 128 [ 51.039597][ T4364] netlink: 'syz.4.320': attribute type 10 has an invalid length. [ 51.074823][ T4364] team0: Device hsr_slave_0 failed to register rx_handler [ 51.085816][ T4364] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 51.095408][ T4364] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 51.153817][ T4370] loop1: detected capacity change from 0 to 128 [ 51.685687][ T4397] FAULT_INJECTION: forcing a failure. [ 51.685687][ T4397] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 51.699094][ T4397] CPU: 0 UID: 0 PID: 4397 Comm: syz.4.334 Not tainted syzkaller #0 PREEMPT(voluntary) [ 51.699121][ T4397] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 51.699133][ T4397] Call Trace: [ 51.699139][ T4397] [ 51.699146][ T4397] __dump_stack+0x1d/0x30 [ 51.699164][ T4397] dump_stack_lvl+0xe8/0x140 [ 51.699237][ T4397] dump_stack+0x15/0x1b [ 51.699253][ T4397] should_fail_ex+0x265/0x280 [ 51.699274][ T4397] should_fail+0xb/0x20 [ 51.699293][ T4397] should_fail_usercopy+0x1a/0x20 [ 51.699331][ T4397] _copy_to_user+0x20/0xa0 [ 51.699358][ T4397] simple_read_from_buffer+0xb5/0x130 [ 51.699375][ T4397] proc_fail_nth_read+0x10e/0x150 [ 51.699396][ T4397] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 51.699468][ T4397] vfs_read+0x1a8/0x770 [ 51.699488][ T4397] ? __rcu_read_unlock+0x4f/0x70 [ 51.699509][ T4397] ? __fget_files+0x184/0x1c0 [ 51.699534][ T4397] ksys_read+0xda/0x1a0 [ 51.699551][ T4397] __x64_sys_read+0x40/0x50 [ 51.699619][ T4397] x64_sys_call+0x27bc/0x2ff0 [ 51.699638][ T4397] do_syscall_64+0xd2/0x200 [ 51.699660][ T4397] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 51.699726][ T4397] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 51.699749][ T4397] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 51.699770][ T4397] RIP: 0033:0x7f7a3373d5fc [ 51.699784][ T4397] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 51.699800][ T4397] RSP: 002b:00007f7a3219f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 51.699819][ T4397] RAX: ffffffffffffffda RBX: 00007f7a33965fa0 RCX: 00007f7a3373d5fc [ 51.699948][ T4397] RDX: 000000000000000f RSI: 00007f7a3219f0a0 RDI: 0000000000000009 [ 51.699958][ T4397] RBP: 00007f7a3219f090 R08: 0000000000000000 R09: 0000000000000000 [ 51.700025][ T4397] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 51.700035][ T4397] R13: 00007f7a33966038 R14: 00007f7a33965fa0 R15: 00007ffc9d25f898 [ 51.700050][ T4397] [ 51.700338][ T4398] loop3: detected capacity change from 0 to 512 [ 51.986622][ T4401] netlink: 24 bytes leftover after parsing attributes in process `syz.0.332'. [ 52.009937][ T4401] netlink: 4 bytes leftover after parsing attributes in process `syz.0.332'. [ 52.055867][ T29] kauditd_printk_skb: 430 callbacks suppressed [ 52.055880][ T29] audit: type=1400 audit(2000000013.240:1626): avc: denied { read } for pid=4402 comm="syz.4.336" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 52.085230][ T29] audit: type=1400 audit(2000000013.240:1627): avc: denied { open } for pid=4402 comm="syz.4.336" path="/dev/autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 52.225602][ T4403] loop4: detected capacity change from 0 to 512 [ 52.317563][ T4398] EXT4-fs error (device loop3): __ext4_iget:5464: inode #17: block 1803188595: comm syz.3.333: invalid block [ 52.377935][ T4398] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.333: couldn't read orphan inode 17 (err -117) [ 52.391094][ T4403] EXT4-fs (loop4): too many log groups per flexible block group [ 52.398893][ T4403] EXT4-fs (loop4): failed to initialize mballoc (-12) [ 52.410795][ T4416] rdma_op ffff88813c17bd80 conn xmit_rdma 0000000000000000 [ 52.418654][ T4403] EXT4-fs (loop4): mount failed [ 52.430993][ T4419] loop1: detected capacity change from 0 to 128 [ 52.489568][ T4398] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 52.506442][ T29] audit: type=1400 audit(2000000013.670:1628): avc: denied { mount } for pid=4402 comm="syz.4.336" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 52.554104][ T4398] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000. [ 52.569112][ T4398] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000. [ 52.575237][ T4425] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4425 comm=syz.4.344 [ 52.608731][ T29] audit: type=1326 audit(2000000013.790:1629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4426 comm="syz.0.345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ca19cebe9 code=0x7ffc0000 [ 52.632299][ T29] audit: type=1326 audit(2000000013.790:1630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4426 comm="syz.0.345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ca19cebe9 code=0x7ffc0000 [ 52.722948][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.742346][ T29] audit: type=1326 audit(2000000013.790:1631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4426 comm="syz.0.345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4ca19cebe9 code=0x7ffc0000 [ 52.765748][ T29] audit: type=1326 audit(2000000013.790:1632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4426 comm="syz.0.345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ca19cebe9 code=0x7ffc0000 [ 52.789415][ T29] audit: type=1326 audit(2000000013.790:1633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4426 comm="syz.0.345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ca19cebe9 code=0x7ffc0000 [ 52.812771][ T29] audit: type=1326 audit(2000000013.790:1634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4426 comm="syz.0.345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4ca19cebe9 code=0x7ffc0000 [ 52.836170][ T29] audit: type=1326 audit(2000000013.790:1635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4426 comm="syz.0.345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ca19cebe9 code=0x7ffc0000 [ 52.944111][ T4439] 9pnet: Could not find request transport: r [ 53.030780][ T4451] FAULT_INJECTION: forcing a failure. [ 53.030780][ T4451] name failslab, interval 1, probability 0, space 0, times 0 [ 53.044078][ T4451] CPU: 1 UID: 0 PID: 4451 Comm: syz.0.353 Not tainted syzkaller #0 PREEMPT(voluntary) [ 53.044105][ T4451] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 53.044115][ T4451] Call Trace: [ 53.044121][ T4451] [ 53.044127][ T4451] __dump_stack+0x1d/0x30 [ 53.044148][ T4451] dump_stack_lvl+0xe8/0x140 [ 53.044166][ T4451] dump_stack+0x15/0x1b [ 53.044181][ T4451] should_fail_ex+0x265/0x280 [ 53.044200][ T4451] should_failslab+0x8c/0xb0 [ 53.044220][ T4451] kmem_cache_alloc_noprof+0x50/0x310 [ 53.044241][ T4451] ? vm_area_alloc+0x2c/0xb0 [ 53.044329][ T4451] vm_area_alloc+0x2c/0xb0 [ 53.044350][ T4451] mmap_region+0xaa2/0x1630 [ 53.044393][ T4451] do_mmap+0x9b3/0xbe0 [ 53.044428][ T4451] vm_mmap_pgoff+0x17a/0x2e0 [ 53.044452][ T4451] ksys_mmap_pgoff+0xc2/0x310 [ 53.044474][ T4451] ? __x64_sys_mmap+0x49/0x70 [ 53.044492][ T4451] x64_sys_call+0x14a3/0x2ff0 [ 53.044508][ T4451] do_syscall_64+0xd2/0x200 [ 53.044531][ T4451] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 53.044550][ T4451] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 53.044568][ T4451] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 53.044585][ T4451] RIP: 0033:0x7f4ca19cec23 [ 53.044597][ T4451] Code: f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 41 89 ca 41 f7 c1 ff 0f 00 00 75 14 b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 25 c3 0f 1f 40 00 48 c7 c0 a8 ff ff ff 64 c7 [ 53.044611][ T4451] RSP: 002b:00007f4ca042ee18 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 53.044626][ T4451] RAX: ffffffffffffffda RBX: 00000000000004f7 RCX: 00007f4ca19cec23 [ 53.044637][ T4451] RDX: 0000000000000003 RSI: 0000000008400000 RDI: 0000000000000000 [ 53.044654][ T4451] RBP: 0000200000000202 R08: 00000000ffffffff R09: 0000000000000000 [ 53.044663][ T4451] R10: 0000000000000022 R11: 0000000000000246 R12: 0000000000000004 [ 53.044673][ T4451] R13: 00007f4ca042eef0 R14: 00007f4ca042eeb0 R15: 0000200000000780 [ 53.044687][ T4451] [ 53.265633][ T4454] lo speed is unknown, defaulting to 1000 [ 53.292486][ T4456] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 53.303696][ T4456] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 53.363635][ T4456] SELinux: Context system_u:object_r:hwdata_t:s0 is not valid (left unmapped). [ 53.379941][ T4456] loop0: detected capacity change from 0 to 1024 [ 53.386751][ T4456] EXT4-fs: inline encryption not supported [ 53.435242][ T4456] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 53.460511][ T4456] ext4 filesystem being mounted at /61/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 53.515067][ T4462] lo speed is unknown, defaulting to 1000 [ 53.688019][ T4464] FAULT_INJECTION: forcing a failure. [ 53.688019][ T4464] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 53.701234][ T4464] CPU: 0 UID: 0 PID: 4464 Comm: syz.2.356 Not tainted syzkaller #0 PREEMPT(voluntary) [ 53.701256][ T4464] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 53.701303][ T4464] Call Trace: [ 53.701309][ T4464] [ 53.701316][ T4464] __dump_stack+0x1d/0x30 [ 53.701335][ T4464] dump_stack_lvl+0xe8/0x140 [ 53.701402][ T4464] dump_stack+0x15/0x1b [ 53.701415][ T4464] should_fail_ex+0x265/0x280 [ 53.701505][ T4464] should_fail+0xb/0x20 [ 53.701519][ T4464] should_fail_usercopy+0x1a/0x20 [ 53.701603][ T4464] _copy_from_user+0x1c/0xb0 [ 53.701627][ T4464] memdup_user+0x5e/0xd0 [ 53.701652][ T4464] strndup_user+0x68/0xb0 [ 53.701692][ T4464] __se_sys_mount+0x8e/0x2e0 [ 53.701709][ T4464] ? fput+0x8f/0xc0 [ 53.701731][ T4464] ? ksys_write+0x192/0x1a0 [ 53.701748][ T4464] __x64_sys_mount+0x67/0x80 [ 53.701809][ T4464] x64_sys_call+0x2b4d/0x2ff0 [ 53.701828][ T4464] do_syscall_64+0xd2/0x200 [ 53.701855][ T4464] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 53.701878][ T4464] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 53.701898][ T4464] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 53.701917][ T4464] RIP: 0033:0x7f5f9d6debe9 [ 53.701940][ T4464] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 53.701956][ T4464] RSP: 002b:00007f5f9c13f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 53.701985][ T4464] RAX: ffffffffffffffda RBX: 00007f5f9d905fa0 RCX: 00007f5f9d6debe9 [ 53.701996][ T4464] RDX: 0000200000001440 RSI: 0000200000001400 RDI: 00002000000013c0 [ 53.702005][ T4464] RBP: 00007f5f9c13f090 R08: 0000200000000080 R09: 0000000000000000 [ 53.702015][ T4464] R10: 0000000000000800 R11: 0000000000000246 R12: 0000000000000001 [ 53.702092][ T4464] R13: 00007f5f9d906038 R14: 00007f5f9d905fa0 R15: 00007ffcb8fc44d8 [ 53.702108][ T4464] [ 53.959709][ T4466] netlink: 63 bytes leftover after parsing attributes in process `syz.2.357'. [ 54.001360][ T3299] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 54.177824][ T4490] FAULT_INJECTION: forcing a failure. [ 54.177824][ T4490] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 54.191128][ T4490] CPU: 0 UID: 0 PID: 4490 Comm: syz.2.368 Not tainted syzkaller #0 PREEMPT(voluntary) [ 54.191155][ T4490] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 54.191172][ T4490] Call Trace: [ 54.191178][ T4490] [ 54.191185][ T4490] __dump_stack+0x1d/0x30 [ 54.191258][ T4490] dump_stack_lvl+0xe8/0x140 [ 54.191275][ T4490] dump_stack+0x15/0x1b [ 54.191288][ T4490] should_fail_ex+0x265/0x280 [ 54.191382][ T4490] should_fail+0xb/0x20 [ 54.191399][ T4490] should_fail_usercopy+0x1a/0x20 [ 54.191419][ T4490] _copy_to_user+0x20/0xa0 [ 54.191441][ T4490] simple_read_from_buffer+0xb5/0x130 [ 54.191523][ T4490] proc_fail_nth_read+0x10e/0x150 [ 54.191614][ T4490] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 54.191682][ T4490] vfs_read+0x1a8/0x770 [ 54.191701][ T4490] ? __rcu_read_unlock+0x4f/0x70 [ 54.191756][ T4490] ? __fget_files+0x184/0x1c0 [ 54.191778][ T4490] ksys_read+0xda/0x1a0 [ 54.191838][ T4490] __x64_sys_read+0x40/0x50 [ 54.191859][ T4490] x64_sys_call+0x27bc/0x2ff0 [ 54.191878][ T4490] do_syscall_64+0xd2/0x200 [ 54.191898][ T4490] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 54.191930][ T4490] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 54.191951][ T4490] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 54.191972][ T4490] RIP: 0033:0x7f5f9d6dd5fc [ 54.191986][ T4490] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 54.192000][ T4490] RSP: 002b:00007f5f9c13f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 54.192067][ T4490] RAX: ffffffffffffffda RBX: 00007f5f9d905fa0 RCX: 00007f5f9d6dd5fc [ 54.192080][ T4490] RDX: 000000000000000f RSI: 00007f5f9c13f0a0 RDI: 0000000000000004 [ 54.192093][ T4490] RBP: 00007f5f9c13f090 R08: 0000000000000000 R09: 0000000000000000 [ 54.192104][ T4490] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 54.192114][ T4490] R13: 00007f5f9d906038 R14: 00007f5f9d905fa0 R15: 00007ffcb8fc44d8 [ 54.192129][ T4490] [ 54.218167][ T4483] loop0: detected capacity change from 0 to 164 [ 54.375363][ T4493] netlink: 63 bytes leftover after parsing attributes in process `syz.2.369'. [ 54.443155][ T4483] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 54.460029][ T4483] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 54.486560][ T4483] Symlink component flag not implemented [ 54.492342][ T4483] Symlink component flag not implemented [ 54.506116][ T4483] Symlink component flag not implemented (7) [ 54.512395][ T4483] Symlink component flag not implemented (116) [ 54.534080][ T4483] sch_tbf: burst 6 is lower than device ip6gre0 mtu (1448) ! [ 54.707908][ T4506] syzkaller0: entered allmulticast mode [ 54.713839][ T4506] syzkaller0: entered promiscuous mode [ 54.811119][ T4508] netlink: 100 bytes leftover after parsing attributes in process `syz.1.375'. [ 54.822734][ T4505] syzkaller0: left promiscuous mode [ 54.828152][ T4505] syzkaller0: left allmulticast mode [ 54.877756][ T4510] netlink: 24 bytes leftover after parsing attributes in process `syz.1.375'. [ 55.113109][ T4510] lo speed is unknown, defaulting to 1000 [ 55.307864][ T4525] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 55.334947][ T4525] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 55.591364][ T4534] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 55.634816][ T4538] netlink: 'syz.2.385': attribute type 10 has an invalid length. [ 55.674103][ T4538] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 55.686853][ T4538] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 55.855180][ T4563] loop1: detected capacity change from 0 to 128 [ 55.858870][ T4561] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 55.954552][ T4563] bio_check_eod: 410 callbacks suppressed [ 55.954570][ T4563] syz.1.397: attempt to access beyond end of device [ 55.954570][ T4563] loop1: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 56.005733][ T4563] syz.1.397: attempt to access beyond end of device [ 56.005733][ T4563] loop1: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 56.083295][ T4578] loop0: detected capacity change from 0 to 164 [ 56.090671][ T4573] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4573 comm=syz.4.400 [ 56.103477][ T4563] syz.1.397: attempt to access beyond end of device [ 56.103477][ T4563] loop1: rw=2049, sector=177, nr_sectors = 8 limit=128 [ 56.251610][ T4563] syz.1.397: attempt to access beyond end of device [ 56.251610][ T4563] loop1: rw=2049, sector=193, nr_sectors = 8 limit=128 [ 56.356895][ T4578] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 56.424309][ T4563] syz.1.397: attempt to access beyond end of device [ 56.424309][ T4563] loop1: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 56.479862][ T4563] syz.1.397: attempt to access beyond end of device [ 56.479862][ T4563] loop1: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 56.493362][ T4563] syz.1.397: attempt to access beyond end of device [ 56.493362][ T4563] loop1: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 56.507550][ T4563] syz.1.397: attempt to access beyond end of device [ 56.507550][ T4563] loop1: rw=2049, sector=257, nr_sectors = 8 limit=128 [ 56.521017][ T4563] syz.1.397: attempt to access beyond end of device [ 56.521017][ T4563] loop1: rw=2049, sector=273, nr_sectors = 8 limit=128 [ 56.536217][ T4563] syz.1.397: attempt to access beyond end of device [ 56.536217][ T4563] loop1: rw=2049, sector=289, nr_sectors = 8 limit=128 [ 56.573185][ T4598] FAULT_INJECTION: forcing a failure. [ 56.573185][ T4598] name failslab, interval 1, probability 0, space 0, times 0 [ 56.586079][ T4598] CPU: 0 UID: 0 PID: 4598 Comm: syz.2.408 Not tainted syzkaller #0 PREEMPT(voluntary) [ 56.586115][ T4598] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 56.586124][ T4598] Call Trace: [ 56.586131][ T4598] [ 56.586137][ T4598] __dump_stack+0x1d/0x30 [ 56.586156][ T4598] dump_stack_lvl+0xe8/0x140 [ 56.586222][ T4598] dump_stack+0x15/0x1b [ 56.586244][ T4598] should_fail_ex+0x265/0x280 [ 56.586262][ T4598] should_failslab+0x8c/0xb0 [ 56.586296][ T4598] __kmalloc_node_track_caller_noprof+0xa4/0x410 [ 56.586372][ T4598] ? __request_module+0x1c4/0x3e0 [ 56.586465][ T4598] ? __request_module+0x1df/0x3e0 [ 56.586481][ T4598] ? should_failslab+0x8c/0xb0 [ 56.586500][ T4598] kstrdup+0x3e/0xd0 [ 56.586519][ T4598] __request_module+0x1df/0x3e0 [ 56.586624][ T4598] ? capable+0x7c/0xb0 [ 56.586672][ T4598] dev_load+0x61/0xc0 [ 56.586689][ T4598] dev_ioctl+0x2d1/0x960 [ 56.586707][ T4598] sock_do_ioctl+0x197/0x220 [ 56.586729][ T4598] sock_ioctl+0x41b/0x610 [ 56.586752][ T4598] ? __pfx_sock_ioctl+0x10/0x10 [ 56.586875][ T4598] __se_sys_ioctl+0xce/0x140 [ 56.586900][ T4598] __x64_sys_ioctl+0x43/0x50 [ 56.586924][ T4598] x64_sys_call+0x1816/0x2ff0 [ 56.586940][ T4598] do_syscall_64+0xd2/0x200 [ 56.587015][ T4598] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 56.587033][ T4598] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 56.587052][ T4598] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 56.587069][ T4598] RIP: 0033:0x7f5f9d6debe9 [ 56.587082][ T4598] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 56.587170][ T4598] RSP: 002b:00007f5f9c13f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 56.587235][ T4598] RAX: ffffffffffffffda RBX: 00007f5f9d905fa0 RCX: 00007f5f9d6debe9 [ 56.587245][ T4598] RDX: 0000200000000400 RSI: 0000000000008946 RDI: 0000000000000007 [ 56.587327][ T4598] RBP: 00007f5f9c13f090 R08: 0000000000000000 R09: 0000000000000000 [ 56.587336][ T4598] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 56.587346][ T4598] R13: 00007f5f9d906038 R14: 00007f5f9d905fa0 R15: 00007ffcb8fc44d8 [ 56.587361][ T4598] [ 56.871063][ T4603] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 56.932711][ T4613] loop4: detected capacity change from 0 to 128 [ 56.971681][ T4615] netlink: 79 bytes leftover after parsing attributes in process `syz.3.412'. [ 57.010494][ T4618] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 57.036891][ T4618] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 57.108267][ T4623] loop2: detected capacity change from 0 to 128 [ 57.286579][ T4628] loop0: detected capacity change from 0 to 512 [ 57.322876][ T4623] Zero length message leads to an empty skb [ 57.412599][ T4628] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 57.412903][ T4608] Set syz1 is full, maxelem 65536 reached [ 57.441166][ T4628] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e12c, mo2=0002] [ 57.451688][ T4628] System zones: 1-12 [ 57.455922][ T4628] EXT4-fs (loop0): orphan cleanup on readonly fs [ 57.463751][ T4628] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.421: bg 0: block 361: padding at end of block bitmap is not set [ 57.478324][ T4628] EXT4-fs (loop0): Remounting filesystem read-only [ 57.486319][ T4628] EXT4-fs (loop0): 1 truncate cleaned up [ 57.493112][ T4628] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 57.588585][ T4635] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4635 comm=syz.2.423 [ 58.198761][ T3299] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 58.216291][ T4661] loop0: detected capacity change from 0 to 256 [ 58.239956][ T29] kauditd_printk_skb: 205 callbacks suppressed [ 58.240005][ T29] audit: type=1326 audit(2000000019.420:1841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4657 comm="syz.1.433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79c575ebe9 code=0x7ffc0000 [ 58.269783][ T29] audit: type=1326 audit(2000000019.420:1842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4657 comm="syz.1.433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79c575ebe9 code=0x7ffc0000 [ 58.337177][ T29] audit: type=1326 audit(2000000019.420:1843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4657 comm="syz.1.433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=201 compat=0 ip=0x7f79c575ebe9 code=0x7ffc0000 [ 58.360968][ T29] audit: type=1326 audit(2000000019.420:1844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4657 comm="syz.1.433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79c575ebe9 code=0x7ffc0000 [ 58.384692][ T29] audit: type=1326 audit(2000000019.420:1845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4657 comm="syz.1.433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=64 compat=0 ip=0x7f79c575ebe9 code=0x7ffc0000 [ 58.408009][ T29] audit: type=1326 audit(2000000019.420:1846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4657 comm="syz.1.433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79c575ebe9 code=0x7ffc0000 [ 58.431574][ T29] audit: type=1400 audit(2000000019.500:1847): avc: denied { bind } for pid=4660 comm="syz.0.434" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 58.451010][ T29] audit: type=1400 audit(2000000019.500:1848): avc: denied { watch } for pid=4660 comm="syz.0.434" path="/73/bus" dev="loop0" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=dir permissive=1 [ 58.531191][ T4675] netlink: 8 bytes leftover after parsing attributes in process `syz.2.438'. [ 58.570252][ T4675] netlink: 'syz.2.438': attribute type 5 has an invalid length. [ 58.581051][ T4680] netlink: 79 bytes leftover after parsing attributes in process `syz.4.442'. [ 58.624233][ T4678] FAULT_INJECTION: forcing a failure. [ 58.624233][ T4678] name failslab, interval 1, probability 0, space 0, times 0 [ 58.637190][ T4678] CPU: 1 UID: 0 PID: 4678 Comm: syz.3.441 Not tainted syzkaller #0 PREEMPT(voluntary) [ 58.637256][ T4678] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 58.637266][ T4678] Call Trace: [ 58.637271][ T4678] [ 58.637278][ T4678] __dump_stack+0x1d/0x30 [ 58.637299][ T4678] dump_stack_lvl+0xe8/0x140 [ 58.637375][ T4678] dump_stack+0x15/0x1b [ 58.637388][ T4678] should_fail_ex+0x265/0x280 [ 58.637404][ T4678] ? kobject_uevent_env+0x1c0/0x570 [ 58.637421][ T4678] should_failslab+0x8c/0xb0 [ 58.637512][ T4678] __kmalloc_cache_noprof+0x4c/0x320 [ 58.637561][ T4678] kobject_uevent_env+0x1c0/0x570 [ 58.637659][ T4678] ? device_pm_check_callbacks+0x683/0x6a0 [ 58.637844][ T4678] kobject_uevent+0x1d/0x30 [ 58.637912][ T4678] device_del+0x710/0x790 [ 58.637939][ T4678] __del_gendisk+0x494/0x570 [ 58.637963][ T4678] del_gendisk+0xac/0xf0 [ 58.638058][ T4678] loop_remove+0x26/0x80 [ 58.638083][ T4678] loop_control_ioctl+0x3b3/0x3f0 [ 58.638170][ T4678] ? __pfx_loop_control_ioctl+0x10/0x10 [ 58.638249][ T4678] __se_sys_ioctl+0xce/0x140 [ 58.638336][ T4678] __x64_sys_ioctl+0x43/0x50 [ 58.638410][ T4678] x64_sys_call+0x1816/0x2ff0 [ 58.638430][ T4678] do_syscall_64+0xd2/0x200 [ 58.638452][ T4678] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 58.638512][ T4678] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 58.638562][ T4678] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 58.638583][ T4678] RIP: 0033:0x7f9b21a1ebe9 [ 58.638596][ T4678] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 58.638611][ T4678] RSP: 002b:00007f9b2047f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 58.638628][ T4678] RAX: ffffffffffffffda RBX: 00007f9b21c45fa0 RCX: 00007f9b21a1ebe9 [ 58.638638][ T4678] RDX: 0000000000000001 RSI: 0000000000004c81 RDI: 0000000000000003 [ 58.638666][ T4678] RBP: 00007f9b2047f090 R08: 0000000000000000 R09: 0000000000000000 [ 58.638677][ T4678] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 58.638689][ T4678] R13: 00007f9b21c46038 R14: 00007f9b21c45fa0 R15: 00007ffdacf64b78 [ 58.638706][ T4678] [ 58.640204][ T4687] netlink: 52 bytes leftover after parsing attributes in process `syz.4.445'. [ 58.802966][ T4691] netlink: 5 bytes leftover after parsing attributes in process `syz.4.445'. [ 58.873573][ T4691] 0ªî{X¹¦: renamed from gretap0 (while UP) [ 58.890506][ T4691] 0ªî{X¹¦: entered allmulticast mode [ 58.896814][ T4691] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 59.144689][ T4715] syz_tun: refused to change device tx_queue_len [ 59.151077][ T4715] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 59.299310][ T4724] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.310766][ T4718] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4718 comm=syz.4.457 [ 59.623080][ T4724] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.690723][ T29] audit: type=1400 audit(2000000020.870:1849): avc: denied { read } for pid=4734 comm="syz.1.464" lport=8 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 59.731653][ T4724] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.780083][ T4724] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.784980][ T29] audit: type=1326 audit(2000000020.960:1850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4743 comm="syz.1.468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79c575ebe9 code=0x7ffc0000 [ 59.816740][ T4744] netlink: 96 bytes leftover after parsing attributes in process `syz.1.468'. [ 59.828307][ T4744] serio: Serial port ptm0 [ 59.839125][ T4748] FAULT_INJECTION: forcing a failure. [ 59.839125][ T4748] name failslab, interval 1, probability 0, space 0, times 0 [ 59.851802][ T4748] CPU: 0 UID: 0 PID: 4748 Comm: syz.0.470 Not tainted syzkaller #0 PREEMPT(voluntary) [ 59.851824][ T4748] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 59.851831][ T4748] Call Trace: [ 59.851835][ T4748] [ 59.851839][ T4748] __dump_stack+0x1d/0x30 [ 59.851852][ T4748] dump_stack_lvl+0xe8/0x140 [ 59.851863][ T4748] dump_stack+0x15/0x1b [ 59.851953][ T4748] should_fail_ex+0x265/0x280 [ 59.851966][ T4748] should_failslab+0x8c/0xb0 [ 59.851985][ T4748] kmem_cache_alloc_noprof+0x50/0x310 [ 59.852000][ T4748] ? alloc_empty_file+0x76/0x200 [ 59.852016][ T4748] alloc_empty_file+0x76/0x200 [ 59.852096][ T4748] path_openat+0x68/0x2170 [ 59.852114][ T4748] ? _parse_integer_limit+0x170/0x190 [ 59.852125][ T4748] ? _parse_integer+0x27/0x40 [ 59.852135][ T4748] ? kstrtoull+0x111/0x140 [ 59.852145][ T4748] ? kstrtouint+0x76/0xc0 [ 59.852156][ T4748] do_filp_open+0x109/0x230 [ 59.852223][ T4748] do_sys_openat2+0xa6/0x110 [ 59.852248][ T4748] __x64_sys_creat+0x65/0x90 [ 59.852276][ T4748] x64_sys_call+0x2d94/0x2ff0 [ 59.852346][ T4748] do_syscall_64+0xd2/0x200 [ 59.852367][ T4748] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 59.852388][ T4748] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 59.852452][ T4748] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 59.852538][ T4748] RIP: 0033:0x7f4ca19cebe9 [ 59.852589][ T4748] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 59.852602][ T4748] RSP: 002b:00007f4ca042f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 59.852617][ T4748] RAX: ffffffffffffffda RBX: 00007f4ca1bf5fa0 RCX: 00007f4ca19cebe9 [ 59.852702][ T4748] RDX: 0000000000000000 RSI: c9028ba210c11f8b RDI: 00002000000000c0 [ 59.852712][ T4748] RBP: 00007f4ca042f090 R08: 0000000000000000 R09: 0000000000000000 [ 59.852722][ T4748] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 59.852732][ T4748] R13: 00007f4ca1bf6038 R14: 00007f4ca1bf5fa0 R15: 00007fffa157b928 [ 59.852750][ T4748] [ 60.123104][ T3446] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.140894][ T146] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.174993][ T146] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.184457][ T4754] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 60.202373][ T4754] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 60.214262][ T4744] lo speed is unknown, defaulting to 1000 [ 60.214379][ T146] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.258753][ T4759] netlink: 24 bytes leftover after parsing attributes in process `syz.3.475'. [ 60.279915][ T4759] netlink: 4 bytes leftover after parsing attributes in process `syz.3.475'. [ 60.336156][ T4759] loop3: detected capacity change from 0 to 512 [ 60.343443][ T4759] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 60.355031][ T4759] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 60.368262][ T4759] EXT4-fs (loop3): 1 truncate cleaned up [ 60.374435][ T4759] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 60.387870][ T4770] netlink: 12 bytes leftover after parsing attributes in process `syz.2.477'. [ 60.408722][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.483321][ T4780] loop3: detected capacity change from 0 to 128 [ 60.576982][ T4784] FAULT_INJECTION: forcing a failure. [ 60.576982][ T4784] name failslab, interval 1, probability 0, space 0, times 0 [ 60.589754][ T4784] CPU: 0 UID: 0 PID: 4784 Comm: syz.3.483 Not tainted syzkaller #0 PREEMPT(voluntary) [ 60.589810][ T4784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 60.589820][ T4784] Call Trace: [ 60.589825][ T4784] [ 60.589831][ T4784] __dump_stack+0x1d/0x30 [ 60.589914][ T4784] dump_stack_lvl+0xe8/0x140 [ 60.589931][ T4784] dump_stack+0x15/0x1b [ 60.589959][ T4784] should_fail_ex+0x265/0x280 [ 60.590005][ T4784] should_failslab+0x8c/0xb0 [ 60.590022][ T4784] __kmalloc_noprof+0xa5/0x3e0 [ 60.590037][ T4784] ? nla_strdup+0x78/0xc0 [ 60.590049][ T4784] nla_strdup+0x78/0xc0 [ 60.590133][ T4784] nf_tables_newtable+0x3ba/0xea0 [ 60.590149][ T4784] nfnetlink_rcv+0xb96/0x1690 [ 60.590217][ T4784] netlink_unicast+0x5bd/0x690 [ 60.590279][ T4784] netlink_sendmsg+0x58b/0x6b0 [ 60.590291][ T4784] ? __pfx_netlink_sendmsg+0x10/0x10 [ 60.590324][ T4784] __sock_sendmsg+0x142/0x180 [ 60.590340][ T4784] ____sys_sendmsg+0x31e/0x4e0 [ 60.590353][ T4784] ___sys_sendmsg+0x17b/0x1d0 [ 60.590372][ T4784] __x64_sys_sendmsg+0xd4/0x160 [ 60.590449][ T4784] x64_sys_call+0x191e/0x2ff0 [ 60.590461][ T4784] do_syscall_64+0xd2/0x200 [ 60.590475][ T4784] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 60.590628][ T4784] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 60.590641][ T4784] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 60.590652][ T4784] RIP: 0033:0x7f9b21a1ebe9 [ 60.590662][ T4784] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 60.590671][ T4784] RSP: 002b:00007f9b2047f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 60.590682][ T4784] RAX: ffffffffffffffda RBX: 00007f9b21c45fa0 RCX: 00007f9b21a1ebe9 [ 60.590731][ T4784] RDX: 0000000000000000 RSI: 000020000000c2c0 RDI: 0000000000000005 [ 60.590737][ T4784] RBP: 00007f9b2047f090 R08: 0000000000000000 R09: 0000000000000000 [ 60.590743][ T4784] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 60.590758][ T4784] R13: 00007f9b21c46038 R14: 00007f9b21c45fa0 R15: 00007ffdacf64b78 [ 60.590768][ T4784] [ 60.850953][ T4791] team0: Device gre1 is of different type [ 60.860562][ T4794] loop3: detected capacity change from 0 to 512 [ 60.882100][ T4794] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 60.896633][ T4794] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e12c, mo2=0002] [ 60.912905][ T4794] System zones: 1-12 [ 60.921408][ T4796] macsec1: entered promiscuous mode [ 60.926819][ T4796] macvlan1: entered promiscuous mode [ 60.951198][ T4794] EXT4-fs (loop3): orphan cleanup on readonly fs [ 60.959471][ T4802] ================================================================== [ 60.967583][ T4802] BUG: KCSAN: data-race in mas_state_walk / mas_wr_store_entry [ 60.975125][ T4802] [ 60.977446][ T4802] write to 0xffff888109d95508 of 8 bytes by task 4799 on cpu 1: [ 60.985068][ T4802] mas_wr_store_entry+0x1581/0x2b50 [ 60.990271][ T4802] mas_store_prealloc+0x74d/0x9e0 [ 60.995294][ T4802] commit_merge+0x6a5/0x730 [ 60.999785][ T4802] vma_expand+0x220/0x320 [ 61.004107][ T4802] vma_merge_new_range+0x296/0x310 [ 61.007402][ T4794] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.487: bg 0: block 361: padding at end of block bitmap is not set [ 61.009216][ T4802] mmap_region+0xa59/0x1630 [ 61.027956][ T4802] do_mmap+0x9b3/0xbe0 [ 61.032124][ T4802] vm_mmap_pgoff+0x17a/0x2e0 [ 61.036749][ T4802] ksys_mmap_pgoff+0xc2/0x310 [ 61.041552][ T4802] x64_sys_call+0x14a3/0x2ff0 [ 61.046226][ T4802] do_syscall_64+0xd2/0x200 [ 61.050757][ T4802] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 61.056797][ T4802] [ 61.059152][ T4802] read to 0xffff888109d95508 of 8 bytes by task 4802 on cpu 0: [ 61.066778][ T4802] mas_state_walk+0x28f/0x650 [ 61.071677][ T4802] mas_walk+0x60/0x150 [ 61.075742][ T4802] lock_vma_under_rcu+0x8d/0x160 [ 61.080869][ T4802] do_user_addr_fault+0x233/0x1090 [ 61.086164][ T4802] exc_page_fault+0x62/0xa0 [ 61.090758][ T4802] asm_exc_page_fault+0x26/0x30 [ 61.095622][ T4802] [ 61.097943][ T4802] value changed: 0x00007f7a3213cfff -> 0xffff888109d95d08 [ 61.105064][ T4802] [ 61.107386][ T4802] Reported by Kernel Concurrency Sanitizer on: [ 61.113524][ T4802] CPU: 0 UID: 0 PID: 4802 Comm: syz.4.489 Not tainted syzkaller #0 PREEMPT(voluntary) [ 61.123330][ T4802] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 61.133381][ T4802] ================================================================== [ 61.173619][ T4794] EXT4-fs (loop3): Remounting filesystem read-only [ 61.185754][ T4794] EXT4-fs (loop3): 1 truncate cleaned up [ 61.199355][ T4794] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 61.699221][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000007.