last executing test programs: 54.561320832s ago: executing program 4 (id=630): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0xfffffff7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000200), &(0x7f0000000280)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000640)={{r0}, &(0x7f00000004c0), &(0x7f0000000500)='%-5lx \x00'}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r2}, 0x10) r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4042, 0x1ff) r4 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) sendfile(r3, r4, 0x0, 0x80000000007) 53.66412776s ago: executing program 4 (id=638): fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97004d88c19e9ace5ffb2e9fc603dd282100000002ff02000000000000000000000000000104004e200023b0"], 0x0) recvmmsg(r0, &(0x7f0000001140)=[{{0x0, 0x0, &(0x7f0000001100)=[{&(0x7f0000000100)=""/4096, 0x1000}], 0x1}, 0x2}], 0x1, 0x40000000, 0x0) 52.733562972s ago: executing program 4 (id=662): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f00000001c0)='kfree\x00', r1}, 0x18) ioctl$TIOCMBIC(0xffffffffffffffff, 0x5417, &(0x7f0000000000)=0x7) r2 = epoll_create(0x2) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000240)={0xa0000000}) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r5}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000280)={0x2000000}) 51.895264435s ago: executing program 4 (id=675): newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000840)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60122d9200083a0000000000000000000000ffffac1414aafe8000000000000000000000000000aa02009078000000f3ce7beefd31d1faa8fbde00"], 0x0) memfd_create(&(0x7f0000000bc0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc0N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000003c0)='GPL\x00'}, 0x94) (async) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000003c0)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000008c0)='contention_end\x00', r5}, 0x18) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000008c0)='contention_end\x00', r5}, 0x18) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) (async) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) write$binfmt_aout(r6, &(0x7f0000000480)=ANY=[], 0xff2e) ioctl$TIOCSSOFTCAR(r6, 0x541a, &(0x7f0000000400)=0xd) r7 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r7) (async) ptrace(0x10, r7) r8 = socket$pptp(0x18, 0x1, 0x2) accept4(r8, 0x0, 0x0, 0x80000) (async) accept4(r8, 0x0, 0x0, 0x80000) openat(0xffffffffffffff9c, 0x0, 0x143441, 0x98) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) ptrace$setregs(0xd, r7, 0x20000000002, &(0x7f0000000700)) ptrace$cont(0x9, r7, 0x3, 0x6) (async) ptrace$cont(0x9, r7, 0x3, 0x6) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r10}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1d, 0x4, 0x2, 0x0, 0x201, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2}, 0x50) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r4, 0x8982, &(0x7f0000002800)={0x1, 'vlan0\x00'}) 51.604064143s ago: executing program 4 (id=679): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x7, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000001000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) creat(0x0, 0x8) (fail_nth: 2) 51.33213236s ago: executing program 4 (id=687): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x64, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x2}, 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'sit0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x0, 0x6}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0xe, 0x1}}]}}, @TCA_RATE={0x6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x48801}, 0x0) 51.33154466s ago: executing program 32 (id=687): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x64, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x2}, 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'sit0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x0, 0x6}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0xe, 0x1}}]}}, @TCA_RATE={0x6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x48801}, 0x0) 4.995658938s ago: executing program 0 (id=1238): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0x100c404, &(0x7f0000000a00)=ANY=[@ANYRES16, @ANYRESHEX=0xee00, @ANYBLOB=',dots,nodots,gid=', @ANYRESHEX=0xee00, @ANYBLOB=',nodots,nodots,dots,nodots,nodots,nodots,dmask=00000000000000000000010,nodots,nfs,nodots,showexec,flush,umask=00000000000000000000007,nodots,dots,\x00'], 0x1, 0x1f5, &(0x7f0000000600)="$eJzs3cFqE1EUANCbmCYTcdGdIAgjLnRV1C+oSAUxIFSy0J2gK7NqN6mb9jP8Bf/LD5CuspEncSadmKYxBDKj7Tmb3pn7Xt+7M2SSTW5SFL7f/RpZ1or2fuzHpBW70Y6ZswAArpNJSvEjFZreCwBQjzXe/3/WvCUAYMvevnv/+vlgcHCY51nE+dl4OB4Wf4v8y1eDgyf5b7vVrPPxeHjrIv80X/zsMM3vxO0y/6yYn1+kuxEx7Mbjh0V+mnvxZpD/Ob8XH7dcOwAAAAAAAAAAAAAAAAAAAAAANOV+5DNL+/vs7S3m+2W+OJrrD7TQv6cT9zrlYdUeKJ3WURQAAAAAAAAAAAAAAAAAAAD8Z45Pvnz+MBp9OqqCXkTMn+ksGXN10Cr/8VqDmw/asdn0flnmBou2yku03QL7y2/uOkF0/pW7s2mQ17BWf+XlTWkaLH8VzNpiXDm9GxGrV390uOnmJyml0bcHR8cnkVYOrp4RvVqfSAAAAAAAAAAAAAAAAAAAcHPNfev7kqyJDQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAA6rf/58Gl8+sDE4j4k78dfBsrZ3IGq0VAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA6+tXAAAA//85ziI4") r1 = openat(0xffffffffffffff9c, 0x0, 0x8102, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000000)={0x0, @dev}, &(0x7f0000000040)=0xc) r4 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000007c0)=@newqdisc={0x60, 0x24, 0x3fe3aa0262d8c583, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x10, 0xe}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x34, 0x2, [@TCA_FQ_LOW_RATE_THRESHOLD={0x8, 0xb, 0x9}, @TCA_FQ_RATE_ENABLE={0x8, 0x5, 0x1}, @TCA_FQ_FLOW_REFILL_DELAY={0x8, 0x9, 0x3}, @TCA_FQ_FLOW_REFILL_DELAY={0x8, 0x9, 0x5}, @TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x101}, @TCA_FQ_ORPHAN_MASK={0x8, 0xa, 0xaced}]}}]}, 0x60}}, 0x4048000) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYRES16=r1, @ANYRES8=0x0], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000180)=ANY=[], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'macsec0\x00', 0x8000}) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r3, @fallback=0x1c, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendto$inet6(r7, 0x0, 0x0, 0x20004041, 0x0, 0x0) connect$inet6(r7, &(0x7f0000000180)={0xa, 0x0, 0x2, @dev={0xfe, 0x80, '\x00', 0x13}, 0x7}, 0x1c) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000180)='kfree\x00', r9, 0x0, 0xf1c38fa000000000}, 0x18) r10 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/timers\x00', 0x0, 0x0) close(r10) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="070000000400000008000000d9", @ANYRESHEX=r0, @ANYBLOB="99825b4e538e2366bd555a504a53c12e1aff57a14dd30ec04e7047e47b8577166536e940568d97f18bb5b17e85b6ad6314810f3007ae29072cd4206b0bb079a2246817dd6b4eb2358766d996799be73e9cf72f1c65dd11d3a223babea336c96744811aac11e77cbe5cc7655c2776fcec502aeefd8249677fe2c6a3ce467159daa1e4bd9f49d24bb75b7020", @ANYRES16=r6], 0x50) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000001000080000000000000000018120000", @ANYRES32=r11, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r12}, 0x18) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r13, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r13, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) r14 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001640), r8) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r14, @ANYBLOB="0900000000000000000002000000140001800500020001"], 0x28}}, 0x0) 4.104184976s ago: executing program 0 (id=1251): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0a000000040000"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000d40)=ANY=[@ANYBLOB="180000000000e3ff000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000800000095"], &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r1}, 0x10) sched_getattr(0x0, &(0x7f0000000180)={0x38}, 0x38, 0x0) 4.023069944s ago: executing program 0 (id=1254): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000f00)={0x11, 0x7, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000020000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) ioctl$TIOCGISO7816(r2, 0x80285442, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x2900, 0x0) ioctl$TIOCGPGRP(r3, 0x540f, &(0x7f00000000c0)) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r5, 0x0, 0x9}, 0x18) r6 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x20) preadv(r6, &(0x7f0000001b00)=[{&(0x7f00000009c0)=""/239, 0xef}], 0x1, 0x2, 0x0) r7 = syz_genetlink_get_family_id$fou(&(0x7f0000000200), 0xffffffffffffffff) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = socket$nl_generic(0x10, 0x3, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r10, &(0x7f0000000400)={0x15, 0x110, 0xfa00, {r12, 0x100, 0x0, 0x0, 0x0, @in6={0xa, 0x4e23, 0x6d74f9c0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0x1}, @ib={0x1b, 0x3, 0x7fffffff, {"990b1a355102ccfb072fb0a02ad6b9fd"}, 0x5f74, 0x49a6, 0x6}}}, 0x118) syz_genetlink_get_family_id$wireguard(&(0x7f0000000540), r10) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r11) sendmsg$NL80211_CMD_GET_WIPHY(r11, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="01030000000000000000010000000800010014000000080003"], 0x30}}, 0x44) sendmsg$NL80211_CMD_AUTHENTICATE(r10, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000140)={0x54, r13, 0x2, 0x70bd29, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @key_params=[@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_SEQ={0x4}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x1}, @NL80211_ATTR_KEY_SEQ={0x14, 0xa, "7689a5c2e682dd0cfa204331061d65fe"}]]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x8000) splice(r9, 0x0, r10, 0x0, 0xf3a, 0x0) ioctl$SG_BLKSECTGET(r8, 0x1267, &(0x7f0000000000)) sendmsg$FOU_CMD_ADD(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)={0x1c, r7, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_IPPROTO={0x5, 0x3, 0x21}]}, 0x1c}}, 0x0) 2.416441862s ago: executing program 2 (id=1275): sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000280)={&(0x7f0000000380)={0xd0, 0x0, 0x921, 0x70bd2d, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1ff}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x1}]}, @IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'fo\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x17, 0x4}}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'ovf\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}, @IPVS_CMD_ATTR_DEST={0x3c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x2}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xd}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x1}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xfffffff9}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xd4f1}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x32d}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x80000001}]}, 0xd0}, 0x1, 0x0, 0x0, 0x4000000}, 0xc000090) creat(&(0x7f00000000c0)='./file0\x00', 0x48) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_resuseaddr={0x0}}, 0x20) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) 2.293397504s ago: executing program 2 (id=1277): fgetxattr(0xffffffffffffffff, &(0x7f00000003c0)=@known='security.selinux\x00', 0x0, 0xfe) 2.23912797s ago: executing program 2 (id=1278): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x24, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="070000000400000008000000d9"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000000000000000fcffffff18120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r2}, 0x18) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70300001d000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x18) socket$inet_udp(0x2, 0x2, 0x0) r5 = memfd_create(&(0x7f0000000bc0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\t\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00xffffffffffffffff}) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0xb2, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x8200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x3, 0x1ff, 0x0, 0x1c, 0x0, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x89f1, &(0x7f0000000080)) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) pipe(&(0x7f0000000d00)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r8, &(0x7f0000000240), 0xfffffecc) write$cgroup_int(r8, &(0x7f0000000140)=0x1ff, 0x12) sendmsg$NFT_BATCH(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003"], 0xfc}}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f2, &(0x7f0000000080)) 2.2381955s ago: executing program 3 (id=1279): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000380)=[{0x200000000006, 0x1, 0x7, 0x7ffc1ffb}]}) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x1f6}], 0x1}, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="020d000014000000000000000000000005000600000000000a00000000000000fc0100000000000000000000ea2fa43c000000000000000005000500000000000a00000000000000000000000000000000000000000000000000000000000000080012000200020000000000000000001000330002"], 0xa0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) clock_getres(0x0, 0x0) unshare(0x22020600) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x207, &(0x7f0000000000), 0x1, 0x46f, &(0x7f0000001200)="$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") write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='net/raw6\x00') linkat(r3, &(0x7f0000000440)='./file0/file0\x00', 0xffffffffffffffff, 0x0, 0x1400) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'veth0_vlan\x00', @random="08f272f808af"}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) inotify_rm_watch(0xffffffffffffffff, 0x0) 1.948141798s ago: executing program 1 (id=1280): bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000080)={0x1}, 0x8) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001080)=ANY=[@ANYBLOB="02000000040000000800000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x8, 0x0, 0x0, 0x41100}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000010900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000018c0000000c0a01030000000000000000070000080900020073797a31000000000900010073797a3000000000600003805c000080080003400000000250000b802c0001800a0001006c696d69740000001c0002800c00014000000000000000030c0002400000000000000010200001800e000100636f6e6e6c696d69740000000c000280080001"], 0x110}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) pipe2(&(0x7f0000001cc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@uname={'uname', 0x3d, '\xd0\xae\xde\xc1\xaa \xff\xd8\x1d\x1b\xf8\x93)!|\xb0X\xa3\x96\xed\xa2\xab@\xa2m\x93\xdd\b<\x00t\xdc\xabl\xab!\xae\x16\xc4\xcd\xf9{\xdc5_;A\xd2{eC\x014\\\xb3\xc4\xce\xc3yS2-\x01\xbe\xaarW\x96O\xd3\x0f\xe2\xd7/\x17\x1d\xa7.8\x9f8-\xea<\x8d\x91\x90j\xea\xd5\xd5\xae\xcc\xc0\x97\xef\x10\x92\xea\x98|+\x00\x00\x00\x00\x00\x00\x00\x00'}}]}}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x5, 0x0) umount2(&(0x7f00000002c0)='./file0/../file0\x00', 0x0) 1.874010305s ago: executing program 3 (id=1281): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000005c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r3, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000080)=ANY=[@ANYBLOB="18000000", @ANYRES16=r4, @ANYBLOB="030704707900000000000100040004000180"], 0x18}}, 0x0) 1.695663263s ago: executing program 1 (id=1282): r0 = epoll_create(0x2) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000240)={0xa0000000}) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000400000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x41, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe26}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r3}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000280)={0x2000000}) 1.42657772s ago: executing program 2 (id=1283): r0 = io_uring_setup(0x2d64, &(0x7f0000000000)={0x0, 0x399e, 0x80, 0x1, 0x27a}) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) 1.364460126s ago: executing program 2 (id=1284): prctl$PR_SET_PDEATHSIG(0x1, 0x16) (async) prctl$PR_SET_PDEATHSIG(0x1, 0x1f) (async) prctl$PR_SET_PDEATHSIG(0x1, 0x3d) prctl$PR_SET_PDEATHSIG(0x1, 0x2b) (async) prctl$PR_SET_PDEATHSIG(0x1, 0x3d) prctl$PR_SET_PDEATHSIG(0x1, 0x32) (async) prctl$PR_SET_PDEATHSIG(0x1, 0x16) (async) prctl$PR_SET_PDEATHSIG(0x1, 0x1f) (async) prctl$PR_SET_PDEATHSIG(0x1, 0x1d) prctl$PR_SET_PDEATHSIG(0x1, 0x1d) prctl$PR_SET_PDEATHSIG(0x1, 0x2c) (async) prctl$PR_SET_PDEATHSIG(0x1, 0xf) prctl$PR_SET_PDEATHSIG(0x1, 0x3c) prctl$PR_SET_PDEATHSIG(0x1, 0xf) (async) prctl$PR_SET_PDEATHSIG(0x1, 0xc) prctl$PR_SET_PDEATHSIG(0x1, 0x16) (async) prctl$PR_SET_PDEATHSIG(0x1, 0x3f) prctl$PR_SET_PDEATHSIG(0x1, 0x12) (async) prctl$PR_SET_PDEATHSIG(0x1, 0xe) prctl$PR_SET_PDEATHSIG(0x1, 0x2c) (async) prctl$PR_SET_PDEATHSIG(0x1, 0x33) (async) prctl$PR_SET_PDEATHSIG(0x1, 0xa) (async) prctl$PR_SET_PDEATHSIG(0x1, 0x2c) prctl$PR_SET_PDEATHSIG(0x1, 0x1) (async) prctl$PR_SET_PDEATHSIG(0x1, 0x80000001) (async) prctl$PR_SET_PDEATHSIG(0x1, 0x1f) prctl$PR_SET_PDEATHSIG(0x1, 0xb) (async) prctl$PR_SET_PDEATHSIG(0x1, 0x2b) (async) prctl$PR_SET_PDEATHSIG(0x1, 0x30) prctl$PR_SET_PDEATHSIG(0x1, 0x30) 1.364171276s ago: executing program 2 (id=1285): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f0000000500)={0x0, r0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c30000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket(0x1d, 0x2, 0x6) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r4, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) bind$can_j1939(r1, &(0x7f0000000100)={0x1d, r3, 0x2, {0x3}}, 0x18) syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r1) sendmsg$NFT_MSG_GETOBJ(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x100}, 0x1, 0x0, 0x0, 0xc4}, 0x20004009) 1.331955959s ago: executing program 5 (id=1286): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r2 = socket(0x10, 0x3, 0x0) write(r2, &(0x7f0000000000)="240000001a005f0314f9f407000904000200000001000000000000000800040001000000", 0x24) recvmsg$unix(r2, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)}, 0x40) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x19, 0x4, 0x4, 0x1ffff, 0x0, 0x1, 0x8000000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x48) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014800000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) flistxattr(r5, &(0x7f00000006c0)=""/192, 0xc0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r6}, 0x10) bind$inet(r4, &(0x7f0000000280)={0x2, 0x0, @local}, 0x10) perf_event_open(&(0x7f0000000180)={0x8, 0x80, 0x0, 0x4, 0x0, 0x7, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'lblcr\x00', 0x15, 0x88, 0xc000067}, 0x2c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0xffff, 0xb7, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x1e) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x303}, "2d432d74c04f228a", "d71d9a1e03558545115509e1c34caab9", "59f7766d", "5e33931677e0f2d7"}, 0x28) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000080)=@gcm_128={{0x303}, "ba28597967d1b54c", "9712b0d86846b5ecc522bc6f13a6e30c", "ea0292da", "9e87dc79f4c04982"}, 0x28) sendto$inet6(r0, &(0x7f0000000280)='S', 0x1, 0x8000, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00'}, 0x10) close(r0) 1.210611791s ago: executing program 5 (id=1287): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000002c0000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x60, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010328bd7000fedbdf251c0000000c00018008000100", @ANYRES32=r4], 0x20}}, 0x10) 1.169743945s ago: executing program 5 (id=1288): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) recvmmsg(r0, &(0x7f0000002a40)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x40008001, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56441, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002abd7000fcdbdf2501000000000000000b000000000600147379"], 0x28}, 0x1, 0x0, 0x0, 0x890}, 0x20000004) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000800)='./file0\x00', 0x2204806, &(0x7f0000000540)={[{@check_strict}, {@check_relaxed, 0x0}, {@mode={'mode', 0x3d, 0x1}}, {@map_off}, {@session={'session', 0x3d, 0x62}}, {@iocharset={'iocharset', 0x3d, 'macgreek'}, 0x41}, {@map_acorn}, {@iocharset={'iocharset', 0x3d, 'iso8859-2'}}, {@session={'session', 0x3d, 0x58}}, {@showassoc}, {@mode={'mode', 0x3d, 0xfffffffffffffffe}}, {@check_strict}], [{@fscontext={'fscontext', 0x3d, 'system_u'}}, {@permit_directio}]}, 0xfa, 0x69f, &(0x7f0000000f00)="$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") mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) 1.107428191s ago: executing program 5 (id=1289): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000018c0), r1) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000004c0)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002abd7000ffdbdf25090000006400038008000100010000000800030004000000140002007665744e315f6d616376746170000000060004000200000008000500e0000000140002006970766c616e31"], 0x78}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 1.068045925s ago: executing program 5 (id=1290): r0 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x40000000000012d, 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000400000000000000000000850000005000000085000000d000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0xe) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001000ffff26bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="15170000bcb7040008000a00", @ANYRES32=r4, @ANYBLOB="140012800c0001006d6163767461700004000280080005"], 0x44}, 0x1, 0x0, 0x0, 0x240448c5}, 0x8000002) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x14, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x6, 0x0, 0x0, 0x41000, 0x38, '\x00', 0x0, @lirc_mode2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f0000001a00)={0x0, 0x0, &(0x7f00000019c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2000000002010300000094d10000000000009e060c0019"], 0x20}, 0x1, 0x0, 0x0, 0x40010}, 0x20004810) r5 = memfd_create(&(0x7f0000000a00)='\x00\xc76\xbe\x91\x8d\x182)!\x9a%\xd9\x19\x17\xb0\xed|\xb3\xc2\x017h\xe9kL\xa2\xd28\xd6\x06\a\x0e\xfc\xfe\x12\x8f&\x13\xae%@T\xa3\xb0>\\\xec\xa9\xf9Q@6A\x10\x8cn|\x00\x00\x00\x00\x00\x00\x00\x00\xeb0\xdd\xe8\x87\x05=\xfb\x8b$\xdcQ\xee\xc5\x1f\x8bQ\xf7fo\"i\xa1hk\x1d\xf5z\xc1\x7f\xa4\\]\xc4\xbe3\xf9\xa8\t?:\xd8\xda\x84\xeepI[\x1c\x00\x00\x00\x00\xf9v\x00\x00\x00\x00\x00T\xb6\xbe\x0f~\xc0\x92\xe9O{\xa8\x81(\x01\x14\xfc\x83\xf9\xfb\x05\x94Tr@Lq]\xf9\x15zb\x87\xc4\x8e\xe8/\xb9-&R\x8e\xb2\xb3bBx\x1e1\x18\x8f2\xf7]#\xed,\xc7\x03\x00\x00\x00\xa3\xee\xcb\xaf\xb3\xe3\'}\x18\xe8O\xa8#K\xb6\xe4R$\xaa\x00U\x92\xd2\x99\xb80xffffffffffffffff}) sendmmsg$unix(r7, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4008054}}, {{&(0x7f00000003c0)=@file={0x1, './file1\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x40080}}], 0x2, 0x0) 956.533116ms ago: executing program 0 (id=1291): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000005c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff0000", @ANYRES32=r3, @ANYBLOB="0000000000000000b707000008000000850000006900000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r5, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000080)=ANY=[@ANYBLOB="18000000", @ANYRES16=r6, @ANYBLOB="030704707900000000000100040004000180"], 0x18}}, 0x0) 955.454466ms ago: executing program 3 (id=1292): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1d459d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x183, 0x6}, 0x6025, 0x4005, 0xb, 0x0, 0x1, 0x1, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2000000}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r1}, 0x18) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000002c0)=0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)=0x2) 954.939136ms ago: executing program 1 (id=1293): syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x101843) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0xff, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x1, 0x4, 0x8) sendmsg$inet(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f00000006c0)="e03e0c01116e941440c7c0dae2351c4ac18e090f92a86792f3df18d5fa2ffb59acf24933be63a101885646343d5350b8b2254eb651f83199d63f25bd841bb2f30233755319af09815a6465b3bf3c0c2a7d18b8e22ce20a4d5b107caffc7ccc71ef3ed9283c14a171bb0e66df469709305c98e32914e6426616237c65b803caa859123d9ee3e2ccf62d9b85e28506f9ee7aa51a4e9d1087d6294c6b2ec6c8e72772a65b573b639afd0e7623d433ceb887", 0xb0}, {&(0x7f0000000040)="46bf96a69ec37e2b27d3e255e20180fd13739e7727f8c370f0f14681d99e85c59fb18c47d3091a1256ba4cb7ef913336", 0x30}, {&(0x7f0000000080)="1e247c536d1407ab288c561c6293d89fadeb0b40746884561932c5ba3613da14e7383243a4e5", 0x26}, {&(0x7f0000000300)="4acf6d3e4565ec099d510ec70ca2ec85e8583835d30e43e936f1dc08d73b6a815cc70fe053497b757e5c1203c8406a7f05bb7e838b62de0196b416bc9542a76bd3ac60a59b108769a75c40fbf7", 0x4d}, {&(0x7f0000000880)="99222373f5fe00f6c799b49010f233c5120fb6e6de5147ba8ff60cefd8896507bf553d5c1514da76046b07610919aeaa25cd6e9d1edc8803db1c9dbc804863cfc61fdbe22e8c7f66282852d1e7dc91c5144bb5c6a4a9f3a684c9590e5d4abaaa7cbf2d76f3e297dddf09d23c9431", 0x6e}, {&(0x7f0000000900)="e03dc9796f803f4e4af155caefdc9560c58a1503443fd84890965f1a66657e90fb2d54c5d867a2f7a38c70952fe9f5d17d146fcbd3383940f354fc45cd55f8e688597b259d", 0x45}, {&(0x7f0000000a00)="78e62886661f6f468bbc252af0720c432dcf48410fae7ed9e3c409b9a5fc33834dca7d1f781cb0c4585116180acb1a05088d38048df49a0951bb836338d7bba15ef58069f59f584b12b862b60aa59ba96e1d1bdd2da9c730272c33059d6593eaa6b2898a3fed8d710559e9a442f34943e63c402c2bd91db9e4a3f4ad0d46734c4490c4e624cca1ad5843c1b6cde60a5d3f81517cbc548d4cdfd8bd0f1196ccc138a402ce64a802b45324de03b84b656292303954f553eb0714a3568bda24fdf3028638f497fb2c34581ddc", 0xcb}, {&(0x7f0000000400)="776ce9d0d3dbd0e8cb0f05dfd8b313cb160194fbc425e34d8df137568490287265b16ec761a363e8710ed3ad5a2e6179d7fdbe1f7cd0272238fa66", 0x3b}, {&(0x7f0000000b00)="c3144add8ee9d61acde7f80dcc515bd6b63845165e4026028dc79d100c194910dfc421b0d6bbde85caa0a806e0bae5efb7b8b626467df6bd5ba6265fc388cf5d78200feee503dbad8b43e928b950fec8a31342edb83629bdcab29120685d004149869c85c7af89c5f5c1495481e6ad331fb871a555e9058197abdfd937682e568b0edc27620126078e8fa04e0efeded23d378e679e3b79def92bedb07052cdbc10085e6576c9b5f40129bb126b3903304a73db5b6e8208c2bafc12404470b86b65502968fa648f52a34221f9a2f53cb9356016930aa6501c3ea0aeebeae70e643279f43e5466e3a0b6a962d8a7fdfa", 0xef}, {&(0x7f0000000c00)="f72f0b7c25ab5d0e65313c4aa13dc53f58e1d0fbb3ad540268193830ffdc6f026395cee3b3c6f66247be97e2549f168e80d6acbd5b8c680b58993d60df217882bcc53c46510e6ec071261a4f86b827f1f8aa7a42c3c313548cafb83fad6c805deb88d40d8a41ccfa8a75e4de7aee3ab0576fbd0078396b488c74e47216a63e7d0aea4f45ce02e2a585a1a697feb7fe39be7a338eee927531b43195bacb672e47af3b1de36a1ca6e7dbb20770b5e877d9e0fd84b918a687c15b15dda3576a21a3f205170054f4e18f9bc06c54de45", 0xce}], 0xa, &(0x7f0000000dc0)=ANY=[@ANYBLOB="74000000000000000000000007000000892332ac1e0101ffffffffac1414aaac141444e0000002ac1e01010a010102ac1e0101831f9c0a010101ac1414bbe0000002e0000001ac14142c00000000ac141442071f81ac1414aaac1414aa64010101640101020a01010100efffffab1e010100000000000000"], 0x78}, 0x4000000) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000000000001d8500000007000000850000002300000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00', r3}, 0x10) ioctl$AUTOFS_IOC_CATATONIC(r0, 0x9362, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f00000008c0), 0xfffffffe, r4}, 0x38) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000380)=[{0x200000000006, 0x1, 0x7, 0x7ffc1ffb}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) setreuid(0x0, 0xee00) 864.213965ms ago: executing program 1 (id=1294): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0x0) 748.334656ms ago: executing program 3 (id=1295): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a00)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0800034000000014400000000c0a01011d000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xac}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) close(r0) 747.504477ms ago: executing program 1 (id=1296): r0 = io_uring_setup(0x2d64, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) 595.970272ms ago: executing program 1 (id=1297): syz_read_part_table(0x59d, &(0x7f0000000000)="$eJzs0r1Le1cYB/CTgIRCJSKCgx0Eg0ujQhx0SAYrMWQxIlYcnAUHHQQHB0mJzr78A4pvIC5iZ0cxgijESTKKc0FxyZTS9hZq7dIWU/rj81ku55znuc89fG/gfy0efmo2m7EQQjPx97u/P8tPFHunxqZnQoiF+RBC/puvfz2JRRW/v/UiWpeidTGRqR3cjr+eddz1PVRTR/Ho/DIewg8hhKWn4+S/vRtfvvPcdXJjc6WwtZZbfCysPw8vDOR7tvPLuyOH2fJsd3Yu+rEu462Zn6qNntw3Sy977YNt1VojcxPVpWOfM5//1p/z3++q1CuNyf7T1aF0Z/2qvBPl/iZ/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgk53nrpMbmyuFrbXc4mNh/Xl4YSDfs51f3h05zJZnu7Nz8d/qLuOtmZ+qjZ7cN0sve+2DbdVaI3MT1aVjH1q/+/FzPokW+ja8z3+/q1KvNCb7T1eH0p31q/JOlPvbx/wBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP5SfqLYOzU2PRNCLMyHEMbjHce/7DcT7+suomcp2i8mMrWD2/HXs467vodq6mgqEcIfW5aejpNfteoS/GM/BwAA//8394ZP") r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000580)={'veth0_to_team\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000004c0)={r0, r2, 0x25, 0x0, @void}, 0x10) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70200001400001cb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r6) sendmsg$NL80211_CMD_GET_SCAN(r6, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000e80)={0x1c, r7, 0xb29, 0x0, 0x0, {{}, {@val={0x5}, @void}}}, 0x1c}}, 0x2404c044) r8 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x4, 0x2, 0x1}}) ioctl$sock_inet_SIOCSIFFLAGS(r8, 0x8914, &(0x7f0000000040)={'veth0_to_team\x00', 0x800}) r9 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r9, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000004ba727340682b1208f1cdd", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0x20, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESHEX=r0, @ANYBLOB="0000000000000000b702000007000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000180100002020737200000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x98, 0x1, 0x0, 0x0, 0x0, 0x20000000000000, 0x18200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x0, 0x1000000, 0xfffffffe, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r11, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) connect$inet(r9, &(0x7f0000000180)={0x2, 0x4e1f, @dev={0xac, 0x14, 0x14, 0x35}}, 0x10) r12 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x42000, 0x0) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) ioctl$PPPIOCSMAXCID(r12, 0x40047451, &(0x7f0000000000)=0x8) socket$inet6_udp(0xa, 0x2, 0x0) sendto$inet(r9, &(0x7f0000000000), 0xffffffffffffff94, 0x12, 0x0, 0x12) bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="07000000000000000000d93500"/27, @ANYRESOCT=r12, @ANYRES16=r5, @ANYRES32, @ANYRESOCT=r9, @ANYBLOB="776605c320920f72ffffec96514996f4748b49610372139ae58b35afe3ccf44959c95d402beb4c78a9431dba8e6f10c30f4823c590e677fcaa7a8eac5ea4811312d0b05701ddbc816962a3dc4b20aee3fff0b5efb623d8042b27bf540100010000000000dad7d2a84c875f2fc2040ed425031d37d34961eac74c1e461ce94572249b3106000000000000002f47675684e1266e544f32a8e74e9c3bdb31d979dba4cc7d379ea0749d96590ab7a57a0213e9dd1b263b65fae2fffa0e9b4e5aa94b60d58ada0eefde3761dc6d35d45aefc7fc5414735affda00"/236], 0x50) 509.51419ms ago: executing program 3 (id=1298): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r2 = socket(0x10, 0x3, 0x0) write(r2, &(0x7f0000000000)="240000001a005f0314f9f407000904000200000001000000000000000800040001000000", 0x24) recvmsg$unix(r2, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)}, 0x40) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x19, 0x4, 0x4, 0x1ffff, 0x0, 0x1, 0x8000000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x48) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014800000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) flistxattr(r5, &(0x7f00000006c0)=""/192, 0xc0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r6}, 0x10) bind$inet(r4, &(0x7f0000000280)={0x2, 0x0, @local}, 0x10) perf_event_open(&(0x7f0000000180)={0x8, 0x80, 0x0, 0x4, 0x0, 0x7, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'lblcr\x00', 0x15, 0x88, 0xc000067}, 0x2c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0xffff, 0xb7, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x1e) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x303}, "2d432d74c04f228a", "d71d9a1e03558545115509e1c34caab9", "59f7766d", "5e33931677e0f2d7"}, 0x28) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000080)=@gcm_128={{0x303}, "ba28597967d1b54c", "9712b0d86846b5ecc522bc6f13a6e30c", "ea0292da", "9e87dc79f4c04982"}, 0x28) sendto$inet6(r0, &(0x7f0000000280)='S', 0x1, 0x8000, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00'}, 0x10) close(r0) 133.712227ms ago: executing program 5 (id=1299): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0xfffffff7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000640)={{r0}, &(0x7f00000004c0), &(0x7f0000000500)='%-5lx \x00'}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4042, 0x1ff) r2 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) sendfile(r1, r2, 0x0, 0x80000000007) 113.881159ms ago: executing program 3 (id=1300): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x110d41, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r3}, 0x10) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000003c0)={'tunl0\x00', &(0x7f0000000340)={'gre0\x00', 0x0, 0x40, 0x8, 0x11, 0xd7, {{0x14, 0x4, 0x3, 0x1, 0x50, 0x65, 0x0, 0xd5, 0x2f, 0x0, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@noop, @timestamp_addr={0x44, 0x34, 0x9b, 0x1, 0x2, [{@local, 0x2}, {@multicast1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x7}, {@broadcast, 0x53a}, {@broadcast, 0x7}, {@rand_addr=0x64010102, 0x6}]}, @noop, @ra={0x94, 0x4}]}}}}}) fcntl$getownex(r2, 0x10, &(0x7f0000000980)={0x0, 0x0}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000a40)={r5, r4, 0x0, 0x3, &(0x7f0000000a00)='*.\x00'}, 0x30) r6 = dup(0xffffffffffffffff) write$RDMA_USER_CM_CMD_SET_OPTION(r6, 0x0, 0x0) r7 = open(&(0x7f0000000000)='./bus\x00', 0x1050c1, 0x170) fgetxattr(r7, &(0x7f00000003c0)=@known='security.selinux\x00', 0x0, 0xfe) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000900)={&(0x7f0000000940)=ANY=[@ANYBLOB="9feb010006000000000000000000000000000000020000000000"], 0x0, 0x1a, 0x0, 0x1, 0x0, 0x10000, @value=r7}, 0x28) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000006, 0x31, 0xffffffffffffffff, 0xd0fb8000) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$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") r8 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000160000"], 0x0, 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1802000066"], 0x0, 0x7ff}, 0x94) pwritev2(r8, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0xfffffdd6}], 0x1, 0x9c00, 0x0, 0x3) 52.444265ms ago: executing program 0 (id=1301): bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000080)={0x1, 0x0}, 0x8) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001080)=ANY=[@ANYBLOB="02000000040000000800000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x8, 0x0, 0x0, 0x41100}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000010900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000018c0000000c0a01030000000000000000070000080900020073797a31000000000900010073797a3000000000600003805c000080080003400000000250000b802c0001800a0001006c696d69740000001c0002800c00014000000000000000030c0002400000000000000010200001800e000100636f6e6e6c696d69740000000c000280080001"], 0x110}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) pipe2(&(0x7f0000001cc0), 0x800) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0xc, &(0x7f0000000180)=ANY=[@ANYRESOCT=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x5, 0x0) umount2(&(0x7f00000002c0)='./file0/../file0\x00', 0x0) 0s ago: executing program 0 (id=1302): r0 = open(0x0, 0x1050c1, 0x170) fgetxattr(r0, &(0x7f00000003c0)=@known='security.selinux\x00', 0x0, 0xfe) 0s ago: executing program 0 (id=1303): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000023896) close(r0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x200000, 0x10, &(0x7f0000000000), 0x143}, 0x48) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f0000000300)={{0x1, 0x1, 0x18, r1, {0x4, 0x2}}, './file0\x00'}) connect$tipc(r1, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x2, {0x41, 0x4, 0x1}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000006c0f00000a"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) r5 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r5, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x4, 0x3, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000380)={0x43, 0x4, 0x3, 0x3}, 0x10) sendmsg$tipc(r2, &(0x7f0000000400)={&(0x7f00000008c0)=@nameseq={0x1e, 0x1, 0x0, {0x43, 0x0, 0x3}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x4008030) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000140)={'erspan0\x00', &(0x7f0000000600)={'syztnl1\x00', 0x0, 0x40, 0x20, 0x4, 0x7, {{0x36, 0x4, 0x0, 0xf, 0xd8, 0x64, 0x0, 0x9, 0x29, 0x0, @remote, @multicast1, {[@generic={0x88, 0xf, "baea2c0f8e4732b2d2b0990e4d"}, @lsrr={0x83, 0x23, 0x42, [@broadcast, @remote, @private=0xa010100, @local, @rand_addr=0x64010100, @multicast1, @multicast2, @dev={0xac, 0x14, 0x14, 0x24}]}, @end, @cipso={0x86, 0x8, 0x3, [{0x7, 0x2}]}, @timestamp_prespec={0x44, 0x54, 0x7b, 0x3, 0x6, [{@local, 0x4}, {@empty, 0x7ff}, {@local, 0x7}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x10001}, {@loopback, 0x3}, {@dev={0xac, 0x14, 0x14, 0x19}, 0x4000}, {@broadcast, 0xffffffff}, {@private=0xa010101, 0x1ff}, {@multicast2, 0x2}, {@empty, 0x4}]}, @generic={0x7, 0xc, "3bff7604ba93723dc9e5"}, @ssrr={0x89, 0x27, 0x5d, [@initdev={0xac, 0x1e, 0xd, 0x0}, @private=0xa010102, @loopback, @empty, @private=0xa010100, @broadcast, @empty, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}]}]}}}}}) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f00000000c0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', r6, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcf}, 0xfffffffffffffdd2) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x200, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r11}, 0x10) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNSETSTEERINGEBPF(r9, 0x800454e0, &(0x7f0000000040)=r8) close(0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='kfree\x00', r7}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) kernel console output (not intermixed with test programs): . [ 97.604023][ T5886] IPVS: Error connecting to the multicast addr [ 97.781527][ T5896] loop5: detected capacity change from 0 to 164 [ 98.606841][ T5892] iso9660: Corrupted directory entry in block 2 of inode 1792 [ 98.629162][ T5899] loop0: detected capacity change from 0 to 2048 [ 98.737641][ T5899] Alternate GPT is invalid, using primary GPT. [ 98.744222][ T5899] loop0: p2 p3 p7 [ 98.771239][ T5904] loop5: detected capacity change from 0 to 2048 [ 98.809517][ T5899] netlink: 'syz.0.785': attribute type 3 has an invalid length. [ 98.822478][ T5904] Alternate GPT is invalid, using primary GPT. [ 98.829213][ T5904] loop5: p2 p3 p7 [ 98.879885][ T5904] netlink: 'syz.5.788': attribute type 3 has an invalid length. [ 98.886327][ T5911] netlink: 24 bytes leftover after parsing attributes in process `syz.2.790'. [ 98.918211][ T5911] IPVS: Error connecting to the multicast addr [ 98.946579][ T5914] netlink: 24 bytes leftover after parsing attributes in process `syz.0.791'. [ 98.971075][ T29] kauditd_printk_skb: 77 callbacks suppressed [ 98.971092][ T29] audit: type=1326 audit(1760000874.161:3885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5915 comm="syz.5.792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f365ce8eec9 code=0x7ffc0000 [ 98.971292][ T5914] IPVS: Error connecting to the multicast addr [ 98.980934][ T29] audit: type=1326 audit(1760000874.171:3886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5915 comm="syz.5.792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f365ce8eec9 code=0x7ffc0000 [ 99.037919][ T5916] syz1: rxe_newlink: already configured on bond0 [ 99.043324][ T29] audit: type=1326 audit(1760000874.231:3887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5915 comm="syz.5.792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f365ce8eec9 code=0x7ffc0000 [ 99.069156][ T29] audit: type=1326 audit(1760000874.231:3888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5915 comm="syz.5.792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f365ce8eec9 code=0x7ffc0000 [ 99.079313][ T3392] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 99.093389][ T29] audit: type=1326 audit(1760000874.231:3889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5915 comm="syz.5.792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f365ce8eec9 code=0x7ffc0000 [ 99.093425][ T29] audit: type=1326 audit(1760000874.231:3890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5915 comm="syz.5.792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f365ce8eec9 code=0x7ffc0000 [ 99.149840][ T29] audit: type=1326 audit(1760000874.231:3891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5915 comm="syz.5.792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f365ce8eec9 code=0x7ffc0000 [ 99.174541][ T29] audit: type=1326 audit(1760000874.231:3892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5915 comm="syz.5.792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=189 compat=0 ip=0x7f365ce8eec9 code=0x7ffc0000 [ 99.212248][ T29] audit: type=1326 audit(1760000874.231:3893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5915 comm="syz.5.792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f365ce8eec9 code=0x7ffc0000 [ 99.237220][ T29] audit: type=1326 audit(1760000874.231:3894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5915 comm="syz.5.792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f365ce8eec9 code=0x7ffc0000 [ 99.237353][ T3392] hid-generic 0000:0000:0000.0013: hidraw0: HID v0.00 Device [syz1] on syz0 [ 99.351066][ T5927] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 99.363751][ T5923] loop1: detected capacity change from 0 to 2048 [ 99.375890][ T5929] loop2: detected capacity change from 0 to 164 [ 99.397832][ T5923] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 99.420597][ T5929] iso9660: Corrupted directory entry in block 2 of inode 1792 [ 99.529208][ T5936] loop0: detected capacity change from 0 to 512 [ 99.581033][ T5936] EXT4-fs (loop0): orphan cleanup on readonly fs [ 99.602631][ T5936] EXT4-fs error (device loop0): ext4_xattr_inode_iget:446: comm syz.0.800: error while reading EA inode 32 err=-116 [ 99.688135][ T5942] loop2: detected capacity change from 0 to 512 [ 99.708009][ T5936] EXT4-fs (loop0): Remounting filesystem read-only [ 99.717383][ T5932] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 99.755422][ T5936] EXT4-fs warning (device loop0): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 99.787180][ T5942] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 99.802822][ T5936] EXT4-fs (loop0): 1 orphan inode deleted [ 99.806038][ T5942] ext4 filesystem being mounted at /159/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 99.813314][ T5936] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 99.868909][ T5936] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.957682][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.976341][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.195610][ T5952] loop2: detected capacity change from 0 to 2048 [ 100.208750][ T5952] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 100.304702][ T5962] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 100.317352][ T5962] loop5: detected capacity change from 0 to 128 [ 100.326985][ T5962] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 100.366041][ T5962] ext4 filesystem being mounted at /13/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 100.486123][ T5952] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 100.509300][ T5952] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 798 with error 28 [ 100.522249][ T5952] EXT4-fs (loop2): This should not happen!! Data will be lost [ 100.522249][ T5952] [ 100.532481][ T5952] EXT4-fs (loop2): Total free blocks count 0 [ 100.538877][ T5952] EXT4-fs (loop2): Free/Dirty block details [ 100.545843][ T5952] EXT4-fs (loop2): free_blocks=2415919504 [ 100.551868][ T5952] EXT4-fs (loop2): dirty_blocks=800 [ 100.557132][ T5952] EXT4-fs (loop2): Block reservation details [ 100.563327][ T5952] EXT4-fs (loop2): i_reserved_data_blocks=50 [ 100.774261][ T5578] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 100.858874][ T5980] FAULT_INJECTION: forcing a failure. [ 100.858874][ T5980] name failslab, interval 1, probability 0, space 0, times 0 [ 100.871767][ T5980] CPU: 1 UID: 0 PID: 5980 Comm: syz.1.810 Not tainted syzkaller #0 PREEMPT(voluntary) [ 100.871822][ T5980] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 100.871835][ T5980] Call Trace: [ 100.871843][ T5980] [ 100.871854][ T5980] __dump_stack+0x1d/0x30 [ 100.871877][ T5980] dump_stack_lvl+0xe8/0x140 [ 100.871918][ T5980] dump_stack+0x15/0x1b [ 100.871935][ T5980] should_fail_ex+0x265/0x280 [ 100.872043][ T5980] should_failslab+0x8c/0xb0 [ 100.872070][ T5980] kmem_cache_alloc_noprof+0x50/0x480 [ 100.872142][ T5980] ? security_inode_alloc+0x37/0x100 [ 100.872179][ T5980] security_inode_alloc+0x37/0x100 [ 100.872221][ T5980] inode_init_always_gfp+0x4b7/0x500 [ 100.872359][ T5980] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 100.872386][ T5980] alloc_inode+0x58/0x170 [ 100.872410][ T5980] new_inode+0x1d/0xe0 [ 100.872434][ T5980] shmem_get_inode+0x244/0x750 [ 100.872507][ T5980] __shmem_file_setup+0x113/0x210 [ 100.872548][ T5980] shmem_file_setup+0x3b/0x50 [ 100.872586][ T5980] __se_sys_memfd_create+0x2c3/0x590 [ 100.872685][ T5980] __x64_sys_memfd_create+0x31/0x40 [ 100.872768][ T5980] x64_sys_call+0x2ac2/0x3000 [ 100.872797][ T5980] do_syscall_64+0xd2/0x200 [ 100.872826][ T5980] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 100.872853][ T5980] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 100.872902][ T5980] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.872931][ T5980] RIP: 0033:0x7f10b376eec9 [ 100.872951][ T5980] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 100.872976][ T5980] RSP: 002b:00007f10b2194e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 100.873069][ T5980] RAX: ffffffffffffffda RBX: 000000000000061d RCX: 00007f10b376eec9 [ 100.873086][ T5980] RDX: 00007f10b2194ef0 RSI: 0000000000000000 RDI: 00007f10b37f2960 [ 100.873103][ T5980] RBP: 0000200000000f40 R08: 00007f10b2194bb7 R09: 00007f10b2194e40 [ 100.873116][ T5980] R10: 000000000000000a R11: 0000000000000202 R12: 0000200000000040 [ 100.873128][ T5980] R13: 00007f10b2194ef0 R14: 00007f10b2194eb0 R15: 0000200000000580 [ 100.873196][ T5980] [ 101.103087][ T5978] loop5: detected capacity change from 0 to 512 [ 101.122013][ T5978] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 101.160489][ T5978] EXT4-fs (loop5): orphan cleanup on readonly fs [ 101.168398][ T5978] EXT4-fs warning (device loop5): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 101.186048][ T5978] EXT4-fs (loop5): Cannot turn on quotas: error -22 [ 101.202076][ T5978] EXT4-fs error (device loop5): ext4_orphan_get:1392: inode #16: comm syz.5.812: casefold flag without casefold feature [ 101.221800][ T5978] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.812: couldn't read orphan inode 16 (err -117) [ 101.235391][ T5978] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 101.297852][ T5984] loop3: detected capacity change from 0 to 512 [ 101.322244][ T5578] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.337541][ T5984] EXT4-fs (loop3): orphan cleanup on readonly fs [ 101.362598][ T5984] EXT4-fs error (device loop3): ext4_xattr_inode_iget:446: comm syz.3.814: error while reading EA inode 32 err=-116 [ 101.411248][ T5984] EXT4-fs (loop3): Remounting filesystem read-only [ 101.419544][ T5984] EXT4-fs warning (device loop3): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 101.430404][ T5984] EXT4-fs (loop3): 1 orphan inode deleted [ 101.431554][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.437673][ T5984] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 101.447520][ T5988] loop5: detected capacity change from 0 to 512 [ 101.465551][ T5984] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.541768][ T5988] EXT4-fs (loop5): orphan cleanup on readonly fs [ 101.559223][ T5988] EXT4-fs error (device loop5): ext4_xattr_inode_iget:446: comm syz.5.815: error while reading EA inode 32 err=-116 [ 101.582169][ T5988] EXT4-fs (loop5): Remounting filesystem read-only [ 101.686636][ T5988] EXT4-fs warning (device loop5): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 101.697538][ T5988] EXT4-fs (loop5): 1 orphan inode deleted [ 101.704021][ T5988] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 101.717893][ T5988] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.773536][ T3369] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 101.941360][ T6010] loop2: detected capacity change from 0 to 164 [ 101.988635][ T6012] loop5: detected capacity change from 0 to 164 [ 102.082926][ T6018] netlink: 24 bytes leftover after parsing attributes in process `syz.2.825'. [ 102.135445][ T6018] IPVS: Error connecting to the multicast addr [ 102.144496][ T6020] loop5: detected capacity change from 0 to 2048 [ 102.192081][ T6020] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 102.241143][ T3369] hid-generic 0000:0000:0000.0014: hidraw0: HID v0.00 Device [syz1] on syz0 [ 102.358641][ T6020] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 102.362051][ T6030] loop3: detected capacity change from 0 to 512 [ 102.382028][ T6020] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1100 with error 28 [ 102.394942][ T6020] EXT4-fs (loop5): This should not happen!! Data will be lost [ 102.394942][ T6020] [ 102.405117][ T6020] EXT4-fs (loop5): Total free blocks count 0 [ 102.411435][ T6020] EXT4-fs (loop5): Free/Dirty block details [ 102.417389][ T6020] EXT4-fs (loop5): free_blocks=2415919504 [ 102.423545][ T6020] EXT4-fs (loop5): dirty_blocks=1104 [ 102.429088][ T6020] EXT4-fs (loop5): Block reservation details [ 102.435091][ T6020] EXT4-fs (loop5): i_reserved_data_blocks=69 [ 102.499293][ T6030] EXT4-fs (loop3): orphan cleanup on readonly fs [ 102.506647][ T6033] FAULT_INJECTION: forcing a failure. [ 102.506647][ T6033] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 102.508539][ T6030] EXT4-fs error (device loop3): ext4_xattr_inode_iget:446: comm syz.3.829: error while reading EA inode 32 err=-116 [ 102.520500][ T6033] CPU: 1 UID: 0 PID: 6033 Comm: GPL Not tainted syzkaller #0 PREEMPT(voluntary) [ 102.520530][ T6033] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 102.520642][ T6033] Call Trace: [ 102.520652][ T6033] [ 102.520665][ T6033] __dump_stack+0x1d/0x30 [ 102.520750][ T6033] dump_stack_lvl+0xe8/0x140 [ 102.520777][ T6033] dump_stack+0x15/0x1b [ 102.520801][ T6033] should_fail_ex+0x265/0x280 [ 102.520928][ T6033] should_fail+0xb/0x20 [ 102.520970][ T6033] should_fail_usercopy+0x1a/0x20 [ 102.520999][ T6033] _copy_to_user+0x20/0xa0 [ 102.521035][ T6033] simple_read_from_buffer+0xb5/0x130 [ 102.521119][ T6033] proc_fail_nth_read+0x10e/0x150 [ 102.521162][ T6033] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 102.521202][ T6033] vfs_read+0x1a8/0x770 [ 102.521233][ T6033] ? __rcu_read_unlock+0x4f/0x70 [ 102.521310][ T6033] ? __fget_files+0x184/0x1c0 [ 102.521348][ T6033] ksys_read+0xda/0x1a0 [ 102.521429][ T6033] __x64_sys_read+0x40/0x50 [ 102.521462][ T6033] x64_sys_call+0x27c0/0x3000 [ 102.521492][ T6033] do_syscall_64+0xd2/0x200 [ 102.521526][ T6033] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 102.521626][ T6033] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 102.521657][ T6033] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.521687][ T6033] RIP: 0033:0x7f10b376d8dc [ 102.521711][ T6033] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 102.521810][ T6033] RSP: 002b:00007f10b21d7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 102.521832][ T6033] RAX: ffffffffffffffda RBX: 00007f10b39c5fa0 RCX: 00007f10b376d8dc [ 102.521850][ T6033] RDX: 000000000000000f RSI: 00007f10b21d70a0 RDI: 0000000000000005 [ 102.521891][ T6033] RBP: 00007f10b21d7090 R08: 0000000000000000 R09: 0000000000000000 [ 102.521908][ T6033] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 102.521921][ T6033] R13: 00007f10b39c6038 R14: 00007f10b39c5fa0 R15: 00007ffcf0acece8 [ 102.522025][ T6033] [ 102.748231][ T6030] EXT4-fs (loop3): Remounting filesystem read-only [ 102.755868][ T6030] EXT4-fs warning (device loop3): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 102.766798][ T6030] EXT4-fs (loop3): 1 orphan inode deleted [ 102.767226][ T5578] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.774122][ T6030] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 102.796993][ T6030] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.947637][ T6038] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 102.984703][ T6038] Cannot find add_set index 0 as target [ 103.255300][ T6038] vhci_hcd: invalid port number 96 [ 103.260592][ T6038] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 103.274097][ T6050] syz1: rxe_newlink: already configured on bond0 [ 103.471147][ T3369] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 103.922153][ T6057] netlink: 8 bytes leftover after parsing attributes in process `syz.1.837'. [ 103.977349][ T29] kauditd_printk_skb: 320 callbacks suppressed [ 103.977365][ T29] audit: type=1326 audit(1760000879.171:4215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6036 comm="syz.0.830" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f375dd21785 code=0x7ffc0000 [ 104.008837][ T6059] SET target dimension over the limit! [ 104.113782][ T6059] vhci_hcd: invalid port number 96 [ 104.119022][ T6059] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 104.121360][ T3369] hid-generic 0000:0000:0000.0015: hidraw0: HID v0.00 Device [syz1] on syz0 [ 104.137593][ T29] audit: type=1326 audit(1760000879.201:4216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6036 comm="syz.0.830" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f375dd21785 code=0x7ffc0000 [ 104.161808][ T29] audit: type=1326 audit(1760000879.211:4217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6036 comm="syz.0.830" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f375dd21785 code=0x7ffc0000 [ 104.186305][ T29] audit: type=1326 audit(1760000879.211:4218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6036 comm="syz.0.830" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f375dd21785 code=0x7ffc0000 [ 104.211154][ T29] audit: type=1326 audit(1760000879.211:4219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6036 comm="syz.0.830" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f375dd21785 code=0x7ffc0000 [ 104.235475][ T29] audit: type=1326 audit(1760000879.211:4220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6036 comm="syz.0.830" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f375dd21785 code=0x7ffc0000 [ 104.260695][ T29] audit: type=1326 audit(1760000879.211:4221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6036 comm="syz.0.830" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f375dd21785 code=0x7ffc0000 [ 104.286303][ T29] audit: type=1326 audit(1760000879.221:4222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6036 comm="syz.0.830" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f375dd21785 code=0x7ffc0000 [ 104.310773][ T29] audit: type=1326 audit(1760000879.221:4223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6036 comm="syz.0.830" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f375dd21785 code=0x7ffc0000 [ 104.335167][ T29] audit: type=1326 audit(1760000879.221:4224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6036 comm="syz.0.830" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f375dd21785 code=0x7ffc0000 [ 104.397430][ T6061] netlink: 24 bytes leftover after parsing attributes in process `syz.0.838'. [ 104.406561][ T6061] IPVS: Error connecting to the multicast addr [ 104.457306][ T6066] xt_bpf: check failed: parse error [ 104.515265][ T6073] loop3: detected capacity change from 0 to 2048 [ 104.528473][ T6070] loop2: detected capacity change from 0 to 2048 [ 104.542630][ T6073] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 104.556281][ T6078] 9pnet_fd: Insufficient options for proto=fd [ 104.607649][ T6070] Alternate GPT is invalid, using primary GPT. [ 104.614505][ T6070] loop2: p2 p3 p7 [ 104.650491][ T6073] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 104.670165][ T6070] netlink: 'syz.2.841': attribute type 3 has an invalid length. [ 104.705396][ T6073] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 462 with error 28 [ 104.718125][ T6073] EXT4-fs (loop3): This should not happen!! Data will be lost [ 104.718125][ T6073] [ 104.727814][ T6073] EXT4-fs (loop3): Total free blocks count 0 [ 104.734084][ T6073] EXT4-fs (loop3): Free/Dirty block details [ 104.740373][ T6073] EXT4-fs (loop3): free_blocks=2415919504 [ 104.746331][ T6073] EXT4-fs (loop3): dirty_blocks=464 [ 104.751758][ T6073] EXT4-fs (loop3): Block reservation details [ 104.757883][ T6073] EXT4-fs (loop3): i_reserved_data_blocks=29 [ 105.025018][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.179323][ T6096] vhci_hcd: invalid port number 96 [ 105.185338][ T6096] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 105.524042][ T6099] infiniband syz!: set down [ 105.528831][ T6099] infiniband syz!: added team_slave_0 [ 105.591244][ T6099] RDS/IB: syz!: added [ 105.690068][ T6111] netlink: 24 bytes leftover after parsing attributes in process `syz.5.853'. [ 105.790916][ T6111] IPVS: Error connecting to the multicast addr [ 105.953317][ T6115] loop5: detected capacity change from 0 to 512 [ 106.083186][ T6119] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 106.122032][ T6115] EXT4-fs (loop5): orphan cleanup on readonly fs [ 106.130234][ T6115] EXT4-fs error (device loop5): ext4_xattr_inode_iget:446: comm syz.5.855: error while reading EA inode 32 err=-116 [ 106.145342][ T6115] EXT4-fs (loop5): Remounting filesystem read-only [ 106.152334][ T6115] EXT4-fs warning (device loop5): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 106.163390][ T6115] EXT4-fs (loop5): 1 orphan inode deleted [ 106.169830][ T6115] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 106.184245][ T6115] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.212750][ T6124] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 107.242281][ T6152] loop3: detected capacity change from 0 to 512 [ 107.250473][ T6152] EXT4-fs (loop3): orphan cleanup on readonly fs [ 107.257790][ T6152] EXT4-fs error (device loop3): ext4_xattr_inode_iget:446: comm syz.3.868: error while reading EA inode 32 err=-116 [ 107.279087][ T6152] EXT4-fs (loop3): Remounting filesystem read-only [ 107.407313][ T6152] EXT4-fs warning (device loop3): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 107.439605][ T6152] EXT4-fs (loop3): 1 orphan inode deleted [ 107.446157][ T6152] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 107.477904][ T6160] loop5: detected capacity change from 0 to 512 [ 107.485656][ T6152] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.515375][ T6160] EXT4-fs (loop5): orphan cleanup on readonly fs [ 107.546110][ T6160] EXT4-fs error (device loop5): ext4_xattr_inode_iget:446: comm syz.5.870: error while reading EA inode 32 err=-116 [ 107.575208][ T6165] loop3: detected capacity change from 0 to 512 [ 107.586371][ T6160] EXT4-fs (loop5): Remounting filesystem read-only [ 107.601871][ T6160] EXT4-fs warning (device loop5): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 107.618491][ T6165] EXT4-fs: inline encryption not supported [ 107.637258][ T6165] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 107.655789][ T6160] EXT4-fs (loop5): 1 orphan inode deleted [ 107.674711][ T6160] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 107.700406][ T6165] EXT4-fs (loop3): 1 truncate cleaned up [ 107.715966][ T6165] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 107.747676][ T6160] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.768333][ T6169] loop2: detected capacity change from 0 to 2048 [ 107.806939][ T6169] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 107.895066][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.906898][ T6173] netlink: 24 bytes leftover after parsing attributes in process `syz.5.876'. [ 107.916147][ T6173] IPVS: Error connecting to the multicast addr [ 108.173689][ T6191] loop5: detected capacity change from 0 to 512 [ 108.206161][ T6191] EXT4-fs (loop5): orphan cleanup on readonly fs [ 108.222076][ T6195] program syz.1.884 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 108.236571][ T6191] EXT4-fs error (device loop5): ext4_xattr_inode_iget:446: comm syz.5.883: error while reading EA inode 32 err=-116 [ 108.494798][ T6191] EXT4-fs (loop5): Remounting filesystem read-only [ 108.527217][ T6191] EXT4-fs warning (device loop5): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 108.641268][ T6169] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 108.678653][ T6191] EXT4-fs (loop5): 1 orphan inode deleted [ 108.706278][ T6169] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1506 with error 28 [ 108.719183][ T6191] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 108.719632][ T6169] EXT4-fs (loop2): This should not happen!! Data will be lost [ 108.719632][ T6169] [ 108.743266][ T6169] EXT4-fs (loop2): Total free blocks count 0 [ 108.749540][ T6169] EXT4-fs (loop2): Free/Dirty block details [ 108.756011][ T6169] EXT4-fs (loop2): free_blocks=2415919504 [ 108.762014][ T6169] EXT4-fs (loop2): dirty_blocks=1520 [ 108.767833][ T6169] EXT4-fs (loop2): Block reservation details [ 108.774622][ T6169] EXT4-fs (loop2): i_reserved_data_blocks=95 [ 108.781821][ T6191] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.792778][ T6200] loop1: detected capacity change from 0 to 512 [ 108.809104][ T6200] EXT4-fs: Ignoring removed oldalloc option [ 108.828709][ T6200] EXT4-fs (loop1): 1 truncate cleaned up [ 108.846640][ T6200] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.866522][ T6203] netlink: 24 bytes leftover after parsing attributes in process `syz.5.888'. [ 108.884628][ T6203] IPVS: Error connecting to the multicast addr [ 108.917209][ T6205] netlink: 'syz.3.887': attribute type 12 has an invalid length. [ 108.934464][ T6200] EXT4-fs error (device loop1): ext4_lookup:1787: inode #14: comm syz.1.886: invalid fast symlink length 39 [ 108.947288][ T6200] EXT4-fs (loop1): Remounting filesystem read-only [ 108.975453][ T6200] netlink: 'syz.1.886': attribute type 1 has an invalid length. [ 108.984212][ T6200] netlink: 224 bytes leftover after parsing attributes in process `syz.1.886'. [ 109.087068][ T6205] netlink: 'syz.3.887': attribute type 1 has an invalid length. [ 109.094926][ T6205] netlink: 224 bytes leftover after parsing attributes in process `syz.3.887'. [ 109.153146][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.172024][ T29] kauditd_printk_skb: 366 callbacks suppressed [ 109.172044][ T29] audit: type=1400 audit(1760000884.361:4591): avc: denied { bind } for pid=6212 comm="syz.0.891" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 109.225747][ T29] audit: type=1400 audit(1760000884.401:4592): avc: denied { connect } for pid=6212 comm="syz.0.891" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 109.235916][ T6219] loop5: detected capacity change from 0 to 2048 [ 109.269259][ T6222] loop3: detected capacity change from 0 to 2048 [ 109.278703][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.305258][ T6219] Alternate GPT is invalid, using primary GPT. [ 109.312551][ T6219] loop5: p2 p3 p7 [ 109.328385][ T6222] Alternate GPT is invalid, using primary GPT. [ 109.335408][ T6222] loop3: p2 p3 p7 [ 109.349394][ T6219] netlink: 'syz.5.893': attribute type 3 has an invalid length. [ 109.365474][ T6231] loop2: detected capacity change from 0 to 512 [ 109.372874][ T29] audit: type=1400 audit(1760000884.561:4593): avc: denied { watch watch_reads } for pid=6221 comm="syz.1.892" path="/172/file1" dev="tmpfs" ino=942 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 109.404938][ T6222] netlink: 'syz.3.894': attribute type 3 has an invalid length. [ 109.418073][ T6231] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 109.431900][ T6231] ext4 filesystem being mounted at /177/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 109.591730][ T3380] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 109.603465][ T3380] hid-generic 0000:0000:0000.0016: hidraw0: HID v0.00 Device [syz1] on syz0 [ 109.612871][ T29] audit: type=1326 audit(1760000884.781:4594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6243 comm="syz.3.902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d02b3eec9 code=0x7ffc0000 [ 109.637470][ T29] audit: type=1326 audit(1760000884.781:4595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6243 comm="syz.3.902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9d02b3eec9 code=0x7ffc0000 [ 109.661195][ T29] audit: type=1326 audit(1760000884.781:4596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6243 comm="syz.3.902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d02b3eec9 code=0x7ffc0000 [ 109.685584][ T29] audit: type=1326 audit(1760000884.781:4597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6243 comm="syz.3.902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9d02b3eec9 code=0x7ffc0000 [ 109.709856][ T29] audit: type=1326 audit(1760000884.781:4598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6243 comm="syz.3.902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d02b3eec9 code=0x7ffc0000 [ 109.734105][ T29] audit: type=1326 audit(1760000884.781:4599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6243 comm="syz.3.902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f9d02b3eec9 code=0x7ffc0000 [ 109.758696][ T29] audit: type=1326 audit(1760000884.781:4600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6243 comm="syz.3.902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d02b3eec9 code=0x7ffc0000 [ 109.798640][ T6248] netlink: 256 bytes leftover after parsing attributes in process `syz.1.904'. [ 109.810046][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.905220][ T6262] loop0: detected capacity change from 0 to 2048 [ 109.937860][ T6262] Alternate GPT is invalid, using primary GPT. [ 109.944571][ T6262] loop0: p2 p3 p7 [ 109.957110][ T6262] netlink: 'syz.0.909': attribute type 3 has an invalid length. [ 110.612672][ T6277] netlink: 24 bytes leftover after parsing attributes in process `syz.1.915'. [ 110.622185][ T6277] IPVS: Error connecting to the multicast addr [ 110.654350][ T10] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 110.674345][ T10] hid-generic 0000:0000:0000.0017: hidraw0: HID v0.00 Device [syz1] on syz0 [ 110.707660][ T6283] loop1: detected capacity change from 0 to 512 [ 110.717077][ T6283] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.731513][ T6283] ext4 filesystem being mounted at /177/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 110.767403][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.811178][ T6288] netlink: 2148 bytes leftover after parsing attributes in process `syz.1.920'. [ 110.821355][ T6288] netlink: 2148 bytes leftover after parsing attributes in process `syz.1.920'. [ 110.880786][ T6293] loop1: detected capacity change from 0 to 512 [ 110.890014][ T6293] EXT4-fs (loop1): orphan cleanup on readonly fs [ 110.898028][ T6293] EXT4-fs error (device loop1): ext4_xattr_inode_iget:446: comm syz.1.922: error while reading EA inode 32 err=-116 [ 110.911676][ T6293] EXT4-fs (loop1): Remounting filesystem read-only [ 110.920045][ T6293] EXT4-fs warning (device loop1): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 110.932312][ T6293] EXT4-fs (loop1): 1 orphan inode deleted [ 110.939000][ T6293] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 110.952809][ T6293] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.962552][ T6289] FAULT_INJECTION: forcing a failure. [ 110.962552][ T6289] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 110.976714][ T6289] CPU: 1 UID: 0 PID: 6289 Comm: syz.3.917 Not tainted syzkaller #0 PREEMPT(voluntary) [ 110.976748][ T6289] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 110.976776][ T6289] Call Trace: [ 110.976786][ T6289] [ 110.976795][ T6289] __dump_stack+0x1d/0x30 [ 110.976865][ T6289] dump_stack_lvl+0xe8/0x140 [ 110.976892][ T6289] dump_stack+0x15/0x1b [ 110.976914][ T6289] should_fail_ex+0x265/0x280 [ 110.977010][ T6289] should_fail+0xb/0x20 [ 110.977048][ T6289] should_fail_usercopy+0x1a/0x20 [ 110.977074][ T6289] _copy_from_user+0x1c/0xb0 [ 110.977160][ T6289] memdup_user+0x5e/0xd0 [ 110.977189][ T6289] strndup_user+0x68/0xb0 [ 110.977213][ T6289] __se_sys_mount+0x4d/0x2e0 [ 110.977237][ T6289] ? fput+0x8f/0xc0 [ 110.977277][ T6289] ? ksys_write+0x192/0x1a0 [ 110.977333][ T6289] __x64_sys_mount+0x67/0x80 [ 110.977464][ T6289] x64_sys_call+0x2b51/0x3000 [ 110.977490][ T6289] do_syscall_64+0xd2/0x200 [ 110.977518][ T6289] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 110.977626][ T6289] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 110.977732][ T6289] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.977755][ T6289] RIP: 0033:0x7f9d02b3eec9 [ 110.977872][ T6289] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 110.977897][ T6289] RSP: 002b:00007f9d01586038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 110.977919][ T6289] RAX: ffffffffffffffda RBX: 00007f9d02d96090 RCX: 00007f9d02b3eec9 [ 110.977941][ T6289] RDX: 0000200000000280 RSI: 0000200000000300 RDI: 0000000000000000 [ 110.977953][ T6289] RBP: 00007f9d01586090 R08: 0000200000000600 R09: 0000000000000000 [ 110.977965][ T6289] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 110.977977][ T6289] R13: 00007f9d02d96128 R14: 00007f9d02d96090 R15: 00007ffee5387bf8 [ 110.978073][ T6289] [ 111.204077][ T6299] loop2: detected capacity change from 0 to 2048 [ 111.258139][ T6295] loop5: detected capacity change from 0 to 512 [ 111.258536][ T6299] Alternate GPT is invalid, using primary GPT. [ 111.272319][ T6299] loop2: p2 p3 p7 [ 111.272479][ T6295] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 111.290066][ T6295] EXT4-fs (loop5): orphan cleanup on readonly fs [ 111.290956][ T6305] vhci_hcd: invalid port number 96 [ 111.302308][ T6305] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 111.302804][ T6295] EXT4-fs error (device loop5): ext4_acquire_dquot:6945: comm syz.5.919: Failed to acquire dquot type 1 [ 111.325855][ T6299] netlink: 'syz.2.924': attribute type 3 has an invalid length. [ 111.337140][ T6295] EXT4-fs (loop5): 1 truncate cleaned up [ 111.343738][ T6295] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 111.372400][ T6295] EXT4-fs error (device loop5): ext4_lookup:1791: inode #2: comm syz.5.919: deleted inode referenced: 12 [ 111.390185][ T3380] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 111.399180][ T3380] hid-generic 0000:0000:0000.0018: hidraw0: HID v0.00 Device [syz1] on syz0 [ 111.498805][ T6320] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6320 comm=syz.0.933 [ 111.514099][ T6320] netlink: 4 bytes leftover after parsing attributes in process `syz.0.933'. [ 111.557292][ T6320] team0: Port device team_slave_0 removed [ 111.618313][ T6322] loop3: detected capacity change from 0 to 512 [ 111.641917][ T6322] EXT4-fs (loop3): orphan cleanup on readonly fs [ 111.650520][ T5578] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.653727][ T6325] netlink: 16 bytes leftover after parsing attributes in process `syz.0.936'. [ 111.671315][ T6322] EXT4-fs error (device loop3): ext4_xattr_inode_iget:446: comm syz.3.935: error while reading EA inode 32 err=-116 [ 111.686787][ T6322] EXT4-fs (loop3): Remounting filesystem read-only [ 111.687992][ T6325] netlink: 16 bytes leftover after parsing attributes in process `syz.0.936'. [ 111.695167][ T6322] EXT4-fs warning (device loop3): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 111.718040][ T6322] EXT4-fs (loop3): 1 orphan inode deleted [ 111.724572][ T6322] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 111.739595][ T6322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.862795][ T6331] vhci_hcd: invalid port number 96 [ 111.868124][ T6331] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 111.908722][ T6338] bridge0: entered promiscuous mode [ 111.914452][ T6338] macsec1: entered promiscuous mode [ 111.930461][ T6338] bridge0: port 3(macsec1) entered blocking state [ 111.938394][ T6338] bridge0: port 3(macsec1) entered disabled state [ 111.946341][ T6338] macsec1: entered allmulticast mode [ 111.951851][ T6338] bridge0: entered allmulticast mode [ 111.965997][ T3369] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 111.978375][ T3369] hid-generic 0000:0000:0000.0019: hidraw0: HID v0.00 Device [syz1] on syz0 [ 111.990247][ T6338] macsec1: left allmulticast mode [ 111.996161][ T6338] bridge0: left allmulticast mode [ 112.004086][ T6338] bridge0: left promiscuous mode [ 112.208724][ T6347] loop0: detected capacity change from 0 to 2048 [ 112.258260][ T6347] Alternate GPT is invalid, using primary GPT. [ 112.266167][ T6347] loop0: p2 p3 p7 [ 113.282208][ T6365] loop3: detected capacity change from 0 to 512 [ 113.289758][ T6347] netlink: 'syz.0.943': attribute type 3 has an invalid length. [ 113.300134][ T6365] EXT4-fs (loop3): orphan cleanup on readonly fs [ 113.308078][ T6365] EXT4-fs error (device loop3): ext4_xattr_inode_iget:446: comm syz.3.951: error while reading EA inode 32 err=-116 [ 113.485174][ T6365] EXT4-fs (loop3): Remounting filesystem read-only [ 113.501406][ T6365] EXT4-fs warning (device loop3): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 113.517195][ T6365] EXT4-fs (loop3): 1 orphan inode deleted [ 113.524293][ T6365] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 113.544203][ T6365] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.641426][ T3380] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 113.647459][ T6382] vhci_hcd: invalid port number 96 [ 113.654147][ T6382] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 113.672166][ T3380] hid-generic 0000:0000:0000.001A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 113.726247][ T6390] netlink: 'syz.3.959': attribute type 5 has an invalid length. [ 113.766373][ T6394] dvmrp1: tun_chr_ioctl cmd 1074025692 [ 113.977798][ T6409] loop5: detected capacity change from 0 to 2048 [ 114.038309][ T6409] Alternate GPT is invalid, using primary GPT. [ 114.045085][ T6409] loop5: p2 p3 p7 [ 114.058558][ T6409] netlink: 'syz.5.968': attribute type 3 has an invalid length. [ 114.411072][ T6417] vhci_hcd: invalid port number 96 [ 114.416889][ T6417] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 114.458570][ T3380] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 114.466282][ T29] kauditd_printk_skb: 240 callbacks suppressed [ 114.466297][ T29] audit: type=1326 audit(1760000889.641:4839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6418 comm="syz.1.970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10b376eec9 code=0x7ffc0000 [ 114.497047][ T29] audit: type=1326 audit(1760000889.641:4840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6418 comm="syz.1.970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10b376eec9 code=0x7ffc0000 [ 114.522002][ T29] audit: type=1326 audit(1760000889.641:4841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6418 comm="syz.1.970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f10b376eec9 code=0x7ffc0000 [ 114.547169][ T29] audit: type=1326 audit(1760000889.641:4842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6418 comm="syz.1.970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10b376eec9 code=0x7ffc0000 [ 114.571128][ T29] audit: type=1326 audit(1760000889.641:4843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6418 comm="syz.1.970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10b376eec9 code=0x7ffc0000 [ 114.595638][ T29] audit: type=1326 audit(1760000889.641:4844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6418 comm="syz.1.970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f10b376eec9 code=0x7ffc0000 [ 114.620996][ T29] audit: type=1326 audit(1760000889.641:4845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6418 comm="syz.1.970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10b376eec9 code=0x7ffc0000 [ 114.645503][ T29] audit: type=1326 audit(1760000889.641:4846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6418 comm="syz.1.970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f10b376eec9 code=0x7ffc0000 [ 114.669833][ T29] audit: type=1326 audit(1760000889.641:4847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6418 comm="syz.1.970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10b376eec9 code=0x7ffc0000 [ 114.694028][ T29] audit: type=1326 audit(1760000889.641:4848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6418 comm="syz.1.970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10b376eec9 code=0x7ffc0000 [ 114.721127][ T3380] hid-generic 0000:0000:0000.001B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 114.807212][ T6429] program syz.2.975 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 114.943494][ T6441] loop0: detected capacity change from 0 to 2048 [ 115.008241][ T6441] Alternate GPT is invalid, using primary GPT. [ 115.014763][ T6441] loop0: p2 p3 p7 [ 115.080685][ T6441] netlink: 'syz.0.980': attribute type 3 has an invalid length. [ 115.083466][ T6426] netlink: 'syz.5.973': attribute type 10 has an invalid length. [ 115.099569][ T6426] 8021q: adding VLAN 0 to HW filter on device team0 [ 115.108486][ T6426] team_slave_0: entered promiscuous mode [ 115.114883][ T6426] team_slave_1: entered promiscuous mode [ 115.137235][ T6426] bond0: (slave team0): Enslaving as an active interface with an up link [ 115.257191][ T6454] vhci_hcd: invalid port number 96 [ 115.262749][ T6454] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 115.343188][ T3380] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 115.359256][ T3380] hid-generic 0000:0000:0000.001C: hidraw0: HID v0.00 Device [syz1] on syz0 [ 116.043528][ T6478] netlink: 24 bytes leftover after parsing attributes in process `syz.5.991'. [ 116.054444][ T6478] IPVS: Error connecting to the multicast addr [ 116.059127][ T6480] loop2: detected capacity change from 0 to 512 [ 116.077981][ T6480] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 116.092755][ T6480] ext4 filesystem being mounted at /194/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 116.118151][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.150220][ T6489] loop2: detected capacity change from 0 to 2048 [ 116.163874][ T1036] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 116.173684][ T1036] hid-generic 0000:0000:0000.001D: hidraw0: HID v0.00 Device [syz1] on syz0 [ 116.191348][ T6489] Alternate GPT is invalid, using primary GPT. [ 116.198307][ T6489] loop2: p2 p3 p7 [ 116.213902][ T6489] netlink: 'syz.2.994': attribute type 3 has an invalid length. [ 116.228839][ T6493] loop5: detected capacity change from 0 to 512 [ 116.257770][ T6493] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 116.274991][ T6493] ext4 filesystem being mounted at /59/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 116.305562][ T5578] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.378282][ T6502] loop2: detected capacity change from 0 to 512 [ 116.386920][ T6502] EXT4-fs (loop2): orphan cleanup on readonly fs [ 116.394307][ T6502] EXT4-fs error (device loop2): ext4_xattr_inode_iget:446: comm syz.2.1000: error while reading EA inode 32 err=-116 [ 116.409342][ T6502] EXT4-fs (loop2): Remounting filesystem read-only [ 116.417197][ T6502] EXT4-fs warning (device loop2): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 116.437009][ T6502] EXT4-fs (loop2): 1 orphan inode deleted [ 116.444074][ T6502] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 116.460159][ T6502] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.479156][ T6508] SELinux: Context system_u:object_r:netutils_exec_t:s0 is not valid (left unmapped). [ 116.759318][ T6520] loop0: detected capacity change from 0 to 512 [ 116.817591][ T6520] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 116.870316][ T1036] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 117.026199][ T6520] ext4 filesystem being mounted at /213/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 117.038595][ T1036] hid-generic 0000:0000:0000.001E: hidraw0: HID v0.00 Device [syz1] on syz0 [ 117.053560][ T6520] 9pnet_fd: Insufficient options for proto=fd [ 117.366705][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.466878][ T6536] loop5: detected capacity change from 0 to 512 [ 117.496116][ T6536] EXT4-fs: Ignoring removed nobh option [ 117.519892][ T6539] loop2: detected capacity change from 0 to 512 [ 117.530662][ T6536] EXT4-fs error (device loop5): ext4_do_update_inode:5624: inode #3: comm syz.5.1011: corrupted inode contents [ 117.545056][ T6539] EXT4-fs (loop2): orphan cleanup on readonly fs [ 117.552210][ T6536] EXT4-fs error (device loop5): ext4_dirty_inode:6509: inode #3: comm syz.5.1011: mark_inode_dirty error [ 117.567065][ T6539] EXT4-fs error (device loop2): ext4_xattr_inode_iget:446: comm syz.2.1013: error while reading EA inode 32 err=-116 [ 117.581054][ T6536] EXT4-fs error (device loop5): ext4_do_update_inode:5624: inode #3: comm syz.5.1011: corrupted inode contents [ 117.593844][ T6539] EXT4-fs (loop2): Remounting filesystem read-only [ 117.601662][ T6539] EXT4-fs warning (device loop2): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 117.612842][ T6539] EXT4-fs (loop2): 1 orphan inode deleted [ 117.619183][ T6536] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #3: comm syz.5.1011: mark_inode_dirty error [ 117.619343][ T6539] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 117.644381][ T6539] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.653907][ T6536] EXT4-fs error (device loop5): ext4_acquire_dquot:6945: comm syz.5.1011: Failed to acquire dquot type 0 [ 117.676376][ T6544] loop0: detected capacity change from 0 to 2048 [ 117.683987][ T6536] EXT4-fs error (device loop5): ext4_do_update_inode:5624: inode #16: comm syz.5.1011: corrupted inode contents [ 117.698249][ T6536] EXT4-fs error (device loop5): ext4_dirty_inode:6509: inode #16: comm syz.5.1011: mark_inode_dirty error [ 117.711517][ T6536] EXT4-fs error (device loop5): ext4_do_update_inode:5624: inode #16: comm syz.5.1011: corrupted inode contents [ 117.725937][ T6536] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #16: comm syz.5.1011: mark_inode_dirty error [ 117.732680][ T6544] Alternate GPT is invalid, using primary GPT. [ 117.739009][ T6536] EXT4-fs error (device loop5): ext4_do_update_inode:5624: inode #16: comm syz.5.1011: corrupted inode contents [ 117.746001][ T6544] loop0: p2 p3 p7 [ 117.759704][ T6536] EXT4-fs error (device loop5) in ext4_orphan_del:301: Corrupt filesystem [ 117.771441][ T6536] EXT4-fs error (device loop5): ext4_do_update_inode:5624: inode #16: comm syz.5.1011: corrupted inode contents [ 117.784797][ T6536] EXT4-fs error (device loop5): ext4_truncate:4637: inode #16: comm syz.5.1011: mark_inode_dirty error [ 117.813485][ T6536] EXT4-fs error (device loop5) in ext4_process_orphan:343: Corrupt filesystem [ 117.834115][ T6536] EXT4-fs (loop5): 1 truncate cleaned up [ 117.843594][ T6551] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 117.847761][ T6536] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 117.853104][ T6551] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 117.873925][ T6536] ext4 filesystem being mounted at /61/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 117.878330][ T6551] netlink: 'syz.3.1016': attribute type 10 has an invalid length. [ 117.899131][ T6551] .`: (slave syz_tun): Enslaving as an active interface with an up link [ 117.932894][ T5578] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.943446][ T6544] netlink: 'syz.0.1010': attribute type 3 has an invalid length. [ 117.990288][ T6551] 8021q: adding VLAN 0 to HW filter on device bond0 [ 117.999114][ T6551] FAULT_INJECTION: forcing a failure. [ 117.999114][ T6551] name failslab, interval 1, probability 0, space 0, times 0 [ 118.012260][ T6551] CPU: 1 UID: 0 PID: 6551 Comm: syz.3.1016 Not tainted syzkaller #0 PREEMPT(voluntary) [ 118.012297][ T6551] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 118.012315][ T6551] Call Trace: [ 118.012323][ T6551] [ 118.012332][ T6551] __dump_stack+0x1d/0x30 [ 118.012427][ T6551] dump_stack_lvl+0xe8/0x140 [ 118.012449][ T6551] dump_stack+0x15/0x1b [ 118.012471][ T6551] should_fail_ex+0x265/0x280 [ 118.012645][ T6551] should_failslab+0x8c/0xb0 [ 118.012807][ T6551] kmem_cache_alloc_noprof+0x50/0x480 [ 118.012853][ T6551] ? skb_clone+0x151/0x1f0 [ 118.012894][ T6551] skb_clone+0x151/0x1f0 [ 118.012956][ T6551] __netlink_deliver_tap+0x2c9/0x500 [ 118.013056][ T6551] netlink_unicast+0x66b/0x690 [ 118.013088][ T6551] netlink_sendmsg+0x58b/0x6b0 [ 118.013119][ T6551] ? __pfx_netlink_sendmsg+0x10/0x10 [ 118.013189][ T6551] __sock_sendmsg+0x142/0x180 [ 118.013268][ T6551] ____sys_sendmsg+0x31e/0x4e0 [ 118.013313][ T6551] ___sys_sendmsg+0x17b/0x1d0 [ 118.013370][ T6551] __x64_sys_sendmsg+0xd4/0x160 [ 118.013480][ T6551] x64_sys_call+0x191e/0x3000 [ 118.013513][ T6551] do_syscall_64+0xd2/0x200 [ 118.013536][ T6551] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 118.013646][ T6551] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.013675][ T6551] RIP: 0033:0x7f9d02b3eec9 [ 118.013695][ T6551] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 118.013716][ T6551] RSP: 002b:00007f9d015a7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 118.013736][ T6551] RAX: ffffffffffffffda RBX: 00007f9d02d95fa0 RCX: 00007f9d02b3eec9 [ 118.013831][ T6551] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 000000000000000a [ 118.013849][ T6551] RBP: 00007f9d015a7090 R08: 0000000000000000 R09: 0000000000000000 [ 118.013865][ T6551] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 118.013882][ T6551] R13: 00007f9d02d96038 R14: 00007f9d02d95fa0 R15: 00007ffee5387bf8 [ 118.013909][ T6551] [ 118.235342][ T6551] dvmrp1: entered allmulticast mode [ 118.385622][ C1] hrtimer: interrupt took 28300 ns [ 118.559226][ T3380] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 118.567868][ T3380] hid-generic 0000:0000:0000.001F: hidraw0: HID v0.00 Device [syz1] on syz0 [ 119.100669][ T6655] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1030'. [ 119.303707][ T10] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 119.315797][ T10] hid-generic 0000:0000:0000.0020: hidraw0: HID v0.00 Device [syz1] on syz0 [ 119.361762][ T6663] program syz.0.1034 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 119.415011][ T6667] FAULT_INJECTION: forcing a failure. [ 119.415011][ T6667] name failslab, interval 1, probability 0, space 0, times 0 [ 119.428294][ T6667] CPU: 0 UID: 0 PID: 6667 Comm: syz.0.1036 Not tainted syzkaller #0 PREEMPT(voluntary) [ 119.428330][ T6667] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 119.428348][ T6667] Call Trace: [ 119.428357][ T6667] [ 119.428365][ T6667] __dump_stack+0x1d/0x30 [ 119.428433][ T6667] dump_stack_lvl+0xe8/0x140 [ 119.428453][ T6667] dump_stack+0x15/0x1b [ 119.428474][ T6667] should_fail_ex+0x265/0x280 [ 119.428512][ T6667] should_failslab+0x8c/0xb0 [ 119.428623][ T6667] kmem_cache_alloc_node_noprof+0x57/0x4a0 [ 119.428652][ T6667] ? __alloc_skb+0x101/0x320 [ 119.428681][ T6667] __alloc_skb+0x101/0x320 [ 119.428790][ T6667] ? audit_log_start+0x342/0x720 [ 119.428815][ T6667] audit_log_start+0x3a0/0x720 [ 119.428834][ T6667] ? kstrtouint+0x76/0xc0 [ 119.428866][ T6667] audit_seccomp+0x48/0x100 [ 119.428951][ T6667] ? __seccomp_filter+0x82d/0x1250 [ 119.428977][ T6667] __seccomp_filter+0x83e/0x1250 [ 119.429004][ T6667] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 119.429097][ T6667] ? vfs_write+0x7e8/0x960 [ 119.429175][ T6667] ? __rcu_read_unlock+0x4f/0x70 [ 119.429206][ T6667] ? __fget_files+0x184/0x1c0 [ 119.429233][ T6667] __secure_computing+0x82/0x150 [ 119.429259][ T6667] syscall_trace_enter+0xcf/0x1e0 [ 119.429348][ T6667] do_syscall_64+0xac/0x200 [ 119.429380][ T6667] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 119.429412][ T6667] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 119.429517][ T6667] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.429612][ T6667] RIP: 0033:0x7f375dceeec9 [ 119.429631][ T6667] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 119.429712][ T6667] RSP: 002b:00007f375c757038 EFLAGS: 00000246 ORIG_RAX: 000000000000006f [ 119.429737][ T6667] RAX: ffffffffffffffda RBX: 00007f375df45fa0 RCX: 00007f375dceeec9 [ 119.429755][ T6667] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 119.429771][ T6667] RBP: 00007f375c757090 R08: 0000000000000000 R09: 0000000000000000 [ 119.429787][ T6667] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 119.429867][ T6667] R13: 00007f375df46038 R14: 00007f375df45fa0 R15: 00007ffe111e01c8 [ 119.429891][ T6667] [ 119.717454][ T6671] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1038'. [ 119.735994][ T6671] netem: change failed [ 119.779901][ T6679] loop3: detected capacity change from 0 to 512 [ 119.788659][ T6679] EXT4-fs (loop3): orphan cleanup on readonly fs [ 119.799431][ T6679] EXT4-fs error (device loop3): ext4_xattr_inode_iget:446: comm syz.3.1042: error while reading EA inode 32 err=-116 [ 119.812941][ T6679] EXT4-fs (loop3): Remounting filesystem read-only [ 119.820041][ T6679] EXT4-fs warning (device loop3): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 119.830733][ T6679] EXT4-fs (loop3): 1 orphan inode deleted [ 119.837393][ T6679] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 119.850380][ T6679] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.886344][ T29] kauditd_printk_skb: 397 callbacks suppressed [ 119.886364][ T29] audit: type=1326 audit(1760000895.081:5242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6689 comm="syz.0.1046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f375dceeec9 code=0x7ffc0000 [ 119.889224][ T6692] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1047'. [ 119.918121][ T29] audit: type=1326 audit(1760000895.111:5243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6689 comm="syz.0.1046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f375dceeec9 code=0x7ffc0000 [ 119.955097][ T6692] FAULT_INJECTION: forcing a failure. [ 119.955097][ T6692] name failslab, interval 1, probability 0, space 0, times 0 [ 119.968666][ T6692] CPU: 1 UID: 0 PID: 6692 Comm: syz.3.1047 Not tainted syzkaller #0 PREEMPT(voluntary) [ 119.968699][ T6692] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 119.968716][ T6692] Call Trace: [ 119.968724][ T6692] [ 119.968732][ T6692] __dump_stack+0x1d/0x30 [ 119.968825][ T6692] dump_stack_lvl+0xe8/0x140 [ 119.968852][ T6692] dump_stack+0x15/0x1b [ 119.968939][ T6692] should_fail_ex+0x265/0x280 [ 119.968985][ T6692] should_failslab+0x8c/0xb0 [ 119.969029][ T6692] kmem_cache_alloc_node_noprof+0x57/0x4a0 [ 119.969066][ T6692] ? __alloc_skb+0x101/0x320 [ 119.969105][ T6692] __alloc_skb+0x101/0x320 [ 119.969139][ T6692] psample_group_notify+0x24/0x110 [ 119.969241][ T6692] psample_group_get+0x16d/0x1b0 [ 119.969280][ T6692] tcf_sample_init+0x359/0x5d0 [ 119.969313][ T6692] tcf_action_init_1+0x36a/0x4a0 [ 119.969389][ T6692] tcf_action_init+0x267/0x6d0 [ 119.969452][ T6692] tc_ctl_action+0x291/0x830 [ 119.969498][ T6692] ? __pfx_tc_ctl_action+0x10/0x10 [ 119.969521][ T6692] rtnetlink_rcv_msg+0x65a/0x6d0 [ 119.969660][ T6692] netlink_rcv_skb+0x123/0x220 [ 119.969687][ T6692] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 119.969736][ T6692] rtnetlink_rcv+0x1c/0x30 [ 119.969777][ T6692] netlink_unicast+0x5c0/0x690 [ 119.969836][ T6692] netlink_sendmsg+0x58b/0x6b0 [ 119.969937][ T6692] ? __pfx_netlink_sendmsg+0x10/0x10 [ 119.969976][ T6692] __sock_sendmsg+0x142/0x180 [ 119.970003][ T6692] ____sys_sendmsg+0x345/0x4e0 [ 119.970045][ T6692] ___sys_sendmsg+0x17b/0x1d0 [ 119.970144][ T6692] __sys_sendmmsg+0x178/0x300 [ 119.970198][ T6692] __x64_sys_sendmmsg+0x57/0x70 [ 119.970282][ T6692] x64_sys_call+0x1c4a/0x3000 [ 119.970311][ T6692] do_syscall_64+0xd2/0x200 [ 119.970339][ T6692] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 119.970371][ T6692] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 119.970397][ T6692] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.970431][ T6692] RIP: 0033:0x7f9d02b3eec9 [ 119.970457][ T6692] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 119.970480][ T6692] RSP: 002b:00007f9d015a7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 119.970509][ T6692] RAX: ffffffffffffffda RBX: 00007f9d02d95fa0 RCX: 00007f9d02b3eec9 [ 119.970527][ T6692] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000007 [ 119.970544][ T6692] RBP: 00007f9d015a7090 R08: 0000000000000000 R09: 0000000000000000 [ 119.970560][ T6692] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 119.970651][ T6692] R13: 00007f9d02d96038 R14: 00007f9d02d95fa0 R15: 00007ffee5387bf8 [ 119.970672][ T6692] [ 120.254566][ T6694] FAULT_INJECTION: forcing a failure. [ 120.254566][ T6694] name failslab, interval 1, probability 0, space 0, times 0 [ 120.267943][ T6694] CPU: 1 UID: 0 PID: 6694 Comm: syz.1.1048 Not tainted syzkaller #0 PREEMPT(voluntary) [ 120.268069][ T6694] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 120.268107][ T6694] Call Trace: [ 120.268114][ T6694] [ 120.268125][ T6694] __dump_stack+0x1d/0x30 [ 120.268153][ T6694] dump_stack_lvl+0xe8/0x140 [ 120.268177][ T6694] dump_stack+0x15/0x1b [ 120.268220][ T6694] should_fail_ex+0x265/0x280 [ 120.268261][ T6694] ? audit_log_d_path+0x8d/0x150 [ 120.268281][ T6694] should_failslab+0x8c/0xb0 [ 120.268310][ T6694] __kmalloc_cache_noprof+0x4c/0x4a0 [ 120.268341][ T6694] audit_log_d_path+0x8d/0x150 [ 120.268361][ T6694] audit_log_d_path_exe+0x42/0x70 [ 120.268384][ T6694] audit_log_task+0x1e9/0x250 [ 120.268482][ T6694] ? kstrtouint+0x76/0xc0 [ 120.268523][ T6694] audit_seccomp+0x61/0x100 [ 120.268560][ T6694] ? __seccomp_filter+0x82d/0x1250 [ 120.268649][ T6694] __seccomp_filter+0x83e/0x1250 [ 120.268715][ T6694] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 120.268755][ T6694] ? vfs_write+0x7e8/0x960 [ 120.268785][ T6694] ? __rcu_read_unlock+0x4f/0x70 [ 120.268818][ T6694] ? __fget_files+0x184/0x1c0 [ 120.269028][ T6694] __secure_computing+0x82/0x150 [ 120.269058][ T6694] syscall_trace_enter+0xcf/0x1e0 [ 120.269149][ T6694] do_syscall_64+0xac/0x200 [ 120.269178][ T6694] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 120.269211][ T6694] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 120.269233][ T6694] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.269306][ T6694] RIP: 0033:0x7f10b376eec9 [ 120.269321][ T6694] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 120.269339][ T6694] RSP: 002b:00007f10b21d7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 120.269419][ T6694] RAX: ffffffffffffffda RBX: 00007f10b39c5fa0 RCX: 00007f10b376eec9 [ 120.269437][ T6694] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000008 [ 120.269449][ T6694] RBP: 00007f10b21d7090 R08: 0000000000000000 R09: 0000000000000000 [ 120.269461][ T6694] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 120.269473][ T6694] R13: 00007f10b39c6038 R14: 00007f10b39c5fa0 R15: 00007ffcf0acece8 [ 120.269501][ T6694] [ 120.270466][ T6694] program syz.1.1048 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 120.345821][ T29] audit: type=1326 audit(1760000895.151:5244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6689 comm="syz.0.1046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f375dceeec9 code=0x7ffc0000 [ 120.348268][ T6694] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 120.352313][ T29] audit: type=1326 audit(1760000895.151:5245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6689 comm="syz.0.1046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f375dceeec9 code=0x7ffc0000 [ 120.396229][ T6690] FAULT_INJECTION: forcing a failure. [ 120.396229][ T6690] name failslab, interval 1, probability 0, space 0, times 0 [ 120.397872][ T29] audit: type=1326 audit(1760000895.171:5246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6693 comm="syz.1.1048" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10b376eec9 code=0x7ffc0000 [ 120.402350][ T6690] CPU: 1 UID: 0 PID: 6690 Comm: syz.0.1046 Not tainted syzkaller #0 PREEMPT(voluntary) [ 120.402385][ T6690] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 120.402406][ T6690] Call Trace: [ 120.402417][ T6690] [ 120.402428][ T6690] __dump_stack+0x1d/0x30 [ 120.402545][ T6690] dump_stack_lvl+0xe8/0x140 [ 120.402574][ T6690] dump_stack+0x15/0x1b [ 120.402596][ T6690] should_fail_ex+0x265/0x280 [ 120.402646][ T6690] should_failslab+0x8c/0xb0 [ 120.402694][ T6690] kmem_cache_alloc_node_noprof+0x57/0x4a0 [ 120.402734][ T6690] ? __alloc_skb+0x101/0x320 [ 120.402770][ T6690] __alloc_skb+0x101/0x320 [ 120.402802][ T6690] ? audit_log_start+0x342/0x720 [ 120.402838][ T6690] audit_log_start+0x3a0/0x720 [ 120.402867][ T6690] ? kstrtouint+0x76/0xc0 [ 120.402912][ T6690] audit_seccomp+0x48/0x100 [ 120.402975][ T6690] ? __seccomp_filter+0x82d/0x1250 [ 120.403032][ T6690] __seccomp_filter+0x83e/0x1250 [ 120.403071][ T6690] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 120.403147][ T6690] ? vfs_write+0x7e8/0x960 [ 120.403178][ T6690] ? __rcu_read_unlock+0x4f/0x70 [ 120.403214][ T6690] ? __fget_files+0x184/0x1c0 [ 120.403287][ T6690] __secure_computing+0x82/0x150 [ 120.403387][ T6690] syscall_trace_enter+0xcf/0x1e0 [ 120.403434][ T6690] do_syscall_64+0xac/0x200 [ 120.403466][ T6690] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 120.403580][ T6690] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 120.403610][ T6690] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.403716][ T6690] RIP: 0033:0x7f375dceeec9 [ 120.403737][ T6690] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 120.403763][ T6690] RSP: 002b:00007f375c757038 EFLAGS: 00000246 ORIG_RAX: 000000000000006f [ 120.403811][ T6690] RAX: ffffffffffffffda RBX: 00007f375df45fa0 RCX: 00007f375dceeec9 [ 120.403881][ T6690] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 120.403968][ T6690] RBP: 00007f375c757090 R08: 0000000000000000 R09: 0000000000000000 [ 120.403984][ T6690] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 120.404002][ T6690] R13: 00007f375df46038 R14: 00007f375df45fa0 R15: 00007ffe111e01c8 [ 120.404030][ T6690] [ 120.404074][ T6690] audit: audit_lost=3 audit_rate_limit=0 audit_backlog_limit=64 [ 120.408526][ T29] audit: type=1326 audit(1760000895.171:5247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6693 comm="syz.1.1048" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10b376eec9 code=0x7ffc0000 [ 120.408558][ T29] audit: type=1326 audit(1760000895.171:5248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6689 comm="syz.0.1046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f375dceeec9 code=0x7ffc0000 [ 120.408591][ T29] audit: type=1326 audit(1760000895.451:5250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6693 comm="syz.1.1048" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f10b376eec9 code=0x7ffc0000 [ 120.414424][ T6690] audit: out of memory in audit_log_start [ 120.758217][ T6702] xt_CT: You must specify a L4 protocol and not use inversions on it [ 121.081874][ T6716] loop0: detected capacity change from 0 to 512 [ 121.099568][ T6716] EXT4-fs (loop0): orphan cleanup on readonly fs [ 121.117046][ T6716] EXT4-fs error (device loop0): ext4_xattr_inode_iget:446: comm syz.0.1057: error while reading EA inode 32 err=-116 [ 121.136490][ T6716] EXT4-fs (loop0): Remounting filesystem read-only [ 121.143586][ T6716] EXT4-fs warning (device loop0): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 121.153852][ T6716] EXT4-fs (loop0): 1 orphan inode deleted [ 121.160311][ T6716] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 121.172939][ T6716] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.208421][ T6723] vhci_hcd: invalid port number 96 [ 121.213902][ T6723] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 121.247777][ T6727] vhci_hcd: invalid port number 96 [ 121.253369][ T6727] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 121.289461][ T6729] can0: slcan on ttyS3. [ 121.296668][ T6729] capability: warning: `syz.2.1063' uses 32-bit capabilities (legacy support in use) [ 121.365730][ T6729] can0 (unregistered): slcan off ttyS3. [ 121.371786][ T6729] Falling back ldisc for ttyS3. [ 121.540396][ T6735] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1065'. [ 121.574886][ T6735] IPVS: Error connecting to the multicast addr [ 121.731723][ T6739] loop2: detected capacity change from 0 to 128 [ 121.741689][ T6743] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1068'. [ 121.787114][ T6743] netlink: 'syz.5.1068': attribute type 4 has an invalid length. [ 121.795255][ T6743] netlink: 'syz.5.1068': attribute type 2 has an invalid length. [ 121.820734][ T6739] ext4: Unknown parameter 'func' [ 121.832288][ T6742] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 122.216243][ T6760] loop0: detected capacity change from 0 to 256 [ 122.231871][ T6760] msdos: Unknown parameter 'ÿÿ0x000000000000ee00' [ 122.262281][ T6763] ªªªªªª: renamed from vlan0 (while UP) [ 122.280693][ T6761] vhci_hcd: invalid port number 96 [ 122.285983][ T6761] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 122.314502][ T6768] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1074'. [ 122.339084][ T6768] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1074'. [ 122.377957][ T6768] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1074'. [ 122.387250][ T6768] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1074'. [ 122.428950][ T6774] loop0: detected capacity change from 0 to 512 [ 122.455310][ T6765] loop5: detected capacity change from 0 to 512 [ 122.463683][ T6765] EXT4-fs (loop5): orphan cleanup on readonly fs [ 122.486354][ T6765] EXT4-fs warning (device loop5): ext4_xattr_inode_get:560: inode #11: comm syz.5.1077: EA inode hash validation failed [ 122.500494][ T6765] EXT4-fs error (device loop5): ext4_do_update_inode:5624: inode #15: comm syz.5.1077: corrupted inode contents [ 122.517252][ T6765] EXT4-fs error (device loop5): ext4_dirty_inode:6509: inode #15: comm syz.5.1077: mark_inode_dirty error [ 122.529672][ T6765] EXT4-fs error (device loop5): ext4_do_update_inode:5624: inode #15: comm syz.5.1077: corrupted inode contents [ 122.542615][ T6765] EXT4-fs error (device loop5): ext4_xattr_delete_inode:2996: inode #15: comm syz.5.1077: mark_inode_dirty error [ 122.555056][ T6765] EXT4-fs error (device loop5): ext4_xattr_delete_inode:2999: inode #15: comm syz.5.1077: mark inode dirty (error -117) [ 122.568705][ T6765] EXT4-fs warning (device loop5): ext4_evict_inode:274: xattr delete (err -117) [ 122.579252][ T6765] EXT4-fs (loop5): 1 orphan inode deleted [ 122.585565][ T6765] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 122.612623][ T6774] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 122.625831][ T6774] ext4 filesystem being mounted at /232/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 122.759278][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.829130][ T6786] FAULT_INJECTION: forcing a failure. [ 122.829130][ T6786] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 122.842718][ T6786] CPU: 0 UID: 0 PID: 6786 Comm: syz.0.1082 Not tainted syzkaller #0 PREEMPT(voluntary) [ 122.842753][ T6786] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 122.842769][ T6786] Call Trace: [ 122.842774][ T6786] [ 122.842805][ T6786] __dump_stack+0x1d/0x30 [ 122.842824][ T6786] dump_stack_lvl+0xe8/0x140 [ 122.842842][ T6786] dump_stack+0x15/0x1b [ 122.842857][ T6786] should_fail_ex+0x265/0x280 [ 122.842888][ T6786] should_fail+0xb/0x20 [ 122.842922][ T6786] should_fail_usercopy+0x1a/0x20 [ 122.842941][ T6786] strncpy_from_user+0x25/0x230 [ 122.842965][ T6786] ? static_key_count+0x23/0x40 [ 122.842996][ T6786] ? security_task_prctl+0x13c/0x160 [ 122.843026][ T6786] __se_sys_prctl+0xb00/0x12e0 [ 122.843078][ T6786] __x64_sys_prctl+0x67/0x80 [ 122.843106][ T6786] x64_sys_call+0x20cf/0x3000 [ 122.843165][ T6786] do_syscall_64+0xd2/0x200 [ 122.843198][ T6786] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 122.843306][ T6786] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 122.843326][ T6786] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.843391][ T6786] RIP: 0033:0x7f375dceeec9 [ 122.843405][ T6786] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 122.843421][ T6786] RSP: 002b:00007f375c757038 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 122.843439][ T6786] RAX: ffffffffffffffda RBX: 00007f375df45fa0 RCX: 00007f375dceeec9 [ 122.843450][ T6786] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 000000000000000f [ 122.843461][ T6786] RBP: 00007f375c757090 R08: 0000000000000000 R09: 0000000000000000 [ 122.843556][ T6786] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 122.843567][ T6786] R13: 00007f375df46038 R14: 00007f375df45fa0 R15: 00007ffe111e01c8 [ 122.843585][ T6786] [ 123.067726][ T5578] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.576346][ T6806] vlan2: entered allmulticast mode [ 123.648680][ T6809] vhci_hcd: invalid port number 96 [ 123.654060][ T6809] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 123.684986][ T6812] loop3: detected capacity change from 0 to 512 [ 123.741442][ T6812] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 123.755878][ T6812] ext4 filesystem being mounted at /220/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 123.814966][ T6823] loop2: detected capacity change from 0 to 512 [ 123.881396][ T6823] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 123.894846][ T6823] ext4 filesystem being mounted at /221/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 123.921078][ T6823] 9pnet_fd: Insufficient options for proto=fd [ 123.952855][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.987774][ T3412] IPVS: starting estimator thread 0... [ 124.018780][ T6827] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6827 comm=syz.5.1098 [ 124.075945][ T6833] IPVS: using max 1680 ests per chain, 84000 per kthread [ 124.174556][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.283900][ T6852] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1105'. [ 124.306065][ T6850] loop3: detected capacity change from 0 to 2048 [ 124.361855][ T6856] loop5: detected capacity change from 0 to 512 [ 124.369500][ T6852] IPVS: Error connecting to the multicast addr [ 124.380048][ T6856] EXT4-fs (loop5): orphan cleanup on readonly fs [ 124.388211][ T6856] EXT4-fs error (device loop5): ext4_xattr_inode_iget:446: comm syz.5.1107: error while reading EA inode 32 err=-116 [ 124.401560][ T6856] EXT4-fs (loop5): Remounting filesystem read-only [ 124.408599][ T6856] EXT4-fs warning (device loop5): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 124.419348][ T6856] EXT4-fs (loop5): 1 orphan inode deleted [ 124.513972][ T6863] loop2: detected capacity change from 0 to 512 [ 124.539494][ T6863] EXT4-fs (loop2): orphan cleanup on readonly fs [ 124.560117][ T6864] wireguard0: entered promiscuous mode [ 124.566230][ T6864] wireguard0: entered allmulticast mode [ 124.691151][ T6863] EXT4-fs error (device loop2): ext4_xattr_inode_iget:446: comm syz.2.1109: error while reading EA inode 32 err=-116 [ 124.733986][ T6863] EXT4-fs (loop2): Remounting filesystem read-only [ 124.741129][ T6863] EXT4-fs warning (device loop2): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 124.753647][ T6863] EXT4-fs (loop2): 1 orphan inode deleted [ 124.824887][ T6875] loop2: detected capacity change from 0 to 512 [ 124.833542][ T6875] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 124.844607][ T6875] EXT4-fs (loop2): orphan cleanup on readonly fs [ 124.851580][ T6875] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:517: comm syz.2.1112: Block bitmap for bg 0 marked uninitialized [ 124.867504][ T6875] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 124.877440][ T6875] EXT4-fs (loop2): 1 orphan inode deleted [ 124.894187][ T6875] ÿÿÿÿÿÿ: renamed from vlan1 (while UP) [ 124.902744][ T29] kauditd_printk_skb: 216 callbacks suppressed [ 124.902771][ T29] audit: type=1326 audit(1760000900.091:5466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6874 comm="syz.2.1112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96d99aeec9 code=0x7ffc0000 [ 124.956667][ T29] audit: type=1326 audit(1760000900.151:5467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6874 comm="syz.2.1112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f96d99aeec9 code=0x7ffc0000 [ 124.980677][ T29] audit: type=1326 audit(1760000900.151:5468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6874 comm="syz.2.1112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96d99aeec9 code=0x7ffc0000 [ 125.005997][ T29] audit: type=1326 audit(1760000900.151:5469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6874 comm="syz.2.1112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96d99aeec9 code=0x7ffc0000 [ 125.031042][ T29] audit: type=1326 audit(1760000900.211:5470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6874 comm="syz.2.1112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f96d99b0d5c code=0x7ffc0000 [ 125.055674][ T29] audit: type=1326 audit(1760000900.211:5471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6874 comm="syz.2.1112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f96d99b0c94 code=0x7ffc0000 [ 125.079993][ T29] audit: type=1326 audit(1760000900.211:5472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6874 comm="syz.2.1112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f96d99b0c94 code=0x7ffc0000 [ 125.103676][ T29] audit: type=1326 audit(1760000900.211:5473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6874 comm="syz.2.1112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96d99aeec9 code=0x7ffc0000 [ 125.127944][ T29] audit: type=1326 audit(1760000900.211:5474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6874 comm="syz.2.1112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96d99aeec9 code=0x7ffc0000 [ 125.166640][ T29] audit: type=1326 audit(1760000900.341:5475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6874 comm="syz.2.1112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f96d99aeec9 code=0x7ffc0000 [ 125.211784][ T6884] loop2: detected capacity change from 0 to 512 [ 125.279304][ T6884] EXT4-fs error (device loop2): ext4_orphan_get:1392: inode #15: comm syz.2.1116: casefold flag without casefold feature [ 125.303019][ T6884] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.1116: couldn't read orphan inode 15 (err -117) [ 125.453461][ T6896] loop0: detected capacity change from 0 to 512 [ 125.461584][ T6900] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1120'. [ 125.472572][ T6896] EXT4-fs (loop0): orphan cleanup on readonly fs [ 125.488910][ T6896] EXT4-fs error (device loop0): ext4_xattr_inode_iget:446: comm syz.0.1119: error while reading EA inode 32 err=-116 [ 125.502026][ T6896] EXT4-fs (loop0): Remounting filesystem read-only [ 125.509117][ T6896] EXT4-fs warning (device loop0): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 125.519753][ T6896] EXT4-fs (loop0): 1 orphan inode deleted [ 125.527267][ T6904] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1122'. [ 125.537326][ T6904] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1122'. [ 125.591510][ T6911] program syz.1.1125 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 125.610602][ T6909] vhci_hcd: invalid port number 96 [ 125.615977][ T6909] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 125.651793][ T6913] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6913 comm=syz.2.1126 [ 125.694063][ T6919] FAULT_INJECTION: forcing a failure. [ 125.694063][ T6919] name failslab, interval 1, probability 0, space 0, times 0 [ 125.699202][ T1036] IPVS: starting estimator thread 0... [ 125.707262][ T6919] CPU: 0 UID: 0 PID: 6919 Comm: syz.0.1128 Not tainted syzkaller #0 PREEMPT(voluntary) [ 125.707341][ T6919] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 125.707361][ T6919] Call Trace: [ 125.707370][ T6919] [ 125.707381][ T6919] __dump_stack+0x1d/0x30 [ 125.707464][ T6919] dump_stack_lvl+0xe8/0x140 [ 125.707492][ T6919] dump_stack+0x15/0x1b [ 125.707515][ T6919] should_fail_ex+0x265/0x280 [ 125.707632][ T6919] should_failslab+0x8c/0xb0 [ 125.707669][ T6919] kmem_cache_alloc_noprof+0x50/0x480 [ 125.707707][ T6919] ? security_file_alloc+0x32/0x100 [ 125.707745][ T6919] security_file_alloc+0x32/0x100 [ 125.707811][ T6919] init_file+0x5c/0x1d0 [ 125.707870][ T6919] alloc_empty_file+0x8b/0x200 [ 125.707915][ T6919] alloc_file_pseudo+0xc6/0x160 [ 125.708041][ T6919] anon_inode_getfile_fmode+0xa5/0x140 [ 125.708094][ T6919] do_signalfd4+0x162/0x2b0 [ 125.708127][ T6919] __x64_sys_signalfd4+0xce/0x100 [ 125.708201][ T6919] x64_sys_call+0x25a0/0x3000 [ 125.708232][ T6919] do_syscall_64+0xd2/0x200 [ 125.708265][ T6919] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 125.708303][ T6919] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 125.708375][ T6919] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.708407][ T6919] RIP: 0033:0x7f375dceeec9 [ 125.708437][ T6919] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 125.708484][ T6919] RSP: 002b:00007f375c757038 EFLAGS: 00000246 ORIG_RAX: 0000000000000121 [ 125.708512][ T6919] RAX: ffffffffffffffda RBX: 00007f375df45fa0 RCX: 00007f375dceeec9 [ 125.708529][ T6919] RDX: 0000000000000008 RSI: 0000200000000400 RDI: ffffffffffffffff [ 125.708542][ T6919] RBP: 00007f375c757090 R08: 0000000000000000 R09: 0000000000000000 [ 125.708558][ T6919] R10: 0000000000000800 R11: 0000000000000246 R12: 0000000000000001 [ 125.708575][ T6919] R13: 00007f375df46038 R14: 00007f375df45fa0 R15: 00007ffe111e01c8 [ 125.708657][ T6919] [ 126.015941][ T6920] IPVS: using max 2256 ests per chain, 112800 per kthread [ 126.746645][ T6934] loop0: detected capacity change from 0 to 512 [ 126.807704][ T6934] ext4 filesystem being mounted at /247/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 126.945989][ T6940] loop1: detected capacity change from 0 to 1024 [ 126.985443][ T6944] loop0: detected capacity change from 0 to 2048 [ 126.996785][ T6946] loop2: detected capacity change from 0 to 256 [ 127.005237][ T6946] msdos: Unknown parameter 'ÿÿ0x000000000000ee00' [ 127.028534][ T6944] Alternate GPT is invalid, using primary GPT. [ 127.036296][ T6944] loop0: p2 p3 p7 [ 127.075853][ T6952] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1136'. [ 127.086166][ T6952] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1136'. [ 127.110609][ T6944] netlink: 'syz.0.1137': attribute type 3 has an invalid length. [ 127.129212][ T6953] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4193: comm syz.1.1135: Allocating blocks 497-513 which overlap fs metadata [ 127.169594][ T6939] EXT4-fs (loop1): pa ffff8881058c95b0: logic 16, phys. 129, len 24 [ 127.178127][ T6939] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5444: group 0, free 0, pa_free 1 [ 127.284263][ T6967] program syz.1.1140 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 127.323246][ T6969] FAULT_INJECTION: forcing a failure. [ 127.323246][ T6969] name failslab, interval 1, probability 0, space 0, times 0 [ 127.336693][ T6969] CPU: 1 UID: 0 PID: 6969 Comm: syz.0.1142 Not tainted syzkaller #0 PREEMPT(voluntary) [ 127.336724][ T6969] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 127.336737][ T6969] Call Trace: [ 127.336744][ T6969] [ 127.336753][ T6969] __dump_stack+0x1d/0x30 [ 127.336781][ T6969] dump_stack_lvl+0xe8/0x140 [ 127.336805][ T6969] dump_stack+0x15/0x1b [ 127.336861][ T6969] should_fail_ex+0x265/0x280 [ 127.336905][ T6969] should_failslab+0x8c/0xb0 [ 127.336932][ T6969] kmem_cache_alloc_noprof+0x50/0x480 [ 127.336974][ T6969] ? skb_clone+0x151/0x1f0 [ 127.337071][ T6969] skb_clone+0x151/0x1f0 [ 127.337101][ T6969] __netlink_deliver_tap+0x2c9/0x500 [ 127.337145][ T6969] netlink_unicast+0x66b/0x690 [ 127.337187][ T6969] netlink_sendmsg+0x58b/0x6b0 [ 127.337288][ T6969] ? __pfx_netlink_sendmsg+0x10/0x10 [ 127.337369][ T6969] __sock_sendmsg+0x142/0x180 [ 127.337392][ T6969] ____sys_sendmsg+0x31e/0x4e0 [ 127.337424][ T6969] ___sys_sendmsg+0x17b/0x1d0 [ 127.337520][ T6969] __x64_sys_sendmsg+0xd4/0x160 [ 127.337566][ T6969] x64_sys_call+0x191e/0x3000 [ 127.337590][ T6969] do_syscall_64+0xd2/0x200 [ 127.337621][ T6969] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 127.337689][ T6969] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 127.337718][ T6969] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.337747][ T6969] RIP: 0033:0x7f375dceeec9 [ 127.337765][ T6969] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 127.337783][ T6969] RSP: 002b:00007f375c757038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 127.337806][ T6969] RAX: ffffffffffffffda RBX: 00007f375df45fa0 RCX: 00007f375dceeec9 [ 127.337818][ T6969] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000000000000004 [ 127.337830][ T6969] RBP: 00007f375c757090 R08: 0000000000000000 R09: 0000000000000000 [ 127.337842][ T6969] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 127.337853][ T6969] R13: 00007f375df46038 R14: 00007f375df45fa0 R15: 00007ffe111e01c8 [ 127.337880][ T6969] [ 127.343636][ T6969] vlan2: entered allmulticast mode [ 127.453573][ T6971] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 127.627667][ T6979] loop0: detected capacity change from 0 to 512 [ 127.666495][ T6979] ext4 filesystem being mounted at /252/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 128.281171][ T6997] loop2: detected capacity change from 0 to 2048 [ 128.359395][ T6997] Alternate GPT is invalid, using primary GPT. [ 128.366145][ T6997] loop2: p2 p3 p7 [ 128.476299][ T6997] netlink: 'syz.2.1152': attribute type 3 has an invalid length. [ 128.644185][ T3369] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 128.665880][ T3369] hid-generic 0000:0000:0000.0021: hidraw0: HID v0.00 Device [syz1] on syz0 [ 128.742600][ T7008] program syz.3.1158 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 128.827465][ T7011] ªªªªªªÿÿòÿÿÿòÿÿ: renamed from wg2 (while UP) [ 128.841273][ T7011] loop2: detected capacity change from 0 to 512 [ 128.856151][ T7011] EXT4-fs error (device loop2): ext4_orphan_get:1418: comm syz.2.1157: bad orphan inode 11 [ 129.008337][ T7015] vhci_hcd: invalid port number 96 [ 129.014042][ T7015] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 129.024672][ T7011] ext4_test_bit(bit=10, block=4) = 1 [ 129.030342][ T7011] is_bad_inode(inode)=0 [ 129.031100][ T7017] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1159'. [ 129.034568][ T7011] NEXT_ORPHAN(inode)=2080374784 [ 129.048671][ T7011] max_ino=32 [ 129.052117][ T7011] i_nlink=0 [ 129.075997][ T7011] EXT4-fs (loop2): 1 truncate cleaned up [ 129.203012][ T7029] loop0: detected capacity change from 0 to 256 [ 129.210664][ T7029] msdos: Unknown parameter 'ÿÿ0x000000000000ee00' [ 129.280738][ T7038] loop3: detected capacity change from 0 to 2048 [ 129.297044][ T7039] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1161'. [ 129.309873][ T7039] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1161'. [ 129.348443][ T7038] Alternate GPT is invalid, using primary GPT. [ 129.355110][ T7038] loop3: p2 p3 p7 [ 129.408703][ T7038] netlink: 'syz.3.1168': attribute type 3 has an invalid length. [ 129.562665][ T7042] FAULT_INJECTION: forcing a failure. [ 129.562665][ T7042] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 129.575939][ T7042] CPU: 0 UID: 0 PID: 7042 Comm: syz.1.1169 Not tainted syzkaller #0 PREEMPT(voluntary) [ 129.575973][ T7042] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 129.576061][ T7042] Call Trace: [ 129.576069][ T7042] [ 129.576078][ T7042] __dump_stack+0x1d/0x30 [ 129.576102][ T7042] dump_stack_lvl+0xe8/0x140 [ 129.576134][ T7042] dump_stack+0x15/0x1b [ 129.576150][ T7042] should_fail_ex+0x265/0x280 [ 129.576192][ T7042] should_fail+0xb/0x20 [ 129.576291][ T7042] should_fail_usercopy+0x1a/0x20 [ 129.576313][ T7042] _copy_from_user+0x1c/0xb0 [ 129.576390][ T7042] ___sys_sendmsg+0xc1/0x1d0 [ 129.576444][ T7042] __x64_sys_sendmsg+0xd4/0x160 [ 129.576508][ T7042] x64_sys_call+0x191e/0x3000 [ 129.576532][ T7042] do_syscall_64+0xd2/0x200 [ 129.576572][ T7042] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 129.576684][ T7042] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 129.576712][ T7042] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.576740][ T7042] RIP: 0033:0x7f10b376eec9 [ 129.576823][ T7042] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 129.576846][ T7042] RSP: 002b:00007f10b21d7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 129.576871][ T7042] RAX: ffffffffffffffda RBX: 00007f10b39c5fa0 RCX: 00007f10b376eec9 [ 129.576888][ T7042] RDX: 0000000000008000 RSI: 0000200000000180 RDI: 000000000000000f [ 129.576902][ T7042] RBP: 00007f10b21d7090 R08: 0000000000000000 R09: 0000000000000000 [ 129.577001][ T7042] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 129.577015][ T7042] R13: 00007f10b39c6038 R14: 00007f10b39c5fa0 R15: 00007ffcf0acece8 [ 129.577036][ T7042] [ 129.614376][ T7041] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1165'. [ 129.835535][ T7064] sctp: [Deprecated]: syz.1.1176 (pid 7064) Use of struct sctp_assoc_value in delayed_ack socket option. [ 129.835535][ T7064] Use struct sctp_sack_info instead [ 129.905991][ T29] kauditd_printk_skb: 166 callbacks suppressed [ 129.906021][ T29] audit: type=1326 audit(1760000905.101:5642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7071 comm="syz.2.1181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f96d99aeec9 code=0x7ffc0000 [ 129.936381][ T7072] loop1: detected capacity change from 0 to 2048 [ 129.943019][ T29] audit: type=1326 audit(1760000905.131:5643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7071 comm="syz.2.1181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96d99aeec9 code=0x7ffc0000 [ 129.967128][ T29] audit: type=1326 audit(1760000905.131:5644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7071 comm="syz.2.1181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96d99aeec9 code=0x7ffc0000 [ 129.994341][ T29] audit: type=1326 audit(1760000905.141:5645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7071 comm="syz.2.1181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f96d99aeec9 code=0x7ffc0000 [ 130.018689][ T29] audit: type=1326 audit(1760000905.141:5646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7071 comm="syz.2.1181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96d99aeec9 code=0x7ffc0000 [ 130.044083][ T29] audit: type=1326 audit(1760000905.141:5647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7071 comm="syz.2.1181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96d99aeec9 code=0x7ffc0000 [ 130.068626][ T29] audit: type=1326 audit(1760000905.141:5648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7071 comm="syz.2.1181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f96d99aeec9 code=0x7ffc0000 [ 130.070845][ T7056] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1173'. [ 130.093117][ T29] audit: type=1326 audit(1760000905.141:5649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7071 comm="syz.2.1181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96d99aeec9 code=0x7ffc0000 [ 130.126654][ T29] audit: type=1326 audit(1760000905.141:5650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7071 comm="syz.2.1181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96d99aeec9 code=0x7ffc0000 [ 130.150663][ T29] audit: type=1326 audit(1760000905.141:5651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7071 comm="syz.2.1181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f96d99aeec9 code=0x7ffc0000 [ 130.155232][ T7085] loop5: detected capacity change from 0 to 512 [ 130.196669][ T7072] Alternate GPT is invalid, using primary GPT. [ 130.203144][ T7072] loop1: p2 p3 p7 [ 130.211015][ T7087] netlink: 'syz.1.1180': attribute type 3 has an invalid length. [ 130.248895][ T7090] vhci_hcd: invalid port number 96 [ 130.254501][ T7090] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 130.276186][ T7095] Option 'Í'M•O§±' to dns_resolver key: bad/missing value [ 130.285076][ T7085] ext4 filesystem being mounted at /84/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 130.302842][ T7097] FAULT_INJECTION: forcing a failure. [ 130.302842][ T7097] name failslab, interval 1, probability 0, space 0, times 0 [ 130.316303][ T7097] CPU: 1 UID: 0 PID: 7097 Comm: syz.0.1191 Not tainted syzkaller #0 PREEMPT(voluntary) [ 130.316338][ T7097] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 130.316355][ T7097] Call Trace: [ 130.316362][ T7097] [ 130.316388][ T7097] __dump_stack+0x1d/0x30 [ 130.316503][ T7097] dump_stack_lvl+0xe8/0x140 [ 130.316527][ T7097] dump_stack+0x15/0x1b [ 130.316608][ T7097] should_fail_ex+0x265/0x280 [ 130.316646][ T7097] should_failslab+0x8c/0xb0 [ 130.316689][ T7097] __kmalloc_node_track_caller_noprof+0xa5/0x580 [ 130.316720][ T7097] ? sidtab_sid2str_get+0xa0/0x130 [ 130.316757][ T7097] kmemdup_noprof+0x2b/0x70 [ 130.316781][ T7097] sidtab_sid2str_get+0xa0/0x130 [ 130.316840][ T7097] security_sid_to_context_core+0x1eb/0x2e0 [ 130.316873][ T7097] security_sid_to_context+0x27/0x40 [ 130.316900][ T7097] selinux_lsmprop_to_secctx+0x67/0xf0 [ 130.316929][ T7097] security_lsmprop_to_secctx+0x1a0/0x1c0 [ 130.317050][ T7097] audit_log_subj_ctx+0xa4/0x3e0 [ 130.317075][ T7097] ? skb_put+0xa9/0xf0 [ 130.317156][ T7097] audit_log_task_context+0x48/0x70 [ 130.317263][ T7097] audit_log_task+0xf4/0x250 [ 130.317304][ T7097] ? kstrtouint+0x76/0xc0 [ 130.317425][ T7097] audit_seccomp+0x61/0x100 [ 130.317465][ T7097] ? __seccomp_filter+0x82d/0x1250 [ 130.317539][ T7097] __seccomp_filter+0x83e/0x1250 [ 130.317577][ T7097] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 130.317614][ T7097] ? vfs_write+0x7e8/0x960 [ 130.317654][ T7097] ? __rcu_read_unlock+0x4f/0x70 [ 130.317688][ T7097] ? __fget_files+0x184/0x1c0 [ 130.317720][ T7097] __secure_computing+0x82/0x150 [ 130.317750][ T7097] syscall_trace_enter+0xcf/0x1e0 [ 130.317859][ T7097] do_syscall_64+0xac/0x200 [ 130.317888][ T7097] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 130.317922][ T7097] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 130.317949][ T7097] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.318049][ T7097] RIP: 0033:0x7f375dceeec9 [ 130.318070][ T7097] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 130.318092][ T7097] RSP: 002b:00007f375c756d68 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 130.318114][ T7097] RAX: ffffffffffffffda RBX: 00000000000005c2 RCX: 00007f375dceeec9 [ 130.318127][ T7097] RDX: 00007f375c756dec RSI: 0000000000000000 RDI: 00007f375dd72960 [ 130.318139][ T7097] RBP: 0000200000000000 R08: 00007f375c756b07 R09: 00007f375c75701f [ 130.318193][ T7097] R10: 000000000000000a R11: 0000000000000202 R12: 0000000000000001 [ 130.318208][ T7097] R13: 00007f375c756dec R14: 00007f375c756df0 R15: 00007ffe111e01c8 [ 130.318251][ T7097] [ 130.596406][ T7097] loop0: detected capacity change from 0 to 2048 [ 130.637577][ T7097] Alternate GPT is invalid, using primary GPT. [ 130.645283][ T7097] loop0: p1 p2 p3 [ 130.649696][ T7097] loop0: partition table partially beyond EOD, truncated [ 130.662421][ T7107] loop2: detected capacity change from 0 to 512 [ 130.675868][ T7107] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 130.698977][ T7107] EXT4-fs (loop2): orphan cleanup on readonly fs [ 130.706249][ T7109] loop0: detected capacity change from 0 to 512 [ 130.713674][ T7107] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:517: comm syz.2.1194: Block bitmap for bg 0 marked uninitialized [ 130.728596][ T7107] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 130.741432][ T7107] EXT4-fs (loop2): 1 orphan inode deleted [ 130.741514][ T7109] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 130.781918][ T7109] EXT4-fs (loop0): orphan cleanup on readonly fs [ 130.800025][ T7109] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:517: comm syz.0.1195: Block bitmap for bg 0 marked uninitialized [ 130.814659][ T7120] loop1: detected capacity change from 0 to 256 [ 130.818121][ T7121] loop5: detected capacity change from 0 to 512 [ 130.823182][ T7107] EXT4-fs unmount: 23 callbacks suppressed [ 130.823204][ T7107] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.834852][ T7120] msdos: Unknown parameter 'ÿÿ0x000000000000ee00' [ 130.844571][ T7109] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 130.852665][ T7121] EXT4-fs (loop5): orphan cleanup on readonly fs [ 130.867945][ T7109] EXT4-fs (loop0): 1 orphan inode deleted [ 130.874238][ T7121] EXT4-fs error (device loop5): ext4_xattr_inode_iget:446: comm syz.5.1197: error while reading EA inode 32 err=-116 [ 130.887124][ T7121] EXT4-fs (loop5): Remounting filesystem read-only [ 130.889659][ T7109] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 130.894035][ T7121] EXT4-fs warning (device loop5): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 130.911520][ T7120] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1198'. [ 130.919970][ T7121] EXT4-fs (loop5): 1 orphan inode deleted [ 130.933043][ T7121] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 130.946234][ T7121] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.965229][ T7120] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1198'. [ 130.992197][ T7109] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.074851][ T7140] loop1: detected capacity change from 0 to 512 [ 131.098092][ T7142] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1208'. [ 131.117300][ T7140] EXT4-fs (loop1): too many log groups per flexible block group [ 131.129361][ T7140] EXT4-fs (loop1): failed to initialize mballoc (-12) [ 131.136605][ T7140] EXT4-fs (loop1): mount failed [ 131.153503][ T7151] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7151 comm=syz.5.1206 [ 131.174386][ T7150] loop2: detected capacity change from 0 to 2048 [ 131.196778][ T7156] lo speed is unknown, defaulting to 1000 [ 131.211055][ T7156] lo speed is unknown, defaulting to 1000 [ 131.225868][ T7156] lo speed is unknown, defaulting to 1000 [ 131.260143][ T3369] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 131.268742][ T3369] hid-generic 0000:0000:0000.0022: hidraw0: HID v0.00 Device [syz1] on syz0 [ 131.312125][ T7156] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 131.326817][ T3369] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 131.338481][ T3369] hid-generic 0000:0000:0000.0023: hidraw0: HID v0.00 Device [syz1] on syz0 [ 131.352124][ T7156] lo speed is unknown, defaulting to 1000 [ 131.359110][ T7156] lo speed is unknown, defaulting to 1000 [ 131.365890][ T7156] lo speed is unknown, defaulting to 1000 [ 131.367056][ T7150] Alternate GPT is invalid, using primary GPT. [ 131.379205][ T7150] loop2: p2 p3 p7 [ 131.379526][ T7156] lo speed is unknown, defaulting to 1000 [ 131.389640][ T7156] lo speed is unknown, defaulting to 1000 [ 131.491576][ T7169] netlink: 'syz.2.1209': attribute type 3 has an invalid length. [ 131.560025][ T7176] FAULT_INJECTION: forcing a failure. [ 131.560025][ T7176] name failslab, interval 1, probability 0, space 0, times 0 [ 131.573304][ T7176] CPU: 1 UID: 0 PID: 7176 Comm: syz.1.1218 Not tainted syzkaller #0 PREEMPT(voluntary) [ 131.573364][ T7176] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 131.573383][ T7176] Call Trace: [ 131.573391][ T7176] [ 131.573401][ T7176] __dump_stack+0x1d/0x30 [ 131.573450][ T7176] dump_stack_lvl+0xe8/0x140 [ 131.573472][ T7176] dump_stack+0x15/0x1b [ 131.573495][ T7176] should_fail_ex+0x265/0x280 [ 131.573540][ T7176] ? audit_log_d_path+0x8d/0x150 [ 131.573613][ T7176] should_failslab+0x8c/0xb0 [ 131.573655][ T7176] __kmalloc_cache_noprof+0x4c/0x4a0 [ 131.573698][ T7176] audit_log_d_path+0x8d/0x150 [ 131.573725][ T7176] audit_log_d_path_exe+0x42/0x70 [ 131.573749][ T7176] audit_log_task+0x1e9/0x250 [ 131.573856][ T7176] ? kstrtouint+0x76/0xc0 [ 131.573899][ T7176] audit_seccomp+0x61/0x100 [ 131.573931][ T7176] ? __seccomp_filter+0x82d/0x1250 [ 131.574008][ T7176] __seccomp_filter+0x83e/0x1250 [ 131.574150][ T7176] ? _raw_spin_unlock+0x26/0x50 [ 131.574185][ T7176] __secure_computing+0x82/0x150 [ 131.574321][ T7176] syscall_trace_enter+0xcf/0x1e0 [ 131.574355][ T7176] do_syscall_64+0xac/0x200 [ 131.574405][ T7176] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 131.574469][ T7176] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 131.574491][ T7176] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.574520][ T7176] RIP: 0033:0x7f10b376eec9 [ 131.574582][ T7176] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 131.574601][ T7176] RSP: 002b:00007f10b21d7038 EFLAGS: 00000246 ORIG_RAX: 000000000000010c [ 131.574620][ T7176] RAX: ffffffffffffffda RBX: 00007f10b39c5fa0 RCX: 00007f10b376eec9 [ 131.574636][ T7176] RDX: 0000000000000080 RSI: 0000200000000400 RDI: ffffffffffffffff [ 131.574659][ T7176] RBP: 00007f10b21d7090 R08: 0000000000000000 R09: 0000000000000000 [ 131.574676][ T7176] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 131.574705][ T7176] R13: 00007f10b39c6038 R14: 00007f10b39c5fa0 R15: 00007ffcf0acece8 [ 131.574730][ T7176] [ 131.946586][ T7183] loop3: detected capacity change from 0 to 512 [ 131.955568][ T7183] EXT4-fs (loop3): orphan cleanup on readonly fs [ 131.963231][ T7183] EXT4-fs error (device loop3): ext4_xattr_inode_iget:446: comm syz.3.1222: error while reading EA inode 32 err=-116 [ 131.976836][ T7183] EXT4-fs (loop3): Remounting filesystem read-only [ 131.983921][ T7183] EXT4-fs warning (device loop3): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 131.994727][ T7183] EXT4-fs (loop3): 1 orphan inode deleted [ 132.001935][ T7183] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 132.014893][ T7183] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.145545][ T3412] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 132.162007][ T3412] hid-generic 0000:0000:0000.0024: hidraw0: HID v0.00 Device [syz1] on syz0 [ 132.207021][ T7204] FAULT_INJECTION: forcing a failure. [ 132.207021][ T7204] name failslab, interval 1, probability 0, space 0, times 0 [ 132.220549][ T7204] CPU: 0 UID: 0 PID: 7204 Comm: syz.5.1229 Not tainted syzkaller #0 PREEMPT(voluntary) [ 132.220619][ T7204] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 132.220634][ T7204] Call Trace: [ 132.220641][ T7204] [ 132.220650][ T7204] __dump_stack+0x1d/0x30 [ 132.220672][ T7204] dump_stack_lvl+0xe8/0x140 [ 132.220693][ T7204] dump_stack+0x15/0x1b [ 132.220714][ T7204] should_fail_ex+0x265/0x280 [ 132.220750][ T7204] should_failslab+0x8c/0xb0 [ 132.220779][ T7204] kmem_cache_alloc_noprof+0x50/0x480 [ 132.220807][ T7204] ? skb_clone+0x151/0x1f0 [ 132.220889][ T7204] skb_clone+0x151/0x1f0 [ 132.220983][ T7204] __netlink_deliver_tap+0x2c9/0x500 [ 132.221018][ T7204] netlink_unicast+0x66b/0x690 [ 132.221077][ T7204] netlink_sendmsg+0x58b/0x6b0 [ 132.221122][ T7204] ? __pfx_netlink_sendmsg+0x10/0x10 [ 132.221153][ T7204] __sock_sendmsg+0x142/0x180 [ 132.221173][ T7204] ____sys_sendmsg+0x31e/0x4e0 [ 132.221207][ T7204] ___sys_sendmsg+0x17b/0x1d0 [ 132.221301][ T7204] __x64_sys_sendmsg+0xd4/0x160 [ 132.221394][ T7204] x64_sys_call+0x191e/0x3000 [ 132.221418][ T7204] do_syscall_64+0xd2/0x200 [ 132.221442][ T7204] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 132.221472][ T7204] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 132.221500][ T7204] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.221524][ T7204] RIP: 0033:0x7f365ce8eec9 [ 132.221539][ T7204] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 132.221559][ T7204] RSP: 002b:00007f365b8ef038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 132.221580][ T7204] RAX: ffffffffffffffda RBX: 00007f365d0e5fa0 RCX: 00007f365ce8eec9 [ 132.221594][ T7204] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000003 [ 132.221629][ T7204] RBP: 00007f365b8ef090 R08: 0000000000000000 R09: 0000000000000000 [ 132.221641][ T7204] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 132.221688][ T7204] R13: 00007f365d0e6038 R14: 00007f365d0e5fa0 R15: 00007ffff1600f38 [ 132.221709][ T7204] [ 132.227417][ T7198] loop1: detected capacity change from 0 to 512 [ 132.257459][ T7206] loop5: detected capacity change from 0 to 512 [ 132.262661][ T7198] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 132.288603][ T7206] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 132.293221][ T7198] EXT4-fs (loop1): orphan cleanup on readonly fs [ 132.297949][ T7206] ext4 filesystem being mounted at /92/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 132.307966][ T7198] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:517: comm syz.1.1228: Block bitmap for bg 0 marked uninitialized [ 132.506453][ T7198] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 132.515551][ T7198] EXT4-fs (loop1): 1 orphan inode deleted [ 132.521999][ T7198] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 132.565963][ T7198] ÿÿÿÿÿÿ: renamed from vlan1 (while UP) [ 132.571623][ T7190] loop2: detected capacity change from 0 to 764 [ 132.603092][ T7190] rock: directory entry would overflow storage [ 132.610792][ T7190] rock: sig=0x5245, size=8, remaining=5 [ 132.622002][ T7198] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.635390][ T5578] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.674021][ T7214] loop1: detected capacity change from 0 to 2048 [ 132.687832][ T7215] loop0: detected capacity change from 0 to 512 [ 132.696185][ T7215] EXT4-fs (loop0): orphan cleanup on readonly fs [ 132.697849][ T7218] program syz.5.1232 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 132.703564][ T7215] EXT4-fs error (device loop0): ext4_xattr_inode_iget:446: comm syz.0.1234: error while reading EA inode 32 err=-116 [ 132.728770][ T7214] Alternate GPT is invalid, using primary GPT. [ 132.735927][ T7214] loop1: p2 p3 p7 [ 132.739808][ T7215] EXT4-fs (loop0): Remounting filesystem read-only [ 132.748101][ T7215] EXT4-fs warning (device loop0): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 132.760100][ T7215] EXT4-fs (loop0): 1 orphan inode deleted [ 132.767050][ T7215] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 132.780002][ T7215] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.791746][ T7220] FAULT_INJECTION: forcing a failure. [ 132.791746][ T7220] name failslab, interval 1, probability 0, space 0, times 0 [ 132.804837][ T7220] CPU: 0 UID: 0 PID: 7220 Comm: syz.5.1235 Not tainted syzkaller #0 PREEMPT(voluntary) [ 132.804952][ T7220] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 132.804970][ T7220] Call Trace: [ 132.804978][ T7220] [ 132.804985][ T7220] __dump_stack+0x1d/0x30 [ 132.805020][ T7220] dump_stack_lvl+0xe8/0x140 [ 132.805088][ T7220] dump_stack+0x15/0x1b [ 132.805105][ T7220] should_fail_ex+0x265/0x280 [ 132.805178][ T7220] should_failslab+0x8c/0xb0 [ 132.805206][ T7220] kmem_cache_alloc_noprof+0x50/0x480 [ 132.805310][ T7220] ? dst_alloc+0xbd/0x100 [ 132.805427][ T7220] dst_alloc+0xbd/0x100 [ 132.805460][ T7220] ip_route_input_rcu+0x173b/0x1cd0 [ 132.805493][ T7220] ip_route_input_noref+0x5f/0x90 [ 132.805567][ T7220] ip_rcv_finish_core+0x315/0xb60 [ 132.805610][ T7220] ? iptable_mangle_hook+0x119/0x260 [ 132.805660][ T7220] ip_rcv_finish+0x100/0x1c0 [ 132.805698][ T7220] ip_rcv+0x62/0x140 [ 132.805746][ T7220] ? __pfx_ip_rcv_finish+0x10/0x10 [ 132.805785][ T7220] ? __pfx_ip_rcv+0x10/0x10 [ 132.805819][ T7220] __netif_receive_skb+0xff/0x270 [ 132.805938][ T7220] ? tun_rx_batched+0xc7/0x430 [ 132.806015][ T7220] netif_receive_skb+0x4b/0x2e0 [ 132.806058][ T7220] ? tun_rx_batched+0xc7/0x430 [ 132.806090][ T7220] tun_rx_batched+0xfc/0x430 [ 132.806119][ T7220] tun_get_user+0x1f35/0x26e0 [ 132.806222][ T7220] ? ref_tracker_alloc+0x1f2/0x2f0 [ 132.806353][ T7220] tun_chr_write_iter+0x15e/0x210 [ 132.806400][ T7220] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 132.806434][ T7220] vfs_write+0x52a/0x960 [ 132.806470][ T7220] ksys_write+0xda/0x1a0 [ 132.806502][ T7220] __x64_sys_write+0x40/0x50 [ 132.806592][ T7220] x64_sys_call+0x2802/0x3000 [ 132.806621][ T7220] do_syscall_64+0xd2/0x200 [ 132.806651][ T7220] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 132.806680][ T7220] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 132.806718][ T7220] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.806747][ T7220] RIP: 0033:0x7f365ce8d97f [ 132.806766][ T7220] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 132.806791][ T7220] RSP: 002b:00007f365b8ef000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 132.806815][ T7220] RAX: ffffffffffffffda RBX: 00007f365d0e5fa0 RCX: 00007f365ce8d97f [ 132.806832][ T7220] RDX: 000000000000002e RSI: 0000200000000000 RDI: 00000000000000c8 [ 132.806859][ T7220] RBP: 00007f365b8ef090 R08: 0000000000000000 R09: 0000000000000000 [ 132.806875][ T7220] R10: 000000000000002e R11: 0000000000000293 R12: 0000000000000001 [ 132.806932][ T7220] R13: 00007f365d0e6038 R14: 00007f365d0e5fa0 R15: 00007ffff1600f38 [ 132.806956][ T7220] [ 133.101538][ T7223] Option 'Í'M•O§±' to dns_resolver key: bad/missing value [ 133.114903][ T7221] netlink: 'syz.1.1233': attribute type 3 has an invalid length. [ 133.146859][ T7226] rdma_rxe: rxe_newlink: failed to add bond0 [ 133.155944][ T1036] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 133.170804][ T1036] hid-generic 0000:0000:0000.0025: hidraw0: HID v0.00 Device [syz1] on syz0 [ 133.190572][ T7233] loop2: detected capacity change from 0 to 512 [ 133.199106][ T7233] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 133.210335][ T7233] EXT4-fs (loop2): 1 truncate cleaned up [ 133.216991][ T7233] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 133.220733][ T7237] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1242'. [ 133.231079][ T7228] loop0: detected capacity change from 0 to 256 [ 133.249017][ T7228] msdos: Unknown parameter 'ÿÿ0x000000000000ee00' [ 133.276480][ T7243] loop3: detected capacity change from 0 to 512 [ 133.287750][ T7243] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 133.301110][ T7243] ext4 filesystem being mounted at /250/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 133.325670][ T7246] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1238'. [ 133.416647][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.436125][ T7250] ÿÿÿÿÿÿ: renamed from vlan1 (while UP) [ 133.891202][ T7261] Option 'Í'M•O§±' to dns_resolver key: bad/missing value [ 133.997995][ T7264] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1250'. [ 134.007655][ T7264] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1250'. [ 134.017058][ T7264] netlink: 'syz.5.1250': attribute type 4 has an invalid length. [ 134.062280][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.113530][ T7272] loop3: detected capacity change from 0 to 512 [ 134.146453][ T7272] EXT4-fs (loop3): orphan cleanup on readonly fs [ 134.154001][ T7272] EXT4-fs error (device loop3): ext4_xattr_inode_iget:446: comm syz.3.1255: error while reading EA inode 32 err=-116 [ 134.161572][ T7275] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1254'. [ 134.196356][ T7272] EXT4-fs (loop3): Remounting filesystem read-only [ 134.203609][ T7272] EXT4-fs warning (device loop3): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 134.204063][ T7278] bond0: (slave team0): Releasing backup interface [ 134.223428][ T7272] EXT4-fs (loop3): 1 orphan inode deleted [ 134.234299][ T7272] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 134.259337][ T7278] team_slave_0: left promiscuous mode [ 134.265088][ T7278] team_slave_1: left promiscuous mode [ 134.276772][ T7272] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.348752][ T7278] bridge_slave_0: left allmulticast mode [ 134.354473][ T7278] bridge_slave_0: left promiscuous mode [ 134.360608][ T7278] bridge0: port 1(bridge_slave_0) entered disabled state [ 134.438953][ T7278] bridge_slave_1: left allmulticast mode [ 134.444962][ T7278] bridge_slave_1: left promiscuous mode [ 134.450806][ T7278] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.461356][ T7284] loop2: detected capacity change from 0 to 2048 [ 134.475758][ T7278] bond0: (slave bond_slave_0): Releasing backup interface [ 134.484725][ T7278] bond_slave_0: left promiscuous mode [ 134.493481][ T7278] bond0: (slave bond_slave_1): Releasing backup interface [ 134.504439][ T7278] bond_slave_1: left promiscuous mode [ 134.516117][ T7284] Alternate GPT is invalid, using primary GPT. [ 134.523034][ T7284] loop2: p2 p3 p7 [ 134.531580][ T7278] team0: Port device team_slave_0 removed [ 134.551983][ T7278] team0: Port device team_slave_1 removed [ 134.560192][ T7278] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 134.568338][ T7278] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 134.583229][ T7278] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 134.591987][ T7278] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 134.611485][ T7278] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 134.612511][ T7286] netlink: 'syz.2.1258': attribute type 3 has an invalid length. [ 134.643759][ T6598] bond1: (slave macvlan2): speed changed to 0 on port 1 [ 134.702615][ T6598] bond1: (slave macvlan2): link status definitely down, disabling slave [ 134.745381][ T7292] Option 'Í'M•O§±' to dns_resolver key: bad/missing value [ 134.753709][ T7289] loop1: detected capacity change from 0 to 512 [ 134.821195][ T7289] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 134.833254][ T7289] EXT4-fs (loop1): orphan cleanup on readonly fs [ 134.840924][ T7289] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:517: comm syz.1.1269: Block bitmap for bg 0 marked uninitialized [ 134.854891][ T7289] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 134.864497][ T7289] EXT4-fs (loop1): 1 orphan inode deleted [ 134.871063][ T7289] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 134.873982][ T7296] vhci_hcd: invalid port number 96 [ 134.889165][ T7296] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 134.981998][ T29] kauditd_printk_skb: 832 callbacks suppressed [ 134.982016][ T29] audit: type=1326 audit(1760000910.171:6483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7287 comm="syz.1.1269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10b376eec9 code=0x7ffc0000 [ 135.016127][ T29] audit: type=1326 audit(1760000910.201:6484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7287 comm="syz.1.1269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f10b3770de7 code=0x7ffc0000 [ 135.041203][ T29] audit: type=1326 audit(1760000910.201:6485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7287 comm="syz.1.1269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f10b3770d5c code=0x7ffc0000 [ 135.064718][ T29] audit: type=1326 audit(1760000910.201:6486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7287 comm="syz.1.1269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f10b3770c94 code=0x7ffc0000 [ 135.089322][ T29] audit: type=1326 audit(1760000910.201:6487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7287 comm="syz.1.1269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f10b3770c94 code=0x7ffc0000 [ 135.125494][ T29] audit: type=1326 audit(1760000910.201:6488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7287 comm="syz.1.1269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f10b376db2a code=0x7ffc0000 [ 135.149480][ T29] audit: type=1326 audit(1760000910.231:6489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7287 comm="syz.1.1269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10b376eec9 code=0x7ffc0000 [ 135.174418][ T29] audit: type=1326 audit(1760000910.231:6490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7287 comm="syz.1.1269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10b376eec9 code=0x7ffc0000 [ 135.206235][ T7313] loop2: detected capacity change from 0 to 512 [ 135.218558][ T7289] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.230652][ T7313] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 135.244252][ T7313] ext4 filesystem being mounted at /261/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 135.306335][ T7318] loop1: detected capacity change from 0 to 2048 [ 135.306575][ T7313] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #2: block 3: comm syz.2.1267: lblock 8 mapped to illegal pblock 3 (length 26) [ 135.345331][ T7313] EXT4-fs (loop2): Remounting filesystem read-only [ 135.437677][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.517296][ T7318] Alternate GPT is invalid, using primary GPT. [ 135.523936][ T7318] loop1: p2 p3 p7 [ 135.552100][ T7322] netlink: 'syz.1.1270': attribute type 3 has an invalid length. [ 135.750880][ T7337] loop3: detected capacity change from 0 to 256 [ 135.757291][ T29] audit: type=1326 audit(1760000910.941:6491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7336 comm="syz.3.1276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d02b3eec9 code=0x7ffc0000 [ 135.781904][ T29] audit: type=1326 audit(1760000910.941:6492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7336 comm="syz.3.1276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f9d02b3eec9 code=0x7ffc0000 [ 135.806942][ T7337] msdos: Unknown parameter 'ÿÿ0x000000000000ee00' [ 135.872390][ T7341] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1276'. [ 135.881684][ T7341] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1276'. [ 135.915066][ T7343] loop2: detected capacity change from 0 to 164 [ 135.936308][ T7343] bio_check_eod: 2695 callbacks suppressed [ 135.936323][ T7343] syz.2.1278: attempt to access beyond end of device [ 135.936323][ T7343] loop2: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 135.961865][ T7345] loop3: detected capacity change from 0 to 512 [ 135.968639][ T7343] syz.2.1278: attempt to access beyond end of device [ 135.968639][ T7343] loop2: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 135.983927][ T7345] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 136.003349][ T7345] EXT4-fs (loop3): orphan cleanup on readonly fs [ 136.011755][ T7345] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:517: comm syz.3.1279: Block bitmap for bg 0 marked uninitialized [ 136.025803][ T7345] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 136.035027][ T7345] EXT4-fs (loop3): 1 orphan inode deleted [ 136.041597][ T7345] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 136.075232][ T7345] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.105271][ T7349] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1278'. [ 137.012395][ T7374] loop5: detected capacity change from 0 to 164 [ 137.021958][ T7374] iso9660: Corrupted directory entry in block 2 of inode 1792 [ 137.053384][ T7378] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1289'. [ 137.063929][ T7378] IPVS: Error connecting to the multicast addr [ 137.215047][ T7381] macvtap1: entered promiscuous mode [ 137.220914][ T7381] macvtap1: entered allmulticast mode [ 137.262213][ T7388] loop5: detected capacity change from 0 to 764 [ 137.288804][ T7381] dummy0: entered promiscuous mode [ 137.294681][ T7381] dummy0: entered allmulticast mode [ 137.301603][ T7381] team0: Device macvtap1 failed to register rx_handler [ 137.316445][ T7381] dummy0: left allmulticast mode [ 137.368367][ T7381] dummy0: left promiscuous mode [ 137.649291][ T7398] loop1: detected capacity change from 0 to 2048 [ 137.781347][ T7398] Alternate GPT is invalid, using primary GPT. [ 137.788360][ T7398] loop1: p2 p3 p7 [ 137.857242][ T3369] IPVS: starting estimator thread 0... [ 137.911224][ T7398] netlink: 'syz.1.1297': attribute type 3 has an invalid length. [ 137.945712][ T7404] IPVS: using max 2304 ests per chain, 115200 per kthread [ 138.130026][ T7410] loop3: detected capacity change from 0 to 2048 [ 138.180780][ T7410] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 138.201241][ T7419] ================================================================== [ 138.210427][ T7419] BUG: KCSAN: data-race in hrtimer_interrupt / print_cpu [ 138.217682][ T7419] [ 138.220598][ T7419] read-write to 0xffff888237d1b294 of 4 bytes by interrupt on cpu 1: [ 138.229306][ T7419] hrtimer_interrupt+0x70/0x460 [ 138.234612][ T7419] __sysvec_apic_timer_interrupt+0x5f/0x1d0 [ 138.241084][ T7419] sysvec_apic_timer_interrupt+0x6f/0x80 [ 138.248720][ T7419] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 138.255215][ T7419] finish_task_switch+0xb6/0x2b0 [ 138.260233][ T7419] __schedule+0x6b9/0xb30 [ 138.265049][ T7419] schedule+0x5f/0xd0 [ 138.269263][ T7419] schedule_timeout+0x53/0x170 [ 138.274715][ T7419] __skb_wait_for_more_packets+0x1fb/0x300 [ 138.280765][ T7419] skb_recv_datagram+0xe9/0x140 [ 138.286142][ T7419] isotp_recvmsg+0xa6/0x390 [ 138.290964][ T7419] sock_recvmsg+0x136/0x170 [ 138.295870][ T7419] __sys_recvfrom+0x122/0x1f0 [ 138.300691][ T7419] __x64_sys_recvfrom+0x76/0x90 [ 138.305872][ T7419] x64_sys_call+0x2f2f/0x3000 [ 138.311088][ T7419] do_syscall_64+0xd2/0x200 [ 138.315810][ T7419] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.322050][ T7419] [ 138.324679][ T7419] read to 0xffff888237d1b294 of 4 bytes by task 7419 on cpu 0: [ 138.332658][ T7419] print_cpu+0x338/0x660 [ 138.337177][ T7419] timer_list_show+0x107/0x170 [ 138.342305][ T7419] seq_read_iter+0x636/0x950 [ 138.347478][ T7419] proc_reg_read_iter+0x10d/0x180 [ 138.352871][ T7419] copy_splice_read+0x43f/0x660 [ 138.357931][ T7419] splice_direct_to_actor+0x26c/0x680 [ 138.363345][ T7419] do_splice_direct+0xda/0x150 [ 138.368423][ T7419] do_sendfile+0x380/0x650 [ 138.373591][ T7419] __x64_sys_sendfile64+0x105/0x150 [ 138.380103][ T7419] x64_sys_call+0x2bb4/0x3000 [ 138.384841][ T7419] do_syscall_64+0xd2/0x200 [ 138.389559][ T7419] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.396458][ T7419] [ 138.399504][ T7419] value changed: 0x00070985 -> 0x00070986 [ 138.405685][ T7419] [ 138.408029][ T7419] Reported by Kernel Concurrency Sanitizer on: [ 138.414717][ T7419] CPU: 0 UID: 0 PID: 7419 Comm: syz.0.1303 Not tainted syzkaller #0 PREEMPT(voluntary) [ 138.425013][ T7419] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 138.435842][ T7419] ================================================================== [ 138.843748][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.