last executing test programs: 5.894192173s ago: executing program 0 (id=322): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x1e1802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) pwritev(r0, &(0x7f0000000280), 0x0, 0xee, 0x4200008) 5.822543853s ago: executing program 0 (id=323): bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b702000000000000850000000135efde87"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() connect$unix(0xffffffffffffffff, 0x0, 0x0) r0 = eventfd2(0xffffffff, 0x1) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) close(0xffffffffffffffff) write$eventfd(r0, &(0x7f0000000080)=0xffffffff00000000, 0x8) read$eventfd(r0, &(0x7f0000000040), 0x8) 5.699706238s ago: executing program 0 (id=325): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) r3 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) write$binfmt_aout(r3, &(0x7f00000000c0)=ANY=[], 0x20) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x12, r4, 0x0) r5 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0xff, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x100002, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r6, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000001c0)=r5}, 0x20) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x13, 0x14, &(0x7f0000000300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1ff0000, 0x0, 0x0, 0x0, 0x7fffffff}, [@map_val={0x18, 0x8, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x8}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}, @printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xe3}}, @map_idx={0x18, 0x4, 0x5, 0x0, 0x7}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}]}, &(0x7f00000003c0)='GPL\x00', 0xfff, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x35, r3, 0x8, &(0x7f0000000600)={0x3, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, r8, 0x0, &(0x7f0000000680)=[r1, r0, r6, r1, r7, r7, 0xffffffffffffffff], 0x0, 0x10, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='rxrpc_recvmsg\x00', r9}, 0x18) r10 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r10, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x106) recvmsg$kcm(r10, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x100) r11 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r11, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) bind$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x10, 0x6, @remote}, 0x14) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=r0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r7, @ANYBLOB="0100000003f7ff000300008000"/28], 0x50) setsockopt$sock_int(r11, 0x1, 0x8, &(0x7f0000000200), 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="3800000002011d04000000000000000002000000240001801400018008000100e000000108000200e00000010c000280050001"], 0x38}}, 0x0) syz_clone(0xb44040, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x8, 0x80, 0x0, 0x4, 0x0, 0x6, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x0, 0x0, 0x3, 0xb, 0x0, 0x0, 0x0, 0x4, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_usb_connect$lan78xx(0x3, 0x3f, &(0x7f00000002c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) 4.230409057s ago: executing program 3 (id=333): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x1e1802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) pwritev(r0, &(0x7f0000000280), 0x0, 0xee, 0x4200008) 4.154767667s ago: executing program 3 (id=334): truncate(&(0x7f0000000040)='./file0\x00', 0x0) 4.154250097s ago: executing program 3 (id=335): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r2 = syz_open_dev$sg(&(0x7f00000003c0), 0x4a38, 0x101102) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f0000000040)={0x0, 0x0, 0xffb8}) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="cf"], 0x4c}}, 0x20048051) ptrace(0x10, 0x0) ptrace$setregs(0xd, 0x0, 0x20000000002, &(0x7f0000000040)) ptrace$cont(0x21, 0x0, 0x80000001, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000001c40)={0x14, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="2c6f624a5f726f6c653d80006173682ca8ea26de004d22080834ec21408c1cbd571f6191519244adb50f367988fb2727cc32238fac4fbdc332b1719e340000000004f23246a8d5ec9c21dd657ad6d91f895438297d5da5a51f2163a3aefc9a13608114683a6be3371b75c707284241970a8159ba2bec7414c90ddbdd8218b3ce593b992196b6a3cd4bc2bb6754b654ba0fa3821193cdf866d2630a60f040d612f358308919f24bccb430ad754832a2402e3b7240e7eec9ad32c333f3dca7ab50db1f0415a70ece849f03e8441be2c1c54491c7428bbfdcea758eb7de27821cbc79a45c11b52ff4b704fefa01987a8fa8be2756414f8d10f022600574c68d130d46301ff52bbd08cf61190205"], 0x25, 0x359, &(0x7f0000000bc0)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=ANY=[@ANYBLOB="540000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="15020000fe0f00001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="080004"], 0x54}, 0x1, 0xba01, 0x0, 0x11}, 0x4000000) 3.861444315s ago: executing program 3 (id=344): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r1) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r2, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYRES32=r1, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000"], &(0x7f0000000000)='GPL\x00', 0x1c, 0x0, 0x0, 0x40f00, 0x8}, 0x94) syz_usb_connect(0x2, 0x24, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r3, 0x400455c8, 0x0) ioctl$TIOCVHANGUP(r3, 0x5437, 0x2000000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r5) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) socket$unix(0x1, 0x2, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r8, 0x0, 0x7}, 0x18) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803002e000b12d25a80648c2594f90124fc60100c03400a000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x240080c1}, 0x0) 3.202288859s ago: executing program 0 (id=346): truncate(0x0, 0x0) 3.164377954s ago: executing program 0 (id=347): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r1) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r2, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x13, 0x0, &(0x7f0000000000)='GPL\x00', 0x1c, 0x0, 0x0, 0x40f00, 0x8}, 0x94) syz_usb_connect(0x2, 0x24, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r3, 0x400455c8, 0x0) ioctl$TIOCVHANGUP(r3, 0x5437, 0x2000000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) close(0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) socket$unix(0x1, 0x2, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r7, 0x0, 0x7}, 0x18) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803002e000b12d25a80648c2594f90124fc60100c03400a000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x7, 0x6361, 0x5, 0xffffffff, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x240080c1}, 0x0) 2.689050335s ago: executing program 1 (id=349): bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) connect$unix(0xffffffffffffffff, 0x0, 0x0) r1 = eventfd2(0xffffffff, 0x1) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r2, 0x8) close(0xffffffffffffffff) write$eventfd(r1, &(0x7f0000000080)=0xffffffff00000000, 0x8) read$eventfd(r1, &(0x7f0000000040), 0x8) 2.57190782s ago: executing program 1 (id=350): socket$igmp(0x2, 0x3, 0x2) socket$inet_icmp_raw(0x2, 0x3, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x3, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300005500000085000000d000000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) socket$inet_sctp(0x2, 0x1, 0x84) prctl$PR_SET_NAME(0xf, 0x0) r0 = gettid() sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x10) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) read$ptp(r1, 0x0, 0x0) timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r2, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x0, 0x7ffc0001}]}) readahead(0xffffffffffffffff, 0x101, 0x5) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000fffffffb00000000000000", @ANYRESOCT=r1, @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x7, 0x0, 0x7fc00100}]}) socket$kcm(0x29, 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r3, 0xc0182101, &(0x7f0000000080)={0x0, 0x1, 0x6}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000000380)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f0000000240)={r4, 0x1, r3, 0x6}) 1.767865894s ago: executing program 1 (id=354): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f"], 0x50) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000580)='/sys/power/image_size', 0x1e32c1, 0x14a) pause() timer_create(0x7, &(0x7f00000000c0)={0x0, 0x12}, &(0x7f0000000280)) r0 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setsig(r0, 0xa, 0x13) fcntl$setlease(r0, 0x400, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) 1.571263969s ago: executing program 2 (id=355): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./bus\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x77f, &(0x7f0000000600)="$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") r0 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0xfffffdd6}], 0x1, 0x9c00, 0x0, 0x3) 1.497834818s ago: executing program 2 (id=356): openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x102) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000c500000001f0ffff95"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000400)='kfree\x00', r0, 0x0, 0x4}, 0x18) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000007bc0)=ANY=[@ANYBLOB="280000002000010000000000fbdbdf270a00000008000000000000000c001400", @ANYRES32], 0x28}, 0x1, 0x0, 0x0, 0x4040010}, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) ioctl$USBDEVFS_REAPURBNDELAY(r2, 0x4004550c, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000100b70400000000000085000000c300000095"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8ff20c2c10f0093d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='rxrpc_local\x00', r4, 0x0, 0x80000001}, 0x18) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000006, 0x31, 0xffffffffffffffff, 0xd0fb8000) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./bus\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x77f, &(0x7f0000000600)="$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") r6 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) pwritev2(r6, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0xfffffdd6}], 0x1, 0x9c00, 0x0, 0x3) 1.262422878s ago: executing program 2 (id=357): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0b00000005000000010001000900000001"], 0x48) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3, &(0x7f0000000080)=0x9, 0x8, 0x0) mbind(&(0x7f00005f7000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x2, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x2, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="18080000000400200000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000022007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x10) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_MADVISE={0x19, 0x63, 0x0, 0x0, 0x0, &(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xe, 0x1}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x47f6, 0x80ffff, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x48, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x9) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r2, &(0x7f0000000380)={0xa, 0x4e21, 0xfffffffe, @remote, 0x3}, 0x1c) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f00000000c0)}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000040000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) msgrcv(0x0, 0x0, 0x0, 0x2, 0x2000) r4 = socket$igmp(0x2, 0x3, 0x2) ioctl$SIOCGETVIFCNT(r4, 0x89e0, &(0x7f0000000240)) write$binfmt_misc(r2, &(0x7f0000000100), 0xfdef) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x10000800) socket$nl_netfilter(0x10, 0x3, 0xc) mq_open(&(0x7f0000000000)='batadv_slave_1\x00', 0x8c2, 0x34, 0x0) 1.230529752s ago: executing program 4 (id=358): truncate(0x0, 0x0) 1.212261655s ago: executing program 4 (id=359): bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) timer_create(0x7, &(0x7f00000000c0)={0x0, 0x12}, &(0x7f0000000280)) r0 = open(0x0, 0x60840, 0x0) fcntl$setsig(r0, 0xa, 0x13) fcntl$setlease(r0, 0x400, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) 1.210841335s ago: executing program 3 (id=360): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) r1 = signalfd4(0xffffffffffffffff, &(0x7f00000008c0), 0x8, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f00000029c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYRESHEX=r1], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0xffffffffffffffd9) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002d40)) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff, 0x6}) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa4000000", @ANYRES32, @ANYBLOB="0000000000000000b7050000080000a8c5000000a5000000180100002020640500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b300000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x35, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={0x0, 0x0, 0x35, 0x0, 0x1}, 0x28) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="59bb28bd70000100000001000000080003"], 0x1c}, 0x1, 0x0, 0x0, 0x400c080}, 0x24048840) 1.184427208s ago: executing program 4 (id=361): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x16, 0x6, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000140)={0x0, 0xbfd3, 0x2080, 0x0, 0x0, "8100e1c8e80b598c36ff000800"}) r5 = syz_open_pts(r4, 0x141601) write(r5, &(0x7f0000000000)="d5", 0xfffffedf) close_range(r3, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000e40)={&(0x7f0000000400)='xen_cpu_write_gdt_entry\x00', r2, 0x0, 0x6}, 0x65) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0), 0x4) clock_gettime(0x0, &(0x7f0000001780)={0x0, 0x0}) recvmmsg(r3, &(0x7f0000004c80)=[{{&(0x7f0000000380)=@ieee802154={0x24, @long}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000500)=""/171, 0xab}, {&(0x7f00000005c0)=""/234, 0xea}, {&(0x7f0000000280)=""/43, 0x2b}], 0x3}, 0x2646}, {{&(0x7f00000006c0)=@rc={0x1f, @fixed}, 0x80, &(0x7f0000000ec0)=[{&(0x7f0000000740)=""/78, 0x4e}, {&(0x7f00000007c0)=""/180, 0xb4}, {&(0x7f0000000c80)=""/254, 0xfe}, {&(0x7f0000001880)=""/4096, 0x1000}, {&(0x7f0000000400)}, {&(0x7f0000000880)=""/159, 0x9f}, {&(0x7f0000000d80)=""/145, 0x91}, {&(0x7f0000000e40)}], 0x8, &(0x7f0000000f80)=""/93, 0x5d}, 0x3}, {{&(0x7f0000001000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x80, &(0x7f0000001480)=[{&(0x7f0000001080)=""/88, 0x58}, {&(0x7f0000001100)=""/224, 0xe0}, {&(0x7f0000001200)=""/105, 0x69}, {&(0x7f0000000200)=""/32, 0x20}, {&(0x7f00000012c0)=""/200, 0xc8}, {&(0x7f00000013c0)=""/133, 0x85}], 0x6, &(0x7f0000001500)=""/251, 0xfb}, 0x5}, {{&(0x7f0000001600)=@generic, 0x80, &(0x7f0000001740)=[{&(0x7f0000001680)=""/172, 0xac}, {&(0x7f0000003c80)=""/4096, 0x1000}, {&(0x7f0000002880)=""/233, 0xe9}], 0x3}, 0x6}], 0x4, 0x2, &(0x7f0000002980)={r6, r7+60000000}) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0xc48f19553f326cca, 0x0) ioctl$PPPIOCSACTIVE(r8, 0x40107446, &(0x7f0000000100)={0x4, &(0x7f00000000c0)=[{0x8001, 0x3, 0x25, 0x7342}, {0x0, 0x9, 0x3, 0x8}, {0x8, 0x4, 0x10, 0x7}, {0x5, 0x9f, 0x4, 0x9}]}) setreuid(0x0, 0xee01) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000002a00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) 972.412955ms ago: executing program 4 (id=362): bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b702000000000000850000000135efde87"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) connect$unix(0xffffffffffffffff, 0x0, 0x0) r0 = eventfd2(0xffffffff, 0x1) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) close(0xffffffffffffffff) write$eventfd(r0, &(0x7f0000000080)=0xffffffff00000000, 0x8) read$eventfd(r0, &(0x7f0000000040), 0x8) 918.530092ms ago: executing program 1 (id=363): bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000440)='kfree\x00', 0xffffffffffffffff, 0x0, 0x5}, 0x18) r0 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x1a) flock(r0, 0x5) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x10a) flock(r1, 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) flock(r2, 0x2) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18020000ffffffff0000000000000000850000007d0000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000080b703000000000000a50000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000009007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x10000, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r4 = epoll_create(0x5) mq_notify(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x2b, 0x1, @thr={0x0, 0x0}}) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, 0xffffffffffffffff, &(0x7f0000000000)={0x10}) mq_open(&(0x7f0000000080)='eth0\x00#~\x02\x00\x00\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfd\x05\x00\x00\x00\x00\x00\x80\x00\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94uu_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18A\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x05\x00\x00\x000\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xce\x00\x00\x00\xe8\vq+\xbb\xc7\xaf\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000030000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) mknod(&(0x7f0000000040)='./bus\x00', 0x800, 0xfffffffc) mount(&(0x7f0000000380)=@sg0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x8c3c88, 0x0) open(&(0x7f00000002c0)='./bus\x00', 0x42203, 0x13d) 860.01156ms ago: executing program 4 (id=364): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) r1 = signalfd4(0xffffffffffffffff, &(0x7f00000008c0), 0x8, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f00000029c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYRESHEX=r1], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0xffffffffffffffd9) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002d40)) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff, 0x6}) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="02000000040000000800000001000000800000009efad9251a19d76d2abaeb731ffa35404e0d6451fd9d256872d9b17561e18ac6af73f1f60af974485d307b12c894de9cfadf14fd9438173d7ee049b1d7f269556bd95a7626956660aacf4e8aff12f24c595b37166e1a8b9fe555a9a44b2912a3ae8dc8049fe18ee9800d7d26d9d1e05b398b639fbf34ecf4c801c42fb5789912e02b7ac6cf98abfd23fb22a735c7a06f86af608c9369bc5837312cd6dfdf32", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7050000080000a8c5000000a5000000180100002020640500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b300000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x35, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="59bb28bd70000100000001000000080003"], 0x1c}, 0x1, 0x0, 0x0, 0x400c080}, 0x24048840) 462.768121ms ago: executing program 0 (id=365): openat$sysfs(0xffffffffffffff9c, &(0x7f0000000580)='/sys/power/image_size', 0x1e32c1, 0x14a) pause() timer_create(0x7, &(0x7f00000000c0)={0x0, 0x12}, &(0x7f0000000280)) r0 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setlease(r0, 0x400, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) 398.495199ms ago: executing program 2 (id=366): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYRES64=r0], 0x168}}, 0x20050800) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x1, 0x4, 0xdd, 0xa, 0x0, 0xffffffffffffffff, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r1}, &(0x7f0000000300), &(0x7f00000002c0)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x10) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x20d00, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) acct(&(0x7f0000000040)='./file0\x00') 372.458603ms ago: executing program 2 (id=367): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYRES64=r0], 0x168}}, 0x20050800) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x1, 0x4, 0xdd, 0xa, 0x0, 0xffffffffffffffff, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r1}, &(0x7f0000000300), &(0x7f00000002c0)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x10) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x20d00, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) acct(&(0x7f0000000040)='./file0\x00') 350.061276ms ago: executing program 3 (id=368): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f000007"], 0x50) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000580)='/sys/power/image_size', 0x1e32c1, 0x14a) pwritev(r1, &(0x7f0000000000)=[{&(0x7f0000000080)='\x00', 0x1}], 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f0000000800)=ANY=[@ANYRES16=r0, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x63, 0xcd, 0x0, 0x0, 0x0, 0x8, 0x167c7d41863e2720, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={&(0x7f0000000100), 0xa}, 0x0, 0x0, 0x103, 0x2, 0x2, 0xcb, 0xffff, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0xfff7ffffffffffff, r1, 0x1) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) pause() timer_create(0x7, &(0x7f00000000c0)={0x0, 0x12}, &(0x7f0000000280)) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2, 0x0, 0x40000000000000}, 0x18) socket$igmp6(0xa, 0x3, 0x3a) r3 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setsig(r3, 0xa, 0x13) fcntl$setlease(r3, 0x400, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) 334.627167ms ago: executing program 2 (id=369): r0 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x40000000000012d, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x17, &(0x7f0000000180)=0x4, 0x4) setsockopt$inet_int(r0, 0x0, 0x7, &(0x7f0000000140)=0x6, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x32, &(0x7f0000001140)=ANY=[@ANYBLOB="ffffffffffff0180c20000030800460000240000000000119078000000000000000044045e0000014e20000c900000000000"], 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0900000004000000e27f000001"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r3, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xe, 0x7fff0000}]}) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r6, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r6, 0x0, 0x30, &(0x7f00000012c0)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000007f00000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000002000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x290) close_range(r5, 0xffffffffffffffff, 0x0) 66.279522ms ago: executing program 1 (id=370): truncate(0x0, 0x0) 49.421674ms ago: executing program 4 (id=371): r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./bus\x00', 0x4040, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r2, &(0x7f0000000000)="96369aaedf5bf0661b28f674", 0xc) sendfile(r2, r1, 0x0, 0x3ffff) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r4}, 0x18) socket$inet6_tcp(0xa, 0x1, 0x0) sendfile(r2, r1, 0x0, 0x7ffff000) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1d, 0xc, &(0x7f0000000140)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000008c0)={&(0x7f0000000040)='virtio_transport_alloc_pkt\x00', r5}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x1, &(0x7f0000000100)=0xfffffffffffffffe, 0x112) r6 = creat(&(0x7f0000000180)='./file0\x00', 0x0) r7 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x8) r8 = getpgrp(0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={r8, r2, 0x0, 0x5, &(0x7f00000001c0)='@}#+\x00'}, 0x30) write$binfmt_format(r6, &(0x7f0000000100)='0\x00', 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r7, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x22, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='kfree\x00', r10}, 0x18) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYRES8], 0x1874}}, 0x0) ioctl$PPPIOCGIDLE32(r2, 0x8008743f, &(0x7f0000000300)) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x7) futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$BTRFS_IOC_DEV_REPLACE(r10, 0xca289435, &(0x7f0000002000)={0x2, 0x52, @status={[0x1, 0xb5, 0xc, 0x45236641, 0x4, 0xffffffffffffff01]}, [0x80000000, 0x8ec3, 0x45b5, 0x1, 0x8, 0x2, 0x6, 0x6, 0x8, 0x7fffffffffffffff, 0x1, 0x1e, 0x8, 0x1, 0x4, 0x7, 0xb00000000000, 0x9, 0x9, 0x0, 0x3, 0x5, 0x6, 0xfffffffffffffff7, 0xfffffffffffffbff, 0x9, 0x1, 0xfffffffffffffff8, 0x3, 0x8, 0x6, 0x611b80000, 0xffff, 0x14, 0x1ff, 0x0, 0x4, 0x6, 0x67a8, 0x2, 0x9, 0x7, 0x7f, 0x6, 0x5, 0x8, 0x8, 0x8, 0x1, 0x3ff, 0x0, 0x4, 0x7, 0x3, 0xfffffffffffffffb, 0x0, 0x7fffffffffffffff, 0xfffffffffffffffc, 0x4, 0x4, 0x0, 0x8, 0x2, 0x5]}) 0s ago: executing program 1 (id=372): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f0000"], 0x50) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000580)='/sys/power/image_size', 0x1e32c1, 0x14a) pause() timer_create(0x7, &(0x7f00000000c0)={0x0, 0x12}, &(0x7f0000000280)) r0 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setsig(r0, 0xa, 0x13) fcntl$setlease(r0, 0x400, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.195' (ED25519) to the list of known hosts. [ 33.815912][ T29] audit: type=1400 audit(1768585227.271:62): avc: denied { mounton } for pid=3305 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 33.838949][ T29] audit: type=1400 audit(1768585227.291:63): avc: denied { mount } for pid=3305 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 33.841224][ T3305] cgroup: Unknown subsys name 'net' [ 33.866703][ T29] audit: type=1400 audit(1768585227.321:64): avc: denied { unmount } for pid=3305 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 34.043102][ T3305] cgroup: Unknown subsys name 'cpuset' [ 34.049301][ T3305] cgroup: Unknown subsys name 'rlimit' [ 34.180610][ T29] audit: type=1400 audit(1768585227.631:65): avc: denied { setattr } for pid=3305 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 34.208642][ T29] audit: type=1400 audit(1768585227.641:66): avc: denied { create } for pid=3305 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 34.229166][ T29] audit: type=1400 audit(1768585227.641:67): avc: denied { write } for pid=3305 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 34.249607][ T29] audit: type=1400 audit(1768585227.641:68): avc: denied { read } for pid=3305 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 34.269986][ T29] audit: type=1400 audit(1768585227.651:69): avc: denied { mounton } for pid=3305 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 34.285702][ T3307] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 34.294867][ T29] audit: type=1400 audit(1768585227.651:70): avc: denied { mount } for pid=3305 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 34.326708][ T29] audit: type=1400 audit(1768585227.771:71): avc: denied { relabelto } for pid=3307 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 34.382120][ T3305] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 36.318869][ T3316] chnl_net:caif_netlink_parms(): no params data found [ 36.370339][ T3324] chnl_net:caif_netlink_parms(): no params data found [ 36.420109][ T3315] chnl_net:caif_netlink_parms(): no params data found [ 36.464052][ T3316] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.471153][ T3316] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.478407][ T3316] bridge_slave_0: entered allmulticast mode [ 36.484926][ T3316] bridge_slave_0: entered promiscuous mode [ 36.491301][ T3317] chnl_net:caif_netlink_parms(): no params data found [ 36.500201][ T3318] chnl_net:caif_netlink_parms(): no params data found [ 36.521827][ T3316] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.529030][ T3316] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.536243][ T3316] bridge_slave_1: entered allmulticast mode [ 36.542869][ T3316] bridge_slave_1: entered promiscuous mode [ 36.579327][ T3324] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.586441][ T3324] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.593720][ T3324] bridge_slave_0: entered allmulticast mode [ 36.600117][ T3324] bridge_slave_0: entered promiscuous mode [ 36.621459][ T3324] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.628772][ T3324] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.635930][ T3324] bridge_slave_1: entered allmulticast mode [ 36.642549][ T3324] bridge_slave_1: entered promiscuous mode [ 36.655250][ T3316] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.680601][ T3316] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.699490][ T3315] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.706604][ T3315] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.713983][ T3315] bridge_slave_0: entered allmulticast mode [ 36.720598][ T3315] bridge_slave_0: entered promiscuous mode [ 36.740265][ T3324] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.750084][ T3315] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.757282][ T3315] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.764512][ T3315] bridge_slave_1: entered allmulticast mode [ 36.770906][ T3315] bridge_slave_1: entered promiscuous mode [ 36.793055][ T3324] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.808423][ T3316] team0: Port device team_slave_0 added [ 36.819072][ T3317] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.826214][ T3317] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.833331][ T3317] bridge_slave_0: entered allmulticast mode [ 36.839819][ T3317] bridge_slave_0: entered promiscuous mode [ 36.856913][ T3316] team0: Port device team_slave_1 added [ 36.862645][ T3318] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.869740][ T3318] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.876908][ T3318] bridge_slave_0: entered allmulticast mode [ 36.883415][ T3318] bridge_slave_0: entered promiscuous mode [ 36.889914][ T3317] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.897190][ T3317] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.904621][ T3317] bridge_slave_1: entered allmulticast mode [ 36.911275][ T3317] bridge_slave_1: entered promiscuous mode [ 36.923814][ T3315] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.937706][ T3318] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.944838][ T3318] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.951996][ T3318] bridge_slave_1: entered allmulticast mode [ 36.958478][ T3318] bridge_slave_1: entered promiscuous mode [ 36.976423][ T3324] team0: Port device team_slave_0 added [ 36.983181][ T3315] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.008020][ T3324] team0: Port device team_slave_1 added [ 37.018668][ T3316] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.025663][ T3316] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.051603][ T3316] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.063676][ T3318] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.073844][ T3317] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.098724][ T3316] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.105718][ T3316] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.131767][ T3316] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.143645][ T3318] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.153778][ T3317] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.163335][ T3324] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.170282][ T3324] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.196310][ T3324] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.207866][ T3315] team0: Port device team_slave_0 added [ 37.213734][ T3324] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.220706][ T3324] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.246724][ T3324] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.270422][ T3315] team0: Port device team_slave_1 added [ 37.296291][ T3318] team0: Port device team_slave_0 added [ 37.302844][ T3317] team0: Port device team_slave_0 added [ 37.320155][ T3318] team0: Port device team_slave_1 added [ 37.333609][ T3317] team0: Port device team_slave_1 added [ 37.339533][ T3315] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.346551][ T3315] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.372504][ T3315] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.404696][ T3315] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.411697][ T3315] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.437688][ T3315] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.456256][ T3316] hsr_slave_0: entered promiscuous mode [ 37.462491][ T3316] hsr_slave_1: entered promiscuous mode [ 37.483280][ T3324] hsr_slave_0: entered promiscuous mode [ 37.489257][ T3324] hsr_slave_1: entered promiscuous mode [ 37.495304][ T3324] debugfs: 'hsr0' already exists in 'hsr' [ 37.501025][ T3324] Cannot create hsr debugfs directory [ 37.507079][ T3318] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.514171][ T3318] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.540216][ T3318] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.551287][ T3317] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.558283][ T3317] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.584212][ T3317] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.595501][ T3317] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.602491][ T3317] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.628429][ T3317] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.641308][ T3318] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.648281][ T3318] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.674444][ T3318] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.729066][ T3315] hsr_slave_0: entered promiscuous mode [ 37.735350][ T3315] hsr_slave_1: entered promiscuous mode [ 37.741334][ T3315] debugfs: 'hsr0' already exists in 'hsr' [ 37.747155][ T3315] Cannot create hsr debugfs directory [ 37.765299][ T3318] hsr_slave_0: entered promiscuous mode [ 37.771322][ T3318] hsr_slave_1: entered promiscuous mode [ 37.777345][ T3318] debugfs: 'hsr0' already exists in 'hsr' [ 37.783112][ T3318] Cannot create hsr debugfs directory [ 37.804281][ T3317] hsr_slave_0: entered promiscuous mode [ 37.810387][ T3317] hsr_slave_1: entered promiscuous mode [ 37.816300][ T3317] debugfs: 'hsr0' already exists in 'hsr' [ 37.822087][ T3317] Cannot create hsr debugfs directory [ 38.021015][ T3316] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 38.030005][ T3316] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 38.041273][ T3316] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 38.053059][ T3316] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 38.069464][ T3317] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 38.078915][ T3317] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 38.088403][ T3317] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 38.099754][ T3317] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 38.129809][ T3315] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 38.143370][ T3315] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 38.152141][ T3315] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 38.162212][ T3315] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 38.201097][ T3318] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 38.214052][ T3318] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 38.228422][ T3318] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 38.237706][ T3318] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 38.261427][ T3324] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 38.270678][ T3324] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 38.282101][ T3324] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 38.291530][ T3324] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 38.327686][ T3316] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.343266][ T3317] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.367407][ T3316] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.384770][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.391816][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.404971][ T3317] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.416971][ T3315] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.425941][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.433022][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.451575][ T3315] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.459965][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.467322][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.482972][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.490054][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.498411][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.505515][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.516917][ T3318] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.529587][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.536649][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.558266][ T3318] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.578685][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.585752][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.595949][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.603192][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.614545][ T3316] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 38.647822][ T3324] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.689040][ T3324] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.724908][ T899] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.732087][ T899] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.743709][ T899] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.750909][ T899] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.782178][ T3316] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.821057][ T3317] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.859265][ T3315] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.880402][ T3318] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.946257][ T3324] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.973661][ T3316] veth0_vlan: entered promiscuous mode [ 39.001782][ T3316] veth1_vlan: entered promiscuous mode [ 39.036522][ T3317] veth0_vlan: entered promiscuous mode [ 39.066424][ T3315] veth0_vlan: entered promiscuous mode [ 39.074268][ T3317] veth1_vlan: entered promiscuous mode [ 39.086443][ T3316] veth0_macvtap: entered promiscuous mode [ 39.094871][ T3315] veth1_vlan: entered promiscuous mode [ 39.101718][ T3318] veth0_vlan: entered promiscuous mode [ 39.111725][ T3316] veth1_macvtap: entered promiscuous mode [ 39.123937][ T3318] veth1_vlan: entered promiscuous mode [ 39.145984][ T3317] veth0_macvtap: entered promiscuous mode [ 39.160146][ T3317] veth1_macvtap: entered promiscuous mode [ 39.174436][ T3316] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.182689][ T3315] veth0_macvtap: entered promiscuous mode [ 39.195464][ T3316] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.203335][ T3318] veth0_macvtap: entered promiscuous mode [ 39.210200][ T3315] veth1_macvtap: entered promiscuous mode [ 39.220539][ T3318] veth1_macvtap: entered promiscuous mode [ 39.232760][ T37] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.243357][ T3317] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.251782][ T37] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.266012][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.281346][ T37] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.293005][ T3317] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.300599][ T37] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.310077][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.327705][ T29] kauditd_printk_skb: 13 callbacks suppressed [ 39.327722][ T29] audit: type=1400 audit(1768585232.781:85): avc: denied { mounton } for pid=3316 comm="syz-executor" path="/root/syzkaller.vQ1OyN/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 39.356278][ T3318] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.359875][ T29] audit: type=1400 audit(1768585232.781:86): avc: denied { mount } for pid=3316 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 39.369579][ T406] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.387352][ T29] audit: type=1400 audit(1768585232.781:87): avc: denied { mounton } for pid=3316 comm="syz-executor" path="/root/syzkaller.vQ1OyN/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 39.400204][ T3324] veth0_vlan: entered promiscuous mode [ 39.421188][ T29] audit: type=1400 audit(1768585232.781:88): avc: denied { mount } for pid=3316 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 39.446011][ T406] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.448790][ T29] audit: type=1400 audit(1768585232.781:89): avc: denied { mounton } for pid=3316 comm="syz-executor" path="/root/syzkaller.vQ1OyN/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 39.468122][ T3318] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.483848][ T29] audit: type=1400 audit(1768585232.791:90): avc: denied { mounton } for pid=3316 comm="syz-executor" path="/root/syzkaller.vQ1OyN/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=4723 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 39.518299][ T29] audit: type=1400 audit(1768585232.791:91): avc: denied { unmount } for pid=3316 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 39.541661][ T29] audit: type=1400 audit(1768585232.831:92): avc: denied { mounton } for pid=3316 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 39.564448][ T29] audit: type=1400 audit(1768585232.831:93): avc: denied { mount } for pid=3316 comm="syz-executor" name="/" dev="gadgetfs" ino=4726 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 39.588547][ T406] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.602677][ T3324] veth1_vlan: entered promiscuous mode [ 39.616496][ T3316] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 39.634900][ T406] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.664756][ T29] audit: type=1400 audit(1768585233.121:94): avc: denied { read write } for pid=3316 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 39.670794][ T3324] veth0_macvtap: entered promiscuous mode [ 39.725425][ T406] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.742689][ T406] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.751979][ T3324] veth1_macvtap: entered promiscuous mode [ 39.767494][ T3324] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.799462][ T31] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.810602][ T3324] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.824236][ T31] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.839552][ T31] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.863721][ T3499] loop3: detected capacity change from 0 to 512 [ 39.866365][ T31] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.875593][ T3499] ======================================================= [ 39.875593][ T3499] WARNING: The mand mount option has been deprecated and [ 39.875593][ T3499] and is ignored by this kernel. Remove the mand [ 39.875593][ T3499] option from the mount to silence this warning. [ 39.875593][ T3499] ======================================================= [ 39.915823][ T31] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.921728][ T3499] EXT4-fs: Ignoring removed oldalloc option [ 39.930533][ T3499] EXT4-fs: inline encryption not supported [ 39.941569][ T3499] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 39.952256][ T31] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.967304][ T3499] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.4: bg 0: block 64: padding at end of block bitmap is not set [ 39.971346][ T31] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.020392][ T31] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.033977][ T31] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.050351][ T31] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.059557][ T3499] EXT4-fs error (device loop3): ext4_acquire_dquot:6986: comm syz.3.4: Failed to acquire dquot type 0 [ 40.091814][ T3499] EXT4-fs (loop3): 1 truncate cleaned up [ 40.098167][ T3499] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.121527][ T3499] EXT4-fs error (device loop3): ext4_acquire_dquot:6986: comm syz.3.4: Failed to acquire dquot type 0 [ 40.211147][ T3530] wireguard0: entered promiscuous mode [ 40.216719][ T3530] wireguard0: entered allmulticast mode [ 40.252481][ T3499] syz.3.4 (3499) used greatest stack depth: 9168 bytes left [ 40.263805][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.391697][ T3556] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.663529][ T3564] loop1: detected capacity change from 0 to 512 [ 40.671609][ T3564] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 40.778874][ T3564] infiniband syz!: set active [ 40.783674][ T3564] infiniband syz!: added team_slave_0 [ 40.794821][ T3567] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 40.813049][ T3567] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 40.826174][ T3564] RDS/IB: syz!: added [ 40.830334][ T3564] smc: adding ib device syz! with port count 1 [ 40.836853][ T3564] smc: ib device syz! port 1 has no pnetid [ 41.227372][ T3574] netlink: 2 bytes leftover after parsing attributes in process `syz.4.15'. [ 41.241802][ T3574] 8021q: adding VLAN 0 to HW filter on device bond1 [ 41.254040][ T3574] netlink: 68 bytes leftover after parsing attributes in process `syz.4.15'. [ 41.498597][ T3586] loop4: detected capacity change from 0 to 1024 [ 41.505410][ T3586] EXT4-fs: Ignoring removed orlov option [ 41.524310][ T3586] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.787273][ T3605] loop2: detected capacity change from 0 to 1024 [ 41.796318][ T3605] EXT4-fs: Ignoring removed orlov option [ 41.817633][ T3556] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.819569][ T3605] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.912964][ T3324] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.081354][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.136514][ T3619] loop2: detected capacity change from 0 to 2048 [ 42.153689][ T3619] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.165902][ T3619] ext4 filesystem being mounted at /3/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 42.237338][ T3625] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.29: bg 0: block 345: padding at end of block bitmap is not set [ 42.251976][ T3625] EXT4-fs (loop2): Remounting filesystem read-only [ 42.282943][ T3619] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 42.429385][ T3629] netlink: 2 bytes leftover after parsing attributes in process `syz.0.31'. [ 42.445544][ T3629] 8021q: adding VLAN 0 to HW filter on device bond1 [ 42.454170][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.500692][ T3636] loop2: detected capacity change from 0 to 2048 [ 42.532445][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 42.538663][ T3559] Bluetooth: hci0: command 0x1003 tx timeout [ 42.576957][ T3643] geneve2: entered promiscuous mode [ 42.606270][ T3556] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.665658][ T3556] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.714095][ T125] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.727514][ T3648] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 42.768186][ T125] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.822408][ T125] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.848836][ T125] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.230386][ T3659] Cannot find del_set index 2 as target [ 43.432529][ T3668] program syz.0.42 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 43.464604][ T3668] loop0: detected capacity change from 0 to 256 [ 43.480807][ T3668] FAT-fs (loop0): Directory bread(block 64) failed [ 43.495044][ T3670] netlink: 2 bytes leftover after parsing attributes in process `syz.3.43'. [ 43.515472][ T3668] FAT-fs (loop0): Directory bread(block 65) failed [ 43.522398][ T3668] FAT-fs (loop0): Directory bread(block 66) failed [ 43.531642][ T3670] 8021q: adding VLAN 0 to HW filter on device bond1 [ 43.541288][ T3673] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 43.562513][ T3668] FAT-fs (loop0): Directory bread(block 67) failed [ 43.571796][ T3668] FAT-fs (loop0): Directory bread(block 68) failed [ 43.607936][ T3668] FAT-fs (loop0): Directory bread(block 69) failed [ 43.626809][ T3668] FAT-fs (loop0): Directory bread(block 70) failed [ 43.649118][ T3668] FAT-fs (loop0): Directory bread(block 71) failed [ 43.655926][ T3668] FAT-fs (loop0): Directory bread(block 72) failed [ 43.662931][ T3668] FAT-fs (loop0): Directory bread(block 73) failed [ 44.332321][ T29] kauditd_printk_skb: 3223 callbacks suppressed [ 44.332338][ T29] audit: type=1326 audit(1768585237.781:3315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3675 comm="syz.3.45" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f44675965e7 code=0x7ffc0000 [ 44.361808][ T29] audit: type=1326 audit(1768585237.781:3316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3675 comm="syz.3.45" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f446753b829 code=0x7ffc0000 [ 44.385495][ T29] audit: type=1326 audit(1768585237.781:3317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3675 comm="syz.3.45" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f446759f749 code=0x7ffc0000 [ 44.410097][ T29] audit: type=1326 audit(1768585237.791:3318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3681 comm="syz.0.47" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f918f2565e7 code=0x7ffc0000 [ 44.433323][ T29] audit: type=1326 audit(1768585237.791:3319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3681 comm="syz.0.47" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f918f1fb829 code=0x7ffc0000 [ 44.456765][ T29] audit: type=1326 audit(1768585237.791:3320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3681 comm="syz.0.47" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f918f25f749 code=0x7ffc0000 [ 44.480097][ T29] audit: type=1326 audit(1768585237.801:3321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3681 comm="syz.0.47" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f918f2565e7 code=0x7ffc0000 [ 44.503694][ T29] audit: type=1326 audit(1768585237.801:3322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3681 comm="syz.0.47" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f918f1fb829 code=0x7ffc0000 [ 44.527067][ T29] audit: type=1326 audit(1768585237.801:3323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3681 comm="syz.0.47" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f918f25f749 code=0x7ffc0000 [ 44.550399][ T29] audit: type=1326 audit(1768585237.811:3324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3681 comm="syz.0.47" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f918f2565e7 code=0x7ffc0000 [ 44.661288][ T3694] infiniband syz0: set active [ 44.666080][ T3694] infiniband syz0: added bond0 [ 44.693957][ T3694] RDS/IB: syz0: added [ 44.694716][ T3703] FAULT_INJECTION: forcing a failure. [ 44.694716][ T3703] name failslab, interval 1, probability 0, space 0, times 1 [ 44.697991][ T3694] smc: adding ib device syz0 with port count 1 [ 44.698008][ T3694] smc: ib device syz0 port 1 has no pnetid [ 44.710669][ T3703] CPU: 1 UID: 0 PID: 3703 Comm: wÞ£ÿ Not tainted syzkaller #0 PREEMPT(voluntary) [ 44.710762][ T3703] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 44.710816][ T3703] Call Trace: [ 44.710842][ T3703] [ 44.710863][ T3703] __dump_stack+0x1d/0x30 [ 44.710953][ T3703] dump_stack_lvl+0x95/0xd0 [ 44.711021][ T3703] dump_stack+0x15/0x1b [ 44.711039][ T3703] should_fail_ex+0x265/0x280 [ 44.711118][ T3703] should_failslab+0x8c/0xb0 [ 44.711180][ T3703] kmem_cache_alloc_noprof+0x69/0x4b0 [ 44.711257][ T3703] ? security_inode_alloc+0x37/0x100 [ 44.711323][ T3703] security_inode_alloc+0x37/0x100 [ 44.711513][ T3703] inode_init_always_gfp+0x4b7/0x500 [ 44.711646][ T3703] ? __pfx_hugetlbfs_alloc_inode+0x10/0x10 [ 44.711730][ T3703] alloc_inode+0x58/0x170 [ 44.711781][ T3703] new_inode+0x1d/0xe0 [ 44.711876][ T3703] hugetlbfs_get_inode+0x7b/0x370 [ 44.712000][ T3703] ? mutex_unlock+0x4f/0x90 [ 44.712098][ T3703] hugetlb_file_setup+0x192/0x3d0 [ 44.712339][ T3703] ksys_mmap_pgoff+0x157/0x310 [ 44.712424][ T3703] x64_sys_call+0x16bb/0x3000 [ 44.712494][ T3703] do_syscall_64+0xca/0x2b0 [ 44.712555][ T3703] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 44.712623][ T3703] RIP: 0033:0x7f918f25f749 [ 44.712722][ T3703] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 44.712779][ T3703] RSP: 002b:00007f918dcc7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 44.712831][ T3703] RAX: ffffffffffffffda RBX: 00007f918f4b5fa0 RCX: 00007f918f25f749 [ 44.712882][ T3703] RDX: 0000000003000002 RSI: 0000000000c00000 RDI: 0000200000400000 [ 44.712920][ T3703] RBP: 00007f918dcc7090 R08: ffffffffffffffff R09: 0000000000000000 [ 44.712967][ T3703] R10: 000000000005d031 R11: 0000000000000246 R12: 0000000000000001 [ 44.712999][ T3703] R13: 00007f918f4b6038 R14: 00007f918f4b5fa0 R15: 00007ffe63cd9688 [ 44.713124][ T3703] [ 45.136981][ T3712] loop2: detected capacity change from 0 to 1024 [ 45.144194][ T3712] EXT4-fs: Ignoring removed orlov option [ 45.161155][ T3714] program syz.3.58 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 45.173130][ T3712] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.195095][ T3714] loop3: detected capacity change from 0 to 256 [ 45.226092][ T3714] FAT-fs (loop3): Directory bread(block 64) failed [ 45.235712][ T3714] FAT-fs (loop3): Directory bread(block 65) failed [ 45.242280][ T3714] FAT-fs (loop3): Directory bread(block 66) failed [ 45.249363][ T3714] FAT-fs (loop3): Directory bread(block 67) failed [ 45.256252][ T3714] FAT-fs (loop3): Directory bread(block 68) failed [ 45.263020][ T3714] FAT-fs (loop3): Directory bread(block 69) failed [ 45.269631][ T3714] FAT-fs (loop3): Directory bread(block 70) failed [ 45.276222][ T3714] FAT-fs (loop3): Directory bread(block 71) failed [ 45.282881][ T3714] FAT-fs (loop3): Directory bread(block 72) failed [ 45.289402][ T3714] FAT-fs (loop3): Directory bread(block 73) failed [ 45.310391][ T3720] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.367326][ T125] Bluetooth: hci0: Frame reassembly failed (-84) [ 45.376598][ T3720] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.418985][ T3720] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.445217][ T3726] tipc: Started in network mode [ 45.450155][ T3726] tipc: Node identity 76b0a2598f8d, cluster identity 4711 [ 45.457459][ T3726] tipc: Enabled bearer , priority 0 [ 45.480084][ T3720] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.544092][ T37] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.563996][ T37] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.577317][ T37] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.580604][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.585745][ T37] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.724682][ T3731] netlink: 68 bytes leftover after parsing attributes in process `syz.0.62'. [ 45.983380][ T3735] netlink: 4 bytes leftover after parsing attributes in process `syz.4.64'. [ 45.992444][ T3735] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 46.002554][ T3735] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.013224][ T3735] bridge_slave_1 (unregistering): left allmulticast mode [ 46.020272][ T3735] bridge_slave_1 (unregistering): left promiscuous mode [ 46.027389][ T3735] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.106997][ T3739] loop4: detected capacity change from 0 to 1024 [ 46.113982][ T3739] EXT4-fs: Ignoring removed orlov option [ 46.126954][ T3739] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.156692][ T3324] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.582351][ T3483] tipc: Node number set to 4181566041 [ 46.774154][ T3766] netlink: 'syz.4.75': attribute type 1 has an invalid length. [ 46.799641][ T3768] loop4: detected capacity change from 0 to 128 [ 47.367045][ T3777] FAULT_INJECTION: forcing a failure. [ 47.367045][ T3777] name failslab, interval 1, probability 0, space 0, times 0 [ 47.379870][ T3777] CPU: 1 UID: 0 PID: 3777 Comm: syz.2.79 Not tainted syzkaller #0 PREEMPT(voluntary) [ 47.379903][ T3777] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 47.379918][ T3777] Call Trace: [ 47.379926][ T3777] [ 47.379935][ T3777] __dump_stack+0x1d/0x30 [ 47.379965][ T3777] dump_stack_lvl+0x95/0xd0 [ 47.380110][ T3777] dump_stack+0x15/0x1b [ 47.380132][ T3777] should_fail_ex+0x265/0x280 [ 47.380197][ T3777] should_failslab+0x8c/0xb0 [ 47.380215][ T3777] __kmalloc_cache_noprof+0x65/0x4c0 [ 47.380236][ T3777] ? alloc_fs_context+0x46/0x590 [ 47.380256][ T3777] alloc_fs_context+0x46/0x590 [ 47.380301][ T3777] fs_context_for_mount+0x22/0x30 [ 47.380318][ T3777] do_new_mount+0xea/0x6a0 [ 47.380334][ T3777] ? security_capable+0x83/0x90 [ 47.380390][ T3777] path_mount+0x4ab/0xb80 [ 47.380422][ T3777] ? user_path_at+0xbf/0x130 [ 47.380462][ T3777] __se_sys_mount+0x28c/0x2e0 [ 47.380479][ T3777] ? fput+0x8f/0xc0 [ 47.380508][ T3777] __x64_sys_mount+0x67/0x80 [ 47.380538][ T3777] x64_sys_call+0x2cca/0x3000 [ 47.380557][ T3777] do_syscall_64+0xca/0x2b0 [ 47.380574][ T3777] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 47.380616][ T3777] RIP: 0033:0x7f9524a4f749 [ 47.380633][ T3777] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 47.380654][ T3777] RSP: 002b:00007f95234b7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 47.380670][ T3777] RAX: ffffffffffffffda RBX: 00007f9524ca5fa0 RCX: 00007f9524a4f749 [ 47.380680][ T3777] RDX: 0000200000000040 RSI: 0000200000000000 RDI: 0000000000000000 [ 47.380689][ T3777] RBP: 00007f95234b7090 R08: 0000200000000140 R09: 0000000000000000 [ 47.380699][ T3777] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 47.380746][ T3777] R13: 00007f9524ca6038 R14: 00007f9524ca5fa0 R15: 00007ffdfc9d6c18 [ 47.380767][ T3777] [ 47.582369][ T44] Bluetooth: hci0: command 0x1003 tx timeout [ 47.589172][ T3559] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 47.610773][ T3719] tipc: Disabling bearer [ 47.815897][ T3796] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.866107][ T53] Bluetooth: hci0: Frame reassembly failed (-84) [ 47.879281][ T3796] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.919933][ T3800] tipc: Started in network mode [ 47.925045][ T3800] tipc: Node identity 76106e31a938, cluster identity 4711 [ 47.932226][ T3800] tipc: Enabled bearer , priority 0 [ 47.945019][ T3796] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.005995][ T3796] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.019576][ T3802] loop3: detected capacity change from 0 to 512 [ 48.028276][ T3802] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 48.041428][ T3802] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 48.057823][ T3802] EXT4-fs (loop3): 1 truncate cleaned up [ 48.063581][ T37] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.074565][ T37] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.086342][ T37] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.105675][ T3802] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.125012][ T37] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.211043][ T3807] loop1: detected capacity change from 0 to 512 [ 48.219908][ T3807] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 48.247252][ T3807] syz!: rxe_newlink: already configured on team_slave_0 [ 48.266175][ T3807] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 48.276983][ T3807] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 48.289421][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.539470][ T3815] loop0: detected capacity change from 0 to 1024 [ 48.546300][ T3815] EXT4-fs: Ignoring removed orlov option [ 48.564188][ T3815] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.768835][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.821790][ T3824] loop1: detected capacity change from 0 to 128 [ 48.923095][ T3833] loop0: detected capacity change from 0 to 512 [ 48.935030][ T3833] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.950802][ T3833] ext4 filesystem being mounted at /22/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 48.962790][ T3833] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.008499][ T3839] program syz.0.99 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 49.019838][ T3839] loop0: detected capacity change from 0 to 256 [ 49.035908][ T3839] FAT-fs (loop0): Directory bread(block 64) failed [ 49.042607][ T3839] FAT-fs (loop0): Directory bread(block 65) failed [ 49.049227][ T3839] FAT-fs (loop0): Directory bread(block 66) failed [ 49.055849][ T3490] tipc: Node number set to 3743968817 [ 49.056670][ T3839] FAT-fs (loop0): Directory bread(block 67) failed [ 49.068178][ T3839] FAT-fs (loop0): Directory bread(block 68) failed [ 49.075090][ T3839] FAT-fs (loop0): Directory bread(block 69) failed [ 49.081648][ T3839] FAT-fs (loop0): Directory bread(block 70) failed [ 49.088786][ T3839] FAT-fs (loop0): Directory bread(block 71) failed [ 49.095676][ T3839] FAT-fs (loop0): Directory bread(block 72) failed [ 49.102243][ T3839] FAT-fs (loop0): Directory bread(block 73) failed [ 49.238262][ T3844] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 49.342481][ T29] kauditd_printk_skb: 1952 callbacks suppressed [ 49.342504][ T29] audit: type=1326 audit(1768585242.801:5275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3840 comm="syz.0.100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f918f292005 code=0x7ffc0000 [ 49.372886][ T29] audit: type=1326 audit(1768585242.791:5274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3823 comm="syz.1.95" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f6e03fa2005 code=0x7ffc0000 [ 49.396161][ T29] audit: type=1326 audit(1768585242.801:5276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3823 comm="syz.1.95" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f6e03fa2005 code=0x7ffc0000 [ 49.419438][ T29] audit: type=1326 audit(1768585242.801:5277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3823 comm="syz.1.95" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f6e03fa2005 code=0x7ffc0000 [ 49.442763][ T29] audit: type=1326 audit(1768585242.801:5278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3823 comm="syz.1.95" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f6e03fa2005 code=0x7ffc0000 [ 49.464200][ T3852] audit: audit_backlog=65 > audit_backlog_limit=64 [ 49.466146][ T29] audit: type=1326 audit(1768585242.801:5279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3823 comm="syz.1.95" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f6e03fa2005 code=0x7ffc0000 [ 49.472625][ T3852] audit: audit_lost=2 audit_rate_limit=0 audit_backlog_limit=64 [ 49.495820][ T29] audit: type=1326 audit(1768585242.801:5280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3823 comm="syz.1.95" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f6e03fa2005 code=0x7ffc0000 [ 49.495857][ T29] audit: type=1326 audit(1768585242.801:5281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3823 comm="syz.1.95" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f6e03fa2005 code=0x7ffc0000 [ 49.701451][ T3858] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 49.711971][ T3858] syz!: rxe_newlink: already configured on team_slave_0 [ 49.719744][ T3858] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 49.729330][ T3858] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 49.814068][ T3863] netlink: 8 bytes leftover after parsing attributes in process `syz.2.107'. [ 49.823073][ T3863] netlink: 12 bytes leftover after parsing attributes in process `syz.2.107'. [ 49.836586][ T53] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 49.845800][ T53] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 49.855003][ T53] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 49.864207][ T53] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 49.882547][ T44] Bluetooth: hci0: command 0x1003 tx timeout [ 49.888719][ T3559] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 49.905399][ T3795] tipc: Disabling bearer [ 49.936408][ T3867] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.949336][ T3867] ext4 filesystem being mounted at /25/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 49.984813][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.297540][ T3887] set_capacity_and_notify: 2 callbacks suppressed [ 50.297560][ T3887] loop1: detected capacity change from 0 to 128 [ 50.494108][ T3890] loop4: detected capacity change from 0 to 512 [ 50.514610][ T3890] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.527964][ T3890] ext4 filesystem being mounted at /27/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 50.543560][ T3890] 9p: Bad value for 'rfdno' [ 50.606689][ T3893] SELinux: Context @ is not valid (left unmapped). [ 50.988099][ T3897] loop2: detected capacity change from 0 to 2048 [ 51.026958][ T3904] syz.3.121 uses obsolete (PF_INET,SOCK_PACKET) [ 51.044369][ T3897] Alternate GPT is invalid, using primary GPT. [ 51.051047][ T3897] loop2: p1 p2 p3 [ 51.054836][ T3897] loop2: partition table partially beyond EOD, truncated [ 51.142167][ T3906] loop0: detected capacity change from 0 to 2048 [ 51.154656][ T3910] FAULT_INJECTION: forcing a failure. [ 51.154656][ T3910] name failslab, interval 1, probability 0, space 0, times 0 [ 51.167356][ T3910] CPU: 1 UID: 0 PID: 3910 Comm: syz.3.124 Not tainted syzkaller #0 PREEMPT(voluntary) [ 51.167458][ T3910] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 51.167475][ T3910] Call Trace: [ 51.167484][ T3910] [ 51.167494][ T3910] __dump_stack+0x1d/0x30 [ 51.167524][ T3910] dump_stack_lvl+0x95/0xd0 [ 51.167629][ T3910] dump_stack+0x15/0x1b [ 51.167655][ T3910] should_fail_ex+0x265/0x280 [ 51.167682][ T3910] should_failslab+0x8c/0xb0 [ 51.167703][ T3910] kmem_cache_alloc_noprof+0x69/0x4b0 [ 51.167793][ T3910] ? audit_log_start+0x342/0x720 [ 51.167859][ T3910] audit_log_start+0x342/0x720 [ 51.167878][ T3910] ? kstrtouint+0x76/0xc0 [ 51.167897][ T3910] audit_seccomp+0x48/0x100 [ 51.167932][ T3910] ? __seccomp_filter+0x832/0x1260 [ 51.168012][ T3910] __seccomp_filter+0x843/0x1260 [ 51.168047][ T3910] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 51.168082][ T3910] ? vfs_write+0x7e8/0x960 [ 51.168111][ T3910] __secure_computing+0x82/0x150 [ 51.168195][ T3910] syscall_trace_enter+0xcf/0x1e0 [ 51.168223][ T3910] do_syscall_64+0xa4/0x2b0 [ 51.168249][ T3910] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 51.168334][ T3910] RIP: 0033:0x7f446759f749 [ 51.168353][ T3910] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 51.168375][ T3910] RSP: 002b:00007f4465fff038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 51.168446][ T3910] RAX: ffffffffffffffda RBX: 00007f44677f5fa0 RCX: 00007f446759f749 [ 51.168461][ T3910] RDX: 0000200000000180 RSI: 0000200000000080 RDI: 0000200000000040 [ 51.168476][ T3910] RBP: 00007f4465fff090 R08: ffffffffffffffff R09: 0000000000000000 [ 51.168491][ T3910] R10: 0000000000000048 R11: 0000000000000246 R12: 0000000000000001 [ 51.168505][ T3910] R13: 00007f44677f6038 R14: 00007f44677f5fa0 R15: 00007ffd45f57a78 [ 51.168529][ T3910] [ 51.168827][ T3906] Alternate GPT is invalid, using primary GPT. [ 51.363983][ T3906] loop0: p1 p2 p3 [ 51.367813][ T3906] loop0: partition table partially beyond EOD, truncated [ 51.399744][ T3324] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.423916][ T3578] udevd[3578]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 51.430553][ T3309] udevd[3309]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 51.445578][ T3912] udevd[3912]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 51.460251][ T3919] loop1: detected capacity change from 0 to 512 [ 51.467993][ T3921] netlink: 2 bytes leftover after parsing attributes in process `syz.4.128'. [ 51.485603][ T3919] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 51.496853][ T3921] netlink: 68 bytes leftover after parsing attributes in process `syz.4.128'. [ 51.515158][ T3919] syz!: rxe_newlink: already configured on team_slave_0 [ 51.523308][ T3919] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 51.532026][ T3919] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 51.532120][ T3922] loop3: detected capacity change from 0 to 2048 [ 51.563966][ T3309] udevd[3309]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 51.594109][ T3922] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 51.680071][ T53] Bluetooth: hci0: Frame reassembly failed (-84) [ 51.986482][ T3936] loop2: detected capacity change from 0 to 512 [ 51.994969][ T3936] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 52.004369][ T3936] EXT4-fs error (device loop2): ext4_get_branch:178: inode #13: block 1024: comm syz.2.131: invalid block [ 52.016412][ T3936] EXT4-fs (loop2): Remounting filesystem read-only [ 52.024133][ T3936] EXT4-fs (loop2): 1 truncate cleaned up [ 52.030380][ T3936] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.074952][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.109554][ T3941] program syz.2.132 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 52.124055][ T3941] loop2: detected capacity change from 0 to 256 [ 52.140134][ T3941] FAT-fs (loop2): Directory bread(block 64) failed [ 52.152131][ T3941] FAT-fs (loop2): Directory bread(block 65) failed [ 52.158955][ T3941] FAT-fs (loop2): Directory bread(block 66) failed [ 52.165680][ T3941] FAT-fs (loop2): Directory bread(block 67) failed [ 52.172373][ T3941] FAT-fs (loop2): Directory bread(block 68) failed [ 52.179042][ T3941] FAT-fs (loop2): Directory bread(block 69) failed [ 52.185933][ T3941] FAT-fs (loop2): Directory bread(block 70) failed [ 52.192863][ T3941] FAT-fs (loop2): Directory bread(block 71) failed [ 52.199653][ T3941] FAT-fs (loop2): Directory bread(block 72) failed [ 52.208986][ T3941] FAT-fs (loop2): Directory bread(block 73) failed [ 52.264150][ T3944] loop2: detected capacity change from 0 to 1024 [ 52.270895][ T3944] EXT4-fs: Ignoring removed orlov option [ 52.283797][ T3944] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 52.492387][ T3959] netlink: 2 bytes leftover after parsing attributes in process `syz.4.140'. [ 52.513712][ T3959] 8021q: adding VLAN 0 to HW filter on device bond2 [ 52.522773][ T3959] netlink: 68 bytes leftover after parsing attributes in process `syz.4.140'. [ 52.552888][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.784585][ T3976] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 53.313657][ T3985] FAULT_INJECTION: forcing a failure. [ 53.313657][ T3985] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 53.327171][ T3985] CPU: 0 UID: 0 PID: 3985 Comm: syz.1.148 Not tainted syzkaller #0 PREEMPT(voluntary) [ 53.327193][ T3985] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 53.327253][ T3985] Call Trace: [ 53.327258][ T3985] [ 53.327264][ T3985] __dump_stack+0x1d/0x30 [ 53.327286][ T3985] dump_stack_lvl+0x95/0xd0 [ 53.327305][ T3985] dump_stack+0x15/0x1b [ 53.327336][ T3985] should_fail_ex+0x265/0x280 [ 53.327357][ T3985] should_fail_alloc_page+0xf2/0x100 [ 53.327381][ T3985] __alloc_frozen_pages_noprof+0x109/0x360 [ 53.327423][ T3985] alloc_pages_mpol+0xb3/0x260 [ 53.327451][ T3985] vma_alloc_folio_noprof+0x1aa/0x300 [ 53.327479][ T3985] handle_mm_fault+0xef5/0x2c60 [ 53.327508][ T3985] ? mt_find+0x21b/0x330 [ 53.327592][ T3985] do_user_addr_fault+0x3fe/0x1080 [ 53.327694][ T3985] exc_page_fault+0x62/0xa0 [ 53.327718][ T3985] asm_exc_page_fault+0x26/0x30 [ 53.327735][ T3985] RIP: 0010:rep_stos_alternative+0x40/0x80 [ 53.327778][ T3985] Code: c9 75 f6 e9 42 25 02 00 48 89 07 48 83 c7 08 83 e9 08 74 ef 83 f9 08 73 ef eb de 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 <48> 89 07 48 89 47 08 48 89 47 10 48 89 47 18 48 89 47 20 48 89 47 [ 53.327794][ T3985] RSP: 0018:ffffc9000188fd88 EFLAGS: 00050246 [ 53.327807][ T3985] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000040 [ 53.327818][ T3985] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000200000001000 [ 53.327829][ T3985] RBP: 0000200000000040 R08: 0001ffff858b1b8f R09: 0000000000000000 [ 53.327892][ T3985] R10: 0000000000000000 R11: ffffffff82268c90 R12: 0000000000001000 [ 53.327902][ T3985] R13: 00007ffffffff000 R14: 000000007ffff000 R15: ffffffff82268c90 [ 53.327913][ T3985] ? __pfx_read_zero+0x10/0x10 [ 53.327935][ T3985] ? __pfx_read_zero+0x10/0x10 [ 53.327958][ T3985] read_zero+0x77/0x160 [ 53.328060][ T3985] ? __pfx_read_zero+0x10/0x10 [ 53.328152][ T3985] vfs_read+0x1a8/0x770 [ 53.328167][ T3985] ? __rcu_read_unlock+0x4f/0x70 [ 53.328184][ T3985] ? __fget_files+0x184/0x1c0 [ 53.328237][ T3985] ksys_read+0xda/0x1a0 [ 53.328255][ T3985] __x64_sys_read+0x40/0x50 [ 53.328271][ T3985] x64_sys_call+0x2889/0x3000 [ 53.328292][ T3985] do_syscall_64+0xca/0x2b0 [ 53.328372][ T3985] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 53.328449][ T3985] RIP: 0033:0x7f6e03f6f749 [ 53.328502][ T3985] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 53.328517][ T3985] RSP: 002b:00007f6e029d7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 53.328587][ T3985] RAX: ffffffffffffffda RBX: 00007f6e041c5fa0 RCX: 00007f6e03f6f749 [ 53.328610][ T3985] RDX: 00000000ffffff96 RSI: 0000200000000040 RDI: 0000000000000004 [ 53.328657][ T3985] RBP: 00007f6e029d7090 R08: 0000000000000000 R09: 0000000000000000 [ 53.328667][ T3985] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 53.328677][ T3985] R13: 00007f6e041c6038 R14: 00007f6e041c5fa0 R15: 00007ffcda2f49a8 [ 53.328694][ T3985] [ 53.722378][ T44] Bluetooth: hci0: command 0x1003 tx timeout [ 53.728435][ T3559] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 53.756433][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.785057][ T3995] loop3: detected capacity change from 0 to 1024 [ 53.792237][ T3995] EXT4-fs: Ignoring removed orlov option [ 53.816480][ T3995] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.075887][ T4006] netlink: 20 bytes leftover after parsing attributes in process `syz.4.154'. [ 54.085642][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.175566][ T4012] EXT4-fs: Ignoring removed orlov option [ 54.197421][ T4012] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.211474][ T4017] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.264261][ T4017] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.314862][ T4017] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.330931][ T4019] tipc: Enabled bearer , priority 0 [ 54.339256][ T4019] Zero length message leads to an empty skb [ 54.352574][ T29] kauditd_printk_skb: 4922 callbacks suppressed [ 54.352589][ T29] audit: type=1326 audit(1768585247.811:10201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3990 comm="syz.0.150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f918f292005 code=0x7ffc0000 [ 54.383142][ T29] audit: type=1326 audit(1768585247.841:10202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3990 comm="syz.0.150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f918f292005 code=0x7ffc0000 [ 54.383665][ T4017] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.406879][ T29] audit: type=1326 audit(1768585247.841:10203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3990 comm="syz.0.150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f918f2565e7 code=0x7ffc0000 [ 54.439874][ T29] audit: type=1326 audit(1768585247.841:10204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3990 comm="syz.0.150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f918f1fb829 code=0x7ffc0000 [ 54.463243][ T29] audit: type=1326 audit(1768585247.841:10205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3990 comm="syz.0.150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f918f25f749 code=0x7ffc0000 [ 54.486847][ T29] audit: type=1326 audit(1768585247.901:10206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3990 comm="syz.0.150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f918f292005 code=0x7ffc0000 [ 54.510315][ T29] audit: type=1326 audit(1768585247.901:10207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3990 comm="syz.0.150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f918f292005 code=0x7ffc0000 [ 54.533889][ T29] audit: type=1326 audit(1768585247.901:10208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3990 comm="syz.0.150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f918f292005 code=0x7ffc0000 [ 54.557424][ T29] audit: type=1326 audit(1768585247.921:10209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3990 comm="syz.0.150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f918f2565e7 code=0x7ffc0000 [ 54.580755][ T29] audit: type=1326 audit(1768585247.951:10210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3990 comm="syz.0.150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f918f1fb829 code=0x7ffc0000 [ 54.620224][ T31] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.651109][ T31] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.663084][ T4022] netlink: 24 bytes leftover after parsing attributes in process `syz.1.159'. [ 54.699431][ T31] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.717407][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.722549][ T31] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.838797][ T4039] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 54.855352][ T4039] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 54.863661][ T4039] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 54.872827][ T4039] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 55.415375][ T4044] set_capacity_and_notify: 2 callbacks suppressed [ 55.415389][ T4044] loop3: detected capacity change from 0 to 1024 [ 55.430310][ T4044] EXT4-fs: Ignoring removed orlov option [ 55.454549][ T4044] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 55.711043][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.885589][ T4059] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 55.894373][ T4059] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 55.946216][ T4077] loop3: detected capacity change from 0 to 1024 [ 55.956134][ T4077] EXT4-fs error (device loop3): ext4_acquire_dquot:6986: comm syz.3.175: Failed to acquire dquot type 0 [ 55.969010][ T4077] EXT4-fs error (device loop3): mb_free_blocks:2037: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 55.984173][ T4077] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #13: comm syz.3.175: corrupted inode contents [ 55.996537][ T4077] EXT4-fs error (device loop3): ext4_dirty_inode:6502: inode #13: comm syz.3.175: mark_inode_dirty error [ 56.010281][ T4077] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #13: comm syz.3.175: corrupted inode contents [ 56.023409][ T4077] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #13: comm syz.3.175: mark_inode_dirty error [ 56.037891][ T4077] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #13: comm syz.3.175: corrupted inode contents [ 56.051251][ T4077] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem [ 56.060467][ T4077] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #13: comm syz.3.175: corrupted inode contents [ 56.073787][ T4077] EXT4-fs error (device loop3): ext4_truncate:4635: inode #13: comm syz.3.175: mark_inode_dirty error [ 56.087676][ T4077] EXT4-fs error (device loop3) in ext4_process_orphan:345: Corrupt filesystem [ 56.097796][ T4077] EXT4-fs (loop3): 1 truncate cleaned up [ 56.104195][ T4077] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 56.130681][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.186380][ T4083] FAULT_INJECTION: forcing a failure. [ 56.186380][ T4083] name failslab, interval 1, probability 0, space 0, times 0 [ 56.199322][ T4083] CPU: 1 UID: 0 PID: 4083 Comm: syz.3.177 Not tainted syzkaller #0 PREEMPT(voluntary) [ 56.199394][ T4083] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 56.199420][ T4083] Call Trace: [ 56.199425][ T4083] [ 56.199431][ T4083] __dump_stack+0x1d/0x30 [ 56.199454][ T4083] dump_stack_lvl+0x95/0xd0 [ 56.199472][ T4083] dump_stack+0x15/0x1b [ 56.199489][ T4083] should_fail_ex+0x265/0x280 [ 56.199596][ T4083] should_failslab+0x8c/0xb0 [ 56.199616][ T4083] __kmalloc_cache_noprof+0x65/0x4c0 [ 56.199637][ T4083] ? __se_sys_memfd_create+0x1d6/0x6b0 [ 56.199764][ T4083] ? mutex_unlock+0x4f/0x90 [ 56.199807][ T4083] __se_sys_memfd_create+0x1d6/0x6b0 [ 56.199930][ T4083] __x64_sys_memfd_create+0x31/0x40 [ 56.199957][ T4083] x64_sys_call+0x28cb/0x3000 [ 56.199977][ T4083] do_syscall_64+0xca/0x2b0 [ 56.200040][ T4083] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 56.200119][ T4083] RIP: 0033:0x7f446759f749 [ 56.200173][ T4083] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 56.200188][ T4083] RSP: 002b:00007f4465ffee18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 56.200204][ T4083] RAX: ffffffffffffffda RBX: 000000000000059d RCX: 00007f446759f749 [ 56.200214][ T4083] RDX: 00007f4465ffeef0 RSI: 0000000000000000 RDI: 00007f4467624960 [ 56.200249][ T4083] RBP: 0000200000001100 R08: 00007f4465ffebb7 R09: 00007f4465ffee40 [ 56.200259][ T4083] R10: 000000000000000a R11: 0000000000000202 R12: 00002000000002c0 [ 56.200269][ T4083] R13: 00007f4465ffeef0 R14: 00007f4465ffeeb0 R15: 0000200000000600 [ 56.200285][ T4083] [ 56.369544][ T3559] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 56.393671][ T4016] tipc: Disabling bearer [ 56.834261][ T4098] program syz.0.183 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 56.845690][ T4098] loop0: detected capacity change from 0 to 256 [ 56.863130][ T4098] FAT-fs (loop0): Directory bread(block 64) failed [ 56.869924][ T4098] FAT-fs (loop0): Directory bread(block 65) failed [ 56.876582][ T4098] FAT-fs (loop0): Directory bread(block 66) failed [ 56.883365][ T4098] FAT-fs (loop0): Directory bread(block 67) failed [ 56.889908][ T4098] FAT-fs (loop0): Directory bread(block 68) failed [ 56.896538][ T4098] FAT-fs (loop0): Directory bread(block 69) failed [ 56.903235][ T4098] FAT-fs (loop0): Directory bread(block 70) failed [ 56.909829][ T4098] FAT-fs (loop0): Directory bread(block 71) failed [ 56.916417][ T4098] FAT-fs (loop0): Directory bread(block 72) failed [ 56.923303][ T4098] FAT-fs (loop0): Directory bread(block 73) failed [ 57.799949][ T4110] netlink: 24 bytes leftover after parsing attributes in process `syz.4.188'. [ 58.069879][ T4120] loop4: detected capacity change from 0 to 1024 [ 58.077189][ T4120] EXT4-fs: Ignoring removed bh option [ 58.093989][ T4120] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 58.122309][ C1] hrtimer: interrupt took 28572 ns [ 58.153846][ T4120] EXT4-fs error (device loop4): mb_free_blocks:2037: group 0, inode 15: block 273:freeing already freed block (bit 17); block bitmap corrupt. [ 58.169701][ T4120] EXT4-fs (loop4): Remounting filesystem read-only [ 58.183753][ T4120] EXT4-fs warning (device loop4): ext4_convert_unwritten_extents:4984: inode #15: block 64: len 64: ext4_ext_map_blocks returned -30 [ 58.229634][ T4128] loop1: detected capacity change from 0 to 764 [ 58.238577][ T4128] iso9660: Unknown parameter 'nfs4' [ 58.239874][ T3324] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.257568][ T4130] netlink: 12 bytes leftover after parsing attributes in process `syz.3.195'. [ 58.273888][ T4130] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 58.302176][ T4132] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.314014][ T4130] loop3: detected capacity change from 0 to 512 [ 58.318244][ T4128] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 58.339648][ T4130] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 58.349012][ T4130] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 58.361623][ T31] Bluetooth: hci0: Frame reassembly failed (-84) [ 58.375509][ T4130] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 58.385823][ T4130] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 58.393306][ T4132] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.394976][ T4130] System zones: 0-2, 18-18, 34-35 [ 58.409525][ T4130] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 58.413204][ T4135] loop1: detected capacity change from 0 to 1024 [ 58.430188][ T4135] EXT4-fs: Ignoring removed orlov option [ 58.442172][ T4137] tipc: Enabled bearer , priority 0 [ 58.456502][ T4135] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 58.474483][ T4132] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.534687][ T4132] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.608520][ T31] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.620727][ T31] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.633191][ T31] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.645406][ T31] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.699037][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.774419][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.802164][ T4149] loop1: detected capacity change from 0 to 2048 [ 58.816831][ T4153] netlink: 24 bytes leftover after parsing attributes in process `syz.0.201'. [ 58.826210][ T4149] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 58.884190][ T4157] loop0: detected capacity change from 0 to 128 [ 59.006786][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.039802][ T4161] program syz.1.203 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 59.051855][ T4161] loop1: detected capacity change from 0 to 256 [ 59.071839][ T4161] FAT-fs (loop1): Directory bread(block 64) failed [ 59.078513][ T4161] FAT-fs (loop1): Directory bread(block 65) failed [ 59.085343][ T4161] FAT-fs (loop1): Directory bread(block 66) failed [ 59.091886][ T4161] FAT-fs (loop1): Directory bread(block 67) failed [ 59.098850][ T4161] FAT-fs (loop1): Directory bread(block 68) failed [ 59.105428][ T4161] FAT-fs (loop1): Directory bread(block 69) failed [ 59.112004][ T4161] FAT-fs (loop1): Directory bread(block 70) failed [ 59.118761][ T4161] FAT-fs (loop1): Directory bread(block 71) failed [ 59.126413][ T4161] FAT-fs (loop1): Directory bread(block 72) failed [ 59.133105][ T4161] FAT-fs (loop1): Directory bread(block 73) failed [ 59.363377][ T29] kauditd_printk_skb: 2124 callbacks suppressed [ 59.363395][ T29] audit: type=1326 audit(1768585252.821:12333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4156 comm="syz.0.202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f918f292005 code=0x7ffc0000 [ 59.396343][ T4170] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 59.408688][ T4170] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 59.416548][ T29] audit: type=1326 audit(1768585252.821:12334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4156 comm="syz.0.202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f918f292005 code=0x7ffc0000 [ 59.440062][ T29] audit: type=1326 audit(1768585252.821:12335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4156 comm="syz.0.202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f918f292005 code=0x7ffc0000 [ 59.463581][ T29] audit: type=1326 audit(1768585252.821:12336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4156 comm="syz.0.202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f918f292005 code=0x7ffc0000 [ 59.487145][ T29] audit: type=1326 audit(1768585252.821:12337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4156 comm="syz.0.202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f918f292005 code=0x7ffc0000 [ 59.510617][ T29] audit: type=1326 audit(1768585252.821:12338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4156 comm="syz.0.202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f918f292005 code=0x7ffc0000 [ 59.534124][ T29] audit: type=1326 audit(1768585252.821:12339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4156 comm="syz.0.202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f918f292005 code=0x7ffc0000 [ 59.557616][ T29] audit: type=1326 audit(1768585252.821:12340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4156 comm="syz.0.202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f918f292005 code=0x7ffc0000 [ 59.581052][ T29] audit: type=1326 audit(1768585252.821:12341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4156 comm="syz.0.202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f918f292005 code=0x7ffc0000 [ 59.589415][ T4172] program syz.2.205 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 59.604521][ T29] audit: type=1326 audit(1768585252.821:12342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4156 comm="syz.0.202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f918f292005 code=0x7ffc0000 [ 59.650147][ T4172] FAT-fs (loop2): Directory bread(block 64) failed [ 59.657289][ T4172] FAT-fs (loop2): Directory bread(block 65) failed [ 59.664473][ T4172] FAT-fs (loop2): Directory bread(block 66) failed [ 59.671428][ T4172] FAT-fs (loop2): Directory bread(block 67) failed [ 59.678198][ T4172] FAT-fs (loop2): Directory bread(block 68) failed [ 59.692914][ T4172] FAT-fs (loop2): Directory bread(block 69) failed [ 59.710918][ T4172] FAT-fs (loop2): Directory bread(block 70) failed [ 59.721180][ T4174] netlink: 'syz.3.206': attribute type 10 has an invalid length. [ 59.739261][ T4172] FAT-fs (loop2): Directory bread(block 71) failed [ 59.742962][ T4174] hsr0: entered promiscuous mode [ 59.746211][ T4172] FAT-fs (loop2): Directory bread(block 72) failed [ 59.757421][ T4172] FAT-fs (loop2): Directory bread(block 73) failed [ 59.771099][ T4174] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 59.788843][ T4174] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 59.801472][ T4174] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 59.819513][ T4172] vlan2: entered allmulticast mode [ 59.845152][ T4174] EXT4-fs error (device loop3): ext4_acquire_dquot:6986: comm syz.3.206: Failed to acquire dquot type 0 [ 59.857832][ T4174] EXT4-fs error (device loop3): mb_free_blocks:2037: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 59.873103][ T4174] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #13: comm syz.3.206: corrupted inode contents [ 59.886476][ T4174] EXT4-fs error (device loop3): ext4_dirty_inode:6502: inode #13: comm syz.3.206: mark_inode_dirty error [ 59.899614][ T4174] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #13: comm syz.3.206: corrupted inode contents [ 59.911849][ T4174] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #13: comm syz.3.206: mark_inode_dirty error [ 59.923557][ T4174] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #13: comm syz.3.206: corrupted inode contents [ 59.935958][ T4174] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem [ 59.945049][ T4174] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #13: comm syz.3.206: corrupted inode contents [ 59.957226][ T4174] EXT4-fs error (device loop3): ext4_truncate:4635: inode #13: comm syz.3.206: mark_inode_dirty error [ 59.969297][ T4174] EXT4-fs error (device loop3) in ext4_process_orphan:345: Corrupt filesystem [ 59.978745][ T4174] EXT4-fs (loop3): 1 truncate cleaned up [ 59.985282][ T4174] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 60.013661][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.038395][ T4184] EXT4-fs: Ignoring removed orlov option [ 60.053984][ T4184] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 60.243228][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.372359][ T3559] Bluetooth: hci0: command 0x1003 tx timeout [ 60.372356][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 60.389007][ T4131] tipc: Disabling bearer [ 60.876773][ T4197] netlink: 24 bytes leftover after parsing attributes in process `syz.2.213'. [ 61.383801][ T4212] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.424253][ T4212] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.484016][ T4212] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.533806][ T4216] program syz.0.219 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 61.544616][ T4212] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.554798][ T4216] set_capacity_and_notify: 3 callbacks suppressed [ 61.554812][ T4216] loop0: detected capacity change from 0 to 256 [ 61.583471][ T4216] FAT-fs (loop0): Directory bread(block 64) failed [ 61.590170][ T4216] FAT-fs (loop0): Directory bread(block 65) failed [ 61.596823][ T4216] FAT-fs (loop0): Directory bread(block 66) failed [ 61.603652][ T4216] FAT-fs (loop0): Directory bread(block 67) failed [ 61.610390][ T4216] FAT-fs (loop0): Directory bread(block 68) failed [ 61.617084][ T4216] FAT-fs (loop0): Directory bread(block 69) failed [ 61.623917][ T4216] FAT-fs (loop0): Directory bread(block 70) failed [ 61.630520][ T4216] FAT-fs (loop0): Directory bread(block 71) failed [ 61.637239][ T4216] FAT-fs (loop0): Directory bread(block 72) failed [ 61.643832][ T4216] FAT-fs (loop0): Directory bread(block 73) failed [ 61.656805][ T4216] vlan2: entered allmulticast mode [ 61.736703][ T4218] loop1: detected capacity change from 0 to 2048 [ 61.737041][ T4220] FAULT_INJECTION: forcing a failure. [ 61.737041][ T4220] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 61.756173][ T4220] CPU: 1 UID: 0 PID: 4220 Comm: syz.0.221 Not tainted syzkaller #0 PREEMPT(voluntary) [ 61.756243][ T4220] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 61.756255][ T4220] Call Trace: [ 61.756262][ T4220] [ 61.756270][ T4220] __dump_stack+0x1d/0x30 [ 61.756296][ T4220] dump_stack_lvl+0x95/0xd0 [ 61.756368][ T4220] dump_stack+0x15/0x1b [ 61.756391][ T4220] should_fail_ex+0x265/0x280 [ 61.756438][ T4220] should_fail+0xb/0x20 [ 61.756460][ T4220] should_fail_usercopy+0x1a/0x20 [ 61.756483][ T4220] _copy_from_user+0x1c/0xb0 [ 61.756527][ T4220] ___sys_sendmsg+0xc1/0x1d0 [ 61.756625][ T4220] __x64_sys_sendmsg+0xd4/0x160 [ 61.756666][ T4220] x64_sys_call+0x17ba/0x3000 [ 61.756731][ T4220] do_syscall_64+0xca/0x2b0 [ 61.756750][ T4220] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 61.756772][ T4220] RIP: 0033:0x7f918f25f749 [ 61.756937][ T4220] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 61.756959][ T4220] RSP: 002b:00007f918dcc7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 61.756983][ T4220] RAX: ffffffffffffffda RBX: 00007f918f4b5fa0 RCX: 00007f918f25f749 [ 61.756996][ T4220] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000003 [ 61.757007][ T4220] RBP: 00007f918dcc7090 R08: 0000000000000000 R09: 0000000000000000 [ 61.757094][ T4220] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 61.757121][ T4220] R13: 00007f918f4b6038 R14: 00007f918f4b5fa0 R15: 00007ffe63cd9688 [ 61.757141][ T4220] [ 61.938415][ T4218] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 61.976050][ T4226] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 61.986469][ T4226] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.014546][ T4227] loop0: detected capacity change from 0 to 1024 [ 62.022492][ T4227] EXT4-fs: Ignoring removed orlov option [ 62.026734][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.044157][ T4226] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 62.054535][ T4226] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.089388][ T4227] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 62.104996][ T4233] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.115127][ T4237] loop1: detected capacity change from 0 to 1024 [ 62.126980][ T4237] EXT4-fs: Ignoring removed orlov option [ 62.137532][ T4226] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 62.148005][ T4226] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.164589][ T4233] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.188034][ T4237] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 62.220352][ T4226] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 62.230823][ T4226] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.262214][ T4242] tipc: Started in network mode [ 62.267210][ T4242] tipc: Node identity e264f79d3d6a, cluster identity 4711 [ 62.274451][ T4242] tipc: Enabled bearer , priority 0 [ 62.283338][ T4233] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.330576][ T31] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 62.338829][ T31] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.361485][ T31] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 62.369745][ T31] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.380147][ T31] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 62.388426][ T31] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.398781][ T4233] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.409933][ T31] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 62.418205][ T31] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.459259][ T53] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.470779][ T53] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.482534][ T53] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.496834][ T31] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.557150][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.596867][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.651028][ T37] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.663147][ T37] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.679162][ T37] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.687662][ T37] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.392370][ T1038] tipc: Node number set to 3742300061 [ 63.482345][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 63.482351][ T4239] Bluetooth: hci0: command 0x1003 tx timeout [ 63.650024][ T4261] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 63.658630][ T4261] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 64.202396][ T3559] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 64.212255][ T4232] tipc: Disabling bearer [ 64.373184][ T29] kauditd_printk_skb: 2748 callbacks suppressed [ 64.373207][ T29] audit: type=1326 audit(1768585257.831:15089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4268 comm="syz.2.233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f9524a82005 code=0x7ffc0000 [ 64.403252][ T29] audit: type=1326 audit(1768585257.831:15090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4268 comm="syz.2.233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f9524a82005 code=0x7ffc0000 [ 64.426667][ T29] audit: type=1326 audit(1768585257.831:15091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4268 comm="syz.2.233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f9524a82005 code=0x7ffc0000 [ 64.450124][ T29] audit: type=1326 audit(1768585257.831:15092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4268 comm="syz.2.233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f9524a82005 code=0x7ffc0000 [ 64.473712][ T29] audit: type=1326 audit(1768585257.831:15093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4268 comm="syz.2.233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f9524a82005 code=0x7ffc0000 [ 64.497258][ T29] audit: type=1326 audit(1768585257.831:15094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4268 comm="syz.2.233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f9524a82005 code=0x7ffc0000 [ 64.520840][ T29] audit: type=1326 audit(1768585257.831:15095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4268 comm="syz.2.233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f9524a82005 code=0x7ffc0000 [ 64.544385][ T29] audit: type=1326 audit(1768585257.831:15096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4268 comm="syz.2.233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f9524a82005 code=0x7ffc0000 [ 64.567867][ T29] audit: type=1326 audit(1768585257.831:15097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4268 comm="syz.2.233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f9524a82005 code=0x7ffc0000 [ 64.591392][ T29] audit: type=1326 audit(1768585257.831:15098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4268 comm="syz.2.233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f9524a82005 code=0x7ffc0000 [ 64.712060][ T4288] loop2: detected capacity change from 0 to 512 [ 64.718887][ T4288] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 64.733810][ T4288] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 64.741430][ T4288] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 64.750094][ T4288] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 65.353538][ T4303] loop2: detected capacity change from 0 to 2048 [ 65.365673][ T4303] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 65.458312][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.513984][ T4312] loop1: detected capacity change from 0 to 128 [ 65.520674][ T4310] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 65.530535][ T4310] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.565625][ T37] Bluetooth: hci0: Frame reassembly failed (-84) [ 65.624215][ T4315] tipc: Started in network mode [ 65.629138][ T4315] tipc: Node identity c28b2a325c9a, cluster identity 4711 [ 65.636356][ T4315] tipc: Enabled bearer , priority 0 [ 65.653170][ T4310] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 65.663024][ T4310] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.703913][ T4310] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 65.713839][ T4310] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.774492][ T4310] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 65.784337][ T4310] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.257362][ T31] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 66.265695][ T31] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.284078][ T4335] netlink: 52 bytes leftover after parsing attributes in process `syz.0.251'. [ 66.300463][ T31] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 66.308843][ T31] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.317762][ T31] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 66.326055][ T31] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.334832][ T31] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 66.343077][ T31] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.427851][ T4337] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.464937][ T4337] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.483342][ T406] Bluetooth: hci1: Frame reassembly failed (-84) [ 66.506345][ T4337] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.574804][ T4341] loop3: detected capacity change from 0 to 1024 [ 66.581825][ T4341] EXT4-fs: Ignoring removed orlov option [ 66.588295][ T4339] tipc: Enabled bearer , priority 0 [ 66.605864][ T4341] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 66.624813][ T4337] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.683539][ T37] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.706881][ T37] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.722138][ T37] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.739238][ T37] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.752335][ T9] tipc: Node number set to 2651925042 [ 66.959934][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.996309][ T4351] loop4: detected capacity change from 0 to 2048 [ 67.014860][ T4351] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 67.100173][ T3324] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.122633][ T31] Bluetooth: hci2: Frame reassembly failed (-84) [ 67.642343][ T3560] Bluetooth: hci0: command 0x1003 tx timeout [ 67.642525][ T3559] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 67.658440][ T4309] tipc: Disabling bearer [ 67.900784][ T4365] loop3: detected capacity change from 0 to 1024 [ 67.907906][ T4365] EXT4-fs: Ignoring removed orlov option [ 67.933807][ T4365] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 68.101246][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.127943][ T4373] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.164181][ T4373] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.179965][ T31] Bluetooth: hci0: Frame reassembly failed (-84) [ 68.227147][ T4373] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.245177][ T4377] tipc: Enabled bearer , priority 0 [ 68.274279][ T4373] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.339633][ T37] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.351303][ T37] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.364302][ T37] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.375913][ T37] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.522337][ T4239] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 68.528542][ T3560] Bluetooth: hci1: command 0x1003 tx timeout [ 68.538157][ T4336] tipc: Disabling bearer [ 69.162406][ T4239] Bluetooth: hci2: command 0x1003 tx timeout [ 69.162801][ T44] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 69.208540][ T4391] program syz.2.268 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 69.220202][ T4391] loop2: detected capacity change from 0 to 256 [ 69.230174][ T4393] loop4: detected capacity change from 0 to 1024 [ 69.241498][ T4393] EXT4-fs: Ignoring removed orlov option [ 69.255526][ T4393] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 69.268977][ T4391] FAT-fs (loop2): Directory bread(block 64) failed [ 69.275597][ T4391] FAT-fs (loop2): Directory bread(block 65) failed [ 69.286303][ T4391] FAT-fs (loop2): Directory bread(block 66) failed [ 69.294650][ T4391] FAT-fs (loop2): Directory bread(block 67) failed [ 69.304956][ T4391] FAT-fs (loop2): Directory bread(block 68) failed [ 69.311915][ T4391] FAT-fs (loop2): Directory bread(block 69) failed [ 69.327365][ T4386] geneve2: entered promiscuous mode [ 69.329735][ T4391] FAT-fs (loop2): Directory bread(block 70) failed [ 69.339226][ T4391] FAT-fs (loop2): Directory bread(block 71) failed [ 69.346556][ T4391] FAT-fs (loop2): Directory bread(block 72) failed [ 69.353281][ T4391] FAT-fs (loop2): Directory bread(block 73) failed [ 69.367087][ T4391] vlan2: entered allmulticast mode [ 69.443797][ T29] kauditd_printk_skb: 3467 callbacks suppressed [ 69.443830][ T29] audit: type=1326 audit(1768585262.901:18566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4392 comm="syz.4.267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35c246f749 code=0x7ffc0000 [ 69.480512][ T29] audit: type=1326 audit(1768585262.901:18567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4392 comm="syz.4.267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35c246f749 code=0x7ffc0000 [ 69.506206][ T29] audit: type=1326 audit(1768585262.951:18568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4392 comm="syz.4.267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f35c246f749 code=0x7ffc0000 [ 69.529802][ T29] audit: type=1326 audit(1768585262.951:18569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4392 comm="syz.4.267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35c246f749 code=0x7ffc0000 [ 69.553955][ T29] audit: type=1326 audit(1768585262.951:18570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4392 comm="syz.4.267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f35c246f749 code=0x7ffc0000 [ 69.577485][ T29] audit: type=1326 audit(1768585262.951:18571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4392 comm="syz.4.267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35c246f749 code=0x7ffc0000 [ 69.600941][ T29] audit: type=1326 audit(1768585262.951:18572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4392 comm="syz.4.267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f35c246f749 code=0x7ffc0000 [ 69.624489][ T29] audit: type=1326 audit(1768585262.951:18573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4392 comm="syz.4.267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35c246f749 code=0x7ffc0000 [ 69.648035][ T29] audit: type=1326 audit(1768585262.951:18574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4392 comm="syz.4.267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f35c246f749 code=0x7ffc0000 [ 69.671579][ T29] audit: type=1326 audit(1768585262.951:18575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4392 comm="syz.4.267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35c246f749 code=0x7ffc0000 [ 69.742203][ T3324] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.770636][ T4409] loop4: detected capacity change from 0 to 1024 [ 69.778103][ T4409] EXT4-fs: Ignoring removed orlov option [ 69.960594][ T4415] netlink: 2 bytes leftover after parsing attributes in process `syz.4.273'. [ 69.970032][ T4415] netlink: 68 bytes leftover after parsing attributes in process `syz.4.273'. [ 70.001868][ T4417] loop4: detected capacity change from 0 to 512 [ 70.008587][ T4417] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 70.020364][ T4417] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 70.028038][ T4417] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 70.038116][ T4417] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 70.202362][ T44] Bluetooth: hci0: command 0x1003 tx timeout [ 70.202863][ T3559] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 70.218455][ T4372] tipc: Disabling bearer [ 70.379733][ T4421] netlink: 24 bytes leftover after parsing attributes in process `syz.2.275'. [ 70.443284][ T4429] vhci_hcd vhci_hcd.3: default hub control req: 800f v0000 i0000 l31125 [ 70.467566][ T4431] program syz.2.280 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 70.478917][ T4431] loop2: detected capacity change from 0 to 256 [ 70.494504][ T4431] FAT-fs (loop2): Directory bread(block 64) failed [ 70.501048][ T4431] FAT-fs (loop2): Directory bread(block 65) failed [ 70.507673][ T4431] FAT-fs (loop2): Directory bread(block 66) failed [ 70.514245][ T4431] FAT-fs (loop2): Directory bread(block 67) failed [ 70.520807][ T4431] FAT-fs (loop2): Directory bread(block 68) failed [ 70.527436][ T4431] FAT-fs (loop2): Directory bread(block 69) failed [ 70.534024][ T4431] FAT-fs (loop2): Directory bread(block 70) failed [ 70.540597][ T4431] FAT-fs (loop2): Directory bread(block 71) failed [ 70.547199][ T4431] FAT-fs (loop2): Directory bread(block 72) failed [ 70.553756][ T4431] FAT-fs (loop2): Directory bread(block 73) failed [ 70.572368][ T4431] vlan2: entered allmulticast mode [ 70.596523][ T4433] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.648647][ T125] Bluetooth: hci0: Frame reassembly failed (-84) [ 70.659565][ T4433] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.705384][ T4433] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.719803][ T4441] tipc: Started in network mode [ 70.724919][ T4441] tipc: Node identity aaebc004f55c, cluster identity 4711 [ 70.732127][ T4441] tipc: Enabled bearer , priority 0 [ 70.776331][ T4433] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.819061][ T31] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.830483][ T31] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.841924][ T31] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.854260][ T31] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.467787][ T4452] FAULT_INJECTION: forcing a failure. [ 71.467787][ T4452] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 71.481043][ T4452] CPU: 0 UID: 0 PID: 4452 Comm: syz.4.287 Not tainted syzkaller #0 PREEMPT(voluntary) [ 71.481075][ T4452] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 71.481089][ T4452] Call Trace: [ 71.481097][ T4452] [ 71.481107][ T4452] __dump_stack+0x1d/0x30 [ 71.481203][ T4452] dump_stack_lvl+0x95/0xd0 [ 71.481230][ T4452] dump_stack+0x15/0x1b [ 71.481249][ T4452] should_fail_ex+0x265/0x280 [ 71.481352][ T4452] should_fail+0xb/0x20 [ 71.481404][ T4452] should_fail_usercopy+0x1a/0x20 [ 71.481434][ T4452] _copy_from_user+0x1c/0xb0 [ 71.481508][ T4452] proc_submiturb+0x43/0xa0 [ 71.481551][ T4452] usbdev_ioctl+0xcb6/0x1700 [ 71.481583][ T4452] ? __pfx_usbdev_ioctl+0x10/0x10 [ 71.481682][ T4452] __se_sys_ioctl+0xce/0x140 [ 71.481725][ T4452] __x64_sys_ioctl+0x43/0x50 [ 71.481752][ T4452] x64_sys_call+0x14b0/0x3000 [ 71.481796][ T4452] do_syscall_64+0xca/0x2b0 [ 71.481815][ T4452] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 71.481834][ T4452] RIP: 0033:0x7f35c246f749 [ 71.481921][ T4452] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 71.481936][ T4452] RSP: 002b:00007f35c0ed7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 71.481953][ T4452] RAX: ffffffffffffffda RBX: 00007f35c26c5fa0 RCX: 00007f35c246f749 [ 71.481965][ T4452] RDX: 0000200000000000 RSI: 000000008038550a RDI: 0000000000000005 [ 71.481976][ T4452] RBP: 00007f35c0ed7090 R08: 0000000000000000 R09: 0000000000000000 [ 71.481987][ T4452] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 71.481997][ T4452] R13: 00007f35c26c6038 R14: 00007f35c26c5fa0 R15: 00007ffcfc18b8d8 [ 71.482015][ T4452] [ 71.684027][ T4456] loop4: detected capacity change from 0 to 128 [ 71.742374][ T23] tipc: Node number set to 1605877764 [ 72.598669][ T4473] usb usb1: usbfs: interface 0 claimed by hub while 'syz.3.295' sets config #1 [ 72.647254][ T4475] loop2: detected capacity change from 0 to 512 [ 72.663894][ T4475] EXT4-fs warning (device loop2): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 72.678918][ T4475] EXT4-fs (loop2): mount failed [ 72.683062][ T3559] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 72.686990][ T44] Bluetooth: hci0: command 0x1003 tx timeout [ 72.701774][ T4432] tipc: Disabling bearer [ 73.291941][ T4495] netlink: 256 bytes leftover after parsing attributes in process `syz.0.300'. [ 74.188810][ T4509] loop0: detected capacity change from 0 to 1024 [ 74.195629][ T4509] EXT4-fs: Ignoring removed orlov option [ 74.204070][ T4509] EXT4-fs mount: 2 callbacks suppressed [ 74.204086][ T4509] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.348530][ T4516] loop4: detected capacity change from 0 to 2048 [ 74.364463][ T4516] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.440433][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.504261][ T4524] FAULT_INJECTION: forcing a failure. [ 74.504261][ T4524] name failslab, interval 1, probability 0, space 0, times 0 [ 74.516995][ T4524] CPU: 1 UID: 0 PID: 4524 Comm: syz.2.307 Not tainted syzkaller #0 PREEMPT(voluntary) [ 74.517034][ T4524] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 74.517102][ T4524] Call Trace: [ 74.517111][ T4524] [ 74.517121][ T4524] __dump_stack+0x1d/0x30 [ 74.517152][ T4524] dump_stack_lvl+0x95/0xd0 [ 74.517181][ T4524] dump_stack+0x15/0x1b [ 74.517206][ T4524] should_fail_ex+0x265/0x280 [ 74.517231][ T4524] should_failslab+0x8c/0xb0 [ 74.517253][ T4524] kmem_cache_alloc_noprof+0x69/0x4b0 [ 74.517273][ T4524] ? audit_log_start+0x342/0x720 [ 74.517299][ T4524] audit_log_start+0x342/0x720 [ 74.517330][ T4524] ? kstrtouint+0x76/0xc0 [ 74.517430][ T4524] audit_seccomp+0x48/0x100 [ 74.517497][ T4524] ? __seccomp_filter+0x832/0x1260 [ 74.517576][ T4524] __seccomp_filter+0x843/0x1260 [ 74.517603][ T4524] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 74.517678][ T4524] ? vfs_write+0x7e8/0x960 [ 74.517701][ T4524] ? __rcu_read_unlock+0x4f/0x70 [ 74.517727][ T4524] ? __fget_files+0x184/0x1c0 [ 74.517759][ T4524] __secure_computing+0x82/0x150 [ 74.517785][ T4524] syscall_trace_enter+0xcf/0x1e0 [ 74.517837][ T4524] do_syscall_64+0xa4/0x2b0 [ 74.517882][ T4524] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.517915][ T4524] RIP: 0033:0x7f9524a4f749 [ 74.517935][ T4524] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 74.517964][ T4524] RSP: 002b:00007f95234b7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 74.517988][ T4524] RAX: ffffffffffffffda RBX: 00007f9524ca5fa0 RCX: 00007f9524a4f749 [ 74.518073][ T4524] RDX: 0000000000000000 RSI: 0000200000002740 RDI: 0000000000000008 [ 74.518089][ T4524] RBP: 00007f95234b7090 R08: 0000000000000000 R09: 0000000000000000 [ 74.518105][ T4524] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 74.518118][ T4524] R13: 00007f9524ca6038 R14: 00007f9524ca5fa0 R15: 00007ffdfc9d6c18 [ 74.518139][ T4524] [ 74.518149][ T4524] audit_log_lost: 2053 callbacks suppressed [ 74.518161][ T4524] audit: audit_lost=4 audit_rate_limit=0 audit_backlog_limit=64 [ 74.562527][ T29] audit: type=1326 audit(1768585267.961:20628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4523 comm="syz.2.307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9524a4f749 code=0x7ffc0000 [ 74.566810][ T4524] audit: out of memory in audit_log_start [ 74.572201][ T29] audit: type=1326 audit(1768585267.961:20629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4523 comm="syz.2.307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9524a4f749 code=0x7ffc0000 [ 74.783863][ T29] audit: type=1326 audit(1768585267.961:20630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4523 comm="syz.2.307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9524a4f749 code=0x7ffc0000 [ 74.807335][ T29] audit: type=1326 audit(1768585267.961:20631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4523 comm="syz.2.307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9524a4df90 code=0x7ffc0000 [ 74.830972][ T29] audit: type=1326 audit(1768585267.961:20632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4523 comm="syz.2.307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f9524a4e1ff code=0x7ffc0000 [ 74.855234][ T29] audit: type=1326 audit(1768585268.081:20633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4523 comm="syz.2.307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f9524a82005 code=0x7ffc0000 [ 74.878774][ T29] audit: type=1326 audit(1768585268.081:20634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4523 comm="syz.2.307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f9524a82005 code=0x7ffc0000 [ 74.902459][ T29] audit: type=1326 audit(1768585268.081:20635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4523 comm="syz.2.307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f9524a82005 code=0x7ffc0000 [ 74.927403][ T3324] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.009227][ T4532] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 75.019118][ T4532] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.063132][ T2194] Bluetooth: hci0: Frame reassembly failed (-84) [ 75.072267][ T4532] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 75.082170][ T4532] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.125096][ T4532] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 75.135323][ T4532] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.152746][ T4542] tipc: Enabled bearer , priority 0 [ 75.193975][ T4532] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 75.203915][ T4532] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.268914][ T53] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 75.277206][ T53] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.291845][ T53] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 75.300170][ T53] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.315405][ T53] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 75.323768][ T53] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.335744][ T53] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 75.344017][ T53] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.431954][ T4551] loop1: detected capacity change from 0 to 1024 [ 75.439035][ T4551] EXT4-fs: Ignoring removed orlov option [ 75.457134][ T4551] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 75.475516][ T4552] loop4: detected capacity change from 0 to 2048 [ 75.498003][ T4552] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 75.568452][ T3324] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.683311][ T4564] loop3: detected capacity change from 0 to 128 [ 75.698087][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.741388][ T4567] loop1: detected capacity change from 0 to 1024 [ 75.751930][ T4567] EXT4-fs: Ignoring removed orlov option [ 75.764398][ T4567] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 75.981296][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.322029][ T4585] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 76.332202][ T4585] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 76.763973][ T4601] loop4: detected capacity change from 0 to 2048 [ 76.774677][ T4601] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 76.857080][ T4606] netlink: 68 bytes leftover after parsing attributes in process `syz.1.330'. [ 76.885798][ T4608] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.897533][ T3324] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.934052][ T4608] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.014122][ T4608] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.063965][ T4608] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.082392][ T44] Bluetooth: hci0: command 0x1003 tx timeout [ 77.088476][ T3559] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 77.097445][ T4531] tipc: Disabling bearer [ 77.119938][ T406] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.131635][ T406] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.143380][ T406] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.155243][ T406] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.653114][ T4620] program syz.3.335 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 77.664714][ T4620] loop3: detected capacity change from 0 to 256 [ 77.693303][ T4622] netlink: 24 bytes leftover after parsing attributes in process `syz.2.336'. [ 77.715072][ T4620] FAT-fs (loop3): Directory bread(block 64) failed [ 77.730617][ T4620] FAT-fs (loop3): Directory bread(block 65) failed [ 77.737470][ T4620] FAT-fs (loop3): Directory bread(block 66) failed [ 77.744507][ T4620] FAT-fs (loop3): Directory bread(block 67) failed [ 77.751185][ T4620] FAT-fs (loop3): Directory bread(block 68) failed [ 77.767842][ T4624] loop1: detected capacity change from 0 to 1024 [ 77.787372][ T4620] FAT-fs (loop3): Directory bread(block 69) failed [ 77.794206][ T4620] FAT-fs (loop3): Directory bread(block 70) failed [ 77.795148][ T4624] EXT4-fs: Ignoring removed orlov option [ 77.803641][ T4620] FAT-fs (loop3): Directory bread(block 71) failed [ 77.816322][ T4620] FAT-fs (loop3): Directory bread(block 72) failed [ 77.823081][ T4620] FAT-fs (loop3): Directory bread(block 73) failed [ 77.842223][ T4624] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 77.847011][ T4636] netlink: 68 bytes leftover after parsing attributes in process `syz.2.341'. [ 77.870257][ T4620] vlan2: entered allmulticast mode [ 77.957733][ T4644] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.006662][ T4645] loop2: detected capacity change from 0 to 2048 [ 78.016034][ T2194] Bluetooth: hci0: Frame reassembly failed (-84) [ 78.025655][ T4644] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.040754][ T4645] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 78.084433][ T4644] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.122837][ T4650] tipc: Enabled bearer , priority 0 [ 78.133717][ T2194] Bluetooth: hci1: Frame reassembly failed (-84) [ 78.140942][ T2194] Bluetooth: hci1: Frame reassembly failed (-84) [ 78.174316][ T4644] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.219866][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.230487][ T2194] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.239257][ T2194] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.249945][ T2194] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.270442][ T2194] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.630035][ T4659] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.650283][ T4661] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.674301][ T4659] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.687358][ T2194] Bluetooth: hci2: Frame reassembly failed (-84) [ 78.714028][ T4661] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.745670][ T4664] tipc: Enabled bearer , priority 0 [ 78.754642][ T4659] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.794162][ T4661] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.834177][ T4659] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.854324][ T4661] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.880743][ T383] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.892622][ T383] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.904229][ T383] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.915749][ T383] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.930916][ T383] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.943411][ T383] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.955140][ T383] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.966910][ T383] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.522766][ T29] kauditd_printk_skb: 2267 callbacks suppressed [ 79.522780][ T29] audit: type=1326 audit(1768585272.981:22903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4668 comm="syz.1.350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f6e03fa2005 code=0x7ffc0000 [ 79.553301][ T29] audit: type=1326 audit(1768585272.981:22904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4668 comm="syz.1.350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f6e03fa2005 code=0x7ffc0000 [ 79.576828][ T29] audit: type=1326 audit(1768585272.981:22905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4668 comm="syz.1.350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f6e03fa2005 code=0x7ffc0000 [ 79.600542][ T29] audit: type=1326 audit(1768585272.981:22906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4668 comm="syz.1.350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f6e03fa2005 code=0x7ffc0000 [ 79.624070][ T29] audit: type=1326 audit(1768585272.981:22907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4668 comm="syz.1.350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f6e03fa2005 code=0x7ffc0000 [ 79.646793][ T4676] netlink: 68 bytes leftover after parsing attributes in process `syz.4.352'. [ 79.648126][ T29] audit: type=1326 audit(1768585272.981:22908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4668 comm="syz.1.350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f6e03fa2005 code=0x7ffc0000 [ 79.680076][ T29] audit: type=1326 audit(1768585272.981:22909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4668 comm="syz.1.350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f6e03fa2005 code=0x7ffc0000 [ 79.703798][ T29] audit: type=1326 audit(1768585272.981:22910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4668 comm="syz.1.350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f6e03fa2005 code=0x7ffc0000 [ 79.727314][ T29] audit: type=1326 audit(1768585272.981:22911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4668 comm="syz.1.350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f6e03f665e7 code=0x7ffc0000 [ 79.750717][ T29] audit: type=1326 audit(1768585272.981:22912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4668 comm="syz.1.350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6e03f0b829 code=0x7ffc0000 [ 80.042361][ T3559] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 80.052149][ T4643] tipc: Disabling bearer [ 80.202339][ T3560] Bluetooth: hci1: command 0x1003 tx timeout [ 80.202339][ T44] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 80.230512][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.260506][ T4684] loop2: detected capacity change from 0 to 2048 [ 80.274328][ T4684] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 80.303599][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.392012][ T4690] loop2: detected capacity change from 0 to 2048 [ 80.406483][ T4690] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 80.537704][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.762364][ T4239] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 80.762403][ T44] Bluetooth: hci2: command 0x1003 tx timeout [ 80.779191][ T4658] tipc: Disabling bearer [ 82.062523][ T4735] ================================================================== [ 82.070668][ T4735] BUG: KCSAN: data-race in atime_needs_update / inode_update_timestamps [ 82.079045][ T4735] [ 82.081391][ T4735] write to 0xffff88811a23de04 of 4 bytes by task 4732 on cpu 0: [ 82.089045][ T4735] inode_update_timestamps+0x147/0x270 [ 82.094559][ T4735] file_update_time_flags+0x26c/0x310 [ 82.099976][ T4735] file_update_time+0x17/0x20 [ 82.104704][ T4735] shmem_file_write_iter+0x9c/0xf0 [ 82.109868][ T4735] iter_file_splice_write+0x66b/0xa20 [ 82.115285][ T4735] direct_splice_actor+0x156/0x2a0 [ 82.120435][ T4735] splice_direct_to_actor+0x312/0x680 [ 82.125843][ T4735] do_splice_direct+0xda/0x150 [ 82.130648][ T4735] do_sendfile+0x380/0x650 [ 82.135101][ T4735] __x64_sys_sendfile64+0x105/0x150 [ 82.140343][ T4735] x64_sys_call+0x2db1/0x3000 [ 82.145066][ T4735] do_syscall_64+0xca/0x2b0 [ 82.149610][ T4735] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.155537][ T4735] [ 82.157890][ T4735] read to 0xffff88811a23de04 of 4 bytes by task 4735 on cpu 1: [ 82.165475][ T4735] atime_needs_update+0x2a8/0x3e0 [ 82.170531][ T4735] touch_atime+0x4a/0x340 [ 82.174896][ T4735] shmem_file_read_iter+0x477/0x540 [ 82.180145][ T4735] copy_splice_read+0x442/0x660 [ 82.185121][ T4735] splice_direct_to_actor+0x290/0x680 [ 82.190540][ T4735] do_splice_direct+0xda/0x150 [ 82.195332][ T4735] do_sendfile+0x380/0x650 [ 82.199792][ T4735] __x64_sys_sendfile64+0x105/0x150 [ 82.205024][ T4735] x64_sys_call+0x2db1/0x3000 [ 82.209737][ T4735] do_syscall_64+0xca/0x2b0 [ 82.214273][ T4735] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.220203][ T4735] [ 82.222551][ T4735] value changed: 0x1e7ab2e9 -> 0x1f134969 [ 82.228293][ T4735] [ 82.230651][ T4735] Reported by Kernel Concurrency Sanitizer on: [ 82.236831][ T4735] CPU: 1 UID: 0 PID: 4735 Comm: syz.4.371 Not tainted syzkaller #0 PREEMPT(voluntary) [ 82.246518][ T4735] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 82.256603][ T4735] ==================================================================