last executing test programs: 3.481535909s ago: executing program 4 (id=2389): syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x81c000, &(0x7f0000000080)={[{@nouid32}], [{@seclabel}]}, 0x1, 0x72b, &(0x7f00000007c0)="$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") perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x37, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x4c58, 0x10000, 0x0, 0x1, 0x8, 0x20002, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) futex(0x0, 0xd, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000)=0x2000000, 0x300) bpf$PROG_LOAD(0x5, 0x0, 0x0) execveat$binfmt(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) openat$binfmt(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000080)='./file0\x00', 0x800090, &(0x7f0000000700)=ANY=[@ANYBLOB="73686f72746e616d653d77696e6e742c756e695f786c6174653d312c756e695f786c6174653d302c756e695f786c6174653d302c756e695f786c6174653d312c73686f72746e616d653d6d697865642c73686f72746e616d653d77696e39352c757466383d302c726f6469722c73686f72746e616d653d6d697865642c73686f72746e616d653d77696e39352c696f636861727365743d63703835372c636f6465706167653d3836302c73686f72746e616d653d6c6f7765722c73686f72746e616d653d6c6f7765722c757466383d312c73686f72746e616d653d6c6f7765722c757466383d312c73686f72746e616d653d6c6f7765722c756e695f786c6174653d312c756e695f786c6174653d312c73686f72746e616d653d77696e39352c726f6469722c73686f72746e616d653d6d697865642c73686f72746e616d653d6d697865642c757466383d302c757466383d302c6e6e6f6e756d74616929b1312c7375626a5f757365723d5c242a5b292a3a275c2c00"], 0x6, 0x2dd, &(0x7f0000000d40)="$eJzs3b1rJGUYAPBnNrMfarEprETwBS2sjsu1NglyB2IqjxSnggbvDiQbhAtE/MD1KrGzsfQvEAT/EBs7S8FWsPPEg5H5yn7csNmT24iX36+4ezPzPPM+7zuTZJo8+/6Lx0e3U9y9//mvMRpl0dsdRjzIYjt60foyFux+EwDA/9mDoog/ilrH6V++XpE72mBdAMDmnPP7v5FX/94qI368uNoAgM24eevtN/f296+/ldIobhx/dXqQRUT5f31+7258GJO4E1djHA8jqheFflRvC+XwRlEU0zyVtuOV4+npQZl5/N5PzfX3fo+o8ndiHNvVobO3jSr/jf3rO6k2lz8t63i2mX+3zL8W43j+LHkh/1pHfhwM4tWX5+q/EuP4+YP4KCZxuypilv/FTkqvF9/++dk7ZXllfjY9PRhWcTPFVjv59ILvEQAAAAAAAAAAAAAAAAAAAAAAT58rKaW/i5SGUfXvKQ81/Xe2HpZf9CO16v4+72Z1YtMfKGsvNOsPFL2iKKZFfNf217maUiqawFl/nzxeyJvGggAAAAAAAAAAAAAAAAAAAHDJnXzy6dHhZHLn3hMZtN0A8oj462bEv73O7tyRl2J18LCZ83Ay6TXDxZh8/khstTFZxMoyykU8oW05b/DMIzU3g+9/6MwqV3SSR9ep0fmT9rvneszBx/16Hztj2qfr6DDr3sPhWfGj8sbF8o0bRPfs/Vg6Mmjv53Jw+yiut5xB56nxY2/L4LlqMF0RE9mq74vXfltYThZLwYOq40Zner8ZdO1G/Wys9TzHqE5/9GdFplsHAAAAAAAAAAAAAAAAAABs1Oyvf+c+y791f2VqrxhusjIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAuDizz/9fZ5AvJq+RNYh7J//V2gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALg8/gkAAP//u3xRQA==") openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x40801, 0x0) fcntl$setstatus(r2, 0x4, 0x42000) ioctl$FS_IOC_GETFLAGS(r2, 0x5437, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="8b27ef8d7747db18093842dab4063b6a05876f67d4c379bec5959efbd6055ae35daeea333d"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x1, 0xc, &(0x7f00000002c0)=ANY=[@ANYRESOCT=r5, @ANYRES32=r5, @ANYRES8=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r6}, 0x10) ptrace$PTRACE_GETSIGMASK(0x420a, r0, 0x8, &(0x7f0000000000)) openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/tty/ldiscs\x00', 0x0, 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) 1.488685038s ago: executing program 4 (id=2413): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x1, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18) nanosleep(&(0x7f0000000040), 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) r3 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r4, 0x0, 0x80000}, 0x18) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000640)=ANY=[@ANYBLOB="180000000000000000000000000000001801", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) sendmsg$WG_CMD_GET_DEVICE(r5, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x40, 0x0, 0x300, 0x70bd25, 0x25dfdbfd, {}, [@WGDEVICE_A_IFINDEX={0x8}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_FWMARK={0x8}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e20}]}, 0x40}, 0x1, 0x0, 0x0, 0x4004004}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r5, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000080)='cdg\x00', 0x4) add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0, 0x0}, &(0x7f0000000300)=0xc) statx(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x0, 0x100, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r7, r8) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000540)='inet_sock_set_state\x00', r10}, 0x18) semtimedop(0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 1.409090448s ago: executing program 4 (id=2414): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0x18, 0xc, &(0x7f0000000000)=ANY=[@ANYRESHEX], 0x0, 0x4, 0x0, 0x0, 0x41000, 0x46, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x52, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffc01, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001c80)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x62, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x18) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x103381) ioctl$USBDEVFS_CONTROL(r1, 0xc0105500, &(0x7f0000000140)={0x80, 0x6, 0xf00, 0x0, 0x4, 0xfffffffc, 0x0}) unshare(0x68040200) r2 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$IP6T_SO_GET_INFO(r2, 0x29, 0x40, &(0x7f0000000280)={'security\x00', 0x0, [0x0, 0xb41, 0x20000005, 0x9, 0x9]}, &(0x7f0000000040)=0x54) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x100) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r3, 0x402c5342, &(0x7f0000000200)={0x7, 0x3, 0x9, {0x6, 0x7}, 0x40}) 1.31649112s ago: executing program 4 (id=2415): openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000780)={@broadcast, @random="6487a2bed3d6", @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x6c, 0x0, @private}}}}}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f00000002c0)={@void, @void, @eth={@random="339ed397e389", @dev={'\xaa\xaa\xaa\xaa\xaa', 0xf}, @val={@val={0x88a8, 0x2, 0x1}, {0x8100, 0x7, 0x1, 0x4}}, {@ipv4={0x800, @udp={{0x12, 0x4, 0x0, 0x0, 0x50, 0x0, 0xe000, 0xbc, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, {[@timestamp_prespec={0x44, 0x14, 0xf9, 0x3, 0xf, [{@local, 0x9}, {@broadcast, 0xe84}]}, @ssrr={0x89, 0x3, 0x9e}, @ssrr={0x89, 0x17, 0x91, [@private=0xa010102, @dev={0xac, 0x14, 0x14, 0xb}, @rand_addr=0x64010101, @local, @remote]}, @ra={0x94, 0x4}]}}, {0xa000, 0x86da, 0x8}}}}}}, 0x66) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000340), 0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x50) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYRES64=r4, @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x18) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="08010000", @ANYRES16=r3, @ANYBLOB="0100000000000000000001000000080001000000000014000480050003000000000005000300000000000800020001000000d00008800c0007800800060000000000240007"], 0x108}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}, 0x7fffffff}], 0x1, 0x10000, 0x0) r6 = socket$inet6(0xa, 0x80002, 0x0) futex(&(0x7f000000cffc)=0x1, 0xd, 0x0, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) setsockopt$inet6_mreq(r6, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) ioctl$FS_IOC_SETFSLABEL(r6, 0x41009432, &(0x7f00000002c0)="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") setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x43, &(0x7f0000000000)=0x8, 0x4) close_range(r0, 0xffffffffffffffff, 0x0) 1.149789153s ago: executing program 2 (id=2419): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67b}]}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000de0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kmem_cache_free\x00', r2}, 0x18) sendmmsg$inet(r1, &(0x7f00000039c0)=[{{&(0x7f0000000800)={0x2, 0x6e20, @multicast1}, 0x10, 0x0}}], 0x1, 0x2000c044) sendto$inet(r1, &(0x7f0000000c80)="e8", 0x6200, 0x12000000, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xe, 0x4, 0x4, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r4 = fsopen(&(0x7f00000001c0)='devpts\x00', 0x0) setrlimit(0x7, &(0x7f0000000400)) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) fsmount(r4, 0x0, 0xf) fsconfig$FSCONFIG_SET_FLAG(r4, 0x0, &(0x7f0000000040)='ro\x00', 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000181100"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x29e, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff22, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000001c80)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@int={0x0, 0x0, 0x0, 0x1, 0x5, 0x10}, @union={0x0, 0x1, 0x0, 0x5, 0x1, 0x0, [{0x0, 0x1, 0x8000000}]}]}}, 0x0, 0x42, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) personality(0x0) 1.131329753s ago: executing program 2 (id=2420): socket$inet6_udp(0xa, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040), 0x0, 0x1}, 0x38) bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0)={0x0, r0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x12, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000940)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000200)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000380)='kfree\x00', r2}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, 0x0, 0x8000) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0700000004000000080200000e"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7030000ec000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r4}, 0x18) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@deltaction={0x3c, 0x18, 0x1, 0x70bd28, 0x25dfdbfe, {0xa}, [@TCA_ACT_TAB={0x28, 0x1, [{0x10, 0x80, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0x14, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}]}]}, 0x3c}}, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)="d800000018008103e00312ba0d8105040a600300ff0f040b067c55a1bc000900b80006990700000015000500fef32702d3001500030001400200000901ac040098007f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04000000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b66bce0b42a9ecbee5de6ccd40dd6e4edef3d93452a92307f00000e970300"/216, 0xd8}], 0x1}, 0x48002) ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, &(0x7f0000000000)={0x7, 0x0, 0x2, 0x0, 0x0, "24c9f56163315886d420b81acd55ce5ac88f9e", 0xc}) r7 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$selinux_user(r7, &(0x7f0000000040)=ANY=[@ANYBLOB='system_u:object_r:auth_cache_t root'], 0x27) syz_open_dev$tty1(0xc, 0x4, 0x3) 1.057823554s ago: executing program 2 (id=2421): bpf$PROG_LOAD(0x5, 0x0, 0xffffffffffffff63) r0 = syz_open_procfs(0x0, &(0x7f0000000580)='attr/exec\x00') keyctl$join(0x1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r0, 0x0, &(0x7f0000000340)}) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1, 0x0, 0x1}, 0x18) io_uring_enter(0xffffffffffffffff, 0x567, 0xa1ff, 0x0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCGEFFECTS(r2, 0x80044584, &(0x7f0000001740)=""/4096) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, &(0x7f0000000c00)={0x34, &(0x7f00000001c0)={0x40, 0xa, 0x2, "8778"}, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) r3 = socket$igmp6(0xa, 0x3, 0x2) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'geneve1\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f00000005c0)={@dev={0xfe, 0x80, '\x00', 0x40}, @remote, @remote, 0x5, 0x2, 0x40, 0x400, 0xb7, 0xc20022, r5}) syz_emit_ethernet(0x5e, &(0x7f00000004c0)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd603000bb00282b00fc020000000000000000000000000000fe8000000000000000000000000000aa"], 0x0) 1.057197214s ago: executing program 1 (id=2422): socket$inet6_tcp(0xa, 0x1, 0x0) quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f0000000080)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) (fail_nth: 6) 780.938688ms ago: executing program 1 (id=2423): prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="80420000000000001400030076657468305f746f5f626f6e6400000008003a"], 0x44}}, 0x0) 780.458618ms ago: executing program 0 (id=2424): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0x20000026, &(0x7f0000000440)=ANY=[@ANYRESHEX=r0, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f60000008500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000200)=0x7) io_setup(0x6, &(0x7f0000000040)=0x0) io_getevents(r4, 0x3, 0x3, &(0x7f0000002a00)=[{}, {}, {}], 0x0) io_destroy(r4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='rss_stat\x00', r2}, 0x10) syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x800, 0x1, 0x40000333}, &(0x7f00000006c0), &(0x7f00000001c0)) fsopen(&(0x7f0000000040)='bdev\x00', 0x0) 780.119088ms ago: executing program 1 (id=2425): r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x77, 0x101301) ioctl$USBDEVFS_CONNECTINFO(r0, 0x80045503, &(0x7f00000000c0)) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000540), 0x84) r2 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x12, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000016"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa2c"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b80)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, @void, @value}, 0x94) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_emit_ethernet(0x6a, &(0x7f0000000040)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x80}, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x30, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x500, {0x0, 0x6, '\x00', 0x0, 0x0, 0x0, @private1, @private2}}}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x1300, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r4, 0x0, 0x400000000}, 0x18) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NODES(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={0x1c, r5, 0x1, 0x0, 0x0, {{}, {0x0, 0x6}}}, 0x1c}}, 0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x28, r5, 0x200, 0x70bd26, 0x25dfdbff, {{}, {}, {0xc, 0x14, 'syz1\x00'}}, ["", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20004004}, 0x400c080) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x3, &(0x7f0000000000)=[{0x3, 0x10, 0xd, 0x1}, {0x7, 0x81, 0xe, 0x9}, {0xff, 0x9, 0xc, 0x7}]}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setownex(r6, 0xf, &(0x7f0000000140)={0x2}) r7 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000280), r1) sendmsg$SEG6_CMD_DUMPHMAC(r2, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="00082bbd7000fedbdf25020000000500e7ff02080000080002000900000005ffff04000500030000000800130009000000080002008100020000000000000000000000000600"], 0x4c}, 0x1, 0x0, 0x0, 0x20000004}, 0x10) 714.345279ms ago: executing program 1 (id=2427): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b81000085"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r1) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000011c0)={0x38, r2, 0x1, 0x70bd27, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}, @ETHTOOL_A_BITSET_VALUE={0x4}]}]}, 0x38}}, 0x804) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) connect$bt_l2cap(r3, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f00000000c0)='mctp_key_acquire\x00', r0, 0x0, 0x832}, 0x18) getsockopt$bt_l2cap_L2CAP_LM(r3, 0x112, 0xe, 0x0, &(0x7f0000000080)) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000640)='./bus\x00', 0x0, &(0x7f0000000440)=ANY=[], 0x1, 0x1268, &(0x7f0000002500)="$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") mkdir(&(0x7f0000000040)='.\x02\x00', 0xe88022b11028290f) 670.353729ms ago: executing program 0 (id=2428): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000280)='tasks\x00', 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r2, 0x0, 0x8}, 0x18) r3 = syz_clone(0x4000, &(0x7f0000001000), 0x0, 0x0, 0x0, 0x0) write$cgroup_pid(r1, &(0x7f0000000400)=r3, 0x12) 669.43824ms ago: executing program 0 (id=2429): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="d8000000180081054e81f782db44b904021d005c06007c09e8fe55a10a0015400500142603600e1208000b0000000401a8001600a400014002000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360d070100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffec", 0xbd}, {&(0x7f0000000080)="dd4289470cce256876f2c9b17d97b68f2726ed8a10148545240f9f", 0x1b}], 0x2}, 0x410) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRESHEX, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$kcm(0x1e, 0x5, 0x0) sendmsg$kcm(r1, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000300)="80", 0x1}], 0x1}, 0x0) recvmsg(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000dc0)=""/255, 0xff}], 0x1, &(0x7f0000000480)=""/5, 0x5}, 0x40000010) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1600000000000000040000000100000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0034ee0000030000000000000000fec82d6805000000000000000000"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESHEX=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x1e, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={0xffffffffffffffff, 0x2000002, 0xe, 0xf00, &(0x7f0000000200)="df33c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r3, 0x29, 0x12, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0a00000003000000040000000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYRES32], 0x50) syz_open_dev$vcsu(&(0x7f0000000540), 0x2, 0x440800) utimes(0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_vs\x00') pread64(r4, &(0x7f0000000300)=""/86, 0x56, 0x4000000000000f3) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, @void, @value}, 0x94) socket$unix(0x1, 0x5, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10) r6 = socket$netlink(0x10, 0x3, 0x14) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000800)={0x2000003b, &(0x7f0000000180)}) shmat(0x0, &(0x7f0000ffa000/0x3000)=nil, 0x4000) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f00000001c0)={0x1000003, 0x300102, 0x0, 'queue1\x00', 0xffffffff}) r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x100) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r8, 0xc02c5341, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0) 613.9005ms ago: executing program 0 (id=2431): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x800f00, &(0x7f00000001c0)={[{@grpjquota}, {@discard}, {@norecovery}, {@noinit_itable}, {@nombcache}, {@minixdf}, {@usrjquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@jqfmt_vfsold}, {@dioread_lock}, {@noblock_validity}, {@nouid32}]}, 0x3, 0x465, &(0x7f0000000f00)="$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") pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x10fffff, 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00') sendfile(r0, r0, &(0x7f0000000040)=0x2eb4, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x9, 0x0, 0x0, 0x7ffc1ffb}]}) rt_sigaction(0x19, &(0x7f0000000000)={0xfffffffffffffffc, 0x44000006, 0x0}, 0x0, 0x8, &(0x7f0000000440)) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) io_setup(0x2, &(0x7f0000002400)=0x0) io_submit(r4, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x1, 0x0, r3, &(0x7f0000000040)="5400ffff0000", 0x6, 0x0, 0x0, 0x2}]) 613.05601ms ago: executing program 1 (id=2432): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='pstate_sample\x00', r1}, 0x18) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f288476d2610054c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 520.516711ms ago: executing program 1 (id=2435): pause() r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r1}, 0x9) futex_waitv(&(0x7f0000002340)=[{0x7, 0x0, 0x2}, {0x4, 0x0, 0x2}, {0x3, 0x0, 0x2}, {0x7, 0x0, 0x2}, {0x3, 0x0, 0x2}, {0x4, 0x0, 0x2}, {0x5, 0x0, 0x82}, {0x80000000, 0x0, 0x2}, {0x5cb5fafb, 0x0, 0x2}, {0xd0, 0x0, 0x2}, {0x2528, 0x0, 0x82}, {0x8, 0x0, 0x82}, {0xff, 0x0, 0x82}, {0x4, 0x0, 0x2}, {0x5, 0x0, 0x82}, {0x3, 0x0, 0x82}, {0x8, 0x0, 0x2}, {0x3, &(0x7f0000000700)=0x9, 0x82}, {0x6, 0x0, 0x1f7e2bbf99c3da4a}, {0xffff, 0x0, 0x2}, {0x0, 0x0, 0x2}, {0x5, 0x0, 0x2}, {0x1ff, 0x0, 0x82}, {0x9, 0x0, 0x82}, {0x80000001, 0x0, 0x2}, {0x4, 0x0, 0x2}, {0x7fff, &(0x7f0000000a40)=0xa, 0x82}, {0x401, &(0x7f0000000a80)=0x4, 0x82}, {0x9, &(0x7f0000000ac0)=0xfffffffffffffff8, 0x82}, {0x1, 0x0, 0x2}, {0x380000000, 0x0, 0x82}, {0x4b70a6ee, &(0x7f0000000b80)=0x10000, 0x82}, {0x4, 0x0, 0x2}, {0x3, 0x0, 0x82}, {0x3, 0x0, 0x2}, {0x4, 0x0, 0x2}, {0x8, 0x0, 0x82}, {0x8, 0x0, 0x82}, {0x461, 0x0, 0x82}, {0x6, 0x0, 0x82}, {0x7fffffff0000, 0x0, 0x80}, {0xb2b, 0x0, 0x82}, {0x2, &(0x7f0000000e40)=0x5, 0x82}, {0x5, 0x0, 0x2}, {0x0, 0x0, 0x2}, {0x3d0000, 0x0, 0x82}, {0x6, 0x0, 0x2}, {0x0, 0x0, 0x82}, {0x7c3, 0x0, 0x80}, {0x400, 0x0, 0x2}, {0x7, 0x0, 0x2}, {0x9, 0x0, 0x2}], 0x34, 0x0, 0x0, 0x0) (fail_nth: 6) 506.087172ms ago: executing program 3 (id=2436): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r0, 0x40045402, &(0x7f0000000140)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000083c0)={{0x1}}) r1 = epoll_create(0xc617) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f00000000c0)={0x7, 0x9dc5, 0x0, 0x0, 0xf}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) openat$selinux_create(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x0, 0x0}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x10, &(0x7f0000000680)=ANY=[@ANYBLOB="18050000000004000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b704000008000000850000009500000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000640)=r3, 0x4) r6 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r6, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x100, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, 0x0, 0x0) setsockopt$sock_int(r6, 0x1, 0x28, &(0x7f0000000040)=0x8004, 0x4) syz_emit_ethernet(0x83, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030086dd601b8b97004d88c19edace00000000000000002100000002ff02000000000000000000000000000104004e20004d13"], 0x0) recvmmsg(r6, &(0x7f0000001f00)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x40000122, 0x0) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r7, &(0x7f0000001800)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0) sendmsg$unix(r5, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0xc000090) bpf$MAP_CREATE(0x0, &(0x7f0000000fc0)=ANY=[@ANYBLOB="12000000030000000400000002"], 0x50) r8 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_group_source_req(r8, 0x29, 0x2e, &(0x7f0000000340)={0x4, {{0xa, 0x0, 0x3, @mcast1={0xff, 0x7}, 0xffffffb9}}, {{0xa, 0x4e62, 0x2, @dev={0xfe, 0x80, '\x00', 0x36}, 0x1}}}, 0x108) r9 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00') r10 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r10, 0x29, 0x2e, &(0x7f0000000200)={0x4, {{0xa, 0x4e24, 0x4, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x40000, @private1={0xfc, 0x1, '\x00', 0x40}, 0x4}}}, 0x108) preadv(r9, &(0x7f0000001ac0)=[{&(0x7f0000000480)=""/225, 0xe1}], 0x1, 0x5f, 0xfffffffc) 432.698053ms ago: executing program 4 (id=2437): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, &(0x7f0000000000), &(0x7f0000000040), 0x2}, 0x20) perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x0, 0x0, 0x2, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={&(0x7f0000000180)}, 0x13240, 0x0, 0x0, 0x5, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) mkdirat(0xffffffffffffff9c, 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000540)='./file0\x00', 0x204818, &(0x7f0000000780)={[{@overriderock}, {@nocompress}, {@hide}, {@session={'session', 0x3d, 0x55}}, {@gid}, {}, {@nocompress}, {@block={'block', 0x3d, 0x400}}]}, 0x1, 0x544, &(0x7f0000001000)="$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") bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYRES16], 0x48) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0x400000000}, 0x18) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) 416.556133ms ago: executing program 0 (id=2438): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100202, 0x0, 0xfffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r1, &(0x7f00000011c0)={0xfc, {"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", 0x1000}}, 0xffbc) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000004000"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) r4 = socket(0x840000000002, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000040)='gre0\x00', 0x10) sendmmsg$inet(r4, &(0x7f0000000440)=[{{&(0x7f00000004c0)={0x2, 0x4e20, @multicast1}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000340)="5825be57aff9352b356be67ca2746357d1787935589db15a23319e3f64fdf5f8", 0x20}], 0x1}}], 0x1, 0x840) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r5, &(0x7f00000001c0)={0xa, 0x4e21, 0x7f00, @remote, 0x3}, 0x1c) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r6}, &(0x7f0000000340), &(0x7f0000000300)}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='kmem_cache_free\x00', r7}, 0x18) open$dir(0x0, 0x0, 0x0) open$dir(0x0, 0x1, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) ftruncate(r8, 0x2000009) getsockname$packet(r4, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000880)=0x14) bpf$TOKEN_CREATE(0x24, &(0x7f00000008c0)={0x0, r3}, 0x8) openat$zero(0xffffffffffffff9c, &(0x7f0000002200), 0x202d40, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000000c0)={0xffffffffffffffff, 0x20, &(0x7f0000000040)={&(0x7f00000001c0)=""/103, 0x67, 0x0, &(0x7f0000000340)=""/214, 0xd6}}, 0x10) 361.290514ms ago: executing program 2 (id=2439): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="11ffff43b309520789e500000000000000"], 0x50) r3 = dup(r1) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f00000006c0), 0x1, 0x512, &(0x7f0000000c40)="$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") r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="14"], &(0x7f0000000000), 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r6}, 0x10) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c0000001500000001"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r7}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000080)={r7, &(0x7f0000000000), 0x0}, 0x20) syz_clone(0x500, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000032500000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000850000000f000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r9}, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0xf0) link(&(0x7f0000000200)='./file1\x00', &(0x7f0000000300)='./bus\x00') getsockname$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000001540)=0x14) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000005000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r11}, 0xd) r12 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) r13 = socket$netlink(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_LINK_PRI(r13, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000740)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="010028bd7000fc58cddbdf250100000000000000084100f5ff4b001800003d356962000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000003a505d9fe998174d21d3b67d617c3fbf07b3b1f0fd72522ce298777671a7823ab79fc0937678d1786eb19cf6c1bef4d5191f863002b2c8495e0f6e9ef185d0c604d5f5b319fdb6fc2ed1f055d7f039bc0600070ee5f0594f6d452ba50698e9d2a2ae94f4419ae1872a8807a222039a100411f94686f62167aabb25e1aa697820621e92cf100a7cc924c155b9045b0a9c0fd36a8af20e7154a42f6a96e3a1c6ef42808b006a1ce44a6d28d37536dc60ba5f43556380ff6cd4e12959ff46b685a4c0013400c4557d149917f8d14b78c7d40fd1a34175f2b40b42e37d105f2fbeb26243e3e09218fa4c773b6602c32b0bbab0675788b830a0"], 0x68}, 0x1, 0x0, 0x0, 0x8004}, 0x4000000) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000340)=@generic={&(0x7f0000000180)='./file0\x00', r2}, 0x18) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newtaction={0x68, 0x30, 0x301, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x4}, 0x1, r10}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 360.968014ms ago: executing program 3 (id=2440): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000280)='tasks\x00', 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r2, 0x0, 0x8}, 0x18) r3 = syz_clone(0x4000, &(0x7f0000001000), 0x0, 0x0, 0x0, 0x0) write$cgroup_pid(r1, &(0x7f0000000400)=r3, 0x12) 232.348386ms ago: executing program 2 (id=2441): socketpair$unix(0x1, 0x1, 0x0, 0x0) pipe(0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x36, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) kexec_load(0x3e00, 0x1, &(0x7f00000002c0)=[{0x0, 0x0, 0xff600000, 0x1000000}], 0x0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r3, 0x29, 0x38, 0x0, 0x0) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0xb, @empty}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="000200000000000007"], 0x20) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffe, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000500000018120000", @ANYRES32=r4, @ANYBLOB="00b7bc0800000c0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000043000000950000000000003427a3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000001640)='kfree\x00', r5}, 0x10) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c) 229.941396ms ago: executing program 3 (id=2442): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="d8000000180081054e81f782db44b904021d005c06007c09e8fe55a10a0015400500142603600e1208000b0000000401a8001600a400014002000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360d070100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffec", 0xbd}, {&(0x7f0000000080)="dd4289470cce256876f2c9b17d97b68f2726ed8a10148545240f9f", 0x1b}], 0x2}, 0x410) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRESHEX, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$kcm(0x1e, 0x5, 0x0) sendmsg$kcm(r1, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000300)="80", 0x1}], 0x1}, 0x0) recvmsg(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000dc0)=""/255, 0xff}], 0x1, &(0x7f0000000480)=""/5, 0x5}, 0x40000010) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1600000000000000040000000100000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0034ee0000030000000000000000fec82d6805000000000000000000"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESHEX=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x1e, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={0xffffffffffffffff, 0x2000002, 0xe, 0xf00, &(0x7f0000000200)="df33c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r3, 0x29, 0x12, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0a00000003000000040000000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYRES32], 0x50) syz_open_dev$vcsu(&(0x7f0000000540), 0x2, 0x440800) utimes(0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_vs\x00') pread64(r4, &(0x7f0000000300)=""/86, 0x56, 0x4000000000000f3) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, @void, @value}, 0x94) socket$unix(0x1, 0x5, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10) r6 = socket$netlink(0x10, 0x3, 0x14) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000800)={0x2000003b, &(0x7f0000000180)}) shmat(0x0, &(0x7f0000ffa000/0x3000)=nil, 0x4000) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f00000001c0)={0x1000003, 0x300102, 0x0, 'queue1\x00', 0xffffffff}) r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x100) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r8, 0xc02c5341, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0) 207.649406ms ago: executing program 4 (id=2443): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r0}, 0x18) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70200001400f400b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x2d) socket$netlink(0x10, 0x3, 0x4) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) r7 = openat$sysfs(0xffffff9c, &(0x7f0000000040)='/sys/kernel/notes', 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000380)='hrtimer_start\x00', r9}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000380)='hrtimer_start\x00', r10}, 0x18) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) finit_module(r7, 0x0, 0x2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x3, 0xc, &(0x7f0000000100)=ANY=[@ANYRESDEC=0x0, @ANYRES32=r6, @ANYRESDEC=r7], 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 179.873636ms ago: executing program 3 (id=2444): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x10) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000000)='system.posix_acl_access\x00', 0x0, 0x94, 0x1) 137.551227ms ago: executing program 3 (id=2445): r0 = socket$inet_smc(0x2b, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x4, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x9, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8001, @void, @value}, 0x94) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000000)={0x1, 'veth0_virt_wifi\x00', 0x2000000}, 0x18) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0xe, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7030000ec000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r3}, 0x18) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73f72cc9f0ba1f848350000005e120602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x4000850) 85.685708ms ago: executing program 3 (id=2446): r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2, 0xe, 0x9, 0x2e, 0x0, 0x8, 0x10a20, 0x4, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_config_ext={0x8, 0x7fffffff}, 0x2, 0x3ff, 0x0, 0x6, 0x1, 0x5395, 0x5, 0x0, 0x401, 0x0, 0x7}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x2) r1 = eventfd(0x44b) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x400400, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000004c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000480)={&(0x7f0000000140)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWFLOWTABLE={0x64, 0x16, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x401, 0x0, 0x0, {0x0, 0x0, 0x6}, @NFT_OBJECT_COUNTER=@NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}}, @NFT_MSG_DELRULE={0x164, 0x8, 0xa, 0x55e76307a3f127a8, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFTA_RULE_COMPAT={0x4c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x3c}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x16}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x21}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x8914}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x886c}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x3c}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x21}]}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT={0x1c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x73}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x2e}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8}]}, @NFTA_RULE_COMPAT={0x24, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0xf6}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x33}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0xff}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x1}]}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}, @NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @range={{0xa}, @void}}]}, @NFTA_RULE_USERDATA={0x9f, 0x7, 0x1, 0x0, "b4c0d200e43b1a71770b533b8c5a1ae56658fe25c2c04cf022512f1436f80a771c2a055ebb2009f0f2582fe37b0aa26173be5e38e71297f543790318f20c4d7ad55c4b626360a472041edfda20130e9e064634834b27534e51d8d734726e328f42125fe9901e906900d5d877e88d5b5750f7d2bb40802494db266435b9d7783ca3728477550ed5eaf11f823fc35e752725118a8e696f045aa2396f"}]}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x301, 0x0, 0x0, {0x0, 0x0, 0x9}, @NFT_OBJECT_CONNLIMIT=@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}}, @NFT_MSG_NEWCHAIN={0x74, 0x3, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0x7}, [@NFTA_CHAIN_COUNTERS={0x58, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xff}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x200}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xffffffff00000001}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x86}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x3ff}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x3}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x5}]}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffe}]}, @NFT_MSG_NEWFLOWTABLE={0x34, 0x16, 0xa, 0x801, 0x0, 0x0, {0x5, 0x0, 0x9}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWFLOWTABLE={0x38, 0x16, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0xa}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}], {0x14}}, 0x310}}, 0x4000800) io_setup(0x7, &(0x7f0000000500)=0x0) io_submit(r4, 0x6, &(0x7f0000000940)=[&(0x7f0000000580)={0x0, 0x0, 0x0, 0x8, 0xc, 0xffffffffffffffff, &(0x7f0000000540)="8c5e9dacd5c03c4366", 0x9, 0x100, 0x0, 0x1}, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x3, 0x4, r3, &(0x7f00000005c0)="2fcb61b3e07cf31f5bbbd9634029af7fa9a6fb479b4ee628dd358798b809bf212487eede7fc398797a6c66e00827f8dafb6edcb473a4714a2abda1435545feef3f7e745f787e0eea31e5578720fb79c121f072f0f09ac62598fc6aaa3678905588acb6dcaa20b63fa74aa45ca8393b49db7937039f99f60df065c62cb202318606cae609d9f5dfb057b1a9f3eaea8ccacaf87ae9f5b25ded12c4d8b5fb56c67d48a52f0152", 0xa5, 0x5, 0x0, 0x3, r2}, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x1, 0x9, r0, &(0x7f00000006c0)='sh|', 0x3, 0xb, 0x0, 0x3, r2}, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x2, 0x4, r3, &(0x7f0000000740)="b30a070f5a3c22a71ae8e734a604df096585392b1d2066a3d310e8392b1ace01e9695abdc374f7b26b9ef79d13acf891d38bc60776d1a81c7fde3f83452244e4c8e3683f7835f6f2560fd13142c3768958b10a91b4e3570a225cf147c64702fc75e2f4df1d36845e83de9a14ac3d04b3b16de415d5a7115e6c561df555d5d013179339b7a5d7552a206e71c875ac5b0f90a0da6cdb354a437a7909c019dfdd2076b395bb9853e2faff5964b74f8c0a1ca6", 0xb1, 0x9, 0x0, 0x1, r2}, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x2, 0x0, r3, &(0x7f0000000840), 0x0, 0x306e7c2b}, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x6, r3, &(0x7f00000008c0)="0a40438ae41f3bd704b254ecec9dca228be366eb2eb4035f30e22d0f8176", 0x1e, 0x6, 0x0, 0x2, r2}]) ioctl$HIDIOCGRDESCSIZE(r1, 0x80044801, &(0x7f0000000980)) timer_create(0x4, &(0x7f0000001ac0)={0x0, 0x15, 0x2, @thr={&(0x7f00000009c0)="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", &(0x7f00000019c0)="1a7ac30eacce9f6b3af8a096699f13f5415e850d7a03a7d2b675ec3bacebd6990924304a6ed54590dbe2dea25dec50908f81c82f4dbc3932492894f12033b4a61f06728e3eb09df4b34349f8cb8da98c2de6e17c09fc33b0eba73f208f6ca0b16499219ce017723839584f007391492a6c7546edf62e86402136ff04e994ece0cfe7b8cb5245bb69ec3857958fb00708ca1cfe7d04d21ebdad4bfdb78792b62f12ff3f1f1103f79e6a6bf77701d8892fc130b24878e815d7860d282d3c215c100c954f9a83723eee41f45b8c20ae835bc96f4533baa32bcb6bc88efc52de7cf1871db5cdb5"}}, &(0x7f0000001b00)=0x0) r6 = gettid() ptrace$ARCH_MAP_VDSO_64(0x1e, r6, 0x3, 0x2003) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000001b40)={0x0}, &(0x7f0000001b80)=0xc) mq_notify(r3, &(0x7f0000001bc0)={0x0, 0x12, 0x1, @tid=r7}) fsetxattr$trusted_overlay_origin(r3, &(0x7f0000001c00), &(0x7f0000001c40), 0x2, 0x0) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001cc0), r2) sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f0000001e40)={&(0x7f0000001c80)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001e00)={&(0x7f0000001d00)={0xc8, r8, 0x2, 0x70bd29, 0x25dfdbff, {}, [@TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7ff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2430}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2a}]}, @TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}]}, @TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x36}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xfffffffc}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}]}, @TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_LINK={0x4}]}, 0xc8}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) ioctl$LOOP_SET_STATUS(r3, 0x4c02, &(0x7f0000001e80)={0x0, {}, 0x0, {}, 0x0, 0x1, 0x1d, 0x10, "620574d56ab18233bcc02bdc586f9cf108c75681d2fe10e3f172b08822926783bb1f0a07dbba8d2196f4e0c86083c37a47fd2d6e5303861c96f5aca073748cc2", "016c80b0828caafbd30dd56b4587e524be52a4f528328de1ed49b3c16ef94b9d", [0x8000000000000001, 0x8000000100000]}) timer_create(0x0, &(0x7f0000002000)={0x0, 0x7, 0x2, @thr={&(0x7f0000001f40)="1e7709024b3ffe53abc7d8f9b03093f9eb156b6aa3d926358093b7b7531035b66194441f99572f7ec119d8", &(0x7f0000001f80)="214be2331392526fc77cdd26f18cd0fc3b3601cd1fdcb928762b2cebfbfa08c9fe655550f8bcdf730970960e5eb5eb5966c3b945d84c8b20acb93fe1b0beca94da3e7281a9936cb6473a5a8403ae1ac4de48d12e9057153e9233797db018ef4680801a2a6c2d0568f2a3"}}, &(0x7f0000002040)) socket$inet6(0xa, 0x2, 0x100) ptrace$ARCH_GET_FS(0x1e, r6, &(0x7f0000002080), 0x1003) timer_delete(r5) fsconfig$FSCONFIG_CMD_RECONFIGURE(r2, 0x7, 0x0, 0x0, 0x0) ioctl$SG_BLKTRACESETUP(r3, 0xc0481273, &(0x7f00000020c0)={'\x00', 0x52, 0x2, 0x2, 0x4, 0x0, r7}) writev(r1, &(0x7f00000031c0)=[{&(0x7f0000002140)="06f7485f62c6d2a5fef04b439aec45770ea79285b542531373a8a696bd33bab3a567403dec66f29c4b78678a6c8e36b8bb1fce1de8864ed35cb147488c1686", 0x3f}, {&(0x7f0000002180)="0e51dd2442792a2f05a793b7b08605e708d8", 0x12}, {&(0x7f00000021c0)="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", 0x1000}], 0x3) r9 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000003240)={&(0x7f0000003200)='xen_cpu_set_ldt\x00', r3, 0x0, 0x7fffffffffffffff}, 0x18) sendmsg$NFNL_MSG_ACCT_GET(r3, &(0x7f0000003380)={&(0x7f0000003280), 0xc, &(0x7f0000003340)={&(0x7f00000032c0)={0x48, 0x1, 0x7, 0x301, 0x0, 0x0, {0xb3da235189901837}, [@NFACCT_FILTER={0x34, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x61}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x7e}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x8}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0xdba1}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0xd7f}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x9}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x40000) syz_io_uring_setup(0x1ee0, &(0x7f00000033c0)={0x0, 0xcebf, 0x1, 0x1, 0x3d1, 0x0, r2}, &(0x7f0000003440), &(0x7f0000003480)) sched_setscheduler(r7, 0x4, &(0x7f00000034c0)=0x9) ioctl$sock_inet_SIOCGIFDSTADDR(r2, 0x8917, &(0x7f0000003500)={'geneve0\x00', {0x2, 0x0, @initdev}}) ioctl$PERF_EVENT_IOC_PERIOD(r9, 0x40082404, &(0x7f0000003540)=0x6) 32.825059ms ago: executing program 2 (id=2447): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000009900000001"], 0x48) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000a80)={'#! ', '\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/'}, 0x51) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) pread64(r1, &(0x7f0000000b80)=""/4089, 0xff9, 0x5) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0xf, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2, 0x0, 0x7}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) socketpair(0x22, 0x4, 0x4, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x8, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f00000002c0)={0x14}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r4, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xffffffff, 0x0, 0x0, @void, @value, @void, @value}, 0x50) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'veth1_vlan\x00'}) finit_module(0xffffffffffffffff, &(0x7f0000000280)='memory.events.local\x00', 0x1) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) syslog(0x4, &(0x7f0000000140)=""/179, 0xb3) 0s ago: executing program 0 (id=2448): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x10) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000000)='system.posix_acl_access\x00', 0x0, 0x94, 0x1) (fail_nth: 2) kernel console output (not intermixed with test programs): adm_t pid=8687 comm="syz.4.1965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22594ee929 code=0x7ffc0000 [ 137.377704][ T29] audit: type=1326 audit(1750163696.496:28933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8687 comm="syz.4.1965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f22594ee929 code=0x7ffc0000 [ 137.401296][ T29] audit: type=1326 audit(1750163696.496:28934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8687 comm="syz.4.1965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22594ee929 code=0x7ffc0000 [ 137.407871][ T8691] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1967'. [ 137.424808][ T29] audit: type=1326 audit(1750163696.496:28935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8687 comm="syz.4.1965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f22594ee929 code=0x7ffc0000 [ 137.424835][ T29] audit: type=1326 audit(1750163696.496:28936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8687 comm="syz.4.1965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22594ee929 code=0x7ffc0000 [ 137.424878][ T29] audit: type=1326 audit(1750163696.496:28937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8687 comm="syz.4.1965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f22594ee929 code=0x7ffc0000 [ 137.436777][ T8691] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1967'. [ 137.457460][ T29] audit: type=1326 audit(1750163696.496:28938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8687 comm="syz.4.1965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22594ee929 code=0x7ffc0000 [ 137.607767][ T8701] 9pnet_fd: Insufficient options for proto=fd [ 137.755302][ T8709] lo speed is unknown, defaulting to 1000 [ 137.762360][ T8709] lo speed is unknown, defaulting to 1000 [ 138.103964][ T8721] FAULT_INJECTION: forcing a failure. [ 138.103964][ T8721] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 138.117136][ T8721] CPU: 0 UID: 0 PID: 8721 Comm: syz.3.1977 Not tainted 6.16.0-rc2-syzkaller-00024-g9afe652958c3 #0 PREEMPT(voluntary) [ 138.117160][ T8721] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 138.117171][ T8721] Call Trace: [ 138.117176][ T8721] [ 138.117182][ T8721] __dump_stack+0x1d/0x30 [ 138.117216][ T8721] dump_stack_lvl+0xe8/0x140 [ 138.117238][ T8721] dump_stack+0x15/0x1b [ 138.117256][ T8721] should_fail_ex+0x265/0x280 [ 138.117288][ T8721] should_fail+0xb/0x20 [ 138.117315][ T8721] should_fail_usercopy+0x1a/0x20 [ 138.117356][ T8721] _copy_to_user+0x20/0xa0 [ 138.117378][ T8721] simple_read_from_buffer+0xb5/0x130 [ 138.117488][ T8721] proc_fail_nth_read+0x100/0x140 [ 138.117509][ T8721] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 138.117544][ T8721] vfs_read+0x1a0/0x6f0 [ 138.117611][ T8721] ? __rcu_read_unlock+0x4f/0x70 [ 138.117634][ T8721] ? __fget_files+0x184/0x1c0 [ 138.117656][ T8721] ksys_read+0xda/0x1a0 [ 138.117750][ T8721] __x64_sys_read+0x40/0x50 [ 138.117777][ T8721] x64_sys_call+0x2d77/0x2fb0 [ 138.117819][ T8721] do_syscall_64+0xd2/0x200 [ 138.117835][ T8721] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 138.117912][ T8721] ? clear_bhb_loop+0x40/0x90 [ 138.117929][ T8721] ? clear_bhb_loop+0x40/0x90 [ 138.117947][ T8721] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.117969][ T8721] RIP: 0033:0x7ffa8a2bd33c [ 138.117984][ T8721] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 138.118021][ T8721] RSP: 002b:00007ffa88927030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 138.118038][ T8721] RAX: ffffffffffffffda RBX: 00007ffa8a4e5fa0 RCX: 00007ffa8a2bd33c [ 138.118092][ T8721] RDX: 000000000000000f RSI: 00007ffa889270a0 RDI: 0000000000000005 [ 138.118103][ T8721] RBP: 00007ffa88927090 R08: 0000000000000000 R09: 0000000000000000 [ 138.118113][ T8721] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 138.118139][ T8721] R13: 0000000000000000 R14: 00007ffa8a4e5fa0 R15: 00007fff8ebd8698 [ 138.118154][ T8721] [ 138.496048][ T8734] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=8734 comm=syz.3.1983 [ 138.508607][ T8734] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=8734 comm=syz.3.1983 [ 138.550047][ T8736] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 138.570611][ T8736] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.643121][ T8736] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.740807][ T8736] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.822710][ T8736] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.873235][ T8747] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1988'. [ 138.903036][ T8747] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1988'. [ 138.913617][ T8736] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.924032][ T8749] lo: entered promiscuous mode [ 138.929092][ T8749] lo: entered allmulticast mode [ 138.934349][ T8749] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 138.952160][ T8749] netlink: 'syz.4.1989': attribute type 8 has an invalid length. [ 138.952589][ T8736] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.972868][ T8736] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.987929][ T8736] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.115855][ T8765] loop4: detected capacity change from 0 to 2048 [ 139.149296][ T8765] loop4: p1 < > p4 [ 139.153714][ T8765] loop4: p4 size 8388608 extends beyond EOD, truncated [ 139.273504][ T8772] loop4: detected capacity change from 0 to 512 [ 139.290894][ T8772] EXT4-fs (loop4): too many log groups per flexible block group [ 139.298671][ T8772] EXT4-fs (loop4): failed to initialize mballoc (-12) [ 139.305517][ T8772] EXT4-fs (loop4): mount failed [ 139.583375][ T8778] lo speed is unknown, defaulting to 1000 [ 139.590112][ T8778] lo speed is unknown, defaulting to 1000 [ 140.435217][ T8781] FAULT_INJECTION: forcing a failure. [ 140.435217][ T8781] name failslab, interval 1, probability 0, space 0, times 0 [ 140.447888][ T8781] CPU: 0 UID: 0 PID: 8781 Comm: syz.3.2002 Not tainted 6.16.0-rc2-syzkaller-00024-g9afe652958c3 #0 PREEMPT(voluntary) [ 140.447940][ T8781] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 140.447954][ T8781] Call Trace: [ 140.447961][ T8781] [ 140.447969][ T8781] __dump_stack+0x1d/0x30 [ 140.447987][ T8781] dump_stack_lvl+0xe8/0x140 [ 140.448003][ T8781] dump_stack+0x15/0x1b [ 140.448064][ T8781] should_fail_ex+0x265/0x280 [ 140.448162][ T8781] should_failslab+0x8c/0xb0 [ 140.448184][ T8781] kmem_cache_alloc_lru_noprof+0x55/0x310 [ 140.448210][ T8781] ? sock_alloc_inode+0x34/0xa0 [ 140.448258][ T8781] ? __pfx_sock_alloc_inode+0x10/0x10 [ 140.448339][ T8781] sock_alloc_inode+0x34/0xa0 [ 140.448416][ T8781] alloc_inode+0x40/0x170 [ 140.448505][ T8781] __sock_create+0x122/0x5b0 [ 140.448530][ T8781] ? _get_random_bytes+0x161/0x190 [ 140.448583][ T8781] sock_create_kern+0x38/0x50 [ 140.448605][ T8781] udp_sock_create4+0x66/0x2a0 [ 140.448672][ T8781] rxrpc_lookup_local+0x824/0xc70 [ 140.448743][ T8781] rxrpc_bind+0x31c/0x490 [ 140.448769][ T8781] __sys_bind+0x1d1/0x2a0 [ 140.448797][ T8781] __x64_sys_bind+0x3f/0x50 [ 140.448824][ T8781] x64_sys_call+0x2086/0x2fb0 [ 140.448866][ T8781] do_syscall_64+0xd2/0x200 [ 140.448884][ T8781] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 140.448906][ T8781] ? clear_bhb_loop+0x40/0x90 [ 140.448924][ T8781] ? clear_bhb_loop+0x40/0x90 [ 140.448955][ T8781] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.448978][ T8781] RIP: 0033:0x7ffa8a2be929 [ 140.448993][ T8781] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 140.449129][ T8781] RSP: 002b:00007ffa88927038 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 140.449149][ T8781] RAX: ffffffffffffffda RBX: 00007ffa8a4e5fa0 RCX: 00007ffa8a2be929 [ 140.449163][ T8781] RDX: 0000000000000024 RSI: 0000200000000000 RDI: 0000000000000006 [ 140.449174][ T8781] RBP: 00007ffa88927090 R08: 0000000000000000 R09: 0000000000000000 [ 140.449184][ T8781] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 140.449194][ T8781] R13: 0000000000000000 R14: 00007ffa8a4e5fa0 R15: 00007fff8ebd8698 [ 140.449240][ T8781] [ 140.667824][ T8781] socket: no more sockets [ 140.839500][ T8801] loop3: detected capacity change from 0 to 512 [ 140.899663][ T8801] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.2005: bg 0: block 5: invalid block bitmap [ 140.927448][ T8801] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 140.956737][ T8801] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.2005: invalid indirect mapped block 3 (level 2) [ 141.005361][ T8801] EXT4-fs (loop3): 2 truncates cleaned up [ 141.026012][ T8801] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 141.119338][ T8798] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 141.130211][ T8812] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=8812 comm=syz.2.2009 [ 141.142691][ T8812] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=8812 comm=syz.2.2009 [ 141.163862][ T8798] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000. [ 141.169018][ T8814] netlink: 156 bytes leftover after parsing attributes in process `syz.4.2010'. [ 141.182971][ T8814] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2010'. [ 141.217178][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.249983][ T8820] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2012'. [ 141.277658][ T8820] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2012'. [ 141.414742][ T8830] loop3: detected capacity change from 0 to 2048 [ 141.469780][ T8830] loop3: p1 < > p4 [ 141.474450][ T8830] loop3: p4 size 8388608 extends beyond EOD, truncated [ 141.564737][ T8838] loop3: detected capacity change from 0 to 512 [ 141.580569][ T8838] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 141.593865][ T8838] ext4 filesystem being mounted at /386/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 141.622999][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.634775][ T8842] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=8842 comm=syz.1.2021 [ 141.647323][ T8842] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=8842 comm=syz.1.2021 [ 141.757597][ T8849] hsr_slave_0: left promiscuous mode [ 141.763377][ T8849] 0·: left promiscuous mode [ 141.809398][ T29] kauditd_printk_skb: 96 callbacks suppressed [ 141.809413][ T29] audit: type=1400 audit(1750163700.956:29035): avc: denied { create } for pid=8847 comm="syz.3.2024" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 141.849602][ T29] audit: type=1400 audit(1750163700.996:29036): avc: denied { ioctl } for pid=8847 comm="syz.3.2024" path="socket:[23761]" dev="sockfs" ino=23761 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 141.875880][ T29] audit: type=1400 audit(1750163700.996:29037): avc: denied { accept } for pid=8847 comm="syz.3.2024" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 141.944502][ T8860] FAULT_INJECTION: forcing a failure. [ 141.944502][ T8860] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 141.957611][ T8860] CPU: 1 UID: 0 PID: 8860 Comm: syz.3.2027 Not tainted 6.16.0-rc2-syzkaller-00024-g9afe652958c3 #0 PREEMPT(voluntary) [ 141.957638][ T8860] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 141.957651][ T8860] Call Trace: [ 141.957657][ T8860] [ 141.957663][ T8860] __dump_stack+0x1d/0x30 [ 141.957681][ T8860] dump_stack_lvl+0xe8/0x140 [ 141.957710][ T8860] dump_stack+0x15/0x1b [ 141.957723][ T8860] should_fail_ex+0x265/0x280 [ 141.957749][ T8860] should_fail+0xb/0x20 [ 141.957773][ T8860] should_fail_usercopy+0x1a/0x20 [ 141.957799][ T8860] _copy_from_user+0x1c/0xb0 [ 141.957816][ T8860] __sys_connect+0xd0/0x2b0 [ 141.957851][ T8860] __x64_sys_connect+0x3f/0x50 [ 141.957873][ T8860] x64_sys_call+0x1daa/0x2fb0 [ 141.957922][ T8860] do_syscall_64+0xd2/0x200 [ 141.957937][ T8860] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 141.957958][ T8860] ? clear_bhb_loop+0x40/0x90 [ 141.957976][ T8860] ? clear_bhb_loop+0x40/0x90 [ 141.957993][ T8860] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.958063][ T8860] RIP: 0033:0x7ffa8a2be929 [ 141.958075][ T8860] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 141.958091][ T8860] RSP: 002b:00007ffa88927038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 141.958106][ T8860] RAX: ffffffffffffffda RBX: 00007ffa8a4e5fa0 RCX: 00007ffa8a2be929 [ 141.958116][ T8860] RDX: 000000000000006e RSI: 0000200000000280 RDI: 0000000000000007 [ 141.958127][ T8860] RBP: 00007ffa88927090 R08: 0000000000000000 R09: 0000000000000000 [ 141.958164][ T8860] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 141.958173][ T8860] R13: 0000000000000000 R14: 00007ffa8a4e5fa0 R15: 00007fff8ebd8698 [ 141.958188][ T8860] [ 142.270503][ T29] audit: type=1400 audit(1750163701.416:29038): avc: denied { unmount } for pid=3305 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 142.318491][ T8881] __nla_validate_parse: 1 callbacks suppressed [ 142.318505][ T8881] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2031'. [ 142.372906][ T8883] FAULT_INJECTION: forcing a failure. [ 142.372906][ T8883] name failslab, interval 1, probability 0, space 0, times 0 [ 142.385640][ T8883] CPU: 0 UID: 0 PID: 8883 Comm: syz.0.2038 Not tainted 6.16.0-rc2-syzkaller-00024-g9afe652958c3 #0 PREEMPT(voluntary) [ 142.385667][ T8883] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 142.385677][ T8883] Call Trace: [ 142.385683][ T8883] [ 142.385689][ T8883] __dump_stack+0x1d/0x30 [ 142.385735][ T8883] dump_stack_lvl+0xe8/0x140 [ 142.385818][ T8883] dump_stack+0x15/0x1b [ 142.385855][ T8883] should_fail_ex+0x265/0x280 [ 142.385961][ T8883] should_failslab+0x8c/0xb0 [ 142.385982][ T8883] kmem_cache_alloc_node_noprof+0x57/0x320 [ 142.386011][ T8883] ? __alloc_skb+0x101/0x320 [ 142.386093][ T8883] __alloc_skb+0x101/0x320 [ 142.386117][ T8883] netlink_dump+0x148/0x7f0 [ 142.386146][ T8883] ? ip_set_dump_start+0xf0/0x320 [ 142.386167][ T8883] ? ip_set_dump_start+0x245/0x320 [ 142.386226][ T8883] __netlink_dump_start+0x43e/0x520 [ 142.386258][ T8883] ip_set_dump+0xa4/0xf0 [ 142.386302][ T8883] ? __pfx_ip_set_dump_start+0x10/0x10 [ 142.386322][ T8883] ? __pfx_ip_set_dump_do+0x10/0x10 [ 142.386342][ T8883] ? __pfx_ip_set_dump_done+0x10/0x10 [ 142.386360][ T8883] nfnetlink_rcv_msg+0x4c3/0x590 [ 142.386435][ T8883] ? selinux_capable+0x1f9/0x270 [ 142.386474][ T8883] netlink_rcv_skb+0x123/0x220 [ 142.386499][ T8883] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 142.386525][ T8883] nfnetlink_rcv+0x16b/0x1690 [ 142.386562][ T8883] ? __account_obj_stock+0x211/0x350 [ 142.386583][ T8883] ? ___slab_alloc+0x275/0x900 [ 142.386645][ T8883] ? obj_cgroup_charge_account+0x122/0x1a0 [ 142.386671][ T8883] ? security_inode_alloc+0x37/0x100 [ 142.386702][ T8883] ? should_fail_ex+0x30/0x280 [ 142.386784][ T8883] ? xas_load+0x413/0x430 [ 142.386809][ T8883] ? xas_load+0x413/0x430 [ 142.386870][ T8883] ? __rcu_read_unlock+0x4f/0x70 [ 142.386961][ T8883] ? xa_load+0xb1/0xe0 [ 142.387020][ T8883] ? __account_obj_stock+0x211/0x350 [ 142.387039][ T8883] ? obj_cgroup_charge_account+0x122/0x1a0 [ 142.387130][ T8883] ? should_fail_ex+0x30/0x280 [ 142.387156][ T8883] ? __rcu_read_unlock+0x4f/0x70 [ 142.387178][ T8883] ? should_fail_ex+0xdb/0x280 [ 142.387245][ T8883] ? selinux_nlmsg_lookup+0x99/0x890 [ 142.387274][ T8883] ? selinux_netlink_send+0x59f/0x5f0 [ 142.387406][ T8883] ? __rcu_read_unlock+0x34/0x70 [ 142.387502][ T8883] ? __netlink_lookup+0x266/0x2a0 [ 142.387552][ T8883] netlink_unicast+0x59e/0x670 [ 142.387582][ T8883] netlink_sendmsg+0x58b/0x6b0 [ 142.387610][ T8883] ? __pfx_netlink_sendmsg+0x10/0x10 [ 142.387631][ T8883] __sock_sendmsg+0x142/0x180 [ 142.387653][ T8883] ____sys_sendmsg+0x31e/0x4e0 [ 142.387682][ T8883] ___sys_sendmsg+0x17b/0x1d0 [ 142.387796][ T8883] __x64_sys_sendmsg+0xd4/0x160 [ 142.387815][ T8883] x64_sys_call+0x2999/0x2fb0 [ 142.387851][ T8883] do_syscall_64+0xd2/0x200 [ 142.387870][ T8883] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 142.387895][ T8883] ? clear_bhb_loop+0x40/0x90 [ 142.387953][ T8883] ? clear_bhb_loop+0x40/0x90 [ 142.387976][ T8883] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.388028][ T8883] RIP: 0033:0x7fe6662de929 [ 142.388042][ T8883] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 142.388096][ T8883] RSP: 002b:00007fe664947038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 142.388116][ T8883] RAX: ffffffffffffffda RBX: 00007fe666505fa0 RCX: 00007fe6662de929 [ 142.388185][ T8883] RDX: 0000000000000080 RSI: 0000200000000100 RDI: 0000000000000003 [ 142.388195][ T8883] RBP: 00007fe664947090 R08: 0000000000000000 R09: 0000000000000000 [ 142.388206][ T8883] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 142.388215][ T8883] R13: 0000000000000000 R14: 00007fe666505fa0 R15: 00007ffc90a22d58 [ 142.388230][ T8883] [ 142.756697][ T8886] loop4: detected capacity change from 0 to 512 [ 142.775913][ T8886] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 142.785792][ T8886] EXT4-fs (loop4): orphan cleanup on readonly fs [ 142.807932][ T8886] Quota error (device loop4): v2_read_file_info: Block with free entry 1 out of range (1, 6). [ 142.823280][ T8886] EXT4-fs warning (device loop4): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 142.838313][ T8886] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 142.846154][ T8886] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.2039: bg 0: block 40: padding at end of block bitmap is not set [ 142.862046][ T8886] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 142.862565][ T8901] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 142.871030][ T8886] EXT4-fs (loop4): 1 truncate cleaned up [ 142.889252][ T8902] netlink: 288 bytes leftover after parsing attributes in process `syz.0.2041'. [ 142.903011][ T8886] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 142.912038][ T8895] lo speed is unknown, defaulting to 1000 [ 142.922657][ T8895] lo speed is unknown, defaulting to 1000 [ 142.923699][ T8901] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 142.993854][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.005360][ T8910] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2047'. [ 143.040847][ T8916] netlink: 3 bytes leftover after parsing attributes in process `wg1'. [ 143.049697][ T8916] binfmt_misc: register: failed to install interpreter file ./file2 [ 143.067182][ T8907] veth1_to_bridge: entered promiscuous mode [ 143.073566][ T8907] veth1_to_bridge: entered allmulticast mode [ 143.132005][ T8925] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2053'. [ 143.141732][ T8925] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2053'. [ 143.300968][ T29] audit: type=1326 audit(1750163702.446:29039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8961 comm="syz.0.2067" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6662de929 code=0x7ffc0000 [ 143.313626][ T8964] loop3: detected capacity change from 0 to 2048 [ 143.324604][ T29] audit: type=1326 audit(1750163702.446:29040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8961 comm="syz.0.2067" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6662de929 code=0x7ffc0000 [ 143.357724][ T8966] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2064'. [ 143.358339][ T8968] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2069'. [ 143.398524][ T8964] loop3: p1 < > p4 [ 143.399883][ T29] audit: type=1326 audit(1750163702.496:29041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8961 comm="syz.0.2067" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe6662de929 code=0x7ffc0000 [ 143.402749][ T8964] loop3: p4 size 8388608 extends beyond EOD, [ 143.425797][ T29] audit: type=1326 audit(1750163702.496:29042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8961 comm="syz.0.2067" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6662de929 code=0x7ffc0000 [ 143.425850][ T8964] truncated [ 143.431924][ T29] audit: type=1326 audit(1750163702.496:29043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8961 comm="syz.0.2067" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6662de929 code=0x7ffc0000 [ 143.600862][ T8980] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=8980 comm=syz.0.2074 [ 143.613383][ T8980] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=8980 comm=syz.0.2074 [ 143.641796][ T8982] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=8982 comm=syz.0.2075 [ 143.654280][ T8982] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=8982 comm=syz.0.2075 [ 143.678400][ T8984] x_tables: unsorted entry at hook 3 [ 143.882748][ T8992] FAULT_INJECTION: forcing a failure. [ 143.882748][ T8992] name failslab, interval 1, probability 0, space 0, times 0 [ 143.895446][ T8992] CPU: 0 UID: 0 PID: 8992 Comm: syz.0.2079 Not tainted 6.16.0-rc2-syzkaller-00024-g9afe652958c3 #0 PREEMPT(voluntary) [ 143.895475][ T8992] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 143.895584][ T8992] Call Trace: [ 143.895588][ T8992] [ 143.895592][ T8992] __dump_stack+0x1d/0x30 [ 143.895605][ T8992] dump_stack_lvl+0xe8/0x140 [ 143.895667][ T8992] dump_stack+0x15/0x1b [ 143.895676][ T8992] should_fail_ex+0x265/0x280 [ 143.895846][ T8992] should_failslab+0x8c/0xb0 [ 143.895859][ T8992] kmem_cache_alloc_lru_noprof+0x55/0x310 [ 143.895944][ T8992] ? __d_alloc+0x3d/0x350 [ 143.895958][ T8992] __d_alloc+0x3d/0x350 [ 143.895971][ T8992] d_alloc_parallel+0x53/0xc40 [ 143.896044][ T8992] ? __rcu_read_unlock+0x4f/0x70 [ 143.896058][ T8992] ? __d_lookup+0x316/0x340 [ 143.896071][ T8992] ? try_to_unlazy+0x25e/0x3a0 [ 143.896139][ T8992] path_openat+0x6b5/0x2170 [ 143.896160][ T8992] do_filp_open+0x109/0x230 [ 143.896256][ T8992] do_sys_openat2+0xa6/0x110 [ 143.896272][ T8992] __x64_sys_openat+0xf2/0x120 [ 143.896292][ T8992] x64_sys_call+0x1af/0x2fb0 [ 143.896304][ T8992] do_syscall_64+0xd2/0x200 [ 143.896314][ T8992] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 143.896397][ T8992] ? clear_bhb_loop+0x40/0x90 [ 143.896474][ T8992] ? clear_bhb_loop+0x40/0x90 [ 143.896486][ T8992] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.896497][ T8992] RIP: 0033:0x7fe6662de929 [ 143.896507][ T8992] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 143.896517][ T8992] RSP: 002b:00007fe664947038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 143.896545][ T8992] RAX: ffffffffffffffda RBX: 00007fe666505fa0 RCX: 00007fe6662de929 [ 143.896552][ T8992] RDX: 000000000000275a RSI: 00002000000001c0 RDI: ffffffffffffff9c [ 143.896559][ T8992] RBP: 00007fe664947090 R08: 0000000000000000 R09: 0000000000000000 [ 143.896566][ T8992] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 143.896573][ T8992] R13: 0000000000000000 R14: 00007fe666505fa0 R15: 00007ffc90a22d58 [ 143.896583][ T8992] [ 144.226506][ T9006] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=9006 comm=syz.0.2085 [ 144.227632][ T9007] loop3: detected capacity change from 0 to 2048 [ 144.239122][ T9006] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=9006 comm=syz.0.2085 [ 144.290340][ T9007] loop3: p1 < > p4 [ 144.379465][ T9013] lo speed is unknown, defaulting to 1000 [ 144.386399][ T9013] lo speed is unknown, defaulting to 1000 [ 144.449347][ T9007] loop3: p4 size 8388608 extends beyond EOD, truncated [ 144.641981][ T9020] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2090'. [ 144.709315][ T9020] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2090'. [ 144.770965][ T9020] FAULT_INJECTION: forcing a failure. [ 144.770965][ T9020] name failslab, interval 1, probability 0, space 0, times 0 [ 144.783658][ T9020] CPU: 1 UID: 0 PID: 9020 Comm: syz.4.2090 Not tainted 6.16.0-rc2-syzkaller-00024-g9afe652958c3 #0 PREEMPT(voluntary) [ 144.783682][ T9020] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 144.783695][ T9020] Call Trace: [ 144.783701][ T9020] [ 144.783708][ T9020] __dump_stack+0x1d/0x30 [ 144.783729][ T9020] dump_stack_lvl+0xe8/0x140 [ 144.783750][ T9020] dump_stack+0x15/0x1b [ 144.783767][ T9020] should_fail_ex+0x265/0x280 [ 144.783814][ T9020] ? flow_indr_dev_setup_offload+0x190/0x3f0 [ 144.783832][ T9020] should_failslab+0x8c/0xb0 [ 144.783851][ T9020] __kmalloc_cache_noprof+0x4c/0x320 [ 144.783882][ T9020] flow_indr_dev_setup_offload+0x190/0x3f0 [ 144.783957][ T9020] ? __pfx_tc_block_indr_cleanup+0x10/0x10 [ 144.783976][ T9020] tcf_block_offload_cmd+0x164/0x1f0 [ 144.784001][ T9020] tcf_block_get_ext+0x865/0xb30 [ 144.784054][ T9020] ? stack_depot_save_flags+0xa6a/0xb60 [ 144.784080][ T9020] tcf_block_get+0x67/0xa0 [ 144.784132][ T9020] ? __pfx_tcf_chain_head_change_dflt+0x10/0x10 [ 144.784163][ T9020] sfq_init+0x7f/0x1290 [ 144.784188][ T9020] ? netlink_rcv_skb+0x123/0x220 [ 144.784239][ T9020] ? rtnetlink_rcv+0x1c/0x30 [ 144.784260][ T9020] ? netlink_unicast+0x59e/0x670 [ 144.784328][ T9020] ? netlink_sendmsg+0x58b/0x6b0 [ 144.784347][ T9020] ? __sock_sendmsg+0x142/0x180 [ 144.784371][ T9020] ? ____sys_sendmsg+0x31e/0x4e0 [ 144.784402][ T9020] ? ___sys_sendmsg+0x17b/0x1d0 [ 144.784510][ T9020] ? __x64_sys_sendmsg+0xd4/0x160 [ 144.784531][ T9020] ? x64_sys_call+0x2999/0x2fb0 [ 144.784549][ T9020] ? do_syscall_64+0xd2/0x200 [ 144.784566][ T9020] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.784615][ T9020] ? __pfx_sfq_dequeue+0x10/0x10 [ 144.784640][ T9020] ? qdisc_alloc+0x3c3/0x440 [ 144.784670][ T9020] ? __pfx_sfq_init+0x10/0x10 [ 144.784703][ T9020] qdisc_create+0x58e/0x9e0 [ 144.784725][ T9020] tc_modify_qdisc+0xe2c/0x1380 [ 144.784759][ T9020] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 144.784785][ T9020] rtnetlink_rcv_msg+0x657/0x6d0 [ 144.784869][ T9020] ? avc_has_perm_noaudit+0x1b1/0x200 [ 144.784905][ T9020] netlink_rcv_skb+0x123/0x220 [ 144.784930][ T9020] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 144.784955][ T9020] rtnetlink_rcv+0x1c/0x30 [ 144.784994][ T9020] netlink_unicast+0x59e/0x670 [ 144.785026][ T9020] netlink_sendmsg+0x58b/0x6b0 [ 144.785049][ T9020] ? __pfx_netlink_sendmsg+0x10/0x10 [ 144.785069][ T9020] __sock_sendmsg+0x142/0x180 [ 144.785101][ T9020] ____sys_sendmsg+0x31e/0x4e0 [ 144.785134][ T9020] ___sys_sendmsg+0x17b/0x1d0 [ 144.785191][ T9020] __x64_sys_sendmsg+0xd4/0x160 [ 144.785264][ T9020] x64_sys_call+0x2999/0x2fb0 [ 144.785297][ T9020] do_syscall_64+0xd2/0x200 [ 144.785314][ T9020] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 144.785392][ T9020] ? clear_bhb_loop+0x40/0x90 [ 144.785414][ T9020] ? clear_bhb_loop+0x40/0x90 [ 144.785458][ T9020] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.785481][ T9020] RIP: 0033:0x7f22594ee929 [ 144.785497][ T9020] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 144.785513][ T9020] RSP: 002b:00007f2257b57038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 144.785530][ T9020] RAX: ffffffffffffffda RBX: 00007f2259715fa0 RCX: 00007f22594ee929 [ 144.785541][ T9020] RDX: 0000000000000000 RSI: 0000200000005840 RDI: 0000000000000005 [ 144.785631][ T9020] RBP: 00007f2257b57090 R08: 0000000000000000 R09: 0000000000000000 [ 144.785644][ T9020] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 144.785657][ T9020] R13: 0000000000000000 R14: 00007f2259715fa0 R15: 00007fff58233af8 [ 144.785677][ T9020] [ 145.273252][ T9035] loop9: detected capacity change from 0 to 7 [ 145.288998][ T9035] Buffer I/O error on dev loop9, logical block 0, async page read [ 145.307208][ T9035] Buffer I/O error on dev loop9, logical block 0, async page read [ 145.315056][ T9035] loop9: unable to read partition table [ 145.330891][ T9035] loop_reread_partitions: partition scan of loop9 (þ被üŸÑø éÚ¬§½dƤ´à–ƒÝ¡¯¨â·û [ 145.330891][ T9035] Uªÿÿÿÿÿÿ) failed (rc=-5) [ 145.688975][ T9057] loop3: detected capacity change from 0 to 512 [ 145.723289][ T9057] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 145.753308][ T9057] ext4 filesystem being mounted at /402/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 145.812201][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.128289][ T9059] vhci_hcd: invalid port number 255 [ 146.134676][ T9059] vhci_hcd: invalid port number 255 [ 146.173846][ T9071] lo speed is unknown, defaulting to 1000 [ 146.181324][ T9071] lo speed is unknown, defaulting to 1000 [ 146.344649][ T9081] lo speed is unknown, defaulting to 1000 [ 146.351640][ T9081] lo speed is unknown, defaulting to 1000 [ 147.049601][ T9097] loop3: detected capacity change from 0 to 2048 [ 147.171454][ T9097] loop3: p1 < > p4 [ 147.175924][ T9097] loop3: p4 size 8388608 extends beyond EOD, truncated [ 147.366990][ T29] kauditd_printk_skb: 260 callbacks suppressed [ 147.367002][ T29] audit: type=1326 audit(1750163706.506:29304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9109 comm="syz.1.2116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34f11de929 code=0x7ffc0000 [ 147.535017][ T9119] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=9119 comm=syz.2.2119 [ 147.547551][ T9119] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=9119 comm=syz.2.2119 [ 148.121845][ T9122] lo speed is unknown, defaulting to 1000 [ 148.128550][ T9122] lo speed is unknown, defaulting to 1000 [ 148.186887][ T29] audit: type=1326 audit(1750163706.546:29305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9109 comm="syz.1.2116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f34f11de929 code=0x7ffc0000 [ 148.210433][ T29] audit: type=1326 audit(1750163706.546:29306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9109 comm="syz.1.2116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34f11de929 code=0x7ffc0000 [ 148.233898][ T29] audit: type=1326 audit(1750163706.546:29307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9109 comm="syz.1.2116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f34f11de929 code=0x7ffc0000 [ 148.257325][ T29] audit: type=1326 audit(1750163706.546:29308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9109 comm="syz.1.2116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34f11de929 code=0x7ffc0000 [ 148.280804][ T29] audit: type=1326 audit(1750163706.546:29309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9109 comm="syz.1.2116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f34f11de929 code=0x7ffc0000 [ 148.304860][ T29] audit: type=1326 audit(1750163706.546:29310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9109 comm="syz.1.2116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34f11de929 code=0x7ffc0000 [ 148.328314][ T29] audit: type=1326 audit(1750163706.546:29311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9109 comm="syz.1.2116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f34f11de929 code=0x7ffc0000 [ 148.351833][ T29] audit: type=1326 audit(1750163706.546:29312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9109 comm="syz.1.2116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34f11de929 code=0x7ffc0000 [ 148.375352][ T29] audit: type=1326 audit(1750163706.546:29313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9109 comm="syz.1.2116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f34f11de929 code=0x7ffc0000 [ 148.510873][ T9132] __nla_validate_parse: 3 callbacks suppressed [ 148.510898][ T9132] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2121'. [ 148.802813][ T9150] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2131'. [ 148.813966][ T9151] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2130'. [ 148.822889][ T9151] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2130'. [ 148.871781][ T9150] 8021q: adding VLAN 0 to HW filter on device bond2 [ 148.895586][ T9150] bond1: (slave bond2): Enslaving as an active interface with an up link [ 148.931369][ T9150] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2131'. [ 148.958256][ T9164] random: crng reseeded on system resumption [ 148.966230][ T9162] loop3: detected capacity change from 0 to 2048 [ 148.974069][ T9150] bond1 (unregistering): (slave bond2): Releasing backup interface [ 148.998817][ T9150] bond1 (unregistering): Released all slaves [ 149.019093][ T9162] loop3: p1 < > p4 [ 149.036339][ T9162] loop3: p4 size 8388608 extends beyond EOD, truncated [ 149.257825][ T9182] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2142'. [ 149.305424][ T9182] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2142'. [ 149.376766][ T9194] random: crng reseeded on system resumption [ 149.393141][ T9194] loop4: detected capacity change from 0 to 512 [ 149.422099][ T9194] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 149.444845][ T9194] ext4 filesystem being mounted at /438/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 149.460751][ T9194] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #2: comm syz.4.2147: corrupted inode contents [ 149.477606][ T9194] EXT4-fs error (device loop4): ext4_dirty_inode:6459: inode #2: comm syz.4.2147: mark_inode_dirty error [ 149.505948][ T9194] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #2: comm syz.4.2147: corrupted inode contents [ 149.534001][ T9194] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #2: comm syz.4.2147: mark_inode_dirty error [ 149.599739][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.692395][ T9207] loop4: detected capacity change from 0 to 512 [ 149.709479][ T9207] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 149.720756][ T9207] EXT4-fs (loop4): orphan cleanup on readonly fs [ 149.737945][ T9207] EXT4-fs warning (device loop4): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 149.769536][ T9207] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 149.788795][ T9207] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.2152: bg 0: block 40: padding at end of block bitmap is not set [ 149.827090][ T9207] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 149.837019][ T9207] EXT4-fs (loop4): 1 truncate cleaned up [ 149.843151][ T9207] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 149.868944][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.055642][ T9213] netlink: 'syz.0.2154': attribute type 1 has an invalid length. [ 150.063883][ T9213] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2154'. [ 150.149327][ T9215] lo speed is unknown, defaulting to 1000 [ 150.156208][ T9215] lo speed is unknown, defaulting to 1000 [ 151.097488][ T23] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 151.105329][ T23] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz1] on syz0 [ 151.188382][ T9230] random: crng reseeded on system resumption [ 151.230636][ T9230] netlink: 'syz.1.2160': attribute type 3 has an invalid length. [ 151.238431][ T9230] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2160'. [ 151.253625][ T9230] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2160'. [ 151.302000][ T9243] loop3: detected capacity change from 0 to 512 [ 151.338742][ T9243] loop3: detected capacity change from 0 to 2048 [ 151.399488][ T9243] EXT4-fs: Ignoring removed bh option [ 151.431009][ T9243] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 151.651686][ T9254] SELinux: syz.1.2167 (9254) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 151.667641][ T9263] FAULT_INJECTION: forcing a failure. [ 151.667641][ T9263] name failslab, interval 1, probability 0, space 0, times 0 [ 151.680363][ T9263] CPU: 1 UID: 0 PID: 9263 Comm: syz.0.2170 Not tainted 6.16.0-rc2-syzkaller-00024-g9afe652958c3 #0 PREEMPT(voluntary) [ 151.680390][ T9263] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 151.680402][ T9263] Call Trace: [ 151.680407][ T9263] [ 151.680413][ T9263] __dump_stack+0x1d/0x30 [ 151.680433][ T9263] dump_stack_lvl+0xe8/0x140 [ 151.680569][ T9263] dump_stack+0x15/0x1b [ 151.680586][ T9263] should_fail_ex+0x265/0x280 [ 151.680628][ T9263] ? v9fs_mount+0x51/0x590 [ 151.680655][ T9263] should_failslab+0x8c/0xb0 [ 151.680679][ T9263] __kmalloc_cache_noprof+0x4c/0x320 [ 151.680710][ T9263] v9fs_mount+0x51/0x590 [ 151.680780][ T9263] ? __pfx_v9fs_mount+0x10/0x10 [ 151.680806][ T9263] legacy_get_tree+0x75/0xd0 [ 151.680832][ T9263] vfs_get_tree+0x57/0x1d0 [ 151.680907][ T9263] do_new_mount+0x207/0x680 [ 151.680937][ T9263] path_mount+0x4a4/0xb20 [ 151.680968][ T9263] ? user_path_at+0x109/0x130 [ 151.681079][ T9263] __se_sys_mount+0x28f/0x2e0 [ 151.681098][ T9263] ? fput+0x8f/0xc0 [ 151.681124][ T9263] __x64_sys_mount+0x67/0x80 [ 151.681143][ T9263] x64_sys_call+0xd36/0x2fb0 [ 151.681196][ T9263] do_syscall_64+0xd2/0x200 [ 151.681259][ T9263] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 151.681282][ T9263] ? clear_bhb_loop+0x40/0x90 [ 151.681300][ T9263] ? clear_bhb_loop+0x40/0x90 [ 151.681318][ T9263] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 151.681338][ T9263] RIP: 0033:0x7fe6662de929 [ 151.681361][ T9263] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 151.681377][ T9263] RSP: 002b:00007fe664947038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 151.681393][ T9263] RAX: ffffffffffffffda RBX: 00007fe666505fa0 RCX: 00007fe6662de929 [ 151.681404][ T9263] RDX: 00002000000006c0 RSI: 0000200000000680 RDI: 0000000000000000 [ 151.681415][ T9263] RBP: 00007fe664947090 R08: 0000200000000080 R09: 0000000000000000 [ 151.681428][ T9263] R10: 0000000000008010 R11: 0000000000000246 R12: 0000000000000001 [ 151.681440][ T9263] R13: 0000000000000000 R14: 00007fe666505fa0 R15: 00007ffc90a22d58 [ 151.681530][ T9263] [ 151.922251][ T9267] 9pnet_fd: Insufficient options for proto=fd [ 152.088032][ T8264] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 152.103309][ T8264] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 152.115533][ T8264] EXT4-fs (loop3): This should not happen!! Data will be lost [ 152.115533][ T8264] [ 152.125252][ T8264] EXT4-fs (loop3): Total free blocks count 0 [ 152.131291][ T8264] EXT4-fs (loop3): Free/Dirty block details [ 152.137295][ T8264] EXT4-fs (loop3): free_blocks=2415919104 [ 152.143058][ T8264] EXT4-fs (loop3): dirty_blocks=7392 [ 152.148392][ T8264] EXT4-fs (loop3): Block reservation details [ 152.154504][ T8264] EXT4-fs (loop3): i_reserved_data_blocks=462 [ 152.163950][ T8264] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 18 with max blocks 2048 with error 28 [ 152.264873][ T9283] loop3: detected capacity change from 0 to 1764 [ 152.486666][ T9287] lo speed is unknown, defaulting to 1000 [ 152.494245][ T9287] lo speed is unknown, defaulting to 1000 [ 152.671154][ T9297] loop3: detected capacity change from 0 to 2048 [ 152.681724][ T9299] loop4: detected capacity change from 0 to 2048 [ 152.689692][ T9297] EXT4-fs (loop3): failed to initialize system zone (-117) [ 152.697005][ T9297] EXT4-fs (loop3): mount failed [ 152.719396][ T9299] loop4: p1 < > p4 [ 152.729306][ T9299] loop4: p4 size 8388608 extends beyond EOD, truncated [ 152.758474][ T9302] loop3: detected capacity change from 0 to 256 [ 152.785851][ T9304] loop4: detected capacity change from 0 to 512 [ 152.793648][ T9304] EXT4-fs: Ignoring removed nobh option [ 152.799743][ T9304] EXT4-fs (loop4): VFS: Can't find ext4 filesystem [ 152.909388][ T29] kauditd_printk_skb: 216 callbacks suppressed [ 152.909402][ T29] audit: type=1326 audit(1750163712.056:29529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9275 comm="syz.1.2176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f34f11de929 code=0x7fc00000 [ 152.966416][ T9312] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=9312 comm=syz.4.2188 [ 152.967315][ T9316] 9pnet_fd: Insufficient options for proto=fd [ 152.978972][ T9312] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=9312 comm=syz.4.2188 [ 152.997717][ T29] audit: type=1400 audit(1750163712.106:29530): avc: denied { read write } for pid=9314 comm="syz.1.2191" dev="sockfs" ino=25954 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 153.908386][ T9344] lo speed is unknown, defaulting to 1000 [ 153.922144][ T9344] lo speed is unknown, defaulting to 1000 [ 154.267592][ T29] audit: type=1400 audit(1750163713.406:29531): avc: denied { write } for pid=9347 comm="syz.3.2197" name="event3" dev="devtmpfs" ino=256 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 154.380786][ T9369] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=9369 comm=syz.0.2205 [ 154.393443][ T9369] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=9369 comm=syz.0.2205 [ 154.429855][ T29] audit: type=1400 audit(1750163713.576:29532): avc: denied { mount } for pid=9351 comm="syz.4.2199" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 154.452173][ T29] audit: type=1400 audit(1750163713.576:29533): avc: denied { mounton } for pid=9351 comm="syz.4.2199" path="/457/file0" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:devpts_t tclass=dir permissive=1 [ 154.474459][ T29] audit: type=1400 audit(1750163713.576:29534): avc: denied { mount } for pid=9351 comm="syz.4.2199" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 154.542339][ T9381] __nla_validate_parse: 4 callbacks suppressed [ 154.542354][ T9381] netlink: 96 bytes leftover after parsing attributes in process `syz.3.2208'. [ 154.561495][ T29] audit: type=1326 audit(1750163713.706:29535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9377 comm="syz.1.2207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34f11de929 code=0x7ffc0000 [ 154.585097][ T29] audit: type=1326 audit(1750163713.706:29536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9377 comm="syz.1.2207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34f11de929 code=0x7ffc0000 [ 154.619918][ T29] audit: type=1326 audit(1750163713.706:29537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9377 comm="syz.1.2207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=440 compat=0 ip=0x7f34f11de929 code=0x7ffc0000 [ 154.643467][ T29] audit: type=1326 audit(1750163713.706:29538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9377 comm="syz.1.2207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34f11de929 code=0x7ffc0000 [ 154.667439][ T9389] netlink: 'syz.1.2207': attribute type 10 has an invalid length. [ 154.675332][ T9389] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2207'. [ 154.686198][ T9389] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.694443][ T9389] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.702730][ T9389] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.712268][ T9389] team0: Failed to send port change of device geneve1 via netlink (err -105) [ 154.721206][ T9389] team0: Failed to send options change via netlink (err -105) [ 154.728820][ T9389] team0: Port device geneve1 added [ 154.736874][ T9378] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.747169][ T9391] loop3: detected capacity change from 0 to 2048 [ 154.754009][ T9391] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 154.765864][ T9386] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2211'. [ 154.771823][ T9391] loop3: detected capacity change from 0 to 512 [ 154.781311][ T9391] EXT4-fs: Ignoring removed mblk_io_submit option [ 154.787736][ T9391] EXT4-fs: Ignoring removed i_version option [ 154.793763][ T9391] EXT4-fs: dax option not supported [ 154.800886][ T9378] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.829122][ T9386] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2052 sclass=netlink_route_socket pid=9386 comm=syz.0.2211 [ 154.861604][ T9378] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.926586][ T9407] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=9407 comm=syz.4.2217 [ 154.939084][ T9407] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=9407 comm=syz.4.2217 [ 154.957392][ T9378] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.982517][ T9378] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.994949][ T9378] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.006983][ T9378] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.043553][ T9410] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2218'. [ 155.066228][ T9410] netlink: 312 bytes leftover after parsing attributes in process `syz.3.2218'. [ 155.574083][ T9440] lo speed is unknown, defaulting to 1000 [ 155.580414][ T9440] lo speed is unknown, defaulting to 1000 [ 155.674886][ T9448] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2231'. [ 155.688913][ T9448] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2231'. [ 155.834046][ T9453] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2232'. [ 155.843122][ T9453] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2232'. [ 155.883038][ T9453] wireguard0: entered promiscuous mode [ 156.056481][ T9461] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2234'. [ 156.190103][ T9419] syz.4.2223 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 156.204305][ T9419] CPU: 1 UID: 0 PID: 9419 Comm: syz.4.2223 Not tainted 6.16.0-rc2-syzkaller-00024-g9afe652958c3 #0 PREEMPT(voluntary) [ 156.204333][ T9419] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 156.204371][ T9419] Call Trace: [ 156.204377][ T9419] [ 156.204385][ T9419] __dump_stack+0x1d/0x30 [ 156.204404][ T9419] dump_stack_lvl+0xe8/0x140 [ 156.204427][ T9419] dump_stack+0x15/0x1b [ 156.204441][ T9419] dump_header+0x81/0x220 [ 156.204473][ T9419] oom_kill_process+0x334/0x3f0 [ 156.204556][ T9419] out_of_memory+0x979/0xb80 [ 156.204587][ T9419] try_charge_memcg+0x5e6/0x9e0 [ 156.204610][ T9419] obj_cgroup_charge_pages+0xa6/0x150 [ 156.204691][ T9419] __memcg_kmem_charge_page+0x9f/0x170 [ 156.204754][ T9419] __alloc_frozen_pages_noprof+0x188/0x360 [ 156.204790][ T9419] alloc_pages_mpol+0xb3/0x250 [ 156.204817][ T9419] alloc_pages_noprof+0x90/0x130 [ 156.204921][ T9419] __vmalloc_node_range_noprof+0x6f2/0xe00 [ 156.205039][ T9419] __kvmalloc_node_noprof+0x30f/0x4e0 [ 156.205113][ T9419] ? ip_set_alloc+0x1f/0x30 [ 156.205160][ T9419] ? ip_set_alloc+0x1f/0x30 [ 156.205190][ T9419] ? __kmalloc_cache_noprof+0x189/0x320 [ 156.205225][ T9419] ip_set_alloc+0x1f/0x30 [ 156.205270][ T9419] hash_netiface_create+0x282/0x740 [ 156.205303][ T9419] ? __pfx_hash_netiface_create+0x10/0x10 [ 156.205333][ T9419] ip_set_create+0x3cc/0x960 [ 156.205405][ T9419] ? __nla_parse+0x40/0x60 [ 156.205426][ T9419] nfnetlink_rcv_msg+0x4c3/0x590 [ 156.205499][ T9419] ? rtmsg_ifinfo+0xb8/0x110 [ 156.205550][ T9419] ? selinux_capable+0x1f9/0x270 [ 156.205582][ T9419] netlink_rcv_skb+0x123/0x220 [ 156.205609][ T9419] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 156.205720][ T9419] nfnetlink_rcv+0x16b/0x1690 [ 156.205767][ T9419] ? __rcu_read_unlock+0x4f/0x70 [ 156.205845][ T9419] ? avc_has_perm_noaudit+0x1b1/0x200 [ 156.205876][ T9419] ? css_rstat_updated+0xcd/0x5b0 [ 156.205910][ T9419] ? mod_memcg_lruvec_state+0x20e/0x2e0 [ 156.205940][ T9419] ? __rcu_read_unlock+0x34/0x70 [ 156.205983][ T9419] ? xas_find+0x3ab/0x3e0 [ 156.206002][ T9419] ? folio_add_file_rmap_ptes+0x173/0x1a0 [ 156.206062][ T9419] ? next_uptodate_folio+0x815/0x890 [ 156.206079][ T9419] ? put_dec_trunc8+0x119/0x140 [ 156.206117][ T9419] ? ___slab_alloc+0x275/0x900 [ 156.206146][ T9419] ? should_fail_ex+0x30/0x280 [ 156.206179][ T9419] ? selinux_nlmsg_lookup+0x99/0x890 [ 156.206216][ T9419] ? selinux_netlink_send+0x59f/0x5f0 [ 156.206325][ T9419] ? __rcu_read_unlock+0x34/0x70 [ 156.206346][ T9419] ? __netlink_lookup+0x266/0x2a0 [ 156.206370][ T9419] netlink_unicast+0x59e/0x670 [ 156.206482][ T9419] netlink_sendmsg+0x58b/0x6b0 [ 156.206505][ T9419] ? __pfx_netlink_sendmsg+0x10/0x10 [ 156.206524][ T9419] __sock_sendmsg+0x142/0x180 [ 156.206549][ T9419] ____sys_sendmsg+0x31e/0x4e0 [ 156.206659][ T9419] ___sys_sendmsg+0x17b/0x1d0 [ 156.206696][ T9419] __x64_sys_sendmsg+0xd4/0x160 [ 156.206715][ T9419] x64_sys_call+0x2999/0x2fb0 [ 156.206737][ T9419] do_syscall_64+0xd2/0x200 [ 156.206813][ T9419] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 156.206842][ T9419] ? clear_bhb_loop+0x40/0x90 [ 156.206904][ T9419] ? clear_bhb_loop+0x40/0x90 [ 156.206923][ T9419] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.207011][ T9419] RIP: 0033:0x7f22594ee929 [ 156.207025][ T9419] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 156.207040][ T9419] RSP: 002b:00007f2257b57038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 156.207064][ T9419] RAX: ffffffffffffffda RBX: 00007f2259715fa0 RCX: 00007f22594ee929 [ 156.207077][ T9419] RDX: 0000000000000810 RSI: 0000200000000040 RDI: 000000000000000b [ 156.207091][ T9419] RBP: 00007f2259570b39 R08: 0000000000000000 R09: 0000000000000000 [ 156.207104][ T9419] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 156.207168][ T9419] R13: 0000000000000000 R14: 00007f2259715fa0 R15: 00007fff58233af8 [ 156.207184][ T9419] [ 156.207190][ T9419] memory: usage 307200kB, limit 307200kB, failcnt 285 [ 156.266293][ T9472] FAULT_INJECTION: forcing a failure. [ 156.266293][ T9472] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 156.267712][ T9419] memory+swap: usage 307408kB, limit 9007199254740988kB, failcnt 0 [ 156.273100][ T9472] CPU: 0 UID: 0 PID: 9472 Comm: syz.1.2239 Not tainted 6.16.0-rc2-syzkaller-00024-g9afe652958c3 #0 PREEMPT(voluntary) [ 156.273209][ T9472] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 156.273222][ T9472] Call Trace: [ 156.273228][ T9472] [ 156.273235][ T9472] __dump_stack+0x1d/0x30 [ 156.273317][ T9472] dump_stack_lvl+0xe8/0x140 [ 156.273337][ T9472] dump_stack+0x15/0x1b [ 156.273353][ T9472] should_fail_ex+0x265/0x280 [ 156.273410][ T9472] should_fail+0xb/0x20 [ 156.273447][ T9472] should_fail_usercopy+0x1a/0x20 [ 156.273508][ T9472] _copy_from_user+0x1c/0xb0 [ 156.273548][ T9472] kstrtouint_from_user+0x69/0xf0 [ 156.273577][ T9472] ? 0xffffffff81000000 [ 156.273590][ T9472] ? selinux_file_permission+0x1e4/0x320 [ 156.273617][ T9472] proc_fail_nth_write+0x50/0x160 [ 156.273636][ T9472] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 156.273654][ T9472] vfs_write+0x269/0x8e0 [ 156.273761][ T9472] ? vfs_read+0x47f/0x6f0 [ 156.273789][ T9472] ? __rcu_read_unlock+0x4f/0x70 [ 156.273822][ T9472] ? __fget_files+0x184/0x1c0 [ 156.273843][ T9472] ksys_write+0xda/0x1a0 [ 156.273943][ T9472] __x64_sys_write+0x40/0x50 [ 156.273960][ T9472] x64_sys_call+0x2cdd/0x2fb0 [ 156.273981][ T9472] do_syscall_64+0xd2/0x200 [ 156.274005][ T9472] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 156.274082][ T9472] ? clear_bhb_loop+0x40/0x90 [ 156.274102][ T9472] ? clear_bhb_loop+0x40/0x90 [ 156.274157][ T9472] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.274178][ T9472] RIP: 0033:0x7f34f11dd3df [ 156.274241][ T9472] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 156.274258][ T9472] RSP: 002b:00007f34ef847030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 156.274276][ T9472] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f34f11dd3df [ 156.274289][ T9472] RDX: 0000000000000001 RSI: 00007f34ef8470a0 RDI: 0000000000000005 [ 156.274301][ T9472] RBP: 00007f34ef847090 R08: 0000000000000000 R09: 0000000000000000 [ 156.274313][ T9472] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 156.274371][ T9472] R13: 0000000000000000 R14: 00007f34f1405fa0 R15: 00007ffc13006478 [ 156.274388][ T9472] [ 156.835230][ T9419] kmem: usage 307148kB, limit 9007199254740988kB, failcnt 0 [ 156.842515][ T9419] Memory cgroup stats for /syz4: [ 156.848150][ T9419] cache 4096 [ 156.856340][ T9419] rss 0 [ 156.859156][ T9419] shmem 0 [ 156.862184][ T9419] mapped_file 0 [ 156.865641][ T9419] dirty 0 [ 156.868670][ T9419] writeback 0 [ 156.871949][ T9419] workingset_refault_anon 11 [ 156.876623][ T9419] workingset_refault_file 2 [ 156.881144][ T9419] swap 212992 [ 156.884421][ T9419] swapcached 4096 [ 156.888116][ T9419] pgpgin 140337 [ 156.891678][ T9419] pgpgout 140324 [ 156.895231][ T9419] pgfault 165211 [ 156.898811][ T9419] pgmajfault 14 [ 156.902259][ T9419] inactive_anon 4096 [ 156.906184][ T9419] active_anon 0 [ 156.909696][ T9419] inactive_file 49152 [ 156.913719][ T9419] active_file 0 [ 156.917164][ T9419] unevictable 0 [ 156.920735][ T9419] hierarchical_memory_limit 314572800 [ 156.926306][ T9419] hierarchical_memsw_limit 9223372036854771712 [ 156.932601][ T9419] total_cache 4096 [ 156.936355][ T9419] total_rss 0 [ 156.939877][ T9419] total_shmem 0 [ 156.943389][ T9419] total_mapped_file 0 [ 156.947371][ T9419] total_dirty 0 [ 156.950996][ T9419] total_writeback 0 [ 156.954811][ T9419] total_workingset_refault_anon 11 [ 156.960098][ T9419] total_workingset_refault_file 2 [ 156.965173][ T9419] total_swap 212992 [ 156.969127][ T9419] total_swapcached 4096 [ 156.973412][ T9419] total_pgpgin 140337 [ 156.977408][ T9419] total_pgpgout 140324 [ 156.981488][ T9419] total_pgfault 165211 [ 156.985551][ T9419] total_pgmajfault 14 [ 156.989551][ T9419] total_inactive_anon 4096 [ 156.993970][ T9419] total_active_anon 0 [ 156.997954][ T9419] total_inactive_file 49152 [ 157.002510][ T9419] total_active_file 0 [ 157.006485][ T9419] total_unevictable 0 [ 157.010465][ T9419] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.2223,pid=9418,uid=0 [ 157.025181][ T9419] Memory cgroup out of memory: Killed process 9418 (syz.4.2223) total-vm:93756kB, anon-rss:936kB, file-rss:22568kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 157.028678][ T9482] rdma_rxe: rxe_newlink: failed to add veth0_to_bond [ 157.081250][ T9426] syz.4.2223 (9426) used greatest stack depth: 9816 bytes left [ 157.092087][ T9418] syz.4.2223 (9418) used greatest stack depth: 9688 bytes left [ 157.150802][ T9490] netlink: 'syz.3.2247': attribute type 21 has an invalid length. [ 157.174856][ T9490] siw: device registration error -23 [ 157.208367][ T9498] loop3: detected capacity change from 0 to 128 [ 157.218538][ T9498] FAULT_INJECTION: forcing a failure. [ 157.218538][ T9498] name failslab, interval 1, probability 0, space 0, times 0 [ 157.231229][ T9498] CPU: 0 UID: 0 PID: 9498 Comm: syz.3.2249 Not tainted 6.16.0-rc2-syzkaller-00024-g9afe652958c3 #0 PREEMPT(voluntary) [ 157.231314][ T9498] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 157.231327][ T9498] Call Trace: [ 157.231353][ T9498] [ 157.231359][ T9498] __dump_stack+0x1d/0x30 [ 157.231377][ T9498] dump_stack_lvl+0xe8/0x140 [ 157.231393][ T9498] dump_stack+0x15/0x1b [ 157.231407][ T9498] should_fail_ex+0x265/0x280 [ 157.231471][ T9498] should_failslab+0x8c/0xb0 [ 157.231495][ T9498] __kmalloc_noprof+0xa5/0x3e0 [ 157.231641][ T9498] ? alloc_pipe_info+0x1c9/0x350 [ 157.231660][ T9498] alloc_pipe_info+0x1c9/0x350 [ 157.231736][ T9498] splice_direct_to_actor+0x592/0x680 [ 157.231876][ T9498] ? kstrtouint_from_user+0x9f/0xf0 [ 157.231958][ T9498] ? __pfx_direct_splice_actor+0x10/0x10 [ 157.231983][ T9498] ? __rcu_read_unlock+0x4f/0x70 [ 157.232001][ T9498] ? get_pid_task+0x96/0xd0 [ 157.232051][ T9498] ? avc_policy_seqno+0x15/0x30 [ 157.232075][ T9498] ? selinux_file_permission+0x1e4/0x320 [ 157.232163][ T9498] do_splice_direct+0xda/0x150 [ 157.232189][ T9498] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 157.232282][ T9498] do_sendfile+0x380/0x650 [ 157.232304][ T9498] __x64_sys_sendfile64+0x105/0x150 [ 157.232372][ T9498] x64_sys_call+0xb39/0x2fb0 [ 157.232394][ T9498] do_syscall_64+0xd2/0x200 [ 157.232413][ T9498] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 157.232482][ T9498] ? clear_bhb_loop+0x40/0x90 [ 157.232504][ T9498] ? clear_bhb_loop+0x40/0x90 [ 157.232522][ T9498] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.232540][ T9498] RIP: 0033:0x7ffa8a2be929 [ 157.232555][ T9498] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 157.232655][ T9498] RSP: 002b:00007ffa88927038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 157.232673][ T9498] RAX: ffffffffffffffda RBX: 00007ffa8a4e5fa0 RCX: 00007ffa8a2be929 [ 157.232687][ T9498] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 0000000000000007 [ 157.232700][ T9498] RBP: 00007ffa88927090 R08: 0000000000000000 R09: 0000000000000000 [ 157.232713][ T9498] R10: 0000000800000009 R11: 0000000000000246 R12: 0000000000000001 [ 157.232759][ T9498] R13: 0000000000000000 R14: 00007ffa8a4e5fa0 R15: 00007fff8ebd8698 [ 157.232778][ T9498] [ 157.548436][ T9502] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=9502 comm=syz.0.2251 [ 157.560956][ T9502] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=9502 comm=syz.0.2251 [ 157.707462][ T9419] syz.4.2223 (9419) used greatest stack depth: 7160 bytes left [ 157.742068][ T9524] lo: left promiscuous mode [ 157.751680][ T9524] bond1: left promiscuous mode [ 157.878891][ T9526] loop3: detected capacity change from 0 to 32768 [ 157.922627][ T29] kauditd_printk_skb: 242 callbacks suppressed [ 157.922641][ T29] audit: type=1400 audit(1750163717.066:29781): avc: denied { getopt } for pid=9531 comm="syz.2.2263" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 157.948846][ T29] audit: type=1326 audit(1750163717.066:29782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9531 comm="syz.2.2263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25d979e929 code=0x7ffc0000 [ 157.972524][ T29] audit: type=1326 audit(1750163717.066:29783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9531 comm="syz.2.2263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25d979e929 code=0x7ffc0000 [ 157.973672][ T9526] loop3: p1 p2 p3 < > [ 157.996895][ T29] audit: type=1326 audit(1750163717.096:29784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9531 comm="syz.2.2263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f25d979e929 code=0x7ffc0000 [ 158.000199][ T9526] loop3: p1 size 242222080 extends beyond EOD, [ 158.023641][ T29] audit: type=1326 audit(1750163717.096:29785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9531 comm="syz.2.2263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25d979e929 code=0x7ffc0000 [ 158.029884][ T9526] truncated [ 158.043883][ T9526] loop3: p2 start 4294967295 is beyond EOD, [ 158.053473][ T29] audit: type=1326 audit(1750163717.096:29786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9531 comm="syz.2.2263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25d979e929 code=0x7ffc0000 [ 158.056574][ T9526] truncated [ 158.062557][ T29] audit: type=1326 audit(1750163717.096:29787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9531 comm="syz.2.2263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=129 compat=0 ip=0x7f25d979e929 code=0x7ffc0000 [ 158.062581][ T29] audit: type=1326 audit(1750163717.096:29788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9531 comm="syz.2.2263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f25d97958e7 code=0x7ffc0000 [ 158.136302][ T29] audit: type=1326 audit(1750163717.096:29789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9531 comm="syz.2.2263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f25d973ab19 code=0x7ffc0000 [ 158.159786][ T29] audit: type=1326 audit(1750163717.096:29790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9531 comm="syz.2.2263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25d979e929 code=0x7ffc0000 [ 158.192775][ T9534] FAULT_INJECTION: forcing a failure. [ 158.192775][ T9534] name failslab, interval 1, probability 0, space 0, times 0 [ 158.205420][ T9534] CPU: 0 UID: 0 PID: 9534 Comm: syz.2.2264 Not tainted 6.16.0-rc2-syzkaller-00024-g9afe652958c3 #0 PREEMPT(voluntary) [ 158.205450][ T9534] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 158.205475][ T9534] Call Trace: [ 158.205482][ T9534] [ 158.205490][ T9534] __dump_stack+0x1d/0x30 [ 158.205509][ T9534] dump_stack_lvl+0xe8/0x140 [ 158.205525][ T9534] dump_stack+0x15/0x1b [ 158.205539][ T9534] should_fail_ex+0x265/0x280 [ 158.205615][ T9534] ? sg_read+0x3ce/0xcb0 [ 158.205713][ T9534] should_failslab+0x8c/0xb0 [ 158.205732][ T9534] __kmalloc_cache_noprof+0x4c/0x320 [ 158.205759][ T9534] sg_read+0x3ce/0xcb0 [ 158.205819][ T9534] ? __pfx_sg_read+0x10/0x10 [ 158.205907][ T9534] vfs_read+0x1a0/0x6f0 [ 158.205939][ T9534] ? __rcu_read_unlock+0x4f/0x70 [ 158.205961][ T9534] ? __fget_files+0x184/0x1c0 [ 158.206047][ T9534] ksys_read+0xda/0x1a0 [ 158.206081][ T9534] __x64_sys_read+0x40/0x50 [ 158.206113][ T9534] x64_sys_call+0x2d77/0x2fb0 [ 158.206140][ T9534] do_syscall_64+0xd2/0x200 [ 158.206156][ T9534] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 158.206178][ T9534] ? clear_bhb_loop+0x40/0x90 [ 158.206308][ T9534] ? clear_bhb_loop+0x40/0x90 [ 158.206326][ T9534] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.206384][ T9534] RIP: 0033:0x7f25d979e929 [ 158.206400][ T9534] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 158.206419][ T9534] RSP: 002b:00007f25d7e07038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 158.206439][ T9534] RAX: ffffffffffffffda RBX: 00007f25d99c5fa0 RCX: 00007f25d979e929 [ 158.206451][ T9534] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 158.206523][ T9534] RBP: 00007f25d7e07090 R08: 0000000000000000 R09: 0000000000000000 [ 158.206533][ T9534] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 158.206543][ T9534] R13: 0000000000000000 R14: 00007f25d99c5fa0 R15: 00007ffda15dfe78 [ 158.206559][ T9534] [ 158.468208][ T9547] netlink: 'syz.1.2270': attribute type 12 has an invalid length. [ 158.494387][ T9543] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=9543 comm=syz.0.2266 [ 158.506871][ T9543] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=9543 comm=syz.0.2266 [ 158.519441][ T9549] netlink: 'syz.4.2268': attribute type 13 has an invalid length. [ 158.538549][ T9551] loop3: detected capacity change from 0 to 512 [ 158.552676][ T9551] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 158.573121][ T9551] EXT4-fs (loop3): 1 truncate cleaned up [ 158.584741][ T9551] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 158.635474][ T9561] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 158.646151][ T9561] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 158.670784][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.696473][ T9564] loop3: detected capacity change from 0 to 512 [ 158.710724][ T9564] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 158.730394][ T9564] EXT4-fs (loop3): orphan cleanup on readonly fs [ 158.737056][ T9564] EXT4-fs warning (device loop3): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 158.758691][ T9564] EXT4-fs (loop3): Cannot turn on quotas: error -117 [ 158.766002][ T9564] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.2275: bg 0: block 40: padding at end of block bitmap is not set [ 158.780472][ T9564] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 158.789447][ T9564] EXT4-fs (loop3): 1 truncate cleaned up [ 158.795572][ T9564] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 158.832561][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.883280][ T9568] infiniband syz!: set active [ 158.888065][ T9568] infiniband syz!: added team_slave_0 [ 158.899561][ T9568] RDS/IB: syz!: added [ 158.903633][ T9568] smc: adding ib device syz! with port count 1 [ 158.910920][ T9568] smc: ib device syz! port 1 has pnetid [ 159.055589][ T9578] FAULT_INJECTION: forcing a failure. [ 159.055589][ T9578] name failslab, interval 1, probability 0, space 0, times 0 [ 159.068252][ T9578] CPU: 1 UID: 0 PID: 9578 Comm: syz.3.2280 Not tainted 6.16.0-rc2-syzkaller-00024-g9afe652958c3 #0 PREEMPT(voluntary) [ 159.068282][ T9578] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 159.068293][ T9578] Call Trace: [ 159.068299][ T9578] [ 159.068305][ T9578] __dump_stack+0x1d/0x30 [ 159.068325][ T9578] dump_stack_lvl+0xe8/0x140 [ 159.068427][ T9578] dump_stack+0x15/0x1b [ 159.068440][ T9578] should_fail_ex+0x265/0x280 [ 159.068521][ T9578] ? tcf_block_get_ext+0x3dc/0xb30 [ 159.068552][ T9578] should_failslab+0x8c/0xb0 [ 159.068629][ T9578] __kmalloc_cache_noprof+0x4c/0x320 [ 159.068723][ T9578] tcf_block_get_ext+0x3dc/0xb30 [ 159.068804][ T9578] ? get_state_synchronize_rcu+0x1a/0x40 [ 159.068843][ T9578] clsact_init+0x2d1/0x6c0 [ 159.068864][ T9578] ? __pfx_clsact_init+0x10/0x10 [ 159.068882][ T9578] qdisc_create+0x58e/0x9e0 [ 159.068953][ T9578] tc_modify_qdisc+0x9bd/0x1380 [ 159.069040][ T9578] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 159.069061][ T9578] rtnetlink_rcv_msg+0x657/0x6d0 [ 159.069101][ T9578] netlink_rcv_skb+0x123/0x220 [ 159.069151][ T9578] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 159.069181][ T9578] rtnetlink_rcv+0x1c/0x30 [ 159.069200][ T9578] netlink_unicast+0x59e/0x670 [ 159.069300][ T9578] netlink_sendmsg+0x58b/0x6b0 [ 159.069323][ T9578] ? __pfx_netlink_sendmsg+0x10/0x10 [ 159.069343][ T9578] __sock_sendmsg+0x142/0x180 [ 159.069369][ T9578] ____sys_sendmsg+0x31e/0x4e0 [ 159.069417][ T9578] ___sys_sendmsg+0x17b/0x1d0 [ 159.069454][ T9578] __x64_sys_sendmsg+0xd4/0x160 [ 159.069482][ T9578] x64_sys_call+0x2999/0x2fb0 [ 159.069504][ T9578] do_syscall_64+0xd2/0x200 [ 159.069564][ T9578] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 159.069591][ T9578] ? clear_bhb_loop+0x40/0x90 [ 159.069609][ T9578] ? clear_bhb_loop+0x40/0x90 [ 159.069626][ T9578] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 159.069684][ T9578] RIP: 0033:0x7ffa8a2be929 [ 159.069697][ T9578] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 159.069712][ T9578] RSP: 002b:00007ffa88927038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 159.069733][ T9578] RAX: ffffffffffffffda RBX: 00007ffa8a4e5fa0 RCX: 00007ffa8a2be929 [ 159.069746][ T9578] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000000000000006 [ 159.069760][ T9578] RBP: 00007ffa88927090 R08: 0000000000000000 R09: 0000000000000000 [ 159.069773][ T9578] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 159.069847][ T9578] R13: 0000000000000000 R14: 00007ffa8a4e5fa0 R15: 00007fff8ebd8698 [ 159.069926][ T9578] [ 159.384151][ T9586] FAULT_INJECTION: forcing a failure. [ 159.384151][ T9586] name failslab, interval 1, probability 0, space 0, times 0 [ 159.396952][ T9586] CPU: 1 UID: 0 PID: 9586 Comm: syz.3.2284 Not tainted 6.16.0-rc2-syzkaller-00024-g9afe652958c3 #0 PREEMPT(voluntary) [ 159.396980][ T9586] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 159.396991][ T9586] Call Trace: [ 159.396996][ T9586] [ 159.397038][ T9586] __dump_stack+0x1d/0x30 [ 159.397057][ T9586] dump_stack_lvl+0xe8/0x140 [ 159.397076][ T9586] dump_stack+0x15/0x1b [ 159.397090][ T9586] should_fail_ex+0x265/0x280 [ 159.397115][ T9586] should_failslab+0x8c/0xb0 [ 159.397197][ T9586] __kmalloc_node_track_caller_noprof+0xa4/0x410 [ 159.397225][ T9586] ? parse_opts+0xb0/0x2d0 [ 159.397244][ T9586] kstrdup+0x3e/0xd0 [ 159.397267][ T9586] parse_opts+0xb0/0x2d0 [ 159.397352][ T9586] ? simple_strntoull+0xd2/0x100 [ 159.397377][ T9586] ? simple_strtol+0x60/0x70 [ 159.397503][ T9586] p9_fd_create+0x37/0x280 [ 159.397523][ T9586] ? strsep+0x1d/0x100 [ 159.397546][ T9586] p9_client_create+0x608/0xbc0 [ 159.397651][ T9586] v9fs_session_init+0xf7/0xde0 [ 159.397675][ T9586] ? obj_cgroup_charge_account+0x122/0x1a0 [ 159.397701][ T9586] ? __rcu_read_unlock+0x4f/0x70 [ 159.397719][ T9586] ? should_fail_ex+0xdb/0x280 [ 159.397815][ T9586] ? v9fs_mount+0x51/0x590 [ 159.397838][ T9586] ? should_failslab+0x8c/0xb0 [ 159.397862][ T9586] ? __kmalloc_cache_noprof+0x189/0x320 [ 159.397892][ T9586] v9fs_mount+0x67/0x590 [ 159.397970][ T9586] ? __pfx_v9fs_mount+0x10/0x10 [ 159.398001][ T9586] legacy_get_tree+0x75/0xd0 [ 159.398034][ T9586] vfs_get_tree+0x57/0x1d0 [ 159.398088][ T9586] do_new_mount+0x207/0x680 [ 159.398115][ T9586] path_mount+0x4a4/0xb20 [ 159.398140][ T9586] ? user_path_at+0x109/0x130 [ 159.398235][ T9586] __se_sys_mount+0x28f/0x2e0 [ 159.398250][ T9586] ? fput+0x8f/0xc0 [ 159.398272][ T9586] __x64_sys_mount+0x67/0x80 [ 159.398292][ T9586] x64_sys_call+0xd36/0x2fb0 [ 159.398315][ T9586] do_syscall_64+0xd2/0x200 [ 159.398413][ T9586] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 159.398436][ T9586] ? clear_bhb_loop+0x40/0x90 [ 159.398454][ T9586] ? clear_bhb_loop+0x40/0x90 [ 159.398478][ T9586] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 159.398500][ T9586] RIP: 0033:0x7ffa8a2be929 [ 159.398595][ T9586] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 159.398616][ T9586] RSP: 002b:00007ffa88927038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 159.398635][ T9586] RAX: ffffffffffffffda RBX: 00007ffa8a4e5fa0 RCX: 00007ffa8a2be929 [ 159.398646][ T9586] RDX: 0000200000000180 RSI: 0000200000000000 RDI: 0000000000000000 [ 159.398657][ T9586] RBP: 00007ffa88927090 R08: 0000200000000280 R09: 0000000000000000 [ 159.398670][ T9586] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 159.398816][ T9586] R13: 0000000000000000 R14: 00007ffa8a4e5fa0 R15: 00007fff8ebd8698 [ 159.398836][ T9586] [ 159.706311][ T9587] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=9587 comm=syz.4.2283 [ 159.718810][ T9587] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=9587 comm=syz.4.2283 [ 159.723261][ T9589] tap0: tun_chr_ioctl cmd 1074025677 [ 159.739877][ T9592] FAULT_INJECTION: forcing a failure. [ 159.739877][ T9592] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 159.752946][ T9592] CPU: 1 UID: 0 PID: 9592 Comm: syz.1.2286 Not tainted 6.16.0-rc2-syzkaller-00024-g9afe652958c3 #0 PREEMPT(voluntary) [ 159.753013][ T9592] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 159.753086][ T9592] Call Trace: [ 159.753092][ T9592] [ 159.753100][ T9592] __dump_stack+0x1d/0x30 [ 159.753120][ T9592] dump_stack_lvl+0xe8/0x140 [ 159.753190][ T9592] dump_stack+0x15/0x1b [ 159.753208][ T9592] should_fail_ex+0x265/0x280 [ 159.753248][ T9592] should_fail+0xb/0x20 [ 159.753276][ T9592] should_fail_usercopy+0x1a/0x20 [ 159.753309][ T9592] _copy_from_user+0x1c/0xb0 [ 159.753330][ T9592] ___sys_sendmsg+0xc1/0x1d0 [ 159.753419][ T9592] __x64_sys_sendmsg+0xd4/0x160 [ 159.753476][ T9592] x64_sys_call+0x2999/0x2fb0 [ 159.753498][ T9592] do_syscall_64+0xd2/0x200 [ 159.753542][ T9592] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 159.753569][ T9592] ? clear_bhb_loop+0x40/0x90 [ 159.753655][ T9592] ? clear_bhb_loop+0x40/0x90 [ 159.753677][ T9592] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 159.753720][ T9592] RIP: 0033:0x7f34f11de929 [ 159.753733][ T9592] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 159.753747][ T9592] RSP: 002b:00007f34ef847038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 159.753773][ T9592] RAX: ffffffffffffffda RBX: 00007f34f1405fa0 RCX: 00007f34f11de929 [ 159.753785][ T9592] RDX: 0000000000044000 RSI: 0000200000000040 RDI: 0000000000000003 [ 159.753798][ T9592] RBP: 00007f34ef847090 R08: 0000000000000000 R09: 0000000000000000 [ 159.753888][ T9592] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 159.753900][ T9592] R13: 0000000000000000 R14: 00007f34f1405fa0 R15: 00007ffc13006478 [ 159.753918][ T9592] [ 159.755450][ T9589] tap0: linktype set to 769 [ 159.755509][ T9594] __nla_validate_parse: 7 callbacks suppressed [ 159.755528][ T9594] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2287'. [ 159.755542][ T9594] netlink: 312 bytes leftover after parsing attributes in process `syz.3.2287'. [ 159.968208][ T9590] tap0: tun_chr_ioctl cmd 1074025677 [ 159.974477][ T9590] tap0: linktype set to 769 [ 160.035827][ T9619] loop3: detected capacity change from 0 to 512 [ 160.044224][ T9619] EXT4-fs error (device loop3): ext4_iget_extra_inode:5035: inode #15: comm syz.3.2296: corrupted in-inode xattr: invalid ea_ino [ 160.066801][ T9619] EXT4-fs error (device loop3): ext4_orphan_get:1398: comm syz.3.2296: couldn't read orphan inode 15 (err -117) [ 160.080246][ T9619] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 160.096886][ T9628] 9p: Unknown access argument 00000000000000000000 : -22 [ 160.132814][ T9635] FAULT_INJECTION: forcing a failure. [ 160.132814][ T9635] name failslab, interval 1, probability 0, space 0, times 0 [ 160.145571][ T9635] CPU: 0 UID: 0 PID: 9635 Comm: syz.1.2301 Not tainted 6.16.0-rc2-syzkaller-00024-g9afe652958c3 #0 PREEMPT(voluntary) [ 160.145600][ T9635] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 160.145611][ T9635] Call Trace: [ 160.145617][ T9635] [ 160.145696][ T9635] __dump_stack+0x1d/0x30 [ 160.145793][ T9635] dump_stack_lvl+0xe8/0x140 [ 160.145809][ T9635] dump_stack+0x15/0x1b [ 160.145877][ T9635] should_fail_ex+0x265/0x280 [ 160.145903][ T9635] should_failslab+0x8c/0xb0 [ 160.145922][ T9635] __kmalloc_node_track_caller_noprof+0xa4/0x410 [ 160.145947][ T9635] ? sidtab_sid2str_get+0xa0/0x130 [ 160.145977][ T9635] kmemdup_noprof+0x2b/0x70 [ 160.145996][ T9635] sidtab_sid2str_get+0xa0/0x130 [ 160.146015][ T9635] security_sid_to_context_core+0x1eb/0x2e0 [ 160.146035][ T9635] security_sid_to_context+0x27/0x40 [ 160.146132][ T9635] selinux_lsmprop_to_secctx+0x67/0xf0 [ 160.146222][ T9635] security_lsmprop_to_secctx+0x43/0x80 [ 160.146308][ T9635] audit_log_task_context+0x77/0x190 [ 160.146338][ T9635] audit_log_task+0xf4/0x250 [ 160.146493][ T9635] audit_seccomp+0x61/0x100 [ 160.146609][ T9635] ? __seccomp_filter+0x68c/0x10d0 [ 160.146629][ T9635] __seccomp_filter+0x69d/0x10d0 [ 160.146648][ T9635] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 160.146668][ T9635] ? vfs_write+0x75e/0x8e0 [ 160.146702][ T9635] __secure_computing+0x82/0x150 [ 160.146803][ T9635] syscall_trace_enter+0xcf/0x1e0 [ 160.146824][ T9635] do_syscall_64+0xac/0x200 [ 160.146839][ T9635] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 160.146868][ T9635] ? clear_bhb_loop+0x40/0x90 [ 160.146899][ T9635] ? clear_bhb_loop+0x40/0x90 [ 160.146918][ T9635] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.146937][ T9635] RIP: 0033:0x7f34f11de929 [ 160.146952][ T9635] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 160.146970][ T9635] RSP: 002b:00007f34ef847038 EFLAGS: 00000246 ORIG_RAX: 000000000000011f [ 160.147006][ T9635] RAX: ffffffffffffffda RBX: 00007f34f1405fa0 RCX: 00007f34f11de929 [ 160.147018][ T9635] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffffffffffff [ 160.147031][ T9635] RBP: 00007f34ef847090 R08: 0000000000000000 R09: 0000000000000000 [ 160.147042][ T9635] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 160.147077][ T9635] R13: 0000000000000000 R14: 00007f34f1405fa0 R15: 00007ffc13006478 [ 160.147092][ T9635] [ 160.410111][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.438851][ T9647] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=9647 comm=syz.1.2305 [ 160.451321][ T9647] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=9647 comm=syz.1.2305 [ 160.466581][ T9652] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2306'. [ 160.475588][ T9652] netlink: 312 bytes leftover after parsing attributes in process `syz.3.2306'. [ 160.529396][ T9660] block device autoloading is deprecated and will be removed. [ 160.538785][ T9658] loop3: detected capacity change from 0 to 1024 [ 160.548296][ T9655] loop1: detected capacity change from 0 to 2048 [ 160.555410][ T9658] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 160.565394][ T9658] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 160.576623][ T9658] EXT4-fs error (device loop3): ext4_get_journal_inode:5796: inode #32: comm syz.3.2309: iget: special inode unallocated [ 160.589610][ T9658] EXT4-fs (loop3): Remounting filesystem read-only [ 160.596236][ T9658] EXT4-fs (loop3): no journal found [ 160.601516][ T9658] EXT4-fs (loop3): can't get journal size [ 160.609444][ T9658] EXT4-fs (loop3): filesystem is read-only [ 160.614247][ T9666] netlink: '+}[@': attribute type 13 has an invalid length. [ 160.616770][ T9658] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 160.635260][ T9658] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.644443][ T9655] loop1: p1 < > p4 [ 160.649131][ T9655] loop1: p4 size 8388608 extends beyond EOD, truncated [ 160.697267][ T9666] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 160.712749][ T23] lo speed is unknown, defaulting to 1000 [ 160.718898][ T23] syz0: Port: 1 Link ACTIVE [ 160.786504][ T9677] FAULT_INJECTION: forcing a failure. [ 160.786504][ T9677] name failslab, interval 1, probability 0, space 0, times 0 [ 160.799215][ T9677] CPU: 0 UID: 0 PID: 9677 Comm: syz.0.2316 Not tainted 6.16.0-rc2-syzkaller-00024-g9afe652958c3 #0 PREEMPT(voluntary) [ 160.799233][ T9677] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 160.799241][ T9677] Call Trace: [ 160.799245][ T9677] [ 160.799270][ T9677] __dump_stack+0x1d/0x30 [ 160.799283][ T9677] dump_stack_lvl+0xe8/0x140 [ 160.799294][ T9677] dump_stack+0x15/0x1b [ 160.799302][ T9677] should_fail_ex+0x265/0x280 [ 160.799322][ T9677] should_failslab+0x8c/0xb0 [ 160.799335][ T9677] kmem_cache_alloc_lru_noprof+0x55/0x310 [ 160.799416][ T9677] ? __d_alloc+0x3d/0x350 [ 160.799429][ T9677] __d_alloc+0x3d/0x350 [ 160.799442][ T9677] d_alloc+0x2e/0x100 [ 160.799455][ T9677] lookup_one_qstr_excl_raw+0x95/0x1b0 [ 160.799562][ T9677] filename_create+0x14a/0x290 [ 160.799579][ T9677] do_mkdirat+0x52/0x3f0 [ 160.799595][ T9677] __x64_sys_mkdir+0x42/0x50 [ 160.799656][ T9677] x64_sys_call+0x2289/0x2fb0 [ 160.799677][ T9677] do_syscall_64+0xd2/0x200 [ 160.799687][ T9677] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 160.799702][ T9677] ? clear_bhb_loop+0x40/0x90 [ 160.799768][ T9677] ? clear_bhb_loop+0x40/0x90 [ 160.799780][ T9677] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.799792][ T9677] RIP: 0033:0x7fe6662de929 [ 160.799837][ T9677] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 160.799847][ T9677] RSP: 002b:00007fe664947038 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 160.799859][ T9677] RAX: ffffffffffffffda RBX: 00007fe666505fa0 RCX: 00007fe6662de929 [ 160.799866][ T9677] RDX: 0000000000000000 RSI: e88022b11028290f RDI: 0000200000000040 [ 160.799939][ T9677] RBP: 00007fe664947090 R08: 0000000000000000 R09: 0000000000000000 [ 160.799945][ T9677] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 160.799952][ T9677] R13: 0000000000000000 R14: 00007fe666505fa0 R15: 00007ffc90a22d58 [ 160.799962][ T9677] [ 161.026542][ T9685] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=9685 comm=syz.0.2318 [ 161.039076][ T9685] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=9685 comm=syz.0.2318 [ 161.051423][ T9689] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2319'. [ 161.061052][ T9689] netlink: 312 bytes leftover after parsing attributes in process `syz.3.2319'. [ 161.076012][ T9691] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 161.084544][ T9691] tipc: Enabling of bearer rejected, failed to enable media [ 161.115450][ T9691] loop4: detected capacity change from 0 to 2050 [ 161.124477][ T9691] EXT4-fs warning (device loop4): read_mmp_block:115: Error -117 while reading MMP block 64 [ 161.150204][ T9701] loop3: detected capacity change from 0 to 512 [ 161.181735][ T9701] EXT4-fs error (device loop3): ext4_iget_extra_inode:5035: inode #15: comm syz.3.2326: corrupted in-inode xattr: invalid ea_ino [ 161.201889][ T9701] EXT4-fs error (device loop3): ext4_orphan_get:1398: comm syz.3.2326: couldn't read orphan inode 15 (err -117) [ 161.221006][ T9701] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 161.290566][ T9715] FAULT_INJECTION: forcing a failure. [ 161.290566][ T9715] name failslab, interval 1, probability 0, space 0, times 0 [ 161.303314][ T9715] CPU: 1 UID: 0 PID: 9715 Comm: syz.0.2330 Not tainted 6.16.0-rc2-syzkaller-00024-g9afe652958c3 #0 PREEMPT(voluntary) [ 161.303368][ T9715] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 161.303378][ T9715] Call Trace: [ 161.303384][ T9715] [ 161.303432][ T9715] __dump_stack+0x1d/0x30 [ 161.303453][ T9715] dump_stack_lvl+0xe8/0x140 [ 161.303471][ T9715] dump_stack+0x15/0x1b [ 161.303518][ T9715] should_fail_ex+0x265/0x280 [ 161.303619][ T9715] should_failslab+0x8c/0xb0 [ 161.303643][ T9715] kmem_cache_alloc_lru_noprof+0x55/0x310 [ 161.303714][ T9715] ? __d_alloc+0x3d/0x350 [ 161.303739][ T9715] __d_alloc+0x3d/0x350 [ 161.303764][ T9715] d_alloc+0x2e/0x100 [ 161.303784][ T9715] lookup_one_qstr_excl_raw+0x95/0x1b0 [ 161.303847][ T9715] filename_create+0x14a/0x290 [ 161.303875][ T9715] do_mknodat+0xe7/0x610 [ 161.303911][ T9715] __x64_sys_mknodat+0x5e/0x70 [ 161.303944][ T9715] x64_sys_call+0x2355/0x2fb0 [ 161.304024][ T9715] do_syscall_64+0xd2/0x200 [ 161.304040][ T9715] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 161.304062][ T9715] ? clear_bhb_loop+0x40/0x90 [ 161.304080][ T9715] ? clear_bhb_loop+0x40/0x90 [ 161.304098][ T9715] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 161.304131][ T9715] RIP: 0033:0x7fe6662de929 [ 161.304147][ T9715] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 161.304164][ T9715] RSP: 002b:00007fe664947038 EFLAGS: 00000246 ORIG_RAX: 0000000000000103 [ 161.304183][ T9715] RAX: ffffffffffffffda RBX: 00007fe666505fa0 RCX: 00007fe6662de929 [ 161.304234][ T9715] RDX: b0a54e68b1cd2fdb RSI: 0000200000000040 RDI: ffffffffffffff9c [ 161.304244][ T9715] RBP: 00007fe664947090 R08: 0000000000000000 R09: 0000000000000000 [ 161.304256][ T9715] R10: 0000000000000103 R11: 0000000000000246 R12: 0000000000000001 [ 161.304267][ T9715] R13: 0000000000000000 R14: 00007fe666505fa0 R15: 00007ffc90a22d58 [ 161.304286][ T9715] [ 161.513924][ T9719] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2332'. [ 161.547439][ T9724] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=9724 comm=syz.1.2334 [ 161.560087][ T9724] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=9724 comm=syz.1.2334 [ 161.608393][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.664167][ T9742] block device autoloading is deprecated and will be removed. [ 161.712595][ T9752] FAULT_INJECTION: forcing a failure. [ 161.712595][ T9752] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 161.725871][ T9752] CPU: 0 UID: 0 PID: 9752 Comm: syz.0.2345 Not tainted 6.16.0-rc2-syzkaller-00024-g9afe652958c3 #0 PREEMPT(voluntary) [ 161.725946][ T9752] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 161.725959][ T9752] Call Trace: [ 161.725965][ T9752] [ 161.725973][ T9752] __dump_stack+0x1d/0x30 [ 161.726012][ T9752] dump_stack_lvl+0xe8/0x140 [ 161.726105][ T9752] dump_stack+0x15/0x1b [ 161.726122][ T9752] should_fail_ex+0x265/0x280 [ 161.726155][ T9752] should_fail+0xb/0x20 [ 161.726179][ T9752] should_fail_usercopy+0x1a/0x20 [ 161.726230][ T9752] _copy_from_user+0x1c/0xb0 [ 161.726322][ T9752] bpf_test_init+0xdf/0x160 [ 161.726357][ T9752] bpf_prog_test_run_xdp+0x274/0x910 [ 161.726445][ T9752] ? kstrtouint+0x76/0xc0 [ 161.726460][ T9752] ? __rcu_read_unlock+0x4f/0x70 [ 161.726475][ T9752] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 161.726492][ T9752] bpf_prog_test_run+0x22a/0x390 [ 161.726551][ T9752] __sys_bpf+0x3dc/0x790 [ 161.726573][ T9752] __x64_sys_bpf+0x41/0x50 [ 161.726639][ T9752] x64_sys_call+0x2478/0x2fb0 [ 161.726708][ T9752] do_syscall_64+0xd2/0x200 [ 161.726719][ T9752] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 161.726866][ T9752] ? clear_bhb_loop+0x40/0x90 [ 161.726878][ T9752] ? clear_bhb_loop+0x40/0x90 [ 161.726917][ T9752] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 161.726929][ T9752] RIP: 0033:0x7fe6662de929 [ 161.726938][ T9752] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 161.726948][ T9752] RSP: 002b:00007fe664947038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 161.727025][ T9752] RAX: ffffffffffffffda RBX: 00007fe666505fa0 RCX: 00007fe6662de929 [ 161.727033][ T9752] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 161.727040][ T9752] RBP: 00007fe664947090 R08: 0000000000000000 R09: 0000000000000000 [ 161.727047][ T9752] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 161.727054][ T9752] R13: 0000000000000000 R14: 00007fe666505fa0 R15: 00007ffc90a22d58 [ 161.727104][ T9752] [ 161.979774][ T9761] pim6reg: entered allmulticast mode [ 161.997553][ T9765] FAULT_INJECTION: forcing a failure. [ 161.997553][ T9765] name failslab, interval 1, probability 0, space 0, times 0 [ 162.010287][ T9765] CPU: 0 UID: 0 PID: 9765 Comm: syz.3.2349 Not tainted 6.16.0-rc2-syzkaller-00024-g9afe652958c3 #0 PREEMPT(voluntary) [ 162.010316][ T9765] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 162.010327][ T9765] Call Trace: [ 162.010332][ T9765] [ 162.010338][ T9765] __dump_stack+0x1d/0x30 [ 162.010361][ T9765] dump_stack_lvl+0xe8/0x140 [ 162.010388][ T9765] dump_stack+0x15/0x1b [ 162.010403][ T9765] should_fail_ex+0x265/0x280 [ 162.010443][ T9765] should_failslab+0x8c/0xb0 [ 162.010467][ T9765] kmem_cache_alloc_node_noprof+0x57/0x320 [ 162.010496][ T9765] ? __alloc_skb+0x101/0x320 [ 162.010576][ T9765] __alloc_skb+0x101/0x320 [ 162.010603][ T9765] ? audit_log_start+0x365/0x6c0 [ 162.010656][ T9765] audit_log_start+0x380/0x6c0 [ 162.010689][ T9765] audit_seccomp+0x48/0x100 [ 162.010731][ T9765] ? __seccomp_filter+0x68c/0x10d0 [ 162.010790][ T9765] __seccomp_filter+0x69d/0x10d0 [ 162.010811][ T9765] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 162.010876][ T9765] ? vfs_write+0x75e/0x8e0 [ 162.010905][ T9765] ? __rcu_read_unlock+0x4f/0x70 [ 162.010928][ T9765] ? __fget_files+0x184/0x1c0 [ 162.010952][ T9765] __secure_computing+0x82/0x150 [ 162.010976][ T9765] syscall_trace_enter+0xcf/0x1e0 [ 162.011071][ T9765] do_syscall_64+0xac/0x200 [ 162.011086][ T9765] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 162.011138][ T9765] ? clear_bhb_loop+0x40/0x90 [ 162.011159][ T9765] ? clear_bhb_loop+0x40/0x90 [ 162.011181][ T9765] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.011203][ T9765] RIP: 0033:0x7ffa8a2be929 [ 162.011220][ T9765] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 162.011235][ T9765] RSP: 002b:00007ffa88927038 EFLAGS: 00000246 ORIG_RAX: 000000000000008a [ 162.011266][ T9765] RAX: ffffffffffffffda RBX: 00007ffa8a4e5fa0 RCX: 00007ffa8a2be929 [ 162.011384][ T9765] RDX: 0000000000000000 RSI: 00002000000003c0 RDI: 0000000000000003 [ 162.011395][ T9765] RBP: 00007ffa88927090 R08: 0000000000000000 R09: 0000000000000000 [ 162.011405][ T9765] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 162.011416][ T9765] R13: 0000000000000000 R14: 00007ffa8a4e5fa0 R15: 00007fff8ebd8698 [ 162.011436][ T9765] [ 162.255746][ T9768] loop3: detected capacity change from 0 to 512 [ 162.267887][ T9768] EXT4-fs error (device loop3): ext4_iget_extra_inode:5035: inode #15: comm syz.3.2350: corrupted in-inode xattr: invalid ea_ino [ 162.281944][ T9768] EXT4-fs error (device loop3): ext4_orphan_get:1398: comm syz.3.2350: couldn't read orphan inode 15 (err -117) [ 162.295503][ T9768] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 162.308290][ T9770] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 162.377173][ T9778] bridge0: port 3(macsec1) entered blocking state [ 162.383753][ T9778] bridge0: port 3(macsec1) entered disabled state [ 162.391025][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.391239][ T9778] macsec1: entered allmulticast mode [ 162.405369][ T9778] bridge0: entered allmulticast mode [ 162.412452][ T9778] macsec1: left allmulticast mode [ 162.417498][ T9778] bridge0: left allmulticast mode [ 162.434461][ T9783] bond2: entered promiscuous mode [ 162.439705][ T9783] bond2: entered allmulticast mode [ 162.445223][ T9783] 8021q: adding VLAN 0 to HW filter on device bond2 [ 162.455042][ T9783] bond2 (unregistering): Released all slaves [ 162.491654][ T9778] loop0: detected capacity change from 0 to 512 [ 162.511440][ T9792] FAULT_INJECTION: forcing a failure. [ 162.511440][ T9792] name failslab, interval 1, probability 0, space 0, times 0 [ 162.524126][ T9792] CPU: 1 UID: 0 PID: 9792 Comm: syz.1.2359 Not tainted 6.16.0-rc2-syzkaller-00024-g9afe652958c3 #0 PREEMPT(voluntary) [ 162.524206][ T9792] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 162.524220][ T9792] Call Trace: [ 162.524226][ T9792] [ 162.524252][ T9792] __dump_stack+0x1d/0x30 [ 162.524273][ T9792] dump_stack_lvl+0xe8/0x140 [ 162.524293][ T9792] dump_stack+0x15/0x1b [ 162.524311][ T9792] should_fail_ex+0x265/0x280 [ 162.524359][ T9792] should_failslab+0x8c/0xb0 [ 162.524382][ T9792] kmem_cache_alloc_noprof+0x50/0x310 [ 162.524404][ T9792] ? __kernfs_new_node+0x6d/0x350 [ 162.524560][ T9792] __kernfs_new_node+0x6d/0x350 [ 162.524667][ T9792] ? percpu_ref_init+0x33/0x250 [ 162.524769][ T9792] ? pcpu_alloc_noprof+0xd26/0x1210 [ 162.524798][ T9792] ? percpu_ref_init+0x9c/0x250 [ 162.524917][ T9792] ? should_fail_ex+0xdb/0x280 [ 162.524948][ T9792] kernfs_new_node+0xd0/0x140 [ 162.524981][ T9792] kernfs_create_dir_ns+0x44/0xe0 [ 162.525002][ T9792] cgroup_mkdir+0x22e/0xc90 [ 162.525100][ T9792] ? may_create+0x26e/0x2b0 [ 162.525155][ T9792] ? __pfx_cgroup_mkdir+0x10/0x10 [ 162.525175][ T9792] kernfs_iop_mkdir+0x11e/0x1c0 [ 162.525197][ T9792] vfs_mkdir+0x210/0x340 [ 162.525279][ T9792] do_mkdirat+0x132/0x3f0 [ 162.525311][ T9792] __x64_sys_mkdirat+0x4c/0x60 [ 162.525407][ T9792] x64_sys_call+0x2be0/0x2fb0 [ 162.525493][ T9792] do_syscall_64+0xd2/0x200 [ 162.525576][ T9792] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 162.525602][ T9792] ? clear_bhb_loop+0x40/0x90 [ 162.525624][ T9792] ? clear_bhb_loop+0x40/0x90 [ 162.525707][ T9792] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.525729][ T9792] RIP: 0033:0x7f34f11de929 [ 162.525745][ T9792] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 162.525763][ T9792] RSP: 002b:00007f34ef847038 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 162.525783][ T9792] RAX: ffffffffffffffda RBX: 00007f34f1405fa0 RCX: 00007f34f11de929 [ 162.525797][ T9792] RDX: 00000000000001ff RSI: 00002000000004c0 RDI: 0000000000000008 [ 162.525886][ T9792] RBP: 00007f34ef847090 R08: 0000000000000000 R09: 0000000000000000 [ 162.525899][ T9792] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 162.525912][ T9792] R13: 0000000000000000 R14: 00007f34f1405fa0 R15: 00007ffc13006478 [ 162.525932][ T9792] [ 162.767688][ T9778] EXT4-fs (loop0): too many log groups per flexible block group [ 162.775608][ T9778] EXT4-fs (loop0): failed to initialize mballoc (-12) [ 162.788994][ T9778] EXT4-fs (loop0): mount failed [ 162.858117][ T9808] loop3: detected capacity change from 0 to 512 [ 162.881075][ T9808] EXT4-fs (loop3): 1 orphan inode deleted [ 162.887350][ T9808] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 162.901725][ T1905] EXT4-fs error (device loop3): ext4_release_dquot:6969: comm kworker/u8:6: Failed to release dquot type 1 [ 162.914174][ T9808] ext4 filesystem being mounted at /462/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 162.928813][ T9817] loop1: detected capacity change from 0 to 512 [ 162.944977][ T9817] EXT4-fs error (device loop1): ext4_iget_extra_inode:5035: inode #15: comm syz.1.2366: corrupted in-inode xattr: invalid ea_ino [ 162.958562][ T29] kauditd_printk_skb: 310 callbacks suppressed [ 162.958573][ T29] audit: type=1400 audit(1750163722.066:30096): avc: denied { getopt } for pid=9806 comm="syz.2.2364" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 162.967419][ T9817] EXT4-fs error (device loop1): ext4_orphan_get:1398: comm syz.1.2366: couldn't read orphan inode 15 (err -117) [ 163.004743][ T9817] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 163.034792][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.068143][ T9825] loop0: detected capacity change from 0 to 512 [ 163.077750][ T9827] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2370'. [ 163.086855][ T9827] netlink: 43 bytes leftover after parsing attributes in process `syz.2.2370'. [ 163.095866][ T9827] netlink: 'syz.2.2370': attribute type 5 has an invalid length. [ 163.101930][ T9829] loop3: detected capacity change from 0 to 512 [ 163.103745][ T9827] netlink: 43 bytes leftover after parsing attributes in process `syz.2.2370'. [ 163.114991][ T9825] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 163.128200][ T9825] EXT4-fs (loop0): orphan cleanup on readonly fs [ 163.134896][ T9829] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 163.143150][ T9829] EXT4-fs (loop3): orphan cleanup on readonly fs [ 163.150483][ T9825] Quota error (device loop0): v2_read_file_info: Block with free entry 1 out of range (1, 6). [ 163.160980][ T9825] EXT4-fs warning (device loop0): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 163.161133][ T9829] Quota error (device loop3): v2_read_file_info: Block with free entry 1 out of range (1, 6). [ 163.176451][ T9825] EXT4-fs (loop0): Cannot turn on quotas: error -117 [ 163.194062][ T9825] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.2369: bg 0: block 40: padding at end of block bitmap is not set [ 163.208359][ T9829] EXT4-fs warning (device loop3): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 163.209241][ T9829] EXT4-fs (loop3): Cannot turn on quotas: error -117 [ 163.232716][ T3308] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.234825][ T9829] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.2368: bg 0: block 40: padding at end of block bitmap is not set [ 163.256072][ T9825] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 163.265040][ T9829] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 163.275301][ T9829] EXT4-fs (loop3): 1 truncate cleaned up [ 163.281096][ T9825] EXT4-fs (loop0): 1 truncate cleaned up [ 163.287128][ T9825] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 163.302389][ T9829] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 163.375978][ T9846] netlink: 'syz.1.2375': attribute type 21 has an invalid length. [ 163.387533][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.398855][ T9848] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.409359][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.426176][ T9846] siw: device registration error -23 [ 163.438830][ T9850] xt_hashlimit: max too large, truncated to 1048576 [ 163.455172][ T9852] loop3: detected capacity change from 0 to 2048 [ 163.463065][ T9848] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.467731][ T9850] loop0: detected capacity change from 0 to 2048 [ 163.506635][ T9852] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 163.521989][ T9852] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 163.538063][ T9852] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 33 with error 28 [ 163.550373][ T9852] EXT4-fs (loop3): This should not happen!! Data will be lost [ 163.550373][ T9852] [ 163.560100][ T9852] EXT4-fs (loop3): Total free blocks count 0 [ 163.561625][ T9850] IPVS: set_ctl: invalid protocol: 43 172.30.0.1:20003 [ 163.566090][ T9852] EXT4-fs (loop3): Free/Dirty block details [ 163.566105][ T9852] EXT4-fs (loop3): free_blocks=2415919504 [ 163.585056][ T9852] EXT4-fs (loop3): dirty_blocks=48 [ 163.590259][ T9852] EXT4-fs (loop3): Block reservation details [ 163.593010][ T29] audit: type=1400 audit(1750163722.726:30097): avc: denied { ioctl } for pid=9851 comm="syz.3.2378" path="/464/file1/file1" dev="loop3" ino=15 ioctlcmd=0x534c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 163.596261][ T9852] EXT4-fs (loop3): i_reserved_data_blocks=3 [ 163.627994][ T9848] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.670498][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.682555][ T9848] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.712590][ T9879] tipc: Started in network mode [ 163.717515][ T9879] tipc: Node identity ac14140f, cluster identity 4711 [ 163.754533][ T9884] FAULT_INJECTION: forcing a failure. [ 163.754533][ T9884] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 163.757691][ T9879] tipc: New replicast peer: 0.0.255.255 [ 163.767625][ T9884] CPU: 1 UID: 0 PID: 9884 Comm: syz.4.2388 Not tainted 6.16.0-rc2-syzkaller-00024-g9afe652958c3 #0 PREEMPT(voluntary) [ 163.767656][ T9884] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 163.767681][ T9884] Call Trace: [ 163.767687][ T9884] [ 163.767695][ T9884] __dump_stack+0x1d/0x30 [ 163.767717][ T9884] dump_stack_lvl+0xe8/0x140 [ 163.767736][ T9884] dump_stack+0x15/0x1b [ 163.767752][ T9884] should_fail_ex+0x265/0x280 [ 163.767881][ T9884] should_fail+0xb/0x20 [ 163.767905][ T9884] should_fail_usercopy+0x1a/0x20 [ 163.767936][ T9884] _copy_to_user+0x20/0xa0 [ 163.767965][ T9884] simple_read_from_buffer+0xb5/0x130 [ 163.767996][ T9884] proc_fail_nth_read+0x100/0x140 [ 163.768038][ T9884] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 163.768070][ T9884] vfs_read+0x1a0/0x6f0 [ 163.768105][ T9884] ? __rcu_read_unlock+0x4f/0x70 [ 163.768146][ T9884] ? __fget_files+0x184/0x1c0 [ 163.768212][ T9884] ? finish_task_switch+0xad/0x2b0 [ 163.768251][ T9884] ksys_read+0xda/0x1a0 [ 163.768281][ T9884] __x64_sys_read+0x40/0x50 [ 163.768311][ T9884] x64_sys_call+0x2d77/0x2fb0 [ 163.768330][ T9884] do_syscall_64+0xd2/0x200 [ 163.768411][ T9884] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 163.768437][ T9884] ? clear_bhb_loop+0x40/0x90 [ 163.768457][ T9884] ? clear_bhb_loop+0x40/0x90 [ 163.768478][ T9884] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.768498][ T9884] RIP: 0033:0x7f22594ed33c [ 163.768573][ T9884] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 163.768620][ T9884] RSP: 002b:00007f2257b57030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 163.768639][ T9884] RAX: ffffffffffffffda RBX: 00007f2259715fa0 RCX: 00007f22594ed33c [ 163.768651][ T9884] RDX: 000000000000000f RSI: 00007f2257b570a0 RDI: 0000000000000008 [ 163.768687][ T9884] RBP: 00007f2257b57090 R08: 0000000000000000 R09: 0000000000000000 [ 163.768737][ T9884] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 163.768749][ T9884] R13: 0000000000000000 R14: 00007f2259715fa0 R15: 00007fff58233af8 [ 163.768767][ T9884] [ 163.983572][ T9879] tipc: Enabled bearer , priority 10 [ 163.987944][ T9893] loop4: detected capacity change from 0 to 2048 [ 163.990222][ T9888] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 164.004346][ T9889] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 164.004667][ T9888] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 164.010847][ T9889] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 164.011183][ T9889] vhci_hcd vhci_hcd.0: Device attached [ 164.038453][ T9848] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.065765][ T9848] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.077951][ T9848] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.090342][ T9848] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.113715][ T9893] EXT4-fs (loop4): failed to initialize system zone (-117) [ 164.121760][ T9893] EXT4-fs (loop4): mount failed [ 164.156391][ T29] audit: type=1400 audit(1750163723.296:30098): avc: denied { relabelfrom } for pid=9901 comm="syz.1.2392" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 164.176513][ T29] audit: type=1400 audit(1750163723.296:30099): avc: denied { relabelto } for pid=9901 comm="syz.1.2392" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 164.245092][ T9907] netlink: 'syz.2.2394': attribute type 4 has an invalid length. [ 164.263024][ T9891] vhci_hcd: connection closed [ 164.263119][ T8444] vhci_hcd: stop threads [ 164.272413][ T8444] vhci_hcd: release socket [ 164.276876][ T8444] vhci_hcd: disconnect device [ 164.296644][ T29] audit: type=1400 audit(1750163723.436:30100): avc: denied { create } for pid=9908 comm="syz.1.2395" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 164.318771][ T9909] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=11800 sclass=netlink_route_socket pid=9909 comm=syz.1.2395 [ 164.388126][ T9916] loop4: detected capacity change from 0 to 256 [ 164.389121][ T9917] FAULT_INJECTION: forcing a failure. [ 164.389121][ T9917] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 164.407552][ T9917] CPU: 1 UID: 0 PID: 9917 Comm: syz.1.2398 Not tainted 6.16.0-rc2-syzkaller-00024-g9afe652958c3 #0 PREEMPT(voluntary) [ 164.407590][ T9917] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 164.407600][ T9917] Call Trace: [ 164.407605][ T9917] [ 164.407611][ T9917] __dump_stack+0x1d/0x30 [ 164.407633][ T9917] dump_stack_lvl+0xe8/0x140 [ 164.407677][ T9917] dump_stack+0x15/0x1b [ 164.407692][ T9917] should_fail_ex+0x265/0x280 [ 164.407790][ T9917] should_fail+0xb/0x20 [ 164.407813][ T9917] should_fail_usercopy+0x1a/0x20 [ 164.407842][ T9917] _copy_to_user+0x20/0xa0 [ 164.407865][ T9917] simple_read_from_buffer+0xb5/0x130 [ 164.407956][ T9917] proc_fail_nth_read+0x100/0x140 [ 164.407976][ T9917] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 164.408007][ T9917] vfs_read+0x1a0/0x6f0 [ 164.408050][ T9917] ? __rcu_read_unlock+0x4f/0x70 [ 164.408069][ T9917] ? __fget_files+0x184/0x1c0 [ 164.408085][ T9917] ? __sys_bind+0x223/0x2a0 [ 164.408110][ T9917] ksys_read+0xda/0x1a0 [ 164.408154][ T9917] __x64_sys_read+0x40/0x50 [ 164.408183][ T9917] x64_sys_call+0x2d77/0x2fb0 [ 164.408202][ T9917] do_syscall_64+0xd2/0x200 [ 164.408260][ T9917] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 164.408316][ T9917] ? clear_bhb_loop+0x40/0x90 [ 164.408405][ T9917] ? clear_bhb_loop+0x40/0x90 [ 164.408434][ T9917] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 164.408477][ T9917] RIP: 0033:0x7f34f11dd33c [ 164.408493][ T9917] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 164.408546][ T9917] RSP: 002b:00007f34ef847030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 164.408567][ T9917] RAX: ffffffffffffffda RBX: 00007f34f1405fa0 RCX: 00007f34f11dd33c [ 164.408580][ T9917] RDX: 000000000000000f RSI: 00007f34ef8470a0 RDI: 0000000000000007 [ 164.408594][ T9917] RBP: 00007f34ef847090 R08: 0000000000000000 R09: 0000000000000000 [ 164.408607][ T9917] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 164.408671][ T9917] R13: 0000000000000000 R14: 00007f34f1405fa0 R15: 00007ffc13006478 [ 164.408702][ T9917] [ 164.568807][ T9916] FAT-fs (loop4): codepage cp860 not found [ 164.640237][ T9926] x_tables: duplicate underflow at hook 1 [ 164.648920][ T29] audit: type=1326 audit(1750163723.786:30101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9924 comm="syz.1.2400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34f11de929 code=0x7ffc0000 [ 164.648955][ T29] audit: type=1326 audit(1750163723.786:30102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9924 comm="syz.1.2400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34f11de929 code=0x7ffc0000 [ 164.649011][ T29] audit: type=1326 audit(1750163723.786:30103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9924 comm="syz.1.2400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f34f11de929 code=0x7ffc0000 [ 164.724105][ T9926] lo speed is unknown, defaulting to 1000 [ 164.724709][ T9926] lo speed is unknown, defaulting to 1000 [ 164.812757][ T9937] loop3: detected capacity change from 0 to 2048 [ 164.813224][ T9937] EXT4-fs: Ignoring removed mblk_io_submit option [ 164.831393][ T9937] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 164.834555][ T9937] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 164.836562][ T9937] FAULT_INJECTION: forcing a failure. [ 164.836562][ T9937] name failslab, interval 1, probability 0, space 0, times 0 [ 164.836589][ T9937] CPU: 0 UID: 0 PID: 9937 Comm: syz.3.2403 Not tainted 6.16.0-rc2-syzkaller-00024-g9afe652958c3 #0 PREEMPT(voluntary) [ 164.836652][ T9937] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 164.836665][ T9937] Call Trace: [ 164.836671][ T9937] [ 164.836678][ T9937] __dump_stack+0x1d/0x30 [ 164.836698][ T9937] dump_stack_lvl+0xe8/0x140 [ 164.836714][ T9937] dump_stack+0x15/0x1b [ 164.836762][ T9937] should_fail_ex+0x265/0x280 [ 164.836842][ T9937] should_failslab+0x8c/0xb0 [ 164.836945][ T9937] kmem_cache_alloc_noprof+0x50/0x310 [ 164.837021][ T9937] ? audit_log_start+0x365/0x6c0 [ 164.837048][ T9937] audit_log_start+0x365/0x6c0 [ 164.837089][ T9937] audit_seccomp+0x48/0x100 [ 164.837118][ T9937] ? __seccomp_filter+0x68c/0x10d0 [ 164.837138][ T9937] __seccomp_filter+0x69d/0x10d0 [ 164.837158][ T9937] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 164.837183][ T9937] ? vfs_write+0x75e/0x8e0 [ 164.837279][ T9937] ? __rcu_read_unlock+0x4f/0x70 [ 164.837336][ T9937] ? __fget_files+0x184/0x1c0 [ 164.837355][ T9937] __secure_computing+0x82/0x150 [ 164.837374][ T9937] syscall_trace_enter+0xcf/0x1e0 [ 164.837416][ T9937] do_syscall_64+0xac/0x200 [ 164.837464][ T9937] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 164.837485][ T9937] ? clear_bhb_loop+0x40/0x90 [ 164.837537][ T9937] ? clear_bhb_loop+0x40/0x90 [ 164.837560][ T9937] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 164.837623][ T9937] RIP: 0033:0x7ffa8a2be929 [ 164.837710][ T9937] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 164.837725][ T9937] RSP: 002b:00007ffa88927038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 164.837814][ T9937] RAX: ffffffffffffffda RBX: 00007ffa8a4e5fa0 RCX: 00007ffa8a2be929 [ 164.837825][ T9937] RDX: 0000000030004001 RSI: 0000200000000080 RDI: 0000000000000006 [ 164.837836][ T9937] RBP: 00007ffa88927090 R08: 0000000000000000 R09: 0000000000000000 [ 164.837846][ T9937] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 164.837910][ T9937] R13: 0000000000000000 R14: 00007ffa8a4e5fa0 R15: 00007fff8ebd8698 [ 164.837926][ T9937] [ 165.098819][ T3387] tipc: Node number set to 2886997007 [ 165.444718][ T9958] __nla_validate_parse: 2 callbacks suppressed [ 165.444733][ T9958] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2410'. [ 165.444750][ T9958] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2410'. [ 165.531387][ T9961] loop0: detected capacity change from 0 to 1024 [ 165.534302][ T9961] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 165.543672][ T9961] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 165.544325][ T9961] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c840e02c, mo2=0000] [ 165.553413][ T9963] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 165.553433][ T9963] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 165.553486][ T9963] vhci_hcd vhci_hcd.0: Device attached [ 165.556836][ T9964] vhci_hcd: connection closed [ 165.557172][ T1905] vhci_hcd: stop threads [ 165.557182][ T1905] vhci_hcd: release socket [ 165.557190][ T1905] vhci_hcd: disconnect device [ 165.557424][ T9961] EXT4-fs error (device loop0): ext4_map_blocks:780: inode #3: block 2: comm syz.0.2405: lblock 2 mapped to illegal pblock 2 (length 1) [ 165.557536][ T9961] EXT4-fs (loop0): Remounting filesystem read-only [ 165.557586][ T9961] EXT4-fs (loop0): 1 orphan inode deleted [ 165.557981][ T9961] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 165.701366][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.710891][ T9961] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.745897][ T9961] loop0: detected capacity change from 0 to 2048 [ 165.752912][ T9968] loop3: detected capacity change from 0 to 164 [ 165.814136][ T9974] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 165.823476][ T9961] Alternate GPT is invalid, using primary GPT. [ 165.829806][ T9961] loop0: p1 p2 p3 [ 165.959451][ T9978] lo speed is unknown, defaulting to 1000 [ 165.965663][ T9978] lo speed is unknown, defaulting to 1000 [ 166.114087][ T9989] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2418'. [ 166.210576][ T9995] IPv6: NLM_F_CREATE should be specified when creating new route [ 166.219122][ T9995] IPv6: Can't replace route, no match found [ 166.225315][ T9995] SELinux: syz.2.2420 (9995) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 166.281545][ T9999] FAULT_INJECTION: forcing a failure. [ 166.281545][ T9999] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 166.294628][ T9999] CPU: 0 UID: 0 PID: 9999 Comm: syz.1.2422 Not tainted 6.16.0-rc2-syzkaller-00024-g9afe652958c3 #0 PREEMPT(voluntary) [ 166.294656][ T9999] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 166.294698][ T9999] Call Trace: [ 166.294704][ T9999] [ 166.294710][ T9999] __dump_stack+0x1d/0x30 [ 166.294727][ T9999] dump_stack_lvl+0xe8/0x140 [ 166.294761][ T9999] dump_stack+0x15/0x1b [ 166.294791][ T9999] should_fail_ex+0x265/0x280 [ 166.294821][ T9999] should_fail+0xb/0x20 [ 166.294849][ T9999] should_fail_usercopy+0x1a/0x20 [ 166.294951][ T9999] _copy_to_user+0x20/0xa0 [ 166.294972][ T9999] simple_read_from_buffer+0xb5/0x130 [ 166.295005][ T9999] proc_fail_nth_read+0x100/0x140 [ 166.295097][ T9999] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 166.295136][ T9999] vfs_read+0x1a0/0x6f0 [ 166.295166][ T9999] ? kmem_cache_free+0xdf/0x300 [ 166.295260][ T9999] ? __rcu_read_unlock+0x4f/0x70 [ 166.295298][ T9999] ? __fget_files+0x184/0x1c0 [ 166.295319][ T9999] ksys_read+0xda/0x1a0 [ 166.295369][ T9999] __x64_sys_read+0x40/0x50 [ 166.295464][ T9999] x64_sys_call+0x2d77/0x2fb0 [ 166.295483][ T9999] do_syscall_64+0xd2/0x200 [ 166.295494][ T9999] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 166.295539][ T9999] ? clear_bhb_loop+0x40/0x90 [ 166.295550][ T9999] ? clear_bhb_loop+0x40/0x90 [ 166.295562][ T9999] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.295651][ T9999] RIP: 0033:0x7f34f11dd33c [ 166.295667][ T9999] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 166.295712][ T9999] RSP: 002b:00007f34ef847030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 166.295723][ T9999] RAX: ffffffffffffffda RBX: 00007f34f1405fa0 RCX: 00007f34f11dd33c [ 166.295731][ T9999] RDX: 000000000000000f RSI: 00007f34ef8470a0 RDI: 0000000000000004 [ 166.295738][ T9999] RBP: 00007f34ef847090 R08: 0000000000000000 R09: 0000000000000000 [ 166.295745][ T9999] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 166.295776][ T9999] R13: 0000000000000000 R14: 00007f34f1405fa0 R15: 00007ffc13006478 [ 166.295786][ T9999] [ 166.518383][T10001] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2423'. [ 166.528437][T10001] veth0_to_bond: entered allmulticast mode [ 166.670014][T10016] netlink: 'syz.0.2429': attribute type 21 has an invalid length. [ 166.681318][T10018] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2430'. [ 166.691978][T10011] loop1: detected capacity change from 0 to 8192 [ 166.707183][T10016] siw: device registration error -23 [ 166.727933][T10022] loop0: detected capacity change from 0 to 512 [ 166.736393][T10022] EXT4-fs error (device loop0): ext4_iget_extra_inode:5035: inode #15: comm syz.0.2431: corrupted in-inode xattr: invalid ea_ino [ 166.757854][T10022] EXT4-fs error (device loop0): ext4_orphan_get:1398: comm syz.0.2431: couldn't read orphan inode 15 (err -117) [ 166.773457][T10022] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 166.869058][T10036] loop4: detected capacity change from 0 to 164 [ 166.877226][T10037] FAULT_INJECTION: forcing a failure. [ 166.877226][T10037] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 166.878789][T10036] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 166.890399][T10037] CPU: 1 UID: 0 PID: 10037 Comm: syz.1.2435 Not tainted 6.16.0-rc2-syzkaller-00024-g9afe652958c3 #0 PREEMPT(voluntary) [ 166.890424][T10037] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 166.890436][T10037] Call Trace: [ 166.890442][T10037] [ 166.890450][T10037] __dump_stack+0x1d/0x30 [ 166.890472][T10037] dump_stack_lvl+0xe8/0x140 [ 166.890519][T10037] dump_stack+0x15/0x1b [ 166.890533][T10037] should_fail_ex+0x265/0x280 [ 166.890628][T10037] should_fail+0xb/0x20 [ 166.890654][T10037] should_fail_usercopy+0x1a/0x20 [ 166.890685][T10037] _copy_from_user+0x1c/0xb0 [ 166.890705][T10037] futex_parse_waitv+0x83/0x290 [ 166.890778][T10037] ? __pfx_futex_wake_mark+0x10/0x10 [ 166.890887][T10037] __se_sys_futex_waitv+0x121/0x1c0 [ 166.890917][T10037] __x64_sys_futex_waitv+0x67/0x80 [ 166.890943][T10037] x64_sys_call+0x2b1a/0x2fb0 [ 166.890982][T10037] do_syscall_64+0xd2/0x200 [ 166.891073][T10037] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 166.891098][T10037] ? clear_bhb_loop+0x40/0x90 [ 166.891150][T10037] ? clear_bhb_loop+0x40/0x90 [ 166.891172][T10037] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.891192][T10037] RIP: 0033:0x7f34f11de929 [ 166.891208][T10037] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 166.891226][T10037] RSP: 002b:00007f34ef826038 EFLAGS: 00000246 ORIG_RAX: 00000000000001c1 [ 166.891313][T10037] RAX: ffffffffffffffda RBX: 00007f34f1406080 RCX: 00007f34f11de929 [ 166.891326][T10037] RDX: 0000000000000000 RSI: 0000000000000034 RDI: 0000200000002340 [ 166.891338][T10037] RBP: 00007f34ef826090 R08: 0000000000000000 R09: 0000000000000000 [ 166.891350][T10037] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 166.891363][T10037] R13: 0000000000000000 R14: 00007f34f1406080 R15: 00007ffc13006478 [ 166.891381][T10037] [ 167.086193][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.109546][T10049] netlink: 'syz.3.2442': attribute type 21 has an invalid length. [ 167.130232][T10049] siw: device registration error -23 [ 167.206854][T10061] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 167.228542][T10060] netlink: 'syz.3.2445': attribute type 10 has an invalid length. [ 167.341348][T10069] FAULT_INJECTION: forcing a failure. [ 167.341348][T10069] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 167.354450][T10069] CPU: 0 UID: 0 PID: 10069 Comm: syz.0.2448 Not tainted 6.16.0-rc2-syzkaller-00024-g9afe652958c3 #0 PREEMPT(voluntary) [ 167.354478][T10069] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 167.354491][T10069] Call Trace: [ 167.354498][T10069] [ 167.354505][T10069] __dump_stack+0x1d/0x30 [ 167.354527][T10069] dump_stack_lvl+0xe8/0x140 [ 167.354559][T10069] dump_stack+0x15/0x1b [ 167.354577][T10069] should_fail_ex+0x265/0x280 [ 167.354666][T10069] should_fail+0xb/0x20 [ 167.354689][T10069] should_fail_usercopy+0x1a/0x20 [ 167.354718][T10069] strncpy_from_user+0x25/0x230 [ 167.354792][T10069] path_setxattrat+0xeb/0x310 [ 167.354824][T10069] __x64_sys_fsetxattr+0x6b/0x80 [ 167.354851][T10069] x64_sys_call+0x2f7c/0x2fb0 [ 167.354869][T10069] do_syscall_64+0xd2/0x200 [ 167.354884][T10069] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 167.354909][T10069] ? clear_bhb_loop+0x40/0x90 [ 167.354931][T10069] ? clear_bhb_loop+0x40/0x90 [ 167.355028][T10069] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.355097][T10069] RIP: 0033:0x7fe6662de929 [ 167.355111][T10069] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 167.355127][T10069] RSP: 002b:00007fe664947038 EFLAGS: 00000246 ORIG_RAX: 00000000000000be [ 167.355203][T10069] RAX: ffffffffffffffda RBX: 00007fe666505fa0 RCX: 00007fe6662de929 [ 167.355213][T10069] RDX: 0000000000000000 RSI: 0000200000000000 RDI: ffffffffffffffff [ 167.355239][T10069] RBP: 00007fe664947090 R08: 0000000000000001 R09: 0000000000000000 [ 167.355251][T10069] R10: 0000000000000094 R11: 0000000000000246 R12: 0000000000000001 [ 167.355271][T10069] R13: 0000000000000000 R14: 00007fe666505fa0 R15: 00007ffc90a22d58 [ 167.355289][T10069] [ 167.355318][T10065] ================================================================== [ 167.538606][T10065] BUG: KCSAN: data-race in memchr / number [ 167.544410][T10065] [ 167.546743][T10065] write to 0xffffffff88e6366c of 1 bytes by task 10069 on cpu 0: [ 167.554442][T10065] number+0x6af/0xab0 [ 167.558414][T10065] vsnprintf+0x691/0x890 [ 167.562645][T10065] vscnprintf+0x41/0x90 [ 167.566790][T10065] printk_sprint+0x30/0x2d0 [ 167.571282][T10065] vprintk_store+0x599/0x860 [ 167.575856][T10065] vprintk_emit+0x178/0x650 [ 167.580348][T10065] vprintk_default+0x26/0x30 [ 167.584922][T10065] vprintk+0x1d/0x30 [ 167.588807][T10065] _printk+0x79/0xa0 [ 167.592696][T10065] __show_regs+0xd6/0x440 [ 167.597019][T10065] show_trace_log_lvl+0x423/0x560 [ 167.602036][T10065] __dump_stack+0x1d/0x30 [ 167.606352][T10065] dump_stack_lvl+0xe8/0x140 [ 167.610924][T10065] dump_stack+0x15/0x1b [ 167.615067][T10065] should_fail_ex+0x265/0x280 [ 167.619742][T10065] should_fail+0xb/0x20 [ 167.623893][T10065] should_fail_usercopy+0x1a/0x20 [ 167.629012][T10065] strncpy_from_user+0x25/0x230 [ 167.633864][T10065] path_setxattrat+0xeb/0x310 [ 167.638533][T10065] __x64_sys_fsetxattr+0x6b/0x80 [ 167.643477][T10065] x64_sys_call+0x2f7c/0x2fb0 [ 167.648235][T10065] do_syscall_64+0xd2/0x200 [ 167.652735][T10065] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.658621][T10065] [ 167.660944][T10065] read to 0xffffffff88e6366c of 1 bytes by task 10065 on cpu 1: [ 167.668560][T10065] memchr+0x28/0x50 [ 167.672356][T10065] _prb_read_valid+0x65d/0x920 [ 167.677118][T10065] prb_read_valid_info+0x66/0x90 [ 167.682061][T10065] find_first_fitting_seq+0x1b1/0x320 [ 167.687427][T10065] syslog_print_all+0x111/0x3a0 [ 167.692264][T10065] do_syslog+0x2fd/0x7e0 [ 167.696518][T10065] __x64_sys_syslog+0x41/0x50 [ 167.701199][T10065] x64_sys_call+0x2ea0/0x2fb0 [ 167.705878][T10065] do_syscall_64+0xd2/0x200 [ 167.710374][T10065] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.716264][T10065] [ 167.718571][T10065] value changed: 0x36 -> 0x30 [ 167.723234][T10065] [ 167.725543][T10065] Reported by Kernel Concurrency Sanitizer on: [ 167.731680][T10065] CPU: 1 UID: 0 PID: 10065 Comm: syz.2.2447 Not tainted 6.16.0-rc2-syzkaller-00024-g9afe652958c3 #0 PREEMPT(voluntary) [ 167.744173][T10065] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 167.754217][T10065] ================================================================== [ 167.881256][T10071] Invalid ELF header magic: != ELF