last executing test programs: 2.399305073s ago: executing program 4 (id=14964): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, @fallback=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0xfffffffffffffffc}, 0x18) syz_emit_ethernet(0xfc2, &(0x7f0000001c00)={@local, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xfb4, 0x2, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0xfa0, 0x0, @wg=@data={0x4, 0x2007407, 0xfffffffffffffffd, "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"}}}}}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xa04710, &(0x7f00000008c0)={[{@user_xattr}, {@errors_remount}, {@noblock_validity}, {@block_validity}, {@mblk_io_submit}, {@min_batch_time={'min_batch_time', 0x3d, 0x6377}}, {@nodelalloc}, {@delalloc}, {@prjquota}, {@jqfmt_vfsold}]}, 0x3, 0x448, &(0x7f0000000bc0)="$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") 2.267198424s ago: executing program 4 (id=14965): r0 = io_uring_setup(0x1503, &(0x7f0000000340)={0x0, 0x6ba8, 0x10, 0x1, 0x1b8}) rt_sigtimedwait(&(0x7f0000000040)={[0xffffffff]}, 0x0, 0x0, 0x8) io_uring_register$IORING_UNREGISTER_RING_FDS(r0, 0x15, &(0x7f0000000e40)=[{0x0, 0x0, 0x0, 0x0, 0x0}], 0x1) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b707000008000000850000006900000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000001000000850000000e000000850000002a00000095", @ANYRESHEX=r0, @ANYRESHEX=r2], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r4 = socket$vsock_stream(0x28, 0x1, 0x0) close(0x3) connect$vsock_stream(r4, &(0x7f0000000140), 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000008c0)={&(0x7f0000000040)='virtio_transport_alloc_pkt\x00', r3}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r4, 0x28, 0x1, &(0x7f0000000100)=0xfffffffffffffffe, 0x112) r5 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000200)) acct(&(0x7f00000001c0)='./file0\x00') 2.088827419s ago: executing program 4 (id=14969): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000400000000"], 0x0, 0x0, 0xffdd}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x2004000, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[], [], 0x6b}}) 1.8294098s ago: executing program 4 (id=14976): syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, 0x0, 0x0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r1, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0xce56fe61a68fc369, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r2}, 0x18) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x64) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000e00)='kfree\x00', 0xffffffffffffffff, 0x0, 0x4ab}, 0x18) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x10, 0x0, 0x0, 0x0, 0x1ff, 0x221, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0xd5c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xb000000000000003, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x7, 0x3, &(0x7f0000000480)=@framed, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f0000001100)={0x5, 0x80, 0x9, 0x8, 0xb, 0xfb, 0x0, 0x3c, 0xc002, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x18842, 0x0, 0x7fffffff, 0x7, 0x9, 0x3, 0x7, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, 0xffffffffffffffff) socketpair$unix(0xa, 0x2, 0x11, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0xe, &(0x7f0000003540)=ANY=[@ANYBLOB="b700000050000008bca30000000000002403000040feffff7b1af0ff0000000079a4f0ff000000001f030000000000002e030200000000002604fdffffff000e61141800000000001d430000000000007a0a00fe0000001f61141c00000000004603f7fff80000009500000000000000033bc065b78111c6dfa041b63af4a3912435f1a864a7aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e5181554a090f30002af51efd601b6bf01c8e8b1fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e65440000000000000000028610643a98d9ec21ead2ed51b104d4d91af25b845b9f7d08d123deda88c658d42ecbf28bf7076c15b463bebc72f526dd70252e79166d858fcd0e06dd31af9612fa402d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f0177184b6a89adaf17b0a6041bdef728f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10076443d643649393bf52d2105bd901128c7e0ec82701c8204a1deeed4155617572652d950ad31928b0b036dc2869f478341d02d0f5ad94b081fcd507acb4b9c67382f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdbb9893a5de817101ab062cd54e67051d355d84ce97bb0c6b6a595e487a2cc47c0efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599dd273863be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d91c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566de74e425da5e7f009602a9f61d3804b3e0a1053abdc31282dfb15eb6841bb64a1b3045024a982f3c48b936e6f9e0fcda88fe4413537528fd79153baae244e7bf573eac34b781337ad5901a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10c80fef7c24d47afcc829ba0f85da6d888f18ea40ab959f6074ab2a40d85d1501783a7ab51380d7b4ead35a385e0b4a26b602396df7e0c1e02b88c114f2440000eedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba3401e6a52acb1188883ad2a3b1832371fe5bc621426d1ed01b389708165b9cdbae2ed9dc7358f0ebadde0b727f27feeb7464dcc536cbae2f5c7d951680f6f2f9a6a8346962a350845ffa0d82884f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010ae20e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d648532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2654026c6ea08b83b123145ab5703dad844ceb201efeb6dc5f6a9037d2283c42efc54dd84323afc4c10eff462c8843187f1dd48ef0900000000000000ff0f4000000000f00700003c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f908ba7554ba583ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738612e4fee18a22da19fcdb4c1011e32f808890205f0e6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427180d61542c2571f983e96635600000554f327a3535e7c7542799493c31ac05a7b57f03ca91a01ba2a30ca99e969d6fd09dc28ebc15edb4d91675767999d146aef7799738b292fd64bbca48568325b2969e2b15f36b788bce5ccdbaf75c9494963442aece449a0d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2869291b7d12096833d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e637d4219ef7ec61261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ecab5d232f89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a05e41f6016ab5bbe4fe7ff5d785d0128171c90d9900ca2532b0f9d01c4b45294fbba468df3e1b393cb4e62e753b4172ba7ac1f2b51c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addbc4b3093c91b8068c5adfcb0d7fd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a881192292ffff5392ab3d1311b82432662806add87047f601fa888400000000000000000000000000006acc19808d7cf29bc974b0ea92499a41b9b9a7c2bca311a28ee4952f2d325a56397c78f12205db653a536f0100e0eda300a43a13bd1b9f3322405d1efd78e578dc6b3fb84f3738a4b6caa800000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23457949a50f2d0455cf699b3746979f99f6a1527f004f37e84fb478199dc1020f4beb98b8074bf7df8b5e783637daf121f175a81cffff4ac55a4385e9a617aa6c8e10d4202c5afeb06e2f9115558ea12f92d7ae633d44086b3f03b20d546fa66a72e38207c9d20035abc46271a30f1240de52536941242d23896ab74a3c6670fdc49c14f34fc4eadd6db8d80eba439772bf60a1db18c472dafc5569adc282928d2a1ffe29f1a57d3f18f4edaeb5d37918e6fddcd821da67a0785585a4443440dc65600e64a4a274000000000000000000000000000000000000000000000009dd14b38f2f5426d7cf5075047c31f6ce6adddfe3ac649c0643c8bfbeb14ba1fd7a485aa893915cf81e29aaf375e904bbe52691a4120260ffcd030000006d291ebcef893e1b9ccb6797d0646fe0e7274434f28efb43e06e64f0698caca42f4e6018a455736c482a017e2b13dac4a90faa109f0e87cc94e3efb649692456463ca74aa6ad4bf50c1acb3928143be1c1023a375e528285544d0064b98646f3109e9a4942ce42c6e7ec84b664f6c2770803f10b0a1fcbfc309381aeba191950bae71f37f1eb7ceeffb3c0547ac6571603adbfde4c8b5f8d7f4b854441613633b48865b65bdc415e1e0dcf672d68cf4cebf04f4bc1eebf560a26d3b332240d450fdb0a9a69f432e277f3a0386eb2bd1305c88629a6c921c64757f786b79fef54dbe64c67d73934bc80b2133fb3c04cc7ea48bf97a6243c9f95dcbddecf45f008f1822c7868e1ff5a3cff5d6b6898335792749df7b1f51e91f8c1c3b1b93b33aaa3fab69cef08a9f6f6cf39dea3d878b2ed42545421970cc426e644332bc956d1c6adefdf0ede2c5c94aa632646ae225accdf031f611d01622921f1b922a5ac887cca3136133dce8d9f5f4da7bed2ea5d94362200000000000000000000f296b0c1484e5f781ad26bff696b05ff0a5e2270e07e18b04273bd4075ea38ab463bfa6a38e7c537498ba3e4df8dfc9e8c0a0d213c3ffad44d2a376def42e41e9fc3167a257e040fa7cf32c221aaac6cfdeb33c27500001a0000000000000000000017350000c11ae694b0c69c2c03f6790044a357e785af6e153d5f1ea460af92c7cbbd6295afe740f5e154346d483e0d10522a7a945b93fbf05b95b6aae27a8fab1e6984c8bdc12360627137ab6737b68ab08acb29a74dc36b51209cfbc87f61182bbeb2772e9d5a1ffc477179be481ffe46a4ce86be0b1f8eee42a611a3d44ca450b14586ed63dd92005c79e4a8ab8a94f0b74903580ac98708007c80d6c7d0de4614195e40d797c0348dd70f36a220e8b3710fb5358c27e90793bcb9ee6319342c4b239ca8cbc6fc83d32e6eb62ad92e43991f2447be9c2a1ae1119eafb901a43d57e885116d19aa152bfb89f8d0b2516f80120a1cddff771657f3d0288ec3899f1e3ba0151c4037148fb479de703fc52b6573349c28d1b107d859b4961324c17756dde99de1924a1d2b7095d34a55060f47f4407d89acf9f285b20c2e6b3d0491d0d3591b0d94713332b6b79c8297117b0d14eff64e0aca8a4b4aa773d8fba1217e9519952419bb9dd998d0ec870ff00b6d556018602738fbc6cec89d6dd13cf55b96f6fe9a137d2d6a56ad78e52c23ed080000000000002bc261a781fd14126c146a0aac4221839a4b9bbf61e4bba695a41e2109eba8e40c370267cc51ffadbd15cafc97a4d3edfdcb9b5729307c6bdaf7b69325fb05fa8a9869de0600ee477d71ca3e36d1d9019edfa27aae24b632f251df210c86a18fae731ecb8b0d48357378caf2b6789509b1bacfd4fa812dc341875cfa5e798bbf59770000000000000000c8a594ea3c3347962d9113b1fecdfad5a8da641053f02e49456f5d21674521e67a5b18ea451eccf69dd6af928d2d68da9304a296c22fdcea26498d26229110b1aade386b113045033a6188d56e675564d8cb8d5b40114b0f5bf15dd64c9ece60b8588ee8777d0ea8f4713b258427c7d90f9e93348e17723ba9ab8ae790f74cc41ae5795835f3cec40dff485d2802c08611454d9ea784a205bcc07ec26f906f3cf45bb37014ab6f22af6213618e242b283ea9d3f0677ee598072ec06f7170009d92bb7ed9d12c378dfd3e74ec056ee83eef666423d934fc5908c9ff98715218a5964f1e00000000426ac9588e27aefe307f49662990ee823568bbc2f89596ced7c6c52d76b8096f1848410843b93fd404f535be474f456778b5ef85abb8fc2336abd5ea64a6efea8a5aca0015499b88ae780a7bae4df603bd3c72808cf300440b1b638a6640f7de8d0d82f359ca2f779cd48cd8d3603f4f69e47f386988c9b7b5d6dd3d48a1fdca780049d7c87bea42161a4c0d7cf0125b43dc9d8845f3c05a08acda647e7143d0e0aee2949a45e2848890522c2288072467d2afe269f589fb7e034b92d3ca245b16b71998711bfe206c9690b6d0eebb06a29349229eb45ff15c63aa2c82c56d7420738cd1b04eb16e87cb524315d7361ea3635d3799bb7fcc56aa5e1dbe031a7a12554dee6754b72f43a6fddf427f32ec3df274a88097725679769beebf1aa6eb09d5154e4900000000000d0f7160a05911d969879953d3d4702b2676c07bb0fd14020a66718378825d5ed789711b77d40dc31e0b8fc651b45559da463f0000000000000000000000000052d42124e9c26aba885015e69d42ecd710342ac597ebea576ae15fdf611356f622e831741ab15549e0d7a2bd0324e2b3b48a10551607492c19eaf58485feb4cab19c303b30ba2ddea0d792d77724c9fa4ed58b93668fc20484f141ee2b6a0029e88fdc853189b4dafd36ff23b11967090e508f45e3f10857038a52ef275cf9e3e4b5d30b12d138dfa70930c603b5e3f4b7be67be3dba3cbd8d4d143195af0697d779445d67dcfbd922d12a8b49f93eac7a72faacf80346b3b60f132a2bf8a858392f34072d99aee0ec70aa6d75096e608d97ac4b7bfa2e0ae3e59718e7a7691a98b1334e34553300000000000000000000000000000000062c7cf52e9624806a4833e1c0059e5a703ab9c2e9b38779270dc5e80af75d509b1a31fe6ed3f8c0172659256dc88de4e377c8a07e95ec5549ae47dc43b93a159a201be254048b9e0857ea3c736c761e686f9b3d0690f035617a12055b2cb3a03794d67b95e7f4fc6af323120c09d0503c8ce92e869e22bb2590299ad76d541f844d32f96184f74d433793bbd75ec15fb1497ce835445212421cb4e3ce08395c9055a2"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48) 1.648884035s ago: executing program 0 (id=14979): mlock2(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0) mlock2(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x1) mlock2(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r0}, 0x10) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x2004000, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [], 0x6b}}) 1.520657025s ago: executing program 0 (id=14981): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r1, 0x402, 0x8000001e) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x408e, &(0x7f00000000c0)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@min_batch_time={'min_batch_time', 0x3d, 0xfff}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x80}}, {@stripe={'stripe', 0x3d, 0x12}}, {@i_version}, {@max_batch_time={'max_batch_time', 0x3d, 0x7}}]}, 0x3, 0x43a, &(0x7f0000000340)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) write$P9_RREADLINK(r2, &(0x7f0000000000)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000d80)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf94e9898e3717a49, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kmem_cache_free\x00', r4}, 0x18) getrlimit(0xa, &(0x7f00000003c0)) r5 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r6 = openat$cgroup_ro(r5, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r7, r6, 0x0, 0x100000002) 1.516252175s ago: executing program 1 (id=14982): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000140000e5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b70200"], &(0x7f0000000700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r1, 0x0, 0x8000000000000001}, 0x18) r2 = syz_open_dev$evdev(&(0x7f0000000140), 0x80000000002, 0x200) ioctl$TIOCSTI(r2, 0x5412, 0x0) 1.444031652s ago: executing program 1 (id=14983): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00"/14], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r2 = io_uring_setup(0x7cac, &(0x7f00000000c0)={0x0, 0x753a, 0x8, 0x2, 0x1fd}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) close_range(r2, 0xffffffffffffffff, 0x0) 1.34478819s ago: executing program 1 (id=14985): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x7, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000002c0)='mm_page_alloc\x00', r1}, 0x10) set_mempolicy(0x3, &(0x7f0000000040)=0x3, 0x5) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) 1.309303313s ago: executing program 2 (id=14986): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) writev(r0, &(0x7f0000000000)=[{0x0}], 0x1) 1.233333189s ago: executing program 2 (id=14987): r0 = socket$kcm(0xa, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000800)={&(0x7f0000000080)={0x2, 0x4e20, @local}, 0x10, 0x0}, 0x20000) 1.232766149s ago: executing program 1 (id=14988): mlock2(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0) mlock2(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x1) mlock2(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x2004000, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[], [], 0x6b}}) 1.130037637s ago: executing program 2 (id=14989): r0 = gettid() r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="5c000000020105000000000000000000050000004800"], 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x49000) timer_create(0x7, &(0x7f0000000400)={0x0, 0x1e, 0x800000000004, @tid=r0}, &(0x7f00000006c0)) r2 = signalfd(0xffffffffffffffff, &(0x7f0000000140)={[0x4]}, 0x8) r3 = dup(r2) read$msr(r3, &(0x7f0000002c00)=""/4108, 0x100c) socket$inet_sctp(0x2, 0x5, 0x84) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="00fd0f00000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000879c18c040c98c85898cdc698b97bcd54ba029c582474c2067a33da04ee520ab940b1ce690d18d76ccb1783a131ab84d299625d4c5e40a6c73f7452aac92734e8ee6b6a1236585e1004129984fdd065879613f9317658de8792d001fb482ac81d31db83c8a11de37c749d7d4d7af5f628967fa78d8d222"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r2}, &(0x7f0000000040), &(0x7f0000000ac0)=r5}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000dd0000000000003b810000850000006d000000a50000005000000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='kfree\x00', r7}, 0x10) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000)={0xffffffffffffffff}, 0x111, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r8, &(0x7f0000000280)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x7ff, @empty, 0x1}, {0xa, 0x4e20, 0x42b, @local, 0x2}, r9, 0x3}}, 0x48) write$RDMA_USER_CM_CMD_DESTROY_ID(r8, &(0x7f0000000f80)={0x1, 0xe, 0xfa00, {&(0x7f0000000300), r9}}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r6}, 0x10) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r11 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r10, &(0x7f0000001840)=ANY=[@ANYBLOB="080014000000450a0014006700000b6c907864010120ffffffff0000000000000000"], 0x22) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000001240)) creat(0x0, 0x10) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000001400078005001500070000000800124000000000050005000200000005000400000000000d000300686173683a6e6574"], 0x5c}}, 0x0) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001340)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100ebff00001c0007800c00018008000140ffffffff0c000280080001407f00"], 0x44}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4) 1.110256249s ago: executing program 1 (id=14991): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="190000000400000008000000"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r0}, &(0x7f0000000000), &(0x7f00000005c0)=r1}, 0x20) add_key(&(0x7f0000000800)='asymmetric\x00', 0x0, &(0x7f0000000840)='\x00', 0x1, 0xffffffffffffffff) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) pipe2$watch_queue(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$key(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001880)={0x2, 0x10, 0x2, 0x5, 0x207, 0x0, 0x70bd26, 0x25dfdbfd, [@sadb_key={0x201, 0x9, 0x8000, 0x0, "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"}, @sadb_x_nat_t_type={0x1, 0x14, 0xe5}, @sadb_spirange={0x2, 0x10, 0x4d6, 0x4d4}, @sadb_x_nat_t_port={0x1, 0x15, 0x4e21}]}, 0x1038}}, 0x4008084) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000160a0103000000000000000002000000540003804000038014000100626f6e645f736c6176655f3000000000"], 0xa8}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r5 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) r6 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) r8 = dup(r7) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000001, 0x12, r8, 0x10000000) connect$inet(r8, &(0x7f0000000040)={0x244e, 0x4e24, @dev={0xac, 0x14, 0x14, 0x38}}, 0x10) r9 = fsmount(r6, 0x1, 0x6) fchdir(r9) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.swap.current\x00', 0x275a, 0x0) write$binfmt_script(r10, &(0x7f0000000000), 0x208e24b) preadv(r10, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x3f) sendfile(r4, r5, 0x0, 0x20000023896) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) ioctl$TCSETSW(r4, 0x5403, &(0x7f0000000380)={0x0, 0x4, 0xffffffff, 0x3, 0x5, "28c4d95d3933aabcf900"}) 829.107952ms ago: executing program 4 (id=14993): epoll_create1(0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b7000000000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1, 0x0, 0x2}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) r3 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x2, 0x18) ioctl$PPPIOCCONNECT(r3, 0x4004743a, &(0x7f0000000100)=0x4) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000340)=@base={0x12, 0x2, 0x8, 0x2}, 0x48) close(r2) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) r5 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000300), 0x4) r6 = syz_open_dev$vcsu(&(0x7f00000001c0), 0x6, 0x20402) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000280), r5) sendmsg$L2TP_CMD_SESSION_GET(r6, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x14, r7, 0x100, 0x70bd2d, 0x25dfdbfc}, 0x14}}, 0x48882) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) socket$xdp(0x2c, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$DEVLINK_CMD_RATE_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r8, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80d0}, 0x0) 766.662167ms ago: executing program 3 (id=14994): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000140000e5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b70200"], &(0x7f0000000700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r1, 0x0, 0x8000000000000001}, 0x18) r2 = syz_open_dev$evdev(&(0x7f0000000140), 0x80000000002, 0x200) ioctl$TIOCSTI(r2, 0x5412, 0x0) 694.827583ms ago: executing program 0 (id=14995): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = io_uring_setup(0x7cac, &(0x7f00000000c0)={0x0, 0x753a, 0x8, 0x2, 0x1fd}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) close_range(r1, 0xffffffffffffffff, 0x0) 688.538143ms ago: executing program 3 (id=14996): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70300001d000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 622.372099ms ago: executing program 3 (id=14997): syz_mount_image$ext4(&(0x7f0000000d80)='ext2\x00', &(0x7f0000000000)='./file1\x00', 0x21881e, &(0x7f0000000140)={[{@mb_optimize_scan}, {@journal_checksum}, {@stripe={'stripe', 0x3d, 0x4}}], [{@defcontext={'defcontext', 0x3d, 'user_u'}}]}, 0x1, 0x530, &(0x7f0000000dc0)="$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") r0 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x94) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x3804402, &(0x7f0000000240), 0x1, 0x55f, &(0x7f0000000c80)="$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") openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/13, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x18) r1 = open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x20) fallocate(r1, 0x0, 0x0, 0x1001f0) copy_file_range(r1, 0x0, r1, &(0x7f00000000c0)=0xc615, 0x101, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000200), &(0x7f0000000340)=0x4) socket$can_raw(0x1d, 0x3, 0x1) socket$inet_tcp(0x2, 0x1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000006500000008000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r2}, 0x10) fchdir(0xffffffffffffffff) ftruncate(r0, 0x2007ffc) 554.402884ms ago: executing program 1 (id=14998): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="190000000400000008000000"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x7, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r0}, &(0x7f0000000000), &(0x7f0000001680)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000002c0)='mm_page_alloc\x00', r2}, 0x10) set_mempolicy(0x3, &(0x7f0000000040)=0x3, 0x5) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) 525.882866ms ago: executing program 4 (id=14999): r0 = creat(&(0x7f0000000080)='./file0\x00', 0xc7) close(r0) r1 = socket$xdp(0x2c, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB='\x00'/28, @ANYRES32=r0, @ANYRESDEC=r1, @ANYBLOB="fcdf078a35ffed32efeaec27fba2047e0ed0ed05ce7bb77d22d6645e210ea344828eb097a531277e0f3ca526434a6f02c3acb5dac2710a8ad2c6b2ce9a2df498", @ANYRESOCT=r1, @ANYBLOB="0100000004000000e27f00000100000000000000", @ANYRES64=r1], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r2}, &(0x7f0000000000), &(0x7f0000000180)}, 0x20) r3 = gettid() prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32, @ANYRES16=r3], 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r4], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$xdp(0x2c, 0x3, 0x0) process_mrelease(0xffffffffffffffff, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r5}, &(0x7f0000000040), &(0x7f0000000280)}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r6}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000940)) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, 0x0, 0x1) timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)=0x0) timer_settime(r7, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a6c52d922ba2a05dd"], 0xfdef) r8 = add_key$keyring(&(0x7f00000000c0), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$restrict_keyring(0xa, r8, &(0x7f0000000300)='asymmetric\x00', &(0x7f0000000000)='id\xf7\xff\xffe{') bpf$TOKEN_CREATE(0x24, &(0x7f0000000100), 0x8) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f00000003c0)=0x800, 0x4) 476.62293ms ago: executing program 0 (id=15000): r0 = socket$kcm(0xa, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000800)={&(0x7f0000000080)={0x2, 0x4e20, @local}, 0x10, 0x0}, 0x20000) 394.610617ms ago: executing program 0 (id=15002): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70300001d000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r2, &(0x7f0000000040)={&(0x7f0000000140)={0x2, 0x4e22, @empty}, 0x10, 0x0}, 0x34004044) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08060cdc030ec0007f03e3f70000400100e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800030006010000bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f00000000c0)=0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r7) sendmsg$NFC_CMD_DEV_UP(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x1c, r8, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) write$nci(r4, &(0x7f0000000500)=ANY=[@ANYBLOB="414601", @ANYRES32=r6], 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) nanosleep(&(0x7f0000000040), 0x0) 290.962336ms ago: executing program 3 (id=15003): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, @fallback=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0xfffffffffffffffc}, 0x18) syz_emit_ethernet(0xfc2, &(0x7f0000001c00)={@local, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xfb4, 0x2, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0xfa0, 0x0, @wg=@data={0x4, 0x2007407, 0xfffffffffffffffd, "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"}}}}}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xa04710, &(0x7f00000008c0)={[{@user_xattr}, {@errors_remount}, {@noblock_validity}, {@block_validity}, {@mblk_io_submit}, {@min_batch_time={'min_batch_time', 0x3d, 0x6377}}, {@nodelalloc}, {@delalloc}, {@prjquota}, {@jqfmt_vfsold}]}, 0x3, 0x448, &(0x7f0000000bc0)="$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") 235.04756ms ago: executing program 0 (id=15004): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="190000000400000008000000"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r0}, &(0x7f0000000000), &(0x7f00000005c0)=r1}, 0x20) add_key(&(0x7f0000000800)='asymmetric\x00', 0x0, &(0x7f0000000840)='\x00', 0x1, 0xffffffffffffffff) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) pipe2$watch_queue(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$key(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001880)={0x2, 0x10, 0x2, 0x5, 0x207, 0x0, 0x70bd26, 0x25dfdbfd, [@sadb_key={0x201, 0x9, 0x8000, 0x0, "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"}, @sadb_x_nat_t_type={0x1, 0x14, 0xe5}, @sadb_spirange={0x2, 0x10, 0x4d6, 0x4d4}, @sadb_x_nat_t_port={0x1, 0x15, 0x4e21}]}, 0x1038}}, 0x4008084) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000160a0103000000000000000002000000540003804000038014000100626f"], 0xa8}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) r6 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) r8 = dup(r7) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000001, 0x12, r8, 0x10000000) connect$inet(r8, &(0x7f0000000040)={0x244e, 0x4e24, @dev={0xac, 0x14, 0x14, 0x38}}, 0x10) r9 = fsmount(r6, 0x1, 0x6) fchdir(r9) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.swap.current\x00', 0x275a, 0x0) preadv(r10, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x3f) sendfile(r4, r5, 0x0, 0x20000023896) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) ioctl$TCSETSW(r4, 0x5403, &(0x7f0000000380)={0x0, 0x4, 0xffffffff, 0x3, 0x5, "28c4d95d3933aabcf900"}) 188.812054ms ago: executing program 2 (id=15005): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) sendmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x8000) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000300)={0x8, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r3, 0x408c5333, &(0x7f0000000600)={0x0, 0xc, 0x0, 'queue0\x00'}) 136.440718ms ago: executing program 3 (id=15006): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000140000e5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b70200"], &(0x7f0000000700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r1, 0x0, 0x8000000000000001}, 0x18) r2 = syz_open_dev$evdev(&(0x7f0000000140), 0x80000000002, 0x200) ioctl$TIOCSTI(r2, 0x5412, 0x0) 70.669714ms ago: executing program 2 (id=15007): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70300001d000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 70.157634ms ago: executing program 3 (id=15008): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="190000000400000008000000"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r0}, &(0x7f0000000000), &(0x7f00000005c0)=r1}, 0x20) add_key(&(0x7f0000000800)='asymmetric\x00', 0x0, &(0x7f0000000840)='\x00', 0x1, 0xffffffffffffffff) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) pipe2$watch_queue(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$key(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001880)={0x2, 0x10, 0x2, 0x5, 0x207, 0x0, 0x70bd26, 0x25dfdbfd, [@sadb_key={0x201, 0x9, 0x8000, 0x0, "976caa1336cf537323958f2c63399e22392d828294be4b0948e33c5be98ce1f7218263a8a25f80466c3b8a46970bae87ed33abcba337549b7f25fa18f743c9210cda6b6291eabc30aeafe2e6191e92a49cab26e22261db6a879dcd225cf8f290385f25d8501ecd2ec17896fae0464fa80b36ca173c50a3032a35d3c2cf3fbed827ff49604dcbf90422c78c0ca13f0ab9c8dc4b79388d61644ed2a984e916ef387aca2741173ff2372758b6a77252709ff851872cb59523798acbd0adca4a621b178e696a17543f284f6290b55c89d0edac7fef4d9793686197fc51a8db3e4230e400e0d9e600bd03a875051e0f01a78a6047571cab5b1495a4b54b4d6e1e3ad53dfd1b5533072d101e500925a7c9e82e72f03c2758720e995f75070936d932bb8df1be1dc3ba290bae7a160c63e71cef57ced6da0a860986f18bc1d5429046b49307de052bcfb51f1fa6aa11d428a125b86d159d298120646da8381021642d4da48e3182fc5e49b753a48d3895bc7277b402959b9a18fc0f3ae13892a42cb2aed28486974f75ece8ea1070a9236926d06a213c8c5337cdd0eeaef01498212f6c32bb5d58f3c02f2cf31c8a35e93b07828a81194512197d958bd85d660f27d00b7730d653b084ae9241edab2ffe7a54ab0ab87fddd0bfc671f06997ae37c025bc587f6ab14b6e1752cc505f6149f326ed72a942de8c145e7d02318e89325e8502d2a3bbb2318ca496787c22c995172c5784af9bc6058403099f966d567effc38cd705e6fa1e04a40772d7e87d7b67774121ddd4bcf7b06a5bde9815752235c53d393a12b55ae904709c677a1b61f3ddc378bada2399d225976f53941fab18a6389263804c6c7df544fafdd49b4ac087677b2610c5404867929b8f0077c476b393f918ab37fb1a5f684bc427cf9e53b3a0e17d5029cea3116c0ee52968ecec8a33abd583ce760f677b7fd09509332bc5cb18599d7fbace2bb6c9c13ee72ddccb3fe1b05a6a63df483e0e22d33dac5ecfdc42424713a45388d9c715b07a6ebd527baa5318cda8c9c4e9397d7539ed417aee98a3f8a23facd3652475d54877392ba0b799eb5a1e7f4b85d6b8d800dca2fe7e545ad0714755062e62482aed13f73344e6ed1ab31b45ad526b2f4ccae04fed6f0bc6537e8e86653b03c380c3bbbe985c4201b6babdb4b312d0e3b72577c9bf26859157be106e7ea926e8b4e93a9bc81ac0930f0d2ac6e243e778793be994471829cf8ad9bf7b1654b902060b757c7b15583944d47f6953160cb19c645ee0660b62d0f2b6be04a150f40d9a6a60e50746a8c0837bf984c23013b8f7fd908d1243a0c173ad509774d523b7e1b66e6078695a49db99de03857f5b57f9d3a3a0538041774cf48260ee822046b578695e0da261c8d99688903c73e938bed4e4958dbc9de7e06c047699b39829920e5a1daeada9f5fceb636ed9c681afabbe837ebbb522d1defd749b14d75d331ee728adae75ae2aae80f6f6e7471c0d77286768a33dfc65cbea73e2b79ebb03dd838a050b45ee75789feca5d9318c6324cab7e1ab0a0585e042cf1b32b5435f6de983fdcc92ca4143884bb505f62649b1490166f34dca5c5a15922dd082da55cff83aad201f1e0fc9a8dd6383892ca17f8172ecbe9df22df63b84eac432ae2227be99241e9f4675854c9fc2753eb86f28fc5d3da87f0182e31c4e1e1b3184a7d8a31637c6a4a6210de02a46db6fd2f8532b76f5c8f3906a0e1be24695210f5ccebd4a57334d99edaf470fe1c93a47481554cb1cffee20b1f2a83a9afd4b5912a0aac16fc9399221b6567c6cf219832d32c53920e9c6064675b7ba8e24a387c096d99a4fbd9d667d3b42dcbcda23fa3170ca46f789f1b7f63d52d47ecfaf5ccd88e6e6bae44e91143274b337cbf01b303ccbc404f3a3e9e718b84cbf0bfda661ab9b03e28262a4f0dfffc11ba1086e1c604a8b827b20ec9ab28ade52e3673f5036c54134abd93be40f755a3f7f3cb2271faf47271d2ce5728d582f429f864cad653b3f0b48009ea8e8b3f037fc951565479f88594aa3309d3396bb1e6b9c266c59629726586913108f0ee3316203aafde3c2375d50f07330facd5c419b9571d803c8a7f10a202dd43e8e85365da2d2abc02d9db062961e8ba36d4cb132be47e1b2753ad363a7afa42deb2cfdca110450103038d3b269fa06ce06eef04116d165e3a126b28a430fe2e053ba400e80fa81943a79eecfff14b272bea2cb3ffa69afa9d929539aeab9918dc6e311f2b9e81ba16d7c73778135718137ea4dea6319ad3e97e972b29c99e6d37b2625868dad52202f1abe98a43483ed539ad6f2ff3c8c0488f73af82a4b9a1ba981c6990075b6799e2de472a73f06cf825811dd3a408faaa9b4536d0ba25e127afd08742be971781c1cea154e857feab7cf22ed40f4834fcb9c55eb14e574267f4bc11591e5d8b65ac98b7323c56d25223bb4b33c5879f61d70587c6e003dd9d730dfcac737f15a76b5668ffd4e2310c2784a680cc4fa6a5951bc50a80ba4d8422fc1efea2d70dd10b3e353642993c07b09482f4fb8ddf32668fe78598a08e6f84cc960130e24905a96eea61bad1efec29a50611ddcc93ede91ad3c69ecc3f981a06c0586427f0374f62942bb9bab39c761e05c4bcc88c563dd45ac0aa2ecc8fda3dc666e914c7378b7d239b8e30e9d8d0a4bc80e4d442bbb7fd75cfe226fc5ca1075f9ed30ac574a80812bb02089ecef275175f6cefe9d5f58113304bc727a83ba2402f96b7c5b6faea7f756f3ba165f3a08061a8d950d7bff9f4dba3e657eacd2702b5b5d55ceda4e1875d8af97fe04d12f2954e21c9df88f7465ae08d5e38062baf0656477293d458d8462e18e95091acf6617759c2c9a81fe662ea536d700fa75df7e720c99f2b39c5f81463e3b94609b5e155787d275370c4c6674b9a1a4ac6b4bd94c9b9f2a84b8efec8984d54239e75ed2ec11ed374ca10fd3efecac83f8f7f334c89cf6dc8ff4435af490304532d22a4d68f5f53e4759d0f15fc99766c52bf1619cdcb9fd368faea71070f2b6eee4f338d374ed992a4115489bc36258cd18cbc38fe17fa5aa4fd670b1942e68954f70629cd986809e1b6ce541ae50d0011a0a5e11706c19d3d09369763ea965d0a5871ca7aa1344e26044903dc6353d85c095b36daec5273a9744813d2bb91982c57067e861ddc6154642c173ca4180ca6b309f0b5bbacadd021ca4b5d7573c9140f430f50f21dd91b29827c1f30893118efa4f88edb94985974cecad90eea622e8b6d301c1d835479fb144f56cbe8755762d44ed0ee19c01ab2f11d49adcdc585fa8a35342b90f820126ef2a635c052104af95c34788a39ddb9f5df600af25ce6003b82e32f64798df9d4effcdd3600721bd58bd4606a8219bbdfa852044a0aef47aaa3e8f0321fcafe839aff7693f804ef8015c64cf8487d15cc3669986fca92e35a88ccec01052e6b8c333ab16ced49bd6b3e1a04e7ca9e0d608917b76b1b05e66d7e6d7d3495f80da36553e3b4d42371419681a22cb171b19279eda543f884dcfe2f8996944ff969666f103f5ca8f7bb2a0143fac5e4741f6634a60ba69d14061fe9da8ba13dc1006d9162f5a1260943960ad517ed08588098ce1d853429b17a988e59669b8e8d2518b522c3cc1174d441329d09c264dbd7760dcf4718fb67eca0f608a067111665938e6b81a3e9749c40d1b7d80ff9c0764087dc06c77d4881b2532efe10aa204094494ce00aa9aadde76c4c725a9e4f860e48d3a6134fb663714df8fbc3eb56d0231b326c4f00cf9cdc746ddba88d9ec9b72be8439a327de20e5134a9b1b2696a44cb0131d7ef49c63fe4482aa4f059641ac5464f148a0ffe83ea9d6de96d57ad235d128e13bdda2bf02b3a0d509d90e27eba647f52931356fe78e56b34d0d2c64b4eb0133225854115ec4773e1393d50748fa1f6b8b19ffde4f7a9bc04a79b42638119a30bb83dc9e736e0ac28de370797c17c0942bb7e7b0e00ac1956131ca1846521715d80330cb1636aabda3502c548eb60c46be8788b52c740696b16c907eeb2b1e743bfbe71dd56a1b55e3732e0b0e0f3ef4ac7e8b79ba1c3c5a12b1352e26fc85537e05cfd7a313ec3866a1eef1b6d4837423935081e0379dfc6d49953d56504bc1b6aa29aa2423c02cbde9e57ed6cb8f031c50b59d210affed3d8a00dbc5d61a895ba7d674e32c9cee39f6c5f39b4d6038ebdff85591313bca432fa3e5407927c4f96a5e57a685b07fff319374575515c9902f584dfd91b7c1d2b9c247d6e2108675772a37cc4b5dda3a1e6af0ca4e71fddc518dfd9d2d848891fa4b993af310ee4027f0b2bff0c8176a2b4fbcb7b3874ce119e9b3854b4153220dbea6cebb530dd662cb0118fb2d8cac7d4af2b721a7569e26d313c4af9fefbc3ae6924691acd6d53a3a28c96b2165ddf262f3c84be687467c5de6bb7e242e32f47a08223e6a505440b8ec270b9a0de09bbbc110fe4fc8ee95af58bd397ca42139f27943e311448c71d763aab0d3c34a2ac1f61a4ac2db783474380baf29323d23431d658ee6ce9a6614c2b89e8bfe8a44ee09588542915ee3c2fca7d30ea6903eff0988694d0ad299be6e1a5856e5ae3c9087727bdb5cc05fa273363641ee346d33c5287e1a06d689fd2093db4c409bbe5434055a1cb3ad5498104a17e77801d0c3b7a0dd6cf0f279b48c4220d8d48d273cf8ee9fe4598f40102f5c96cf5eede4fd848de095c32a84d9eb6725204b2c3034a94d16b17c3f0cd2b38f6eae7a99d9e1ffddb854c9aef33731d83beeb38392412e8d66fd38f0d51889a2652b6cde92199a05637ca20a221ad054c541b212a26ef71fe2d396083cf099f6e8a1fc3eaab30214271427cc1f61c68e68f720f44d8d80304f29cfcb142603d8b147842fdba9ac2238bffdd65f524aa326050da56b2e522da483924d26dfcfdef5f99eb0bf731505ded8c0972ebb660f930c74477f30b6de0bde709d231a9fa5b755c32e447ae6d8be3c9106e90ac696f762ffd719ec0991b88236568b261f2a93c989ca9c99190b20e4775a84c97b3de705216fc6c45e04001658d0ebce45bd7dea1c03310d7d721564ddc4ed97b6b40c16cf8f815855daa3a925f282d1d77d1ee7f304ee770b8c5d9d26f36a439effec49e99903c9ab4e4eb6311a3cf0d55f5dc37faece2c7c219d543e5fe088d87a6b7c95972e4ed14e8db05dbcf4d5a01c961863bfd1493cb273f0aaf8d33d099423744d79899d6b24bb7eb34d9f3325762e57b45bdbe0d312dd26fe0a063df06ffa16257792ce71f808bf057933460dc9c75538021f73509097f5d7d2051206da7902da396c81831455a7c756468679a08b382dad39f8739aef506be27487c450797aa0eeef3a94309a9ab5c67b221576c0299f231a37519877861c9c6b4edfbdb69253ceb9a5f29f4db1435b1c80714f4b8d955f6ed04cc8520ae8f18e5ae89d1362995893b880f84d71243d6660cdecf5fa4b3cc34681d4f4a97fafefa265b2ca5f83b159237c66a8104b7b8b7a8eb5e7644aba5cba6989bb3fa9aacec932f5373151a7eac71a1b06f7e37e700fe46f49c96a7a95b2dcb1e450dae295e03dc63de24593f47b965364ef2fb6cb87cc77439e0d275b887a2379852da685d10b6064e2da479c0a6d39101516d42390e0559a66f5b7902dd4d574aaca2794049ad20a7a67da70179333642efd13c29e08ef7b764085ed6e95ab287c73e6b80d15e197ac2d7b3bba29c3c3bf1c800878607597fdaa7b979c5ccd"}, @sadb_x_nat_t_type={0x1, 0x14, 0xe5}, @sadb_spirange={0x2, 0x10, 0x4d6, 0x4d4}, @sadb_x_nat_t_port={0x1, 0x15, 0x4e21}]}, 0x1038}}, 0x4008084) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000160a0103000000000000000002000000540003804000038014000100626f6e645f736c6176655f3000000000"], 0xa8}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r6 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) r8 = dup(r7) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000001, 0x12, r8, 0x10000000) connect$inet(r8, &(0x7f0000000040)={0x244e, 0x4e24, @dev={0xac, 0x14, 0x14, 0x38}}, 0x10) r9 = fsmount(r6, 0x1, 0x6) fchdir(r9) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.swap.current\x00', 0x275a, 0x0) write$binfmt_script(r10, &(0x7f0000000000), 0x208e24b) preadv(r10, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x3f) sendfile(r4, r5, 0x0, 0x20000023896) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) ioctl$TCSETSW(r4, 0x5403, &(0x7f0000000380)={0x0, 0x4, 0xffffffff, 0x3, 0x5, "28c4d95d3933aabcf900"}) 0s ago: executing program 2 (id=15009): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70300001d000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r1, &(0x7f0000000040)={&(0x7f0000000140)={0x2, 0x4e22, @empty}, 0x10, 0x0}, 0x34004044) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08060cdc030ec0007f03e3f70000400100e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800030006010000bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f00000000c0)=0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r6) sendmsg$NFC_CMD_DEV_UP(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x1c, r7, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) kernel console output (not intermixed with test programs): cutor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fd16994d7ca code=0x7ffc0000 [ 1327.783506][ T29] audit: type=1326 audit(1754150764.883:171838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16192 comm="syz.2.14340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd16994eb69 code=0x7ffc0000 [ 1327.807389][ T29] audit: type=1326 audit(1754150764.883:171839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16192 comm="syz.2.14340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd16994eb69 code=0x7ffc0000 [ 1327.831951][ T29] audit: type=1400 audit(1754150764.883:171840): avc: denied { lock } for pid=16187 comm="syz.3.14338" path="socket:[256113]" dev="sockfs" ino=256113 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 1327.856418][ T29] audit: type=1400 audit(1754150764.883:171841): avc: denied { lock } for pid=16187 comm="syz.3.14338" path="socket:[256113]" dev="sockfs" ino=256113 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 1327.922744][ T3362] hid-generic 0000:0000:0000.0174: hidraw0: HID v0.00 Device [syz0] on syz1 [ 1328.085087][T16212] lo speed is unknown, defaulting to 1000 [ 1328.091264][T16212] lo speed is unknown, defaulting to 1000 [ 1328.830125][T16225] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14353'. [ 1328.871998][T16223] FAULT_INJECTION: forcing a failure. [ 1328.871998][T16223] name failslab, interval 1, probability 0, space 0, times 0 [ 1328.884785][T16223] CPU: 0 UID: 0 PID: 16223 Comm: syz.4.14352 Tainted: G W 6.16.0-syzkaller-11105-ga6923c06a3b2 #0 PREEMPT(voluntary) [ 1328.884825][T16223] Tainted: [W]=WARN [ 1328.884833][T16223] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1328.884847][T16223] Call Trace: [ 1328.884910][T16223] [ 1328.884919][T16223] __dump_stack+0x1d/0x30 [ 1328.884943][T16223] dump_stack_lvl+0xe8/0x140 [ 1328.885025][T16223] dump_stack+0x15/0x1b [ 1328.885041][T16223] should_fail_ex+0x265/0x280 [ 1328.885079][T16223] should_failslab+0x8c/0xb0 [ 1328.885146][T16223] kmem_cache_alloc_noprof+0x50/0x310 [ 1328.885176][T16223] ? getname_flags+0x80/0x3b0 [ 1328.885203][T16223] getname_flags+0x80/0x3b0 [ 1328.885246][T16223] do_sys_openat2+0x60/0x110 [ 1328.885281][T16223] __x64_sys_openat+0xf2/0x120 [ 1328.885316][T16223] x64_sys_call+0x2e9c/0x2ff0 [ 1328.885420][T16223] do_syscall_64+0xd2/0x200 [ 1328.885442][T16223] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 1328.885464][T16223] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 1328.885485][T16223] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1328.885574][T16223] RIP: 0033:0x7f2ce563eb69 [ 1328.885589][T16223] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1328.885610][T16223] RSP: 002b:00007f2ce3c9f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1328.885632][T16223] RAX: ffffffffffffffda RBX: 00007f2ce5865fa0 RCX: 00007f2ce563eb69 [ 1328.885646][T16223] RDX: 000000000000275a RSI: 0000200000000440 RDI: ffffffffffffff9c [ 1328.885657][T16223] RBP: 00007f2ce3c9f090 R08: 0000000000000000 R09: 0000000000000000 [ 1328.885822][T16223] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1328.885836][T16223] R13: 0000000000000000 R14: 00007f2ce5865fa0 R15: 00007ffd2acdaae8 [ 1328.885942][T16223] [ 1329.212717][T16236] lo speed is unknown, defaulting to 1000 [ 1329.219724][T16235] netlink: 8 bytes leftover after parsing attributes in process `syz.4.14358'. [ 1329.242526][T16236] lo speed is unknown, defaulting to 1000 [ 1329.368457][T16231] lo speed is unknown, defaulting to 1000 [ 1329.374523][T16231] lo speed is unknown, defaulting to 1000 [ 1329.466022][T16246] tipc: Started in network mode [ 1329.471035][T16246] tipc: Node identity aa8c12b997b2, cluster identity 4711 [ 1329.478576][T16246] tipc: Enabled bearer , priority 0 [ 1329.510231][T16246] tipc: Disabling bearer [ 1329.717958][T16238] lo speed is unknown, defaulting to 1000 [ 1329.728587][T16238] lo speed is unknown, defaulting to 1000 [ 1329.821193][T16264] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14368'. [ 1329.882926][T16268] 9pnet: p9_errstr2errno: server reported unknown error ť@í0x0000000000000007 [ 1329.949587][T16277] netlink: 4 bytes leftover after parsing attributes in process `syz.2.14370'. [ 1330.008891][T16274] random: crng reseeded on system resumption [ 1330.264305][T16286] netlink: 132 bytes leftover after parsing attributes in process `syz.0.14374'. [ 1330.381190][T16289] hub 6-0:1.0: USB hub found [ 1330.389807][T16289] hub 6-0:1.0: 8 ports detected [ 1330.749017][T16299] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14380'. [ 1330.819344][T16306] 9pnet: p9_errstr2errno: server reported unknown error ť@í0x0000000000000007 [ 1330.933292][T16313] FAULT_INJECTION: forcing a failure. [ 1330.933292][T16313] name failslab, interval 1, probability 0, space 0, times 0 [ 1330.946312][T16313] CPU: 1 UID: 0 PID: 16313 Comm: syz.4.14385 Tainted: G W 6.16.0-syzkaller-11105-ga6923c06a3b2 #0 PREEMPT(voluntary) [ 1330.946418][T16313] Tainted: [W]=WARN [ 1330.946426][T16313] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1330.946440][T16313] Call Trace: [ 1330.946449][T16313] [ 1330.946459][T16313] __dump_stack+0x1d/0x30 [ 1330.946481][T16313] dump_stack_lvl+0xe8/0x140 [ 1330.946498][T16313] dump_stack+0x15/0x1b [ 1330.946513][T16313] should_fail_ex+0x265/0x280 [ 1330.946610][T16313] should_failslab+0x8c/0xb0 [ 1330.946634][T16313] __kmalloc_node_noprof+0xa9/0x410 [ 1330.946665][T16313] ? __vmalloc_node_range_noprof+0x3f9/0xe00 [ 1330.946779][T16313] __vmalloc_node_range_noprof+0x3f9/0xe00 [ 1330.946816][T16313] __vmalloc_node_noprof+0x89/0xc0 [ 1330.946843][T16313] ? copy_process+0x399/0x2000 [ 1330.946879][T16313] ? copy_process+0x399/0x2000 [ 1330.946907][T16313] dup_task_struct+0x449/0x6a0 [ 1330.947009][T16313] ? _parse_integer+0x27/0x40 [ 1330.947040][T16313] copy_process+0x399/0x2000 [ 1330.947062][T16313] ? kstrtouint+0x76/0xc0 [ 1330.947164][T16313] ? kstrtouint_from_user+0x9f/0xf0 [ 1330.947182][T16313] ? __rcu_read_unlock+0x4f/0x70 [ 1330.947205][T16313] kernel_clone+0x16c/0x5c0 [ 1330.947233][T16313] ? vfs_write+0x75e/0x8e0 [ 1330.947256][T16313] __x64_sys_clone+0xe6/0x120 [ 1330.947329][T16313] x64_sys_call+0x119c/0x2ff0 [ 1330.947354][T16313] do_syscall_64+0xd2/0x200 [ 1330.947397][T16313] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 1330.947438][T16313] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 1330.947506][T16313] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1330.947529][T16313] RIP: 0033:0x7f2ce563eb69 [ 1330.947547][T16313] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1330.947568][T16313] RSP: 002b:00007f2ce3c9efe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1330.947650][T16313] RAX: ffffffffffffffda RBX: 00007f2ce5865fa0 RCX: 00007f2ce563eb69 [ 1330.947665][T16313] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000630c1000 [ 1330.947679][T16313] RBP: 00007f2ce3c9f090 R08: 0000000000000000 R09: 0000000000000000 [ 1330.947692][T16313] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 1330.947704][T16313] R13: 0000000000000000 R14: 00007f2ce5865fa0 R15: 00007ffd2acdaae8 [ 1330.947740][T16313] [ 1331.181636][T16313] syz.4.14385: vmalloc error: size 16384, failed to allocated page array size 32, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 1331.198884][T16313] CPU: 1 UID: 0 PID: 16313 Comm: syz.4.14385 Tainted: G W 6.16.0-syzkaller-11105-ga6923c06a3b2 #0 PREEMPT(voluntary) [ 1331.199112][T16313] Tainted: [W]=WARN [ 1331.199118][T16313] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1331.199132][T16313] Call Trace: [ 1331.199142][T16313] [ 1331.199152][T16313] __dump_stack+0x1d/0x30 [ 1331.199174][T16313] dump_stack_lvl+0xe8/0x140 [ 1331.199191][T16313] dump_stack+0x15/0x1b [ 1331.199210][T16313] warn_alloc+0x12b/0x1a0 [ 1331.199304][T16313] __vmalloc_node_range_noprof+0x497/0xe00 [ 1331.199348][T16313] __vmalloc_node_noprof+0x89/0xc0 [ 1331.199409][T16313] ? copy_process+0x399/0x2000 [ 1331.199508][T16313] ? copy_process+0x399/0x2000 [ 1331.199536][T16313] dup_task_struct+0x449/0x6a0 [ 1331.199559][T16313] ? _parse_integer+0x27/0x40 [ 1331.199614][T16313] copy_process+0x399/0x2000 [ 1331.199640][T16313] ? kstrtouint+0x76/0xc0 [ 1331.199680][T16313] ? kstrtouint_from_user+0x9f/0xf0 [ 1331.199754][T16313] ? __rcu_read_unlock+0x4f/0x70 [ 1331.199776][T16313] kernel_clone+0x16c/0x5c0 [ 1331.199806][T16313] ? vfs_write+0x75e/0x8e0 [ 1331.199830][T16313] __x64_sys_clone+0xe6/0x120 [ 1331.199913][T16313] x64_sys_call+0x119c/0x2ff0 [ 1331.200014][T16313] do_syscall_64+0xd2/0x200 [ 1331.200080][T16313] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 1331.200102][T16313] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 1331.200123][T16313] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1331.200205][T16313] RIP: 0033:0x7f2ce563eb69 [ 1331.200246][T16313] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1331.200264][T16313] RSP: 002b:00007f2ce3c9efe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1331.200281][T16313] RAX: ffffffffffffffda RBX: 00007f2ce5865fa0 RCX: 00007f2ce563eb69 [ 1331.200293][T16313] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000630c1000 [ 1331.200305][T16313] RBP: 00007f2ce3c9f090 R08: 0000000000000000 R09: 0000000000000000 [ 1331.200322][T16313] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 1331.200333][T16313] R13: 0000000000000000 R14: 00007f2ce5865fa0 R15: 00007ffd2acdaae8 [ 1331.200349][T16313] [ 1331.200355][T16313] Mem-Info: [ 1331.424476][T16313] active_anon:15594 inactive_anon:36 isolated_anon:0 [ 1331.424476][T16313] active_file:25494 inactive_file:2998 isolated_file:0 [ 1331.424476][T16313] unevictable:1906 dirty:1016 writeback:0 [ 1331.424476][T16313] slab_reclaimable:3471 slab_unreclaimable:105770 [ 1331.424476][T16313] mapped:33531 shmem:3043 pagetables:1189 [ 1331.424476][T16313] sec_pagetables:0 bounce:0 [ 1331.424476][T16313] kernel_misc_reclaimable:0 [ 1331.424476][T16313] free:1760886 free_pcp:26910 free_cma:0 [ 1331.470325][T16313] Node 0 active_anon:27112kB inactive_anon:144kB active_file:101976kB inactive_file:11992kB unevictable:4608kB isolated(anon):0kB isolated(file):0kB mapped:134124kB dirty:4064kB writeback:0kB shmem:12172kB kernel_stack:3936kB pagetables:4756kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1331.479951][T16317] block device autoloading is deprecated and will be removed. [ 1331.498694][T16313] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1331.535532][T16313] lowmem_reserve[]: 0 2883 7862 7862 [ 1331.541161][T16313] Node 0 DMA32 free:2949228kB boost:0kB min:4132kB low:7064kB high:9996kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2952860kB mlocked:0kB bounce:0kB free_pcp:3632kB local_pcp:3532kB free_cma:0kB [ 1331.571758][T16313] lowmem_reserve[]: 0 0 4978 4978 [ 1331.577275][T16313] Node 0 Normal free:4122008kB boost:0kB min:7184kB low:12280kB high:17376kB reserved_highatomic:0KB free_highatomic:0KB active_anon:26648kB inactive_anon:144kB active_file:101976kB inactive_file:11992kB unevictable:200kB writepending:4064kB present:5242880kB managed:5098240kB mlocked:200kB bounce:0kB free_pcp:103492kB local_pcp:39916kB free_cma:0kB [ 1331.610370][T16313] lowmem_reserve[]: 0 0 0 0 [ 1331.614902][T16313] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1331.628301][T16313] Node 0 DMA32: 3*4kB (M) 2*8kB (M) 3*16kB (M) 3*32kB (M) 3*64kB (M) 4*128kB (M) 3*256kB (M) 3*512kB (M) 3*1024kB (M) 3*2048kB (M) 717*4096kB (M) = 2949228kB [ 1331.644610][T16313] Node 0 Normal: 990*4kB (ME) 1070*8kB (UME) 1040*16kB (UME) 429*32kB (UME) 487*64kB (UME) 236*128kB (UME) 367*256kB (UM) 473*512kB (UME) 313*1024kB (UM) 75*2048kB (UM) 783*4096kB (UME) = 4121672kB [ 1331.665022][T16313] Node 0 hugepages_total=4 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1331.674466][T16313] 31503 total pagecache pages [ 1331.679563][T16313] 39 pages in swap cache [ 1331.683908][T16313] Free swap = 124840kB [ 1331.688264][T16313] Total swap = 124996kB [ 1331.692581][T16313] 2097051 pages RAM [ 1331.696443][T16313] 0 pages HighMem/MovableOnly [ 1331.701111][T16313] 80436 pages reserved [ 1331.805642][T16326] lo speed is unknown, defaulting to 1000 [ 1331.812115][T16326] lo speed is unknown, defaulting to 1000 [ 1331.887100][T16331] hub 6-0:1.0: USB hub found [ 1331.899293][T16331] hub 6-0:1.0: 8 ports detected [ 1332.005815][T16341] FAULT_INJECTION: forcing a failure. [ 1332.005815][T16341] name failslab, interval 1, probability 0, space 0, times 0 [ 1332.018898][T16341] CPU: 1 UID: 0 PID: 16341 Comm: syz.3.14396 Tainted: G W 6.16.0-syzkaller-11105-ga6923c06a3b2 #0 PREEMPT(voluntary) [ 1332.018936][T16341] Tainted: [W]=WARN [ 1332.018944][T16341] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1332.018966][T16341] Call Trace: [ 1332.018974][T16341] [ 1332.018983][T16341] __dump_stack+0x1d/0x30 [ 1332.019005][T16341] dump_stack_lvl+0xe8/0x140 [ 1332.019022][T16341] dump_stack+0x15/0x1b [ 1332.019039][T16341] should_fail_ex+0x265/0x280 [ 1332.019140][T16341] should_failslab+0x8c/0xb0 [ 1332.019164][T16341] kmem_cache_alloc_node_noprof+0x57/0x320 [ 1332.019196][T16341] ? dup_task_struct+0x70/0x6a0 [ 1332.019227][T16341] dup_task_struct+0x70/0x6a0 [ 1332.019274][T16341] ? _parse_integer+0x27/0x40 [ 1332.019309][T16341] copy_process+0x399/0x2000 [ 1332.019346][T16341] ? kstrtouint+0x76/0xc0 [ 1332.019374][T16341] ? kstrtouint_from_user+0x9f/0xf0 [ 1332.019392][T16341] ? __rcu_read_unlock+0x4f/0x70 [ 1332.019413][T16341] kernel_clone+0x16c/0x5c0 [ 1332.019498][T16341] ? vfs_write+0x75e/0x8e0 [ 1332.019524][T16341] __x64_sys_clone+0xe6/0x120 [ 1332.019586][T16341] x64_sys_call+0x119c/0x2ff0 [ 1332.019605][T16341] do_syscall_64+0xd2/0x200 [ 1332.019627][T16341] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 1332.019650][T16341] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 1332.019690][T16341] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1332.019725][T16341] RIP: 0033:0x7fb89b30eb69 [ 1332.019758][T16341] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1332.019775][T16341] RSP: 002b:00007fb89996efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1332.019847][T16341] RAX: ffffffffffffffda RBX: 00007fb89b535fa0 RCX: 00007fb89b30eb69 [ 1332.019860][T16341] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1332.019874][T16341] RBP: 00007fb89996f090 R08: 0000000000000000 R09: 0000000000000000 [ 1332.019889][T16341] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1332.019918][T16341] R13: 0000000000000000 R14: 00007fb89b535fa0 R15: 00007fffc2786898 [ 1332.019936][T16341] [ 1332.312587][T16345] netlink: 48 bytes leftover after parsing attributes in process `syz.3.14397'. [ 1332.362390][T16347] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1332.388942][T16345] loop3: detected capacity change from 0 to 2048 [ 1332.410033][T16345] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 1332.438969][T16347] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1332.492397][T16358] 9pnet: p9_errstr2errno: server reported unknown error ť@í0x0000000000000003 [ 1332.503147][T16347] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1332.543066][T16359] netlink: 132 bytes leftover after parsing attributes in process `syz.3.14402'. [ 1332.565574][T16347] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1332.639908][ T2707] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1332.657212][ T29] kauditd_printk_skb: 1456 callbacks suppressed [ 1332.657227][ T29] audit: type=1326 audit(1754150769.903:173298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16328 comm="syz.1.14392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f216a6a5b27 code=0x7ffc0000 [ 1332.688432][ T29] audit: type=1326 audit(1754150769.903:173299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16328 comm="syz.1.14392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f216a64ad69 code=0x7ffc0000 [ 1332.712785][ T29] audit: type=1326 audit(1754150769.903:173300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16328 comm="syz.1.14392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f216a6a5b27 code=0x7ffc0000 [ 1332.736757][ T29] audit: type=1326 audit(1754150769.903:173301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16328 comm="syz.1.14392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f216a64ad69 code=0x7ffc0000 [ 1332.743251][ T2695] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1332.760794][ T29] audit: type=1326 audit(1754150769.903:173302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16328 comm="syz.1.14392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7f216a6aeb69 code=0x7ffc0000 [ 1332.818066][ T29] audit: type=1400 audit(1754150769.903:173303): avc: denied { open } for pid=16363 comm="syz.4.14405" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 1332.819395][T16364] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1332.837939][ T29] audit: type=1400 audit(1754150769.903:173304): avc: denied { perfmon } for pid=16363 comm="syz.4.14405" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1332.844537][T16364] audit: audit_lost=84 audit_rate_limit=0 audit_backlog_limit=64 [ 1332.844558][T16364] audit: backlog limit exceeded [ 1332.893382][ T2695] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1332.917706][ T2695] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1332.956424][T16373] FAULT_INJECTION: forcing a failure. [ 1332.956424][T16373] name failslab, interval 1, probability 0, space 0, times 0 [ 1332.969230][T16373] CPU: 1 UID: 0 PID: 16373 Comm: syz.1.14409 Tainted: G W 6.16.0-syzkaller-11105-ga6923c06a3b2 #0 PREEMPT(voluntary) [ 1332.969267][T16373] Tainted: [W]=WARN [ 1332.969274][T16373] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1332.969299][T16373] Call Trace: [ 1332.969373][T16373] [ 1332.969383][T16373] __dump_stack+0x1d/0x30 [ 1332.969409][T16373] dump_stack_lvl+0xe8/0x140 [ 1332.969427][T16373] dump_stack+0x15/0x1b [ 1332.969441][T16373] should_fail_ex+0x265/0x280 [ 1332.969478][T16373] should_failslab+0x8c/0xb0 [ 1332.969565][T16373] kmem_cache_alloc_lru_noprof+0x55/0x310 [ 1332.969621][T16373] ? shmem_alloc_inode+0x34/0x50 [ 1332.969644][T16373] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 1332.969715][T16373] shmem_alloc_inode+0x34/0x50 [ 1332.969733][T16373] alloc_inode+0x3d/0x170 [ 1332.969810][T16373] new_inode+0x1d/0xe0 [ 1332.969832][T16373] shmem_get_inode+0x244/0x750 [ 1332.969855][T16373] __shmem_file_setup+0x113/0x210 [ 1332.969925][T16373] shmem_file_setup+0x3b/0x50 [ 1332.969955][T16373] __se_sys_memfd_create+0x2c3/0x590 [ 1332.969978][T16373] __x64_sys_memfd_create+0x31/0x40 [ 1332.970075][T16373] x64_sys_call+0x2abe/0x2ff0 [ 1332.970097][T16373] do_syscall_64+0xd2/0x200 [ 1332.970124][T16373] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 1332.970153][T16373] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 1332.970172][T16373] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1332.970194][T16373] RIP: 0033:0x7f216a6aeb69 [ 1332.970211][T16373] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1332.970241][T16373] RSP: 002b:00007f2168d0ee18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 1332.970261][T16373] RAX: ffffffffffffffda RBX: 000000000000079c RCX: 00007f216a6aeb69 [ 1332.970273][T16373] RDX: 00007f2168d0eef0 RSI: 0000000000000000 RDI: 00007f216a732784 [ 1332.970285][T16373] RBP: 0000200000001700 R08: 00007f2168d0ebb7 R09: 00007f2168d0ee40 [ 1332.970296][T16373] R10: 000000000000000a R11: 0000000000000202 R12: 0000200000000240 [ 1332.970342][T16373] R13: 00007f2168d0eef0 R14: 00007f2168d0eeb0 R15: 0000200000000040 [ 1332.970359][T16373] [ 1332.975159][T16371] pim6reg: entered allmulticast mode [ 1333.125829][T16385] netlink: 16 bytes leftover after parsing attributes in process `syz.3.14408'. [ 1333.206605][T16388] block device autoloading is deprecated and will be removed. [ 1333.209023][T16379] pim6reg: left allmulticast mode [ 1333.216049][T16389] netlink: 48 bytes leftover after parsing attributes in process `syz.2.14412'. [ 1333.304467][T16371] loop3: detected capacity change from 0 to 4096 [ 1333.381812][T16371] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1333.402838][T16395] siw: device registration error -23 [ 1333.404182][T16371] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1333.456522][T16392] netlink: 132 bytes leftover after parsing attributes in process `syz.1.14416'. [ 1333.491412][T16400] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1333.528603][T16400] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1333.548358][T27245] hid_parser_main: 76 callbacks suppressed [ 1333.548413][T27245] hid-generic 0000:0000:0000.0175: unknown main item tag 0x0 [ 1333.561972][T27245] hid-generic 0000:0000:0000.0175: unknown main item tag 0x0 [ 1333.569472][T27245] hid-generic 0000:0000:0000.0175: unknown main item tag 0x0 [ 1333.576914][T27245] hid-generic 0000:0000:0000.0175: unknown main item tag 0x0 [ 1333.584317][T27245] hid-generic 0000:0000:0000.0175: unknown main item tag 0x0 [ 1333.591799][T27245] hid-generic 0000:0000:0000.0175: unknown main item tag 0x0 [ 1333.599250][T27245] hid-generic 0000:0000:0000.0175: unknown main item tag 0x0 [ 1333.606914][T27245] hid-generic 0000:0000:0000.0175: unknown main item tag 0x0 [ 1333.614362][T27245] hid-generic 0000:0000:0000.0175: unknown main item tag 0x0 [ 1333.621806][T27245] hid-generic 0000:0000:0000.0175: unknown main item tag 0x0 [ 1333.670704][T16400] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1333.723502][T27245] hid-generic 0000:0000:0000.0175: hidraw0: HID v0.00 Device [syz0] on syz1 [ 1333.776158][T16400] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1333.794605][T16416] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 1333.802471][T16408] lo speed is unknown, defaulting to 1000 [ 1333.806581][T16416] SELinux: failed to load policy [ 1333.810306][T16408] lo speed is unknown, defaulting to 1000 [ 1333.902842][T16415] SELinux: failed to load policy [ 1333.954334][T16424] siw: device registration error -23 [ 1333.993125][T16425] siw: device registration error -23 [ 1334.058545][T16435] 9pnet: p9_errstr2errno: server reported unknown error ť@í0x0000000000000003 [ 1334.175090][T16433] lo speed is unknown, defaulting to 1000 [ 1334.181411][T16433] lo speed is unknown, defaulting to 1000 [ 1334.210847][T16441] siw: device registration error -23 [ 1334.494975][T16452] loop3: detected capacity change from 0 to 512 [ 1334.503949][T16454] siw: device registration error -23 [ 1334.504154][T16452] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 1334.523979][T16452] EXT4-fs (loop3): orphan cleanup on readonly fs [ 1334.531052][T16452] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:517: comm syz.3.14440: Block bitmap for bg 0 marked uninitialized [ 1334.544697][T16452] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 1334.574503][T16452] EXT4-fs (loop3): 1 orphan inode deleted [ 1334.581942][T16452] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 1334.600833][T16452] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 1334.610461][T16452] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 1334.633066][T16452] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1334.779681][T16470] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14447'. [ 1335.431595][T16485] siw: device registration error -23 [ 1335.623322][T16493] netlink: 8 bytes leftover after parsing attributes in process `syz.4.14457'. [ 1335.754243][T16498] lo speed is unknown, defaulting to 1000 [ 1335.763694][T16498] lo speed is unknown, defaulting to 1000 [ 1335.859491][T16509] loop3: detected capacity change from 0 to 512 [ 1335.870450][T16509] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 1335.879965][T16509] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 1335.899424][T16509] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 1335.914319][T16509] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 1335.923707][T16509] System zones: 0-2, 18-18, 34-35 [ 1335.931205][T16509] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1335.978006][T11027] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1336.004603][T16514] loop3: detected capacity change from 0 to 512 [ 1336.013059][T16514] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 1336.022186][T16514] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 1336.031746][T16514] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 1336.041163][T16514] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 1336.049358][T16514] System zones: 0-2, 18-18, 34-35 [ 1336.054850][T16514] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1336.087500][T16514] siw: device registration error -23 [ 1336.123879][T11027] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1336.207805][T16525] loop3: detected capacity change from 0 to 512 [ 1336.239517][T16525] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1336.254290][T16525] ext4 filesystem being mounted at /448/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1336.406792][T16530] lo speed is unknown, defaulting to 1000 [ 1336.413190][T16530] lo speed is unknown, defaulting to 1000 [ 1336.457487][T16530] lo speed is unknown, defaulting to 1000 [ 1336.463724][T16530] lo speed is unknown, defaulting to 1000 [ 1336.498024][T16530] FAULT_INJECTION: forcing a failure. [ 1336.498024][T16530] name failslab, interval 1, probability 0, space 0, times 0 [ 1336.510765][T16530] CPU: 0 UID: 0 PID: 16530 Comm: syz.0.14468 Tainted: G W 6.16.0-syzkaller-11105-ga6923c06a3b2 #0 PREEMPT(voluntary) [ 1336.510812][T16530] Tainted: [W]=WARN [ 1336.510820][T16530] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1336.510833][T16530] Call Trace: [ 1336.510842][T16530] [ 1336.510851][T16530] __dump_stack+0x1d/0x30 [ 1336.510875][T16530] dump_stack_lvl+0xe8/0x140 [ 1336.510959][T16530] dump_stack+0x15/0x1b [ 1336.510976][T16530] should_fail_ex+0x265/0x280 [ 1336.511011][T16530] should_failslab+0x8c/0xb0 [ 1336.511040][T16530] kmem_cache_alloc_noprof+0x50/0x310 [ 1336.511107][T16530] ? dup_fd+0x3a/0x540 [ 1336.511131][T16530] dup_fd+0x3a/0x540 [ 1336.511149][T16530] ? _raw_spin_unlock+0x26/0x50 [ 1336.511177][T16530] ksys_unshare+0x346/0x6d0 [ 1336.511284][T16530] ? ksys_write+0x192/0x1a0 [ 1336.511307][T16530] __x64_sys_unshare+0x1f/0x30 [ 1336.511333][T16530] x64_sys_call+0x2911/0x2ff0 [ 1336.511426][T16530] do_syscall_64+0xd2/0x200 [ 1336.511451][T16530] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 1336.511474][T16530] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 1336.511495][T16530] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1336.511558][T16530] RIP: 0033:0x7f366e76eb69 [ 1336.511576][T16530] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1336.511597][T16530] RSP: 002b:00007f366cd8d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1336.511615][T16530] RAX: ffffffffffffffda RBX: 00007f366e996160 RCX: 00007f366e76eb69 [ 1336.511628][T16530] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000022020600 [ 1336.511639][T16530] RBP: 00007f366cd8d090 R08: 0000000000000000 R09: 0000000000000000 [ 1336.511727][T16530] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1336.511738][T16530] R13: 0000000000000000 R14: 00007f366e996160 R15: 00007fff3a53ef08 [ 1336.511757][T16530] [ 1336.777024][T16534] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14471'. [ 1336.912114][ T54] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1336.923524][ T54] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1336.935087][ T54] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1336.946799][ T12] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1336.991871][T16541] lo speed is unknown, defaulting to 1000 [ 1336.998188][T16541] lo speed is unknown, defaulting to 1000 [ 1337.071562][T11027] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1337.089125][T16544] block device autoloading is deprecated and will be removed. [ 1337.119173][T16546] siw: device registration error -23 [ 1337.211523][T16548] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1337.278981][T16548] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1337.368601][T16548] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1337.458243][T16548] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1337.514335][ T2707] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1337.526882][ T2695] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1337.541797][ T2695] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1337.550104][ T2695] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1337.601969][T16562] loop3: detected capacity change from 0 to 128 [ 1337.610882][T16562] msdos: Unknown parameter '0177777777777777777777700000000000000000000004184467440737095516150xffffffffffffffff˙˙˙˙' [ 1337.631672][T16562] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14483'. [ 1337.667193][ T29] kauditd_printk_skb: 2753 callbacks suppressed [ 1337.667208][ T29] audit: type=1400 audit(1754150774.903:176056): avc: denied { prog_load } for pid=16563 comm="syz.4.14484" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1337.693047][ T29] audit: type=1400 audit(1754150774.913:176057): avc: denied { bpf } for pid=16563 comm="syz.4.14484" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1337.714666][ T29] audit: type=1326 audit(1754150774.913:176058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16553 comm="syz.0.14480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f366e765b27 code=0x7ffc0000 [ 1337.738623][ T29] audit: type=1326 audit(1754150774.913:176059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16553 comm="syz.0.14480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f366e70ad69 code=0x7ffc0000 [ 1337.762543][ T29] audit: type=1326 audit(1754150774.913:176060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16553 comm="syz.0.14480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7f366e76eb69 code=0x7ffc0000 [ 1337.790586][ T29] audit: type=1400 audit(1754150774.913:176061): avc: denied { read write } for pid=11027 comm="syz-executor" name="loop3" dev="devtmpfs" ino=10912 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1337.814490][ T29] audit: type=1400 audit(1754150774.913:176062): avc: denied { read write open } for pid=11027 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=10912 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1337.839135][ T29] audit: type=1400 audit(1754150774.913:176063): avc: denied { ioctl } for pid=11027 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=10912 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1337.864536][ T29] audit: type=1400 audit(1754150774.943:176064): avc: denied { prog_load } for pid=16565 comm="syz.3.14485" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1337.884339][ T29] audit: type=1400 audit(1754150774.943:176065): avc: denied { bpf } for pid=16565 comm="syz.3.14485" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1337.887832][T16568] lo speed is unknown, defaulting to 1000 [ 1337.913231][T16568] lo speed is unknown, defaulting to 1000 [ 1337.945911][T16569] loop3: detected capacity change from 0 to 512 [ 1337.964306][T16569] EXT4-fs: Ignoring removed mblk_io_submit option [ 1337.981989][T16569] EXT4-fs (loop3): failed to initialize system zone (-117) [ 1337.989344][T16569] EXT4-fs (loop3): mount failed [ 1338.078582][T16581] siw: device registration error -23 [ 1338.182189][T16587] sd 0:0:1:0: device reset [ 1338.286152][T16592] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=256 sclass=netlink_route_socket pid=16592 comm=syz.4.14492 [ 1338.360456][T16595] netlink: 64 bytes leftover after parsing attributes in process `syz.4.14492'. [ 1338.369704][T16595] netlink: 64 bytes leftover after parsing attributes in process `syz.4.14492'. [ 1338.632796][T16605] lo speed is unknown, defaulting to 1000 [ 1338.656274][T16605] lo speed is unknown, defaulting to 1000 [ 1338.795292][T16613] netlink: 204 bytes leftover after parsing attributes in process `syz.0.14501'. [ 1338.964235][T16615] siw: device registration error -23 [ 1339.062917][T16617] loop3: detected capacity change from 0 to 512 [ 1339.071923][T16617] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 1339.082673][T16623] FAULT_INJECTION: forcing a failure. [ 1339.082673][T16623] name failslab, interval 1, probability 0, space 0, times 0 [ 1339.095325][T16623] CPU: 0 UID: 0 PID: 16623 Comm: syz.1.14506 Tainted: G W 6.16.0-syzkaller-11105-ga6923c06a3b2 #0 PREEMPT(voluntary) [ 1339.095361][T16623] Tainted: [W]=WARN [ 1339.095367][T16623] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1339.095409][T16623] Call Trace: [ 1339.095416][T16623] [ 1339.095425][T16623] __dump_stack+0x1d/0x30 [ 1339.095446][T16623] dump_stack_lvl+0xe8/0x140 [ 1339.095466][T16623] dump_stack+0x15/0x1b [ 1339.095485][T16623] should_fail_ex+0x265/0x280 [ 1339.095517][T16623] should_failslab+0x8c/0xb0 [ 1339.095550][T16623] __kmalloc_noprof+0xa5/0x3e0 [ 1339.095581][T16623] ? security_prepare_creds+0x52/0x120 [ 1339.095618][T16623] security_prepare_creds+0x52/0x120 [ 1339.095733][T16623] prepare_creds+0x34a/0x4c0 [ 1339.095760][T16623] copy_creds+0x8f/0x3f0 [ 1339.095786][T16623] copy_process+0x658/0x2000 [ 1339.095814][T16623] ? kstrtouint+0x76/0xc0 [ 1339.095851][T16623] ? __rcu_read_unlock+0x4f/0x70 [ 1339.095886][T16623] kernel_clone+0x16c/0x5c0 [ 1339.095914][T16623] ? vfs_write+0x75e/0x8e0 [ 1339.095934][T16623] __x64_sys_clone+0xe6/0x120 [ 1339.095996][T16623] x64_sys_call+0x119c/0x2ff0 [ 1339.096021][T16623] do_syscall_64+0xd2/0x200 [ 1339.096048][T16623] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 1339.096071][T16623] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 1339.096091][T16623] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1339.096114][T16623] RIP: 0033:0x7f216a6aeb69 [ 1339.096139][T16623] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1339.096159][T16623] RSP: 002b:00007f2168d0efe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1339.096181][T16623] RAX: ffffffffffffffda RBX: 00007f216a8d5fa0 RCX: 00007f216a6aeb69 [ 1339.096201][T16623] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000640c7000 [ 1339.096212][T16623] RBP: 00007f2168d0f090 R08: 0000000000000000 R09: 0000000000000000 [ 1339.096226][T16623] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 1339.096239][T16623] R13: 0000000000000001 R14: 00007f216a8d5fa0 R15: 00007ffce16e8d68 [ 1339.096336][T16623] [ 1339.317578][T16617] EXT4-fs (loop3): orphan cleanup on readonly fs [ 1339.324526][T16617] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:517: comm syz.3.14503: Block bitmap for bg 0 marked uninitialized [ 1339.345103][T16617] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 1339.354234][T16617] EXT4-fs (loop3): 1 orphan inode deleted [ 1339.361889][T16617] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 1339.397848][T16617] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 1339.415273][T16617] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 1339.457430][T16617] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1339.625837][T16645] loop3: detected capacity change from 0 to 1024 [ 1339.646104][T16645] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 1339.669857][T16643] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1339.697742][T16645] EXT4-fs error (device loop3): ext4_map_blocks:814: inode #3: block 1: comm syz.3.14515: lblock 1 mapped to illegal pblock 1 (length 1) [ 1339.714149][T16643] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1339.724818][T16645] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.14515: Failed to acquire dquot type 0 [ 1339.800370][T16645] EXT4-fs error (device loop3): ext4_free_blocks:6696: comm syz.3.14515: Freeing blocks not in datazone - block = 0, count = 4096 [ 1339.829234][T16643] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1339.860401][T16652] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1339.872679][T16645] EXT4-fs error (device loop3): ext4_read_inode_bitmap:139: comm syz.3.14515: Invalid inode bitmap blk 0 in block_group 0 [ 1339.887352][ T2700] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:12: lblock 1 mapped to illegal pblock 1 (length 1) [ 1339.891104][T16645] EXT4-fs error (device loop3) in ext4_free_inode:361: Corrupt filesystem [ 1339.916189][T16643] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1339.927072][ T2700] EXT4-fs error (device loop3): ext4_release_dquot:6969: comm kworker/u8:12: Failed to release dquot type 0 [ 1339.932307][T16645] EXT4-fs (loop3): 1 orphan inode deleted [ 1339.947052][T16652] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1339.960426][T16645] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1339.981662][T16645] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1340.018821][T16652] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1340.079315][T16652] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1340.245390][ T2700] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1340.271633][ T2700] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1340.294041][ T2700] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1340.322320][ T2700] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1340.357358][T16654] loop3: detected capacity change from 0 to 2048 [ 1340.363483][T28444] hid_parser_main: 33 callbacks suppressed [ 1340.363503][T28444] hid-generic 0000:0000:0000.0176: unknown main item tag 0x0 [ 1340.377281][T28444] hid-generic 0000:0000:0000.0176: unknown main item tag 0x0 [ 1340.384785][T28444] hid-generic 0000:0000:0000.0176: unknown main item tag 0x0 [ 1340.392317][T28444] hid-generic 0000:0000:0000.0176: unknown main item tag 0x0 [ 1340.400187][T28444] hid-generic 0000:0000:0000.0176: unknown main item tag 0x0 [ 1340.407717][T28444] hid-generic 0000:0000:0000.0176: unknown main item tag 0x0 [ 1340.415375][T28444] hid-generic 0000:0000:0000.0176: unknown main item tag 0x0 [ 1340.422978][T28444] hid-generic 0000:0000:0000.0176: unknown main item tag 0x0 [ 1340.430422][T28444] hid-generic 0000:0000:0000.0176: unknown main item tag 0x0 [ 1340.437663][T16661] FAULT_INJECTION: forcing a failure. [ 1340.437663][T16661] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1340.437949][T28444] hid-generic 0000:0000:0000.0176: unknown main item tag 0x0 [ 1340.451428][T16661] CPU: 1 UID: 0 PID: 16661 Comm: syz.0.14520 Tainted: G W 6.16.0-syzkaller-11105-ga6923c06a3b2 #0 PREEMPT(voluntary) [ 1340.451502][T16661] Tainted: [W]=WARN [ 1340.451509][T16661] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1340.451522][T16661] Call Trace: [ 1340.451531][T16661] [ 1340.451541][T16661] __dump_stack+0x1d/0x30 [ 1340.451617][T16661] dump_stack_lvl+0xe8/0x140 [ 1340.451656][T16661] dump_stack+0x15/0x1b [ 1340.451754][T16661] should_fail_ex+0x265/0x280 [ 1340.451790][T16661] should_fail+0xb/0x20 [ 1340.451898][T16661] should_fail_usercopy+0x1a/0x20 [ 1340.451932][T16661] _copy_from_user+0x1c/0xb0 [ 1340.451960][T16661] vmemdup_user+0x59/0xd0 [ 1340.452030][T16661] path_setxattrat+0x1b6/0x310 [ 1340.452072][T16661] __x64_sys_fsetxattr+0x6b/0x80 [ 1340.452107][T16661] x64_sys_call+0x1ced/0x2ff0 [ 1340.452139][T16661] do_syscall_64+0xd2/0x200 [ 1340.452165][T16661] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 1340.452189][T16661] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1340.452219][T16661] RIP: 0033:0x7f366e76eb69 [ 1340.452236][T16661] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1340.452256][T16661] RSP: 002b:00007f366cdcf038 EFLAGS: 00000246 ORIG_RAX: 00000000000000be [ 1340.452331][T16661] RAX: ffffffffffffffda RBX: 00007f366e995fa0 RCX: 00007f366e76eb69 [ 1340.452344][T16661] RDX: 0000200000000040 RSI: 00002000000000c0 RDI: 0000000000000005 [ 1340.452358][T16661] RBP: 00007f366cdcf090 R08: 0000000000000000 R09: 0000000000000000 [ 1340.452372][T16661] R10: 000000000000001e R11: 0000000000000246 R12: 0000000000000001 [ 1340.452385][T16661] R13: 0000000000000000 R14: 00007f366e995fa0 R15: 00007fff3a53ef08 [ 1340.452403][T16661] [ 1340.460818][T16654] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1340.491090][T28444] hid-generic 0000:0000:0000.0176: hidraw0: HID v0.00 Device [syz0] on syz1 [ 1340.817894][T16666] lo speed is unknown, defaulting to 1000 [ 1340.824162][T16666] lo speed is unknown, defaulting to 1000 [ 1340.930752][T11027] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set [ 1340.970931][T11027] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 1341.091927][T11027] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1341.180234][T16676] 9pnet_fd: Insufficient options for proto=fd [ 1341.193794][T16677] netlink: 48 bytes leftover after parsing attributes in process `syz.0.14526'. [ 1341.312923][T16687] lo speed is unknown, defaulting to 1000 [ 1341.336895][T16687] lo speed is unknown, defaulting to 1000 [ 1341.453809][T16684] lo speed is unknown, defaulting to 1000 [ 1341.471974][T16684] lo speed is unknown, defaulting to 1000 [ 1341.587440][ T54] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1341.612850][ T54] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1341.648115][ T12] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1341.712976][ T12] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1341.723740][T16699] hub 6-0:1.0: USB hub found [ 1341.731374][T16705] netlink: 48 bytes leftover after parsing attributes in process `syz.3.14535'. [ 1341.734090][T16699] hub 6-0:1.0: 8 ports detected [ 1341.829992][T16705] loop3: detected capacity change from 0 to 2048 [ 1341.838970][T16705] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 1341.960317][T16714] loop3: detected capacity change from 0 to 512 [ 1341.969175][T16714] EXT4-fs: Ignoring removed mblk_io_submit option [ 1341.981162][T16714] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 1341.997570][T16714] EXT4-fs (loop3): 1 truncate cleaned up [ 1342.004344][T16714] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1342.086969][T11027] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1342.293442][T16735] FAULT_INJECTION: forcing a failure. [ 1342.293442][T16735] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1342.306939][T16735] CPU: 0 UID: 0 PID: 16735 Comm: syz.4.14547 Tainted: G W 6.16.0-syzkaller-11105-ga6923c06a3b2 #0 PREEMPT(voluntary) [ 1342.306979][T16735] Tainted: [W]=WARN [ 1342.306985][T16735] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1342.306996][T16735] Call Trace: [ 1342.307019][T16735] [ 1342.307028][T16735] __dump_stack+0x1d/0x30 [ 1342.307053][T16735] dump_stack_lvl+0xe8/0x140 [ 1342.307073][T16735] dump_stack+0x15/0x1b [ 1342.307090][T16735] should_fail_ex+0x265/0x280 [ 1342.307141][T16735] should_fail+0xb/0x20 [ 1342.307167][T16735] should_fail_usercopy+0x1a/0x20 [ 1342.307187][T16735] _copy_from_user+0x1c/0xb0 [ 1342.307265][T16735] ___sys_sendmsg+0xc1/0x1d0 [ 1342.307307][T16735] __x64_sys_sendmsg+0xd4/0x160 [ 1342.307461][T16735] x64_sys_call+0x191e/0x2ff0 [ 1342.307485][T16735] do_syscall_64+0xd2/0x200 [ 1342.307530][T16735] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 1342.307555][T16735] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 1342.307579][T16735] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1342.307604][T16735] RIP: 0033:0x7f2ce563eb69 [ 1342.307622][T16735] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1342.307690][T16735] RSP: 002b:00007f2ce3c9f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1342.307708][T16735] RAX: ffffffffffffffda RBX: 00007f2ce5865fa0 RCX: 00007f2ce563eb69 [ 1342.307720][T16735] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000009 [ 1342.307731][T16735] RBP: 00007f2ce3c9f090 R08: 0000000000000000 R09: 0000000000000000 [ 1342.307744][T16735] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1342.307757][T16735] R13: 0000000000000000 R14: 00007f2ce5865fa0 R15: 00007ffd2acdaae8 [ 1342.307776][T16735] [ 1342.524157][T16736] lo speed is unknown, defaulting to 1000 [ 1342.530623][T16736] lo speed is unknown, defaulting to 1000 [ 1342.742967][ T29] kauditd_printk_skb: 1271 callbacks suppressed [ 1342.742983][ T29] audit: type=1400 audit(1754150779.983:177334): avc: denied { read } for pid=16739 comm="syz.4.14549" dev="nsfs" ino=4026532396 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1342.771128][ T29] audit: type=1400 audit(1754150779.983:177335): avc: denied { read open } for pid=16739 comm="syz.4.14549" path="net:[4026532396]" dev="nsfs" ino=4026532396 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1342.796403][ T29] audit: type=1400 audit(1754150779.983:177336): avc: denied { create } for pid=16739 comm="syz.4.14549" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1342.816975][ T29] audit: type=1400 audit(1754150779.983:177337): avc: denied { bind } for pid=16739 comm="syz.4.14549" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1342.837452][ T29] audit: type=1400 audit(1754150779.993:177338): avc: denied { ioctl } for pid=16739 comm="syz.4.14549" path="socket:[259595]" dev="sockfs" ino=259595 ioctlcmd=0x8941 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1342.865595][ T29] audit: type=1400 audit(1754150780.043:177339): avc: denied { create } for pid=16737 comm="syz.0.14548" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1342.875533][T16742] hub 6-0:1.0: USB hub found [ 1342.886751][ T29] audit: type=1400 audit(1754150780.043:177340): avc: denied { write } for pid=16737 comm="syz.0.14548" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1342.886785][ T29] audit: type=1400 audit(1754150780.073:177341): avc: denied { prog_load } for pid=16739 comm="syz.4.14549" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1342.886809][ T29] audit: type=1400 audit(1754150780.073:177342): avc: denied { bpf } for pid=16739 comm="syz.4.14549" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1342.886888][ T29] audit: type=1400 audit(1754150780.073:177343): avc: denied { create } for pid=16739 comm="syz.4.14549" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1342.978231][T16742] hub 6-0:1.0: 8 ports detected [ 1343.214536][T16754] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1343.277525][T16754] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1343.292835][T16750] hub 6-0:1.0: USB hub found [ 1343.297602][T16750] hub 6-0:1.0: 8 ports detected [ 1343.329266][T16754] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1343.399263][T16754] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1343.952812][T16781] lo speed is unknown, defaulting to 1000 [ 1343.959312][T16781] lo speed is unknown, defaulting to 1000 [ 1344.033435][T16781] chnl_net:caif_netlink_parms(): no params data found [ 1344.087532][T16781] bridge0: port 1(bridge_slave_0) entered blocking state [ 1344.094804][T16781] bridge0: port 1(bridge_slave_0) entered disabled state [ 1344.103886][T16781] bridge_slave_0: entered allmulticast mode [ 1344.110774][T16781] bridge_slave_0: entered promiscuous mode [ 1344.119583][T16781] bridge0: port 2(bridge_slave_1) entered blocking state [ 1344.126711][T16781] bridge0: port 2(bridge_slave_1) entered disabled state [ 1344.134053][T16781] bridge_slave_1: entered allmulticast mode [ 1344.141020][T16781] bridge_slave_1: entered promiscuous mode [ 1344.165735][T16781] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1344.176717][T16781] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1344.198040][T16781] team0: Port device team_slave_0 added [ 1344.204584][T16781] team0: Port device team_slave_1 added [ 1344.225452][T16781] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1344.232580][T16781] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1344.258731][T16781] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1344.273251][T16781] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1344.280371][T16781] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1344.306372][T16781] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1344.342072][T16781] hsr_slave_0: entered promiscuous mode [ 1344.348414][T16781] hsr_slave_1: entered promiscuous mode [ 1344.354655][T16781] debugfs: 'hsr0' already exists in 'hsr' [ 1344.360608][T16781] Cannot create hsr debugfs directory [ 1344.900993][T16781] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1344.919206][T16781] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1344.928546][T16811] loop3: detected capacity change from 0 to 512 [ 1344.935882][T16781] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1344.936272][T16811] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 1344.954174][T16781] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1344.965914][T16811] loop3: detected capacity change from 0 to 1024 [ 1344.979238][T16811] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1345.003661][T16811] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 49 with max blocks 1 with error 28 [ 1345.010039][T16781] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1345.016214][T16811] EXT4-fs (loop3): This should not happen!! Data will be lost [ 1345.016214][T16811] [ 1345.016262][T16811] EXT4-fs (loop3): Total free blocks count 0 [ 1345.016277][T16811] EXT4-fs (loop3): Free/Dirty block details [ 1345.016289][T16811] EXT4-fs (loop3): free_blocks=0 [ 1345.016303][T16811] EXT4-fs (loop3): dirty_blocks=0 [ 1345.016320][T16811] EXT4-fs (loop3): Block reservation details [ 1345.016370][T16811] EXT4-fs (loop3): i_reserved_data_blocks=0 [ 1345.085360][T11027] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1345.088546][T16781] 8021q: adding VLAN 0 to HW filter on device team0 [ 1345.113719][ T2702] bridge0: port 1(bridge_slave_0) entered blocking state [ 1345.121323][ T2702] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1345.135278][ T2702] bridge0: port 2(bridge_slave_1) entered blocking state [ 1345.142942][ T2702] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1345.216074][T16824] sd 0:0:1:0: device reset [ 1345.253654][T16824] loop3: detected capacity change from 0 to 1024 [ 1345.271015][ T2702] bridge_slave_1: left allmulticast mode [ 1345.277255][ T2702] bridge_slave_1: left promiscuous mode [ 1345.283731][ T2702] bridge0: port 2(bridge_slave_1) entered disabled state [ 1345.292593][T16824] EXT4-fs: Ignoring removed orlov option [ 1345.299200][ T2702] bridge_slave_0: left promiscuous mode [ 1345.304935][ T2702] bridge0: port 1(bridge_slave_0) entered disabled state [ 1345.311697][T16824] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1345.416218][T11027] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1345.458881][ T2702] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1345.469368][ T2702] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1345.478768][ T2702] bond0 (unregistering): Released all slaves [ 1345.496205][ T2695] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1345.522816][ T2695] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1345.531699][T16834] lo speed is unknown, defaulting to 1000 [ 1345.541465][ T2695] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1345.552366][ T2702] hsr_slave_0: left promiscuous mode [ 1345.561858][ T2702] hsr_slave_1: left promiscuous mode [ 1345.568855][ T2702] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1345.576716][ T2702] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1345.621276][ T2702] team0 (unregistering): Port device team_slave_1 removed [ 1345.636940][ T2702] team0 (unregistering): Port device team_slave_0 removed [ 1345.673087][ T2702] team0 (unregistering): Port device dummy0 removed [ 1345.688301][T16834] lo speed is unknown, defaulting to 1000 [ 1345.694088][ T2695] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1345.728335][T16781] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1345.958941][T16781] veth0_vlan: entered promiscuous mode [ 1345.981861][T16781] veth1_vlan: entered promiscuous mode [ 1346.000454][T16781] veth0_macvtap: entered promiscuous mode [ 1346.008498][T16781] veth1_macvtap: entered promiscuous mode [ 1346.019882][T16781] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1346.037794][T16781] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1346.049336][ T2695] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1346.060943][ T2695] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1346.070549][ T2695] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1346.080056][ T2695] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1346.160136][T16862] loop3: detected capacity change from 0 to 128 [ 1346.737409][T16879] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1346.739024][T16873] hub 6-0:1.0: USB hub found [ 1346.754473][T16873] hub 6-0:1.0: 8 ports detected [ 1346.763460][T16875] tipc: Started in network mode [ 1346.768411][T16875] tipc: Node identity ac14140f, cluster identity 4711 [ 1346.776624][T16875] tipc: New replicast peer: 255.255.255.255 [ 1346.783044][T16875] tipc: Enabled bearer , priority 10 [ 1346.859079][T16879] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1346.909345][T16139] hid_parser_main: 33 callbacks suppressed [ 1346.909412][T16139] hid-generic 0000:0000:0000.0177: unknown main item tag 0x0 [ 1346.923334][T16139] hid-generic 0000:0000:0000.0177: unknown main item tag 0x0 [ 1346.930863][T16139] hid-generic 0000:0000:0000.0177: unknown main item tag 0x0 [ 1346.938514][T16139] hid-generic 0000:0000:0000.0177: unknown main item tag 0x0 [ 1346.945971][T16139] hid-generic 0000:0000:0000.0177: unknown main item tag 0x0 [ 1346.953809][T16139] hid-generic 0000:0000:0000.0177: unknown main item tag 0x0 [ 1346.961370][T16139] hid-generic 0000:0000:0000.0177: unknown main item tag 0x0 [ 1346.968905][T16139] hid-generic 0000:0000:0000.0177: unknown main item tag 0x0 [ 1346.976529][T16139] hid-generic 0000:0000:0000.0177: unknown main item tag 0x0 [ 1346.983935][T16139] hid-generic 0000:0000:0000.0177: unknown main item tag 0x0 [ 1346.994493][T16139] hid-generic 0000:0000:0000.0177: hidraw0: HID v0.00 Device [syz0] on syz1 [ 1347.013394][T16879] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1347.050938][T16889] lo speed is unknown, defaulting to 1000 [ 1347.057252][T16889] lo speed is unknown, defaulting to 1000 [ 1347.089482][T16879] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1347.144329][T16900] FAULT_INJECTION: forcing a failure. [ 1347.144329][T16900] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1347.157681][T16900] CPU: 0 UID: 0 PID: 16900 Comm: syz.3.14601 Tainted: G W 6.16.0-syzkaller-11105-ga6923c06a3b2 #0 PREEMPT(voluntary) [ 1347.157840][T16900] Tainted: [W]=WARN [ 1347.157847][T16900] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1347.157859][T16900] Call Trace: [ 1347.157866][T16900] [ 1347.157874][T16900] __dump_stack+0x1d/0x30 [ 1347.157945][T16900] dump_stack_lvl+0xe8/0x140 [ 1347.157966][T16900] dump_stack+0x15/0x1b [ 1347.158058][T16900] should_fail_ex+0x265/0x280 [ 1347.158089][T16900] should_fail+0xb/0x20 [ 1347.158135][T16900] should_fail_usercopy+0x1a/0x20 [ 1347.158155][T16900] _copy_from_user+0x1c/0xb0 [ 1347.158217][T16900] memdup_user+0x5e/0xd0 [ 1347.158245][T16900] strndup_user+0x68/0xb0 [ 1347.158272][T16900] __se_sys_fsopen+0x3c/0x1e0 [ 1347.158376][T16900] __x64_sys_fsopen+0x31/0x40 [ 1347.158401][T16900] x64_sys_call+0x2a9d/0x2ff0 [ 1347.158459][T16900] do_syscall_64+0xd2/0x200 [ 1347.158482][T16900] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 1347.158505][T16900] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 1347.158524][T16900] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1347.158654][T16900] RIP: 0033:0x7fb89b30eb69 [ 1347.158671][T16900] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1347.158692][T16900] RSP: 002b:00007fb89996f038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 1347.158710][T16900] RAX: ffffffffffffffda RBX: 00007fb89b535fa0 RCX: 00007fb89b30eb69 [ 1347.158723][T16900] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00002000000001c0 [ 1347.158737][T16900] RBP: 00007fb89996f090 R08: 0000000000000000 R09: 0000000000000000 [ 1347.158750][T16900] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1347.158813][T16900] R13: 0000000000000000 R14: 00007fb89b535fa0 R15: 00007fffc2786898 [ 1347.158833][T16900] [ 1347.162348][T16898] FAULT_INJECTION: forcing a failure. [ 1347.162348][T16898] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1347.363990][T16898] CPU: 0 UID: 0 PID: 16898 Comm: syz.2.14600 Tainted: G W 6.16.0-syzkaller-11105-ga6923c06a3b2 #0 PREEMPT(voluntary) [ 1347.364043][T16898] Tainted: [W]=WARN [ 1347.364050][T16898] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1347.364064][T16898] Call Trace: [ 1347.364073][T16898] [ 1347.364088][T16898] __dump_stack+0x1d/0x30 [ 1347.364114][T16898] dump_stack_lvl+0xe8/0x140 [ 1347.364134][T16898] dump_stack+0x15/0x1b [ 1347.364152][T16898] should_fail_ex+0x265/0x280 [ 1347.364281][T16898] should_fail+0xb/0x20 [ 1347.364367][T16898] should_fail_usercopy+0x1a/0x20 [ 1347.364389][T16898] _copy_from_user+0x1c/0xb0 [ 1347.364431][T16898] __sys_bpf+0x178/0x7b0 [ 1347.364476][T16898] __x64_sys_bpf+0x41/0x50 [ 1347.364498][T16898] x64_sys_call+0x2aea/0x2ff0 [ 1347.364518][T16898] do_syscall_64+0xd2/0x200 [ 1347.364594][T16898] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 1347.364646][T16898] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 1347.364669][T16898] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1347.364690][T16898] RIP: 0033:0x7fd16994eb69 [ 1347.364704][T16898] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1347.364802][T16898] RSP: 002b:00007fd167fb7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1347.364824][T16898] RAX: ffffffffffffffda RBX: 00007fd169b75fa0 RCX: 00007fd16994eb69 [ 1347.364835][T16898] RDX: 0000000000000094 RSI: 0000200000000900 RDI: 0000000000000005 [ 1347.364847][T16898] RBP: 00007fd167fb7090 R08: 0000000000000000 R09: 0000000000000000 [ 1347.364861][T16898] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1347.364944][T16898] R13: 0000000000000000 R14: 00007fd169b75fa0 R15: 00007ffe358af8e8 [ 1347.364962][T16898] [ 1347.583889][ T2700] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1347.614136][T16907] lo speed is unknown, defaulting to 1000 [ 1347.621392][ T2700] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1347.638631][ T2700] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1347.660470][ T2700] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1347.669196][T16907] lo speed is unknown, defaulting to 1000 [ 1347.751082][ T29] kauditd_printk_skb: 1279 callbacks suppressed [ 1347.751099][ T29] audit: type=1400 audit(1754150784.993:178623): avc: denied { prog_load } for pid=16911 comm="syz.4.14607" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1347.829095][ T29] audit: type=1400 audit(1754150784.993:178624): avc: denied { bpf } for pid=16911 comm="syz.4.14607" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1347.851115][ T29] audit: type=1400 audit(1754150784.993:178625): avc: denied { perfmon } for pid=16911 comm="syz.4.14607" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1347.873775][ T29] audit: type=1400 audit(1754150784.993:178626): avc: denied { prog_run } for pid=16911 comm="syz.4.14607" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1347.895372][ T29] audit: type=1400 audit(1754150785.033:178627): avc: denied { write } for pid=16914 comm="syz.0.14608" name="001" dev="devtmpfs" ino=165 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 1347.919723][ T29] audit: type=1400 audit(1754150785.043:178628): avc: denied { map_create } for pid=16916 comm="syz.1.14609" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1347.940503][ T29] audit: type=1400 audit(1754150785.043:178629): avc: denied { map_read map_write } for pid=16916 comm="syz.1.14609" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1347.961532][ T29] audit: type=1400 audit(1754150785.043:178630): avc: denied { prog_load } for pid=16916 comm="syz.1.14609" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1347.981617][ T29] audit: type=1400 audit(1754150785.043:178631): avc: denied { bpf } for pid=16916 comm="syz.1.14609" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1348.003425][ T29] audit: type=1400 audit(1754150785.043:178632): avc: denied { perfmon } for pid=16916 comm="syz.1.14609" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1348.036471][T11499] tipc: Node number set to 2886997007 [ 1348.073772][T16904] loop3: detected capacity change from 0 to 2048 [ 1348.117115][T16904] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1348.236791][T11027] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set [ 1348.263276][T11027] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 1348.671578][T11027] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1348.911634][T16946] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1348.957908][T16951] netlink: 48 bytes leftover after parsing attributes in process `syz.1.14620'. [ 1349.006532][T16939] lo speed is unknown, defaulting to 1000 [ 1349.014528][T16939] lo speed is unknown, defaulting to 1000 [ 1349.250333][T16962] loop3: detected capacity change from 0 to 512 [ 1349.267932][T16962] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 1349.299414][T16962] EXT4-fs (loop3): 1 truncate cleaned up [ 1349.305681][T16962] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1349.337623][T16946] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1349.357498][T16962] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1349.412019][T16946] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1349.488846][T16946] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1349.546931][ T2702] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1349.569965][ T2702] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1349.582385][ T2702] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1349.595362][ T2702] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1349.668056][T16975] netlink: 24 bytes leftover after parsing attributes in process `syz.0.14626'. [ 1349.874901][T16980] lo speed is unknown, defaulting to 1000 [ 1349.926794][T16980] lo speed is unknown, defaulting to 1000 [ 1350.166490][T16989] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1350.209345][T16992] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1350.253293][T16989] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1350.281601][T16994] netlink: 48 bytes leftover after parsing attributes in process `syz.4.14632'. [ 1350.297275][T16992] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1350.329333][T16989] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1350.368700][T16992] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1350.395065][T16989] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1350.420219][T16992] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1350.490729][ T54] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1350.536743][ T2702] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1350.545015][ T2702] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1350.565651][ T2702] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1350.693065][T17006] loop3: detected capacity change from 0 to 512 [ 1350.704962][T17006] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 1350.714583][T17006] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 1350.729024][T17006] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 1350.749336][T17006] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 1350.754519][T16998] lo speed is unknown, defaulting to 1000 [ 1350.764560][T16998] lo speed is unknown, defaulting to 1000 [ 1350.770539][T17006] System zones: 0-2, 18-18, 34-35 [ 1350.780631][T17006] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1350.819311][T17006] siw: device registration error -23 [ 1350.863773][T11027] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1350.944544][ T54] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1350.965195][T17011] loop3: detected capacity change from 0 to 512 [ 1350.983232][ T2702] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1350.983295][T17011] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 1351.005064][ T2702] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1351.026105][T17011] EXT4-fs (loop3): orphan cleanup on readonly fs [ 1351.033141][ T2702] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1351.048156][T17011] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:517: comm syz.3.14639: Block bitmap for bg 0 marked uninitialized [ 1351.076785][T17011] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 1351.088159][T17011] EXT4-fs (loop3): 1 orphan inode deleted [ 1351.094557][T17011] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 1351.127155][T17019] netlink: 8 bytes leftover after parsing attributes in process `syz.4.14642'. [ 1351.148775][T17011] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 1351.166418][T17011] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 1351.178197][T17023] netlink: 48 bytes leftover after parsing attributes in process `syz.4.14644'. [ 1351.211344][T17011] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1351.325218][T17035] lo speed is unknown, defaulting to 1000 [ 1351.341473][T17035] lo speed is unknown, defaulting to 1000 [ 1351.407513][T17039] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1351.438399][T17036] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14647'. [ 1351.455287][T17043] loop3: detected capacity change from 0 to 128 [ 1351.462744][T17043] msdos: Unknown parameter '0177777777777777777777700000000000000000000004184467440737095516150xffffffffffffffff˙˙˙˙' [ 1351.491951][T17043] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14654'. [ 1351.518704][T17039] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1351.586999][T17039] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1351.649915][T17056] netlink: 48 bytes leftover after parsing attributes in process `syz.0.14659'. [ 1351.703553][T17039] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1351.854026][T17070] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1351.879386][T17070] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1351.918221][T17070] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1351.978369][T17070] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1352.113935][T17081] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1352.178680][T17081] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1352.238503][T17081] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1352.288625][T17081] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1352.356466][ T12] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1352.373930][ T12] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1352.387470][ T12] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1352.406371][ T12] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1352.619346][T17089] netlink: 48 bytes leftover after parsing attributes in process `syz.3.14675'. [ 1352.721474][T17089] loop3: detected capacity change from 0 to 2048 [ 1352.729750][T17089] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 1352.756586][ T29] kauditd_printk_skb: 1817 callbacks suppressed [ 1352.756603][ T29] audit: type=1400 audit(1754150790.003:180448): avc: denied { map_create } for pid=17093 comm="syz.1.14677" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1352.783552][ T29] audit: type=1400 audit(1754150790.003:180449): avc: denied { bpf } for pid=17093 comm="syz.1.14677" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1352.805411][ T29] audit: type=1400 audit(1754150790.003:180450): avc: denied { read write } for pid=11027 comm="syz-executor" name="loop3" dev="devtmpfs" ino=10912 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1352.829941][ T29] audit: type=1400 audit(1754150790.003:180451): avc: denied { open } for pid=11027 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=10912 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1352.854281][ T29] audit: type=1400 audit(1754150790.003:180452): avc: denied { ioctl } for pid=11027 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=10912 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1352.880393][ T29] audit: type=1400 audit(1754150790.003:180453): avc: denied { map_read map_write } for pid=17093 comm="syz.1.14677" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1352.901314][ T29] audit: type=1400 audit(1754150790.003:180454): avc: denied { prog_load } for pid=17093 comm="syz.1.14677" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1352.922185][ T29] audit: type=1400 audit(1754150790.003:180455): avc: denied { bpf } for pid=17093 comm="syz.1.14677" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1352.944105][ T29] audit: type=1400 audit(1754150790.003:180456): avc: denied { perfmon } for pid=17093 comm="syz.1.14677" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1352.966115][ T29] audit: type=1400 audit(1754150790.003:180457): avc: denied { prog_run } for pid=17093 comm="syz.1.14677" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1353.675101][ T54] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1353.707813][ T54] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1353.716081][ T54] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1353.746505][ T54] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1353.843864][T17132] lo speed is unknown, defaulting to 1000 [ 1353.866893][T17132] lo speed is unknown, defaulting to 1000 [ 1354.003826][T17139] siw: device registration error -23 [ 1354.010949][T17142] hub 6-0:1.0: USB hub found [ 1354.025239][T17142] hub 6-0:1.0: 8 ports detected [ 1354.188416][T17156] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1354.248758][T17541] hid_parser_main: 33 callbacks suppressed [ 1354.248778][T17541] hid-generic 0000:0000:0000.0178: unknown main item tag 0x0 [ 1354.262047][T17541] hid-generic 0000:0000:0000.0178: unknown main item tag 0x0 [ 1354.269498][T17541] hid-generic 0000:0000:0000.0178: unknown main item tag 0x0 [ 1354.276927][T17541] hid-generic 0000:0000:0000.0178: unknown main item tag 0x0 [ 1354.284318][T17541] hid-generic 0000:0000:0000.0178: unknown main item tag 0x0 [ 1354.291919][T17541] hid-generic 0000:0000:0000.0178: unknown main item tag 0x0 [ 1354.299400][T17541] hid-generic 0000:0000:0000.0178: unknown main item tag 0x0 [ 1354.306854][T17541] hid-generic 0000:0000:0000.0178: unknown main item tag 0x0 [ 1354.314483][T17541] hid-generic 0000:0000:0000.0178: unknown main item tag 0x0 [ 1354.321971][T17541] hid-generic 0000:0000:0000.0178: unknown main item tag 0x0 [ 1354.341090][T17541] hid-generic 0000:0000:0000.0178: hidraw0: HID v0.00 Device [syz0] on syz1 [ 1354.375837][T17156] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1354.418947][ T54] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1354.433434][ T54] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1354.447741][ T54] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1354.456387][ T54] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1354.467412][T17156] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1354.518500][T17156] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1354.580590][T17169] lo speed is unknown, defaulting to 1000 [ 1354.590131][T17169] lo speed is unknown, defaulting to 1000 [ 1354.602126][ T54] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1354.620885][ T54] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1354.639331][ T54] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1354.668701][ T54] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1354.716101][T17175] netlink: 48 bytes leftover after parsing attributes in process `syz.3.14713'. [ 1354.739271][T17172] hub 6-0:1.0: USB hub found [ 1354.755497][T17172] hub 6-0:1.0: 8 ports detected [ 1354.835455][T17175] loop3: detected capacity change from 0 to 2048 [ 1354.858840][T17175] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 1354.982628][T17170] lo speed is unknown, defaulting to 1000 [ 1355.023505][T17170] lo speed is unknown, defaulting to 1000 [ 1355.051894][T17182] hub 6-0:1.0: USB hub found [ 1355.062602][T17182] hub 6-0:1.0: 8 ports detected [ 1355.515738][T17195] loop3: detected capacity change from 0 to 2048 [ 1355.530328][T17195] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1355.634314][T11027] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set [ 1355.650880][T11027] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 1355.670964][T11027] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1355.734240][T17210] netlink: 48 bytes leftover after parsing attributes in process `syz.3.14725'. [ 1355.797772][T17210] loop3: detected capacity change from 0 to 2048 [ 1355.805738][T17210] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 1356.120822][T17217] hub 6-0:1.0: USB hub found [ 1356.126004][T17217] hub 6-0:1.0: 8 ports detected [ 1356.418265][T17234] netlink: 48 bytes leftover after parsing attributes in process `syz.0.14736'. [ 1356.789923][T17251] hub 6-0:1.0: USB hub found [ 1356.795036][T17251] hub 6-0:1.0: 8 ports detected [ 1357.061310][T17260] FAULT_INJECTION: forcing a failure. [ 1357.061310][T17260] name failslab, interval 1, probability 0, space 0, times 0 [ 1357.074685][T17260] CPU: 1 UID: 0 PID: 17260 Comm: syz.0.14741 Tainted: G W 6.16.0-syzkaller-11105-ga6923c06a3b2 #0 PREEMPT(voluntary) [ 1357.074797][T17260] Tainted: [W]=WARN [ 1357.074805][T17260] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1357.074820][T17260] Call Trace: [ 1357.074828][T17260] [ 1357.074837][T17260] __dump_stack+0x1d/0x30 [ 1357.074860][T17260] dump_stack_lvl+0xe8/0x140 [ 1357.074877][T17260] dump_stack+0x15/0x1b [ 1357.074932][T17260] should_fail_ex+0x265/0x280 [ 1357.074971][T17260] should_failslab+0x8c/0xb0 [ 1357.075007][T17260] kmem_cache_alloc_noprof+0x50/0x310 [ 1357.075072][T17260] ? create_new_namespaces+0x3c/0x3d0 [ 1357.075210][T17260] create_new_namespaces+0x3c/0x3d0 [ 1357.075261][T17260] unshare_nsproxy_namespaces+0xe8/0x120 [ 1357.075333][T17260] ksys_unshare+0x3d0/0x6d0 [ 1357.075359][T17260] ? ksys_write+0x192/0x1a0 [ 1357.075401][T17260] __x64_sys_unshare+0x1f/0x30 [ 1357.075502][T17260] x64_sys_call+0x2911/0x2ff0 [ 1357.075600][T17260] do_syscall_64+0xd2/0x200 [ 1357.075625][T17260] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 1357.075724][T17260] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 1357.075807][T17260] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1357.075828][T17260] RIP: 0033:0x7f416af8eb69 [ 1357.075843][T17260] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1357.075863][T17260] RSP: 002b:00007f41695ad038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1357.075885][T17260] RAX: ffffffffffffffda RBX: 00007f416b1b6160 RCX: 00007f416af8eb69 [ 1357.075903][T17260] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000006a040000 [ 1357.075917][T17260] RBP: 00007f41695ad090 R08: 0000000000000000 R09: 0000000000000000 [ 1357.075931][T17260] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1357.075944][T17260] R13: 0000000000000000 R14: 00007f416b1b6160 R15: 00007ffcd273d6a8 [ 1357.075960][T17260] [ 1357.675119][T17266] loop3: detected capacity change from 0 to 1024 [ 1357.761815][T17266] EXT4-fs (loop3): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 1357.789200][ T29] kauditd_printk_skb: 1425 callbacks suppressed [ 1357.789300][ T29] audit: type=1400 audit(1754150795.033:181883): avc: denied { map_create } for pid=17269 comm="syz.1.14750" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1357.867140][T17270] lo speed is unknown, defaulting to 1000 [ 1357.867344][T17266] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1357.873235][ T29] audit: type=1400 audit(1754150795.073:181884): avc: denied { map_read map_write } for pid=17269 comm="syz.1.14750" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1357.906948][ T29] audit: type=1400 audit(1754150795.073:181885): avc: denied { prog_load } for pid=17269 comm="syz.1.14750" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1357.927195][ T29] audit: type=1400 audit(1754150795.073:181886): avc: denied { bpf } for pid=17269 comm="syz.1.14750" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1357.948903][ T29] audit: type=1400 audit(1754150795.073:181887): avc: denied { perfmon } for pid=17269 comm="syz.1.14750" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1357.958195][T17270] lo speed is unknown, defaulting to 1000 [ 1357.970957][ T29] audit: type=1400 audit(1754150795.073:181888): avc: denied { bpf } for pid=17269 comm="syz.1.14750" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1357.997743][ T29] audit: type=1400 audit(1754150795.073:181889): avc: denied { create } for pid=17269 comm="syz.1.14750" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 1358.018458][ T29] audit: type=1400 audit(1754150795.073:181890): avc: denied { sys_admin } for pid=17269 comm="syz.1.14750" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 1358.103799][ T29] audit: type=1400 audit(1754150795.133:181891): avc: denied { mount } for pid=17265 comm="syz.3.14748" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 1358.126762][ T29] audit: type=1400 audit(1754150795.133:181892): avc: denied { read write } for pid=17265 comm="syz.3.14748" name="loop3" dev="devtmpfs" ino=10912 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1358.178700][T17278] netlink: 48 bytes leftover after parsing attributes in process `syz.2.14751'. [ 1358.480655][T17288] lo speed is unknown, defaulting to 1000 [ 1358.490851][T17288] lo speed is unknown, defaulting to 1000 [ 1358.610587][T17295] lo speed is unknown, defaulting to 1000 [ 1358.616841][T17295] lo speed is unknown, defaulting to 1000 [ 1358.711495][T17298] netlink: 24 bytes leftover after parsing attributes in process `syz.1.14759'. [ 1358.729294][T17294] lo speed is unknown, defaulting to 1000 [ 1358.784331][T17294] lo speed is unknown, defaulting to 1000 [ 1359.127918][T17300] lo speed is unknown, defaulting to 1000 [ 1359.134367][T17300] lo speed is unknown, defaulting to 1000 [ 1359.294381][T11027] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1359.335735][T17309] lo speed is unknown, defaulting to 1000 [ 1359.343041][T17309] lo speed is unknown, defaulting to 1000 [ 1359.428048][T17307] hub 6-0:1.0: USB hub found [ 1359.443536][T17307] hub 6-0:1.0: 8 ports detected [ 1359.513144][T17319] netlink: 48 bytes leftover after parsing attributes in process `syz.1.14767'. [ 1359.535382][T17318] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14766'. [ 1359.849793][T17332] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1359.850307][T17343] netlink: 'syz.2.14775': attribute type 13 has an invalid length. [ 1359.867897][T17343] netlink: 'syz.2.14775': attribute type 17 has an invalid length. [ 1359.876360][T17343] netlink: 'syz.2.14775': attribute type 27 has an invalid length. [ 1359.909148][T17332] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1359.968717][T17332] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1359.982087][T17351] loop3: detected capacity change from 0 to 512 [ 1360.005849][T17351] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1360.020441][T17351] ext4 filesystem being mounted at /513/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1360.038768][T17332] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1360.098248][ T2700] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1360.110473][ T12] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1360.124478][ T12] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1360.137899][ T12] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1360.230490][T17363] netlink: 24 bytes leftover after parsing attributes in process `syz.0.14782'. [ 1360.242421][T17362] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14781'. [ 1360.489516][T17373] netlink: 24 bytes leftover after parsing attributes in process `syz.1.14785'. [ 1360.842983][T11027] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1360.941122][T17386] loop3: detected capacity change from 0 to 512 [ 1360.949452][T17386] EXT4-fs: Ignoring removed mblk_io_submit option [ 1360.956530][T17386] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 1360.970269][T17386] EXT4-fs (loop3): 1 truncate cleaned up [ 1360.976694][T17386] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1361.037586][T11027] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1361.114088][T17389] loop3: detected capacity change from 0 to 512 [ 1361.139023][T17389] EXT4-fs: Ignoring removed mblk_io_submit option [ 1361.163177][T17389] EXT4-fs (loop3): failed to initialize system zone (-117) [ 1361.181085][T17389] EXT4-fs (loop3): mount failed [ 1361.363143][T17399] block device autoloading is deprecated and will be removed. [ 1361.385508][T17401] loop3: detected capacity change from 0 to 128 [ 1361.393691][T17401] msdos: Unknown parameter '0177777777777777777777700000000000000000000004184467440737095516150xffffffffffffffff˙˙˙˙' [ 1361.424642][T17401] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14796'. [ 1361.464208][T17406] loop1: detected capacity change from 0 to 1024 [ 1361.480685][T17406] EXT4-fs: inline encryption not supported [ 1361.493408][T17406] journal_path: Non-blockdev passed as './file1' [ 1361.499936][T17406] EXT4-fs: error: could not find journal device path [ 1361.511042][T17403] lo speed is unknown, defaulting to 1000 [ 1361.522872][T17403] lo speed is unknown, defaulting to 1000 [ 1362.308558][T17426] netlink: 24 bytes leftover after parsing attributes in process `syz.0.14805'. [ 1362.511500][T17438] loop1: detected capacity change from 0 to 512 [ 1362.515324][T17437] lo speed is unknown, defaulting to 1000 [ 1362.524629][T17437] lo speed is unknown, defaulting to 1000 [ 1362.563850][T17438] EXT4-fs: Ignoring removed mblk_io_submit option [ 1362.580030][T17438] EXT4-fs (loop1): failed to initialize system zone (-117) [ 1362.593634][T17438] EXT4-fs (loop1): mount failed [ 1362.735209][T17449] netlink: 24 bytes leftover after parsing attributes in process `syz.4.14815'. [ 1362.796488][ T29] kauditd_printk_skb: 1075 callbacks suppressed [ 1362.796507][ T29] audit: type=1326 audit(1754150800.033:182968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17451 comm="syz.1.14816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f216a6aeb69 code=0x7ffc0000 [ 1362.874518][ T29] audit: type=1400 audit(1754150800.073:182969): avc: denied { read write } for pid=11027 comm="syz-executor" name="loop3" dev="devtmpfs" ino=10912 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1362.899400][ T29] audit: type=1400 audit(1754150800.073:182970): avc: denied { open } for pid=11027 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=10912 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1362.911176][T17454] IPVS: stopping master sync thread 17460 ... [ 1362.924237][ T29] audit: type=1400 audit(1754150800.073:182971): avc: denied { ioctl } for pid=11027 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=10912 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1362.929693][T17460] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 1362.966718][ T29] audit: type=1400 audit(1754150800.093:182972): avc: denied { prog_load } for pid=17453 comm="syz.3.14817" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1362.986956][ T29] audit: type=1400 audit(1754150800.093:182973): avc: denied { bpf } for pid=17453 comm="syz.3.14817" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1363.009042][ T29] audit: type=1400 audit(1754150800.093:182974): avc: denied { perfmon } for pid=17453 comm="syz.3.14817" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1363.031709][ T29] audit: type=1400 audit(1754150800.093:182975): avc: denied { map_create } for pid=17453 comm="syz.3.14817" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1363.052337][ T29] audit: type=1400 audit(1754150800.093:182976): avc: denied { bpf } for pid=17453 comm="syz.3.14817" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1363.074312][ T29] audit: type=1400 audit(1754150800.093:182977): avc: denied { map_read map_write } for pid=17453 comm="syz.3.14817" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1363.237612][T17465] hub 6-0:1.0: USB hub found [ 1363.242607][T17465] hub 6-0:1.0: 8 ports detected [ 1363.282566][T17470] 9pnet_fd: Insufficient options for proto=fd [ 1363.407116][T17482] openvswitch: netlink: Message has 6 unknown bytes. [ 1363.494944][T17483] lo speed is unknown, defaulting to 1000 [ 1363.501594][T17483] lo speed is unknown, defaulting to 1000 [ 1363.510796][T17492] openvswitch: netlink: Message has 6 unknown bytes. [ 1363.599572][T17495] netlink: 24 bytes leftover after parsing attributes in process `syz.2.14833'. [ 1363.680744][T17500] lo speed is unknown, defaulting to 1000 [ 1363.694308][T17500] lo speed is unknown, defaulting to 1000 [ 1363.834979][T17510] FAULT_INJECTION: forcing a failure. [ 1363.834979][T17510] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1363.848756][T17510] CPU: 1 UID: 0 PID: 17510 Comm: syz.4.14839 Tainted: G W 6.16.0-syzkaller-11105-ga6923c06a3b2 #0 PREEMPT(voluntary) [ 1363.848861][T17510] Tainted: [W]=WARN [ 1363.848867][T17510] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1363.848906][T17510] Call Trace: [ 1363.848914][T17510] [ 1363.848924][T17510] __dump_stack+0x1d/0x30 [ 1363.848948][T17510] dump_stack_lvl+0xe8/0x140 [ 1363.848968][T17510] dump_stack+0x15/0x1b [ 1363.849003][T17510] should_fail_ex+0x265/0x280 [ 1363.849111][T17510] should_fail+0xb/0x20 [ 1363.849138][T17510] should_fail_usercopy+0x1a/0x20 [ 1363.849159][T17510] _copy_from_iter+0xcf/0xe40 [ 1363.849183][T17510] ? __build_skb_around+0x1a0/0x200 [ 1363.849228][T17510] ? __alloc_skb+0x223/0x320 [ 1363.849293][T17510] netlink_sendmsg+0x471/0x6b0 [ 1363.849328][T17510] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1363.849363][T17510] __sock_sendmsg+0x142/0x180 [ 1363.849418][T17510] ____sys_sendmsg+0x31e/0x4e0 [ 1363.849483][T17510] ___sys_sendmsg+0x17b/0x1d0 [ 1363.849597][T17510] __x64_sys_sendmsg+0xd4/0x160 [ 1363.849690][T17510] x64_sys_call+0x191e/0x2ff0 [ 1363.849710][T17510] do_syscall_64+0xd2/0x200 [ 1363.849740][T17510] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 1363.849766][T17510] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 1363.849837][T17510] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1363.849861][T17510] RIP: 0033:0x7f2ce563eb69 [ 1363.849878][T17510] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1363.849897][T17510] RSP: 002b:00007f2ce3c9f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1363.849918][T17510] RAX: ffffffffffffffda RBX: 00007f2ce5865fa0 RCX: 00007f2ce563eb69 [ 1363.849939][T17510] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003 [ 1363.849952][T17510] RBP: 00007f2ce3c9f090 R08: 0000000000000000 R09: 0000000000000000 [ 1363.850010][T17510] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1363.850021][T17510] R13: 0000000000000000 R14: 00007f2ce5865fa0 R15: 00007ffd2acdaae8 [ 1363.850038][T17510] [ 1364.137148][T17512] hub 6-0:1.0: USB hub found [ 1364.141981][T17512] hub 6-0:1.0: 8 ports detected [ 1364.205574][T17519] bridge: RTM_NEWNEIGH with invalid ether address [ 1364.371725][T17527] netlink: 24 bytes leftover after parsing attributes in process `syz.4.14846'. [ 1364.425256][T17531] 9pnet_fd: Insufficient options for proto=fd [ 1364.831229][T17544] lo speed is unknown, defaulting to 1000 [ 1364.839971][T17544] lo speed is unknown, defaulting to 1000 [ 1364.941463][T17550] FAULT_INJECTION: forcing a failure. [ 1364.941463][T17550] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1364.955338][T17550] CPU: 0 UID: 0 PID: 17550 Comm: syz.2.14855 Tainted: G W 6.16.0-syzkaller-11105-ga6923c06a3b2 #0 PREEMPT(voluntary) [ 1364.955375][T17550] Tainted: [W]=WARN [ 1364.955382][T17550] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1364.955455][T17550] Call Trace: [ 1364.955463][T17550] [ 1364.955472][T17550] __dump_stack+0x1d/0x30 [ 1364.955496][T17550] dump_stack_lvl+0xe8/0x140 [ 1364.955513][T17550] dump_stack+0x15/0x1b [ 1364.955610][T17550] should_fail_ex+0x265/0x280 [ 1364.955641][T17550] should_fail_alloc_page+0xf2/0x100 [ 1364.955669][T17550] __alloc_frozen_pages_noprof+0xff/0x360 [ 1364.955777][T17550] alloc_pages_mpol+0xb3/0x250 [ 1364.955805][T17550] alloc_pages_noprof+0x90/0x130 [ 1364.955836][T17550] pte_alloc_one+0x2d/0x120 [ 1364.955860][T17550] handle_mm_fault+0x12e3/0x2c20 [ 1364.955961][T17550] do_user_addr_fault+0x3fe/0x1090 [ 1364.955996][T17550] exc_page_fault+0x62/0xa0 [ 1364.956082][T17550] asm_exc_page_fault+0x26/0x30 [ 1364.956104][T17550] RIP: 0010:strncpy_from_user+0xa5/0x230 [ 1364.956134][T17550] Code: 49 83 ff 07 0f 86 87 00 00 00 48 c7 04 24 00 00 00 00 4c 89 64 24 10 48 89 6c 24 08 49 89 ee 4c 89 7c 24 18 4d 89 fd 4c 89 e5 <4d> 8b 24 24 48 b8 ff fe fe fe fe fe fe fe 4d 8d 3c 04 4c 89 e3 48 [ 1364.956153][T17550] RSP: 0018:ffffc9000d1abde8 EFLAGS: 00050212 [ 1364.956171][T17550] RAX: ffffffff81f8e22b RBX: ffff88811ccc8000 RCX: ffff888119d46300 [ 1364.956233][T17550] RDX: 0000000000000000 RSI: 0000000000000fe0 RDI: 0000000000000007 [ 1364.956277][T17550] RBP: 0000200000000040 R08: 000188811ccc8007 R09: 0000000000000000 [ 1364.956289][T17550] R10: ffff88811ccc8000 R11: 0001c9000d1abe7c R12: 0000200000000040 [ 1364.956300][T17550] R13: 0000000000000fe0 R14: ffff88811ccc8020 R15: 0000000000000fe0 [ 1364.956317][T17550] ? strncpy_from_user+0x7b/0x230 [ 1364.956344][T17550] ? strncpy_from_user+0x7b/0x230 [ 1364.956434][T17550] getname_flags+0xae/0x3b0 [ 1364.956464][T17550] do_sys_openat2+0x60/0x110 [ 1364.956546][T17550] __x64_sys_openat+0xf2/0x120 [ 1364.956653][T17550] x64_sys_call+0x2e9c/0x2ff0 [ 1364.956678][T17550] do_syscall_64+0xd2/0x200 [ 1364.956782][T17550] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 1364.956809][T17550] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 1364.956834][T17550] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1364.956907][T17550] RIP: 0033:0x7fd16994eb69 [ 1364.956922][T17550] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1364.956939][T17550] RSP: 002b:00007fd167fb7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1364.956956][T17550] RAX: ffffffffffffffda RBX: 00007fd169b75fa0 RCX: 00007fd16994eb69 [ 1364.956967][T17550] RDX: 0000000000000042 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 1364.957044][T17550] RBP: 00007fd167fb7090 R08: 0000000000000000 R09: 0000000000000000 [ 1364.957055][T17550] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1364.957069][T17550] R13: 0000000000000000 R14: 00007fd169b75fa0 R15: 00007ffe358af8e8 [ 1364.957084][T17550] [ 1365.270480][T17555] FAULT_INJECTION: forcing a failure. [ 1365.270480][T17555] name failslab, interval 1, probability 0, space 0, times 0 [ 1365.283604][T17555] CPU: 1 UID: 0 PID: 17555 Comm: syz.0.14857 Tainted: G W 6.16.0-syzkaller-11105-ga6923c06a3b2 #0 PREEMPT(voluntary) [ 1365.283646][T17555] Tainted: [W]=WARN [ 1365.283705][T17555] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1365.283720][T17555] Call Trace: [ 1365.283729][T17555] [ 1365.283739][T17555] __dump_stack+0x1d/0x30 [ 1365.283761][T17555] dump_stack_lvl+0xe8/0x140 [ 1365.283781][T17555] dump_stack+0x15/0x1b [ 1365.283929][T17555] should_fail_ex+0x265/0x280 [ 1365.283964][T17555] ? audit_log_d_path+0x8d/0x150 [ 1365.284075][T17555] should_failslab+0x8c/0xb0 [ 1365.284100][T17555] __kmalloc_cache_noprof+0x4c/0x320 [ 1365.284134][T17555] audit_log_d_path+0x8d/0x150 [ 1365.284162][T17555] audit_log_d_path_exe+0x42/0x70 [ 1365.284235][T17555] audit_log_task+0x1e9/0x250 [ 1365.284263][T17555] audit_seccomp+0x61/0x100 [ 1365.284327][T17555] ? __seccomp_filter+0x68c/0x10d0 [ 1365.284348][T17555] __seccomp_filter+0x69d/0x10d0 [ 1365.284372][T17555] ? __qdisc_run+0xc52/0xc60 [ 1365.284405][T17555] __secure_computing+0x82/0x150 [ 1365.284429][T17555] syscall_trace_enter+0xcf/0x1e0 [ 1365.284533][T17555] do_syscall_64+0xac/0x200 [ 1365.284594][T17555] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 1365.284671][T17555] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1365.284692][T17555] RIP: 0033:0x7f416af8eb69 [ 1365.284707][T17555] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1365.284756][T17555] RSP: 002b:00007f41695ef038 EFLAGS: 00000246 ORIG_RAX: 000000000000005b [ 1365.284778][T17555] RAX: ffffffffffffffda RBX: 00007f416b1b5fa0 RCX: 00007f416af8eb69 [ 1365.284790][T17555] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffffffffffff [ 1365.284864][T17555] RBP: 00007f41695ef090 R08: 0000000000000000 R09: 0000000000000000 [ 1365.284905][T17555] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1365.284917][T17555] R13: 0000000000000000 R14: 00007f416b1b5fa0 R15: 00007ffcd273d6a8 [ 1365.284933][T17555] [ 1365.541883][T17564] netlink: 28 bytes leftover after parsing attributes in process `syz.2.14861'. [ 1365.571438][T17562] loop3: detected capacity change from 0 to 512 [ 1365.579116][T17562] EXT4-fs: Ignoring removed mblk_io_submit option [ 1365.631831][T17566] netlink: 4 bytes leftover after parsing attributes in process `syz.1.14860'. [ 1365.658197][T17566] loop1: detected capacity change from 0 to 512 [ 1365.659345][T17562] EXT4-fs (loop3): failed to initialize system zone (-117) [ 1365.672971][T17562] EXT4-fs (loop3): mount failed [ 1365.688336][T17566] EXT4-fs (loop1): too many log groups per flexible block group [ 1365.696580][T17566] EXT4-fs (loop1): failed to initialize mballoc (-12) [ 1365.708945][T17566] EXT4-fs (loop1): mount failed [ 1365.785236][T17581] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1365.848694][T17581] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1365.913077][T17581] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1365.989703][T17581] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1366.053054][ T54] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1366.071581][T17587] loop3: detected capacity change from 0 to 2048 [ 1366.081219][ T54] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1366.102811][ T54] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1366.112064][ T54] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1366.143819][T17587] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1366.214760][T17603] netlink: 48 bytes leftover after parsing attributes in process `syz.1.14875'. [ 1366.229349][T11027] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set [ 1366.246118][T11027] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 1366.269448][T11027] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1366.341067][T17603] loop1: detected capacity change from 0 to 2048 [ 1366.348764][T17603] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 1366.434787][T17616] lo speed is unknown, defaulting to 1000 [ 1366.445095][T17616] lo speed is unknown, defaulting to 1000 [ 1366.599037][T17624] loop1: detected capacity change from 0 to 512 [ 1366.614332][T17626] lo speed is unknown, defaulting to 1000 [ 1366.623241][T17624] EXT4-fs: Ignoring removed mblk_io_submit option [ 1366.630861][T17626] lo speed is unknown, defaulting to 1000 [ 1366.639789][T17624] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 1366.668034][T17628] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1366.684698][T17624] EXT4-fs (loop1): 1 truncate cleaned up [ 1366.691114][T17624] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1366.735942][T10066] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1366.755222][T17628] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1366.774426][T17613] lo speed is unknown, defaulting to 1000 [ 1366.782908][T17613] lo speed is unknown, defaulting to 1000 [ 1366.831607][T17638] loop1: detected capacity change from 0 to 512 [ 1366.840601][T17628] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1366.852355][T17638] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 1366.861819][T17638] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 1366.903911][T17638] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended [ 1366.915469][T17628] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1366.927215][T17638] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 1366.936209][T17638] System zones: 0-2, 18-18, 34-35 [ 1366.946271][T17638] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1367.023317][T17638] siw: device registration error -23 [ 1367.135326][T10066] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1367.897624][ T29] kauditd_printk_skb: 1166 callbacks suppressed [ 1367.897639][ T29] audit: type=1400 audit(1754150805.143:184144): avc: denied { map_create } for pid=17666 comm="syz.4.14899" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1367.926552][ T29] audit: type=1400 audit(1754150805.143:184145): avc: denied { bpf } for pid=17666 comm="syz.4.14899" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1367.948361][ T29] audit: type=1400 audit(1754150805.143:184146): avc: denied { map_read map_write } for pid=17666 comm="syz.4.14899" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1367.969768][ T29] audit: type=1400 audit(1754150805.143:184147): avc: denied { prog_load } for pid=17666 comm="syz.4.14899" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1367.989962][ T29] audit: type=1400 audit(1754150805.143:184148): avc: denied { perfmon } for pid=17666 comm="syz.4.14899" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1367.990737][T28444] Process accounting resumed [ 1368.012135][ T29] audit: type=1400 audit(1754150805.143:184149): avc: denied { prog_run } for pid=17666 comm="syz.4.14899" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1368.036481][ T29] audit: type=1400 audit(1754150805.213:184150): avc: denied { create } for pid=17666 comm="syz.4.14899" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1368.058394][ T29] audit: type=1400 audit(1754150805.213:184151): avc: denied { write } for pid=17666 comm="syz.4.14899" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1368.083318][ T29] audit: type=1400 audit(1754150805.333:184152): avc: denied { write } for pid=17666 comm="syz.4.14899" name="001" dev="devtmpfs" ino=156 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 1368.107961][ T29] audit: type=1400 audit(1754150805.333:184153): avc: denied { write } for pid=17666 comm="syz.4.14899" path="/dev/bus/usb/004/001" dev="devtmpfs" ino=156 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 1368.193275][T17666] Process accounting resumed [ 1368.269775][T17674] netlink: 24 bytes leftover after parsing attributes in process `syz.4.14902'. [ 1368.300134][T17672] lo speed is unknown, defaulting to 1000 [ 1368.316816][T17672] lo speed is unknown, defaulting to 1000 [ 1368.786099][T17700] netlink: 8 bytes leftover after parsing attributes in process `syz.4.14911'. [ 1368.881992][T17704] lo speed is unknown, defaulting to 1000 [ 1368.888769][T17704] lo speed is unknown, defaulting to 1000 [ 1368.926283][T17697] loop3: detected capacity change from 0 to 2048 [ 1368.962039][T17697] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1369.071809][T11027] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set [ 1369.156693][T11027] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 1369.207912][T11027] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1369.257200][T17718] netlink: 48 bytes leftover after parsing attributes in process `syz.1.14918'. [ 1369.280746][T17719] loop3: detected capacity change from 0 to 512 [ 1369.306189][T17719] EXT4-fs: Ignoring removed mblk_io_submit option [ 1369.323880][T17719] EXT4-fs (loop3): failed to initialize system zone (-117) [ 1369.331207][T17719] EXT4-fs (loop3): mount failed [ 1369.359974][T17718] loop1: detected capacity change from 0 to 2048 [ 1369.367681][T17718] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 1369.411687][T17725] netlink: 24 bytes leftover after parsing attributes in process `syz.3.14919'. [ 1369.454252][T17726] loop1: detected capacity change from 0 to 512 [ 1369.468052][T17726] EXT4-fs: Ignoring removed orlov option [ 1369.478005][T17726] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1369.498985][T17726] EXT4-fs (loop1): orphan cleanup on readonly fs [ 1369.516283][T17726] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.14920: bg 0: block 248: padding at end of block bitmap is not set [ 1369.532266][T17726] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.14920: Failed to acquire dquot type 1 [ 1369.544357][T17726] EXT4-fs (loop1): 1 truncate cleaned up [ 1369.552050][T17726] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1369.569519][T17726] EXT4-fs: Ignoring removed orlov option [ 1369.575535][T17726] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1369.584763][T17726] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 1369.598768][T17726] EXT4-fs error (device loop1): __ext4_remount:6736: comm syz.1.14920: Abort forced by user [ 1369.616365][T17726] EXT4-fs (loop1): Remounting filesystem read-only [ 1369.623100][T17726] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 1369.631558][T17726] ext4 filesystem being remounted at /580/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1369.656778][T10066] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1369.864785][T17738] netlink: 24 bytes leftover after parsing attributes in process `syz.1.14924'. [ 1370.157364][T28444] hid_parser_main: 33 callbacks suppressed [ 1370.157384][T28444] hid-generic 0000:0000:0000.0179: unknown main item tag 0x0 [ 1370.170878][T28444] hid-generic 0000:0000:0000.0179: unknown main item tag 0x0 [ 1370.178392][T28444] hid-generic 0000:0000:0000.0179: unknown main item tag 0x0 [ 1370.185968][T28444] hid-generic 0000:0000:0000.0179: unknown main item tag 0x0 [ 1370.193413][T28444] hid-generic 0000:0000:0000.0179: unknown main item tag 0x0 [ 1370.200919][T28444] hid-generic 0000:0000:0000.0179: unknown main item tag 0x0 [ 1370.208367][T28444] hid-generic 0000:0000:0000.0179: unknown main item tag 0x0 [ 1370.215788][T28444] hid-generic 0000:0000:0000.0179: unknown main item tag 0x0 [ 1370.223320][T28444] hid-generic 0000:0000:0000.0179: unknown main item tag 0x0 [ 1370.230870][T28444] hid-generic 0000:0000:0000.0179: unknown main item tag 0x0 [ 1370.288182][T17756] loop3: detected capacity change from 0 to 512 [ 1370.298736][T17756] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 1370.311045][T17756] EXT4-fs (loop3): orphan cleanup on readonly fs [ 1370.317619][T28444] hid-generic 0000:0000:0000.0179: hidraw0: HID v0.00 Device [syz0] on syz1 [ 1370.357174][T17756] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:517: comm syz.3.14929: Block bitmap for bg 0 marked uninitialized [ 1370.449975][T17756] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 1370.460233][T17756] EXT4-fs (loop3): 1 orphan inode deleted [ 1370.466960][T17756] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 1370.508005][T17761] loop1: detected capacity change from 0 to 512 [ 1370.515704][T17761] EXT4-fs: Ignoring removed orlov option [ 1370.534211][T17763] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14933'. [ 1370.536251][T11027] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1370.555554][T17761] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1370.582971][T17761] EXT4-fs (loop1): orphan cleanup on readonly fs [ 1370.602465][T17761] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.14932: bg 0: block 248: padding at end of block bitmap is not set [ 1370.618691][T17761] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.14932: Failed to acquire dquot type 1 [ 1370.644540][T17761] EXT4-fs (loop1): 1 truncate cleaned up [ 1370.671186][T17761] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1370.678444][T17767] lo speed is unknown, defaulting to 1000 [ 1370.695056][T17761] EXT4-fs: Ignoring removed orlov option [ 1370.700957][T17761] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1370.721894][T17761] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 1370.762001][T17774] netlink: 24 bytes leftover after parsing attributes in process `syz.3.14936'. [ 1370.768111][ T2707] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1370.779668][T17761] EXT4-fs error (device loop1): __ext4_remount:6736: comm syz.1.14932: Abort forced by user [ 1370.793789][T17767] lo speed is unknown, defaulting to 1000 [ 1370.797712][ T2707] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1370.816416][T17761] EXT4-fs (loop1): Remounting filesystem read-only [ 1370.823095][T17761] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 1370.847729][T17761] ext4 filesystem being remounted at /583/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1370.876984][ T2707] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1370.900897][ T2707] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1371.037070][T10066] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1371.466527][T17799] loop1: detected capacity change from 0 to 128 [ 1371.758557][T17801] lo speed is unknown, defaulting to 1000 [ 1371.764751][T17801] lo speed is unknown, defaulting to 1000 [ 1372.351541][T17808] lo speed is unknown, defaulting to 1000 [ 1372.384902][T17808] lo speed is unknown, defaulting to 1000 [ 1372.630009][T17816] loop1: detected capacity change from 0 to 512 [ 1372.653175][T17816] EXT4-fs: Ignoring removed orlov option [ 1372.707439][T17816] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1372.728348][T17816] EXT4-fs (loop1): orphan cleanup on readonly fs [ 1372.735730][T17816] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.14950: bg 0: block 248: padding at end of block bitmap is not set [ 1372.767930][T17816] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.14950: Failed to acquire dquot type 1 [ 1372.773126][T17821] pim6reg1: entered promiscuous mode [ 1372.785154][T17821] pim6reg1: entered allmulticast mode [ 1372.798610][T17816] EXT4-fs (loop1): 1 truncate cleaned up [ 1372.808005][T17816] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1372.853593][T17816] EXT4-fs: Ignoring removed orlov option [ 1372.888893][T17816] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1372.907061][ T29] kauditd_printk_skb: 1355 callbacks suppressed [ 1372.907076][ T29] audit: type=1400 audit(1754150810.143:185503): avc: denied { prog_load } for pid=17829 comm="syz.4.14956" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1372.933754][ T29] audit: type=1400 audit(1754150810.143:185504): avc: denied { bpf } for pid=17829 comm="syz.4.14956" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1372.955506][ T29] audit: type=1326 audit(1754150810.153:185505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17823 comm="syz.3.14953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fb89b305b27 code=0x7ffc0000 [ 1372.956925][T17816] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 1372.980135][ T29] audit: type=1326 audit(1754150810.153:185506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17823 comm="syz.3.14953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb89b2aad69 code=0x7ffc0000 [ 1373.013952][ T29] audit: type=1326 audit(1754150810.153:185507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17823 comm="syz.3.14953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7fb89b30eb69 code=0x7ffc0000 [ 1373.048742][ T29] audit: type=1326 audit(1754150810.153:185508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17823 comm="syz.3.14953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fb89b305b27 code=0x7ffc0000 [ 1373.073269][ T29] audit: type=1326 audit(1754150810.153:185509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17823 comm="syz.3.14953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb89b2aad69 code=0x7ffc0000 [ 1373.097835][ T29] audit: type=1326 audit(1754150810.153:185510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17823 comm="syz.3.14953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7fb89b30eb69 code=0x7ffc0000 [ 1373.123289][ T29] audit: type=1326 audit(1754150810.153:185511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17823 comm="syz.3.14953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fb89b305b27 code=0x7ffc0000 [ 1373.147990][ T29] audit: type=1326 audit(1754150810.153:185512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17823 comm="syz.3.14953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb89b2aad69 code=0x7ffc0000 [ 1373.165065][T17816] EXT4-fs error (device loop1): __ext4_remount:6736: comm syz.1.14950: Abort forced by user [ 1373.217702][T17843] netlink: 24 bytes leftover after parsing attributes in process `syz.0.14961'. [ 1373.229337][T17816] EXT4-fs (loop1): Remounting filesystem read-only [ 1373.236085][T17816] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 1373.244652][T17816] ext4 filesystem being remounted at /587/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1373.318140][T10066] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1373.435813][T17847] lo speed is unknown, defaulting to 1000 [ 1373.455221][T17847] lo speed is unknown, defaulting to 1000 [ 1374.205359][T17886] lo speed is unknown, defaulting to 1000 [ 1374.238173][T17886] lo speed is unknown, defaulting to 1000 [ 1374.848784][T17920] netlink: 24 bytes leftover after parsing attributes in process `syz.1.14991'. [ 1374.975074][T17921] syzkaller1: entered promiscuous mode [ 1374.980940][T17921] syzkaller1: entered allmulticast mode [ 1375.111456][T17929] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1375.158752][T17929] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1375.218241][T17929] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1375.258598][T17929] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1375.315189][ T12] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1375.327123][ T2700] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1375.340103][T17935] loop3: detected capacity change from 0 to 512 [ 1375.347573][ T2700] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1375.358852][ T2700] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1375.378124][T17935] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 1375.429128][T17935] loop3: detected capacity change from 0 to 1024 [ 1375.450313][T17935] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1375.520125][T17935] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 49 with max blocks 1 with error 28 [ 1375.533090][T17935] EXT4-fs (loop3): This should not happen!! Data will be lost [ 1375.533090][T17935] [ 1375.543212][T17935] EXT4-fs (loop3): Total free blocks count 0 [ 1375.549504][T17935] EXT4-fs (loop3): Free/Dirty block details [ 1375.555626][T17935] EXT4-fs (loop3): free_blocks=0 [ 1375.560971][T17935] EXT4-fs (loop3): dirty_blocks=0 [ 1375.566530][T17935] EXT4-fs (loop3): Block reservation details [ 1375.572795][T17935] EXT4-fs (loop3): i_reserved_data_blocks=0 [ 1375.613820][T11027] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1375.659138][T17962] loop3: detected capacity change from 0 to 512 [ 1375.669085][T17962] EXT4-fs: Ignoring removed mblk_io_submit option [ 1375.684106][ T2702] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1375.703422][T17962] EXT4-fs (loop3): failed to initialize system zone (-117) [ 1375.716635][T17962] EXT4-fs (loop3): mount failed [ 1375.739051][ T2702] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1375.752033][T17968] netlink: 24 bytes leftover after parsing attributes in process `syz.0.15004'. [ 1375.777534][T17948] lo speed is unknown, defaulting to 1000 [ 1375.793923][T17948] lo speed is unknown, defaulting to 1000 [ 1375.814484][ T2702] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1375.853003][T17974] netlink: 24 bytes leftover after parsing attributes in process `syz.3.15008'. [ 1375.870747][ T2702] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1375.969170][ T2702] bridge_slave_1: left allmulticast mode [ 1375.975014][ T2702] bridge_slave_1: left promiscuous mode [ 1375.980905][ T2702] bridge0: port 2(bridge_slave_1) entered disabled state [ 1375.997581][T17983] ================================================================== [ 1376.005680][T17983] BUG: KCSAN: data-race in hrtimer_interrupt / print_cpu [ 1376.012728][T17983] [ 1376.015054][T17983] read-write to 0xffff888237d1b254 of 4 bytes by interrupt on cpu 1: [ 1376.023485][T17983] hrtimer_interrupt+0x70/0x460 [ 1376.028542][T17983] __sysvec_apic_timer_interrupt+0x5c/0x1d0 [ 1376.034468][T17983] sysvec_apic_timer_interrupt+0x6f/0x80 [ 1376.040110][T17983] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1376.046104][T17983] kcsan_setup_watchpoint+0x415/0x430 [ 1376.051518][T17983] mod_memcg_lruvec_state+0x102/0x2c0 [ 1376.056907][T17983] __lruvec_stat_mod_folio+0xcd/0x120 [ 1376.062370][T17983] folio_add_new_anon_rmap+0x18e/0x260 [ 1376.067824][T17983] do_wp_page+0x144d/0x24e0 [ 1376.072325][T17983] handle_mm_fault+0x77d/0x2c20 [ 1376.077171][T17983] do_user_addr_fault+0x3fe/0x1090 [ 1376.082299][T17983] exc_page_fault+0x62/0xa0 [ 1376.086798][T17983] asm_exc_page_fault+0x26/0x30 [ 1376.091834][T17983] rep_movs_alternative+0x4a/0x90 [ 1376.097040][T17983] _copy_to_iter+0x2d9/0xe30 [ 1376.101623][T17983] copy_page_to_iter+0x18f/0x2d0 [ 1376.106642][T17983] filemap_read+0x530/0xa00 [ 1376.111169][T17983] generic_file_read_iter+0x79/0x330 [ 1376.116703][T17983] do_iter_readv_writev+0x421/0x4c0 [ 1376.121985][T17983] vfs_readv+0x1ea/0x690 [ 1376.126315][T17983] __x64_sys_preadv+0xfd/0x1c0 [ 1376.131113][T17983] x64_sys_call+0x282a/0x2ff0 [ 1376.135889][T17983] do_syscall_64+0xd2/0x200 [ 1376.140391][T17983] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1376.146365][T17983] [ 1376.148777][T17983] read to 0xffff888237d1b254 of 4 bytes by task 17983 on cpu 0: [ 1376.156569][T17983] print_cpu+0x359/0x680 [ 1376.160809][T17983] timer_list_show+0x107/0x170 [ 1376.165683][T17983] seq_read_iter+0x62a/0x940 [ 1376.170302][T17983] proc_reg_read_iter+0x110/0x180 [ 1376.175357][T17983] copy_splice_read+0x3c1/0x5f0 [ 1376.180228][T17983] splice_direct_to_actor+0x26f/0x680 [ 1376.185784][T17983] do_splice_direct+0xda/0x150 [ 1376.190645][T17983] do_sendfile+0x380/0x650 [ 1376.195344][T17983] __x64_sys_sendfile64+0x105/0x150 [ 1376.200546][T17983] x64_sys_call+0x2bb0/0x2ff0 [ 1376.205409][T17983] do_syscall_64+0xd2/0x200 [ 1376.209924][T17983] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1376.216017][T17983] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1376.218343][T17983] value changed: 0x001f8c87 -> 0x001f8c89 [ 1376.224050][T17983] [ 1376.226461][T17983] Reported by Kernel Concurrency Sanitizer on: [ 1376.232611][T17983] CPU: 0 UID: 0 PID: 17983 Comm: syz.3.15008 Tainted: G W 6.16.0-syzkaller-11105-ga6923c06a3b2 #0 PREEMPT(voluntary) [ 1376.246419][T17983] Tainted: [W]=WARN [ 1376.250234][T17983] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1376.260369][T17983] ================================================================== [ 1376.336520][ T2702] bridge_slave_0: left allmulticast mode [ 1376.342464][ T2702] bridge_slave_0: left promiscuous mode [ 1376.348682][ T2702] bridge0: port 1(bridge_slave_0) entered disabled state [ 1376.528771][ T2702] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1376.539016][ T2702] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1376.548756][ T2702] bond0 (unregistering): Released all slaves [ 1376.612076][ T2702] hsr_slave_0: left promiscuous mode [ 1376.618194][ T2702] hsr_slave_1: left promiscuous mode [ 1376.624187][ T2702] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1376.631891][ T2702] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1376.640001][ T2702] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1376.647751][ T2702] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1376.657536][ T2702] veth1_macvtap: left promiscuous mode [ 1376.663264][ T2702] veth0_macvtap: left promiscuous mode [ 1376.668970][ T2702] veth1_vlan: left promiscuous mode [ 1376.674718][ T2702] veth0_vlan: left promiscuous mode [ 1376.757706][ T2702] team0 (unregistering): Port device team_slave_1 removed [ 1376.787786][ T2702] team0 (unregistering): Port device team_slave_0 removed [ 1376.829540][ T2702] team0 (unregistering): Port device dummy0 removed [ 1377.288922][ T2702] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1377.338199][ T2702] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1377.388146][ T2702] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1377.448151][ T2702] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1377.500111][ T2702] bridge_slave_1: left allmulticast mode [ 1377.505871][ T2702] bridge_slave_1: left promiscuous mode [ 1377.511823][ T2702] bridge0: port 2(bridge_slave_1) entered disabled state [ 1377.519759][ T2702] bridge_slave_0: left allmulticast mode [ 1377.525807][ T2702] bridge_slave_0: left promiscuous mode [ 1377.531750][ T2702] bridge0: port 1(bridge_slave_0) entered disabled state [ 1377.618672][ T2702] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1377.629010][ T2702] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1377.639235][ T2702] bond0 (unregistering): Released all slaves [ 1377.668987][ T2702] bond0 (unregistering): Released all slaves [ 1377.739584][ T2702] tipc: Disabling bearer [ 1377.744871][ T2702] tipc: Left network mode [ 1377.762033][ T2702] hsr_slave_0: left promiscuous mode [ 1377.768338][ T2702] hsr_slave_1: left promiscuous mode [ 1377.774165][ T2702] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1377.781645][ T2702] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1377.789603][ T2702] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1377.797074][ T2702] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1377.807855][ T2702] veth1_macvtap: left promiscuous mode [ 1377.813432][ T2702] veth0_macvtap: left promiscuous mode [ 1377.819605][ T2702] veth1_vlan: left promiscuous mode [ 1377.824956][ T2702] veth0_vlan: left promiscuous mode [ 1377.883983][ T2702] team0 (unregistering): Port device team_slave_1 removed [ 1377.895799][ T2702] team0 (unregistering): Port device team_slave_0 removed [ 1379.590072][ T2707] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1379.648055][ T2707] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1379.678246][ T2707] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1379.727788][ T2707] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1379.790372][ T2707] bridge_slave_1: left allmulticast mode [ 1379.796140][ T2707] bridge_slave_1: left promiscuous mode [ 1379.802196][ T2707] bridge0: port 2(bridge_slave_1) entered disabled state [ 1379.810354][ T2707] bridge_slave_0: left allmulticast mode [ 1379.816103][ T2707] bridge_slave_0: left promiscuous mode [ 1379.821960][ T2707] bridge0: port 1(bridge_slave_0) entered disabled state [ 1379.989078][ T2707] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1379.999456][ T2707] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1380.009315][ T2707] bond0 (unregistering): Released all slaves [ 1380.091692][ T2707] hsr_slave_0: left promiscuous mode [ 1380.097351][ T2707] hsr_slave_1: left promiscuous mode [ 1380.103368][ T2707] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1380.110964][ T2707] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1380.118693][ T2707] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1380.126381][ T2707] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1380.136027][ T2707] veth1_macvtap: left promiscuous mode [ 1380.141752][ T2707] veth0_macvtap: left promiscuous mode [ 1380.147319][ T2707] veth1_vlan: left promiscuous mode [ 1380.152830][ T2707] veth0_vlan: left promiscuous mode [ 1380.202141][ T2707] team0 (unregistering): Port device team_slave_1 removed [ 1380.212285][ T2707] team0 (unregistering): Port device team_slave_0 removed [ 1380.235693][ T2707] team0 (unregistering): Port device dummy0 removed