last executing test programs: 1.873013808s ago: executing program 3 (id=929): sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x800) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x2}) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xb, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x73cea2d47785b264, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r5}, 0x18) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r6, &(0x7f0000001280)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000001400)=ANY=[@ANYBLOB="280000002d000100fcffffff0000000008000000", @ANYRES32], 0x28}], 0x1, 0x0, 0x0, 0x4}, 0x0) pread64(r3, &(0x7f0000000040)=""/46, 0x2e, 0x2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @random="71e2b87f9b2d"}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r2, 0x4058534c, 0x0) r8 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SG_BLKTRACETEARDOWN(r8, 0x1276, 0x0) preadv(r8, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) 1.5990919s ago: executing program 1 (id=933): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1b0000001900000000000080200000001108"], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r1, &(0x7f00000009c0)={&(0x7f0000000580)={0x2, 0x4e20, @broadcast}, 0x10, &(0x7f0000000840)=[{&(0x7f00000005c0)=""/69, 0x45}, {&(0x7f0000000640)=""/38, 0x26}, {&(0x7f0000000680)=""/22, 0x16}, {&(0x7f00000006c0)=""/35, 0x5e}, {&(0x7f0000000700)=""/47, 0x2f}, {&(0x7f0000000740)=""/196, 0xc4}], 0x6, &(0x7f0000000e00)=[@fadd={0x58, 0x114, 0x6, {{0xffffffff, 0x6}, &(0x7f00000008c0)=0xa2, &(0x7f0000000900)=0x10001, 0x532, 0x8, 0x2, 0x8000000000000000, 0x6, 0x130}}, @rdma_args={0x48, 0x114, 0x1, {{0x8, 0xd}, {&(0x7f00000003c0)=""/5, 0x5}, &(0x7f0000000b00)=[{&(0x7f0000000a00)=""/41, 0x29}, {&(0x7f0000000a40)=""/140, 0x8c}], 0x2, 0x62, 0xfffffffffffffffc}}], 0xa0, 0x48010}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB="070000000400000008000000d901000000000000", @ANYRES32, @ANYBLOB="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", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000008000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r3}, 0x18) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000000)=@req3={0x410000, 0x100000001, 0x210000, 0x1, 0xa, 0x0, 0xffffffff}, 0x1c) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x1}, 0x8) sendto$inet6(r5, &(0x7f0000000b80)="be", 0x1, 0x4008014, &(0x7f0000000000)={0xa, 0x4e22, 0x1, @dev={0xfe, 0x80, '\x00', 0x23}, 0x7}, 0x1c) close(r4) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$packet(0x11, 0x2, 0x300) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r8}, 0x10) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'geneve1\x00'}) perf_event_open(&(0x7f0000000500)={0x4, 0x80, 0x67, 0x8, 0x2, 0xf, 0x0, 0x7dbb, 0xc9300, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x8, 0x1, @perf_bp={&(0x7f00000004c0), 0xc}, 0x1000, 0x40, 0x66, 0x8, 0x8, 0x7, 0x1b57, 0x0, 0x4, 0x0, 0x9}, 0x0, 0xd, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write(r10, &(0x7f0000000000)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cecb94b46fe0000000a00020025", 0xffffff0c) dup2(0xffffffffffffffff, 0xffffffffffffffff) pipe(&(0x7f0000000500)={0xffffffffffffffff}) splice(r11, 0x0, r10, 0x0, 0xffffffffffff8000, 0x0) close_range(r9, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r6}, 0x10) 1.519777377s ago: executing program 0 (id=936): r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000240)='4', 0x1}], 0x1) 1.450287953s ago: executing program 0 (id=938): sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) r1 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x800) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x2}) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xb, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x73cea2d47785b264, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r4}, 0x18) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r5, &(0x7f0000001280)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000001400)=ANY=[@ANYBLOB="280000002d000100fcffffff0000000008000000", @ANYRES32], 0x28}], 0x1, 0x0, 0x0, 0x4}, 0x0) pread64(r2, &(0x7f0000000040)=""/46, 0x2e, 0x2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @random="71e2b87f9b2d"}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, 0x0) ioctl$SG_BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) 1.277487087s ago: executing program 4 (id=939): syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f00000001c0)='./file3\x00', 0x88, &(0x7f0000000740)={[{@nogrpid}, {@min_batch_time}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x64}}, {@norecovery}, {@nodiscard}, {@grpquota}]}, 0x6, 0x42f, &(0x7f0000000940)="$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") prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000ff01000000000000002000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c00000002"], 0x0, 0x56, 0x0, 0x3}, 0x28) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2240, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x1}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x9, 0x4, 0x7ffc0002}]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xe, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x38, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x4) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r1}, &(0x7f0000000040), &(0x7f0000000280)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10) bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000100)=@base={0x18, 0x4, 0x9, 0x0, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4002, 0x5}, 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x18, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pwrite64(r0, &(0x7f0000000680)="f266dc2a9c868ab9769960957f5c01466f58bbc07714ce8cabec23ac0a99de6cfc595e4fbc9841bc60361c326bd50f6f6819aaa880f791ed441e78ade424511eaedb1cb3b4edc5ba28cae66907629e43e54a8f2c029a25ba744ceb221bb5a2ac74cedcd1f942e86c1f1cf186c64f4659a28f1b48b5ba0c3b4d3e4b204f9c8fe31ba0461e", 0x84, 0x10) 1.276400416s ago: executing program 1 (id=949): sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) r1 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x800) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x2}) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xb, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x73cea2d47785b264, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r4}, 0x18) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r5, &(0x7f0000001280)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000001400)=ANY=[@ANYBLOB="280000002d000100fcffffff0000000008000000", @ANYRES32], 0x28}], 0x1, 0x0, 0x0, 0x4}, 0x0) pread64(r2, &(0x7f0000000040)=""/46, 0x2e, 0x2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @random="71e2b87f9b2d"}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, 0x0) r7 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r7, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) 1.215975961s ago: executing program 0 (id=940): syz_mount_image$vfat(&(0x7f0000001200), &(0x7f0000001240)='./file0\x00', 0x2004000, &(0x7f0000000040)=ANY=[@ANYRES64=0x0], 0xfe, 0x1227, &(0x7f00000024c0)="$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") socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f00000000c0)='netlink_extack\x00'}, 0x11) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0) write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0xfe59) rmdir(&(0x7f0000000100)='./control\x00') 1.133224478s ago: executing program 4 (id=941): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r0}, 0x0, &(0x7f0000000280)='%pS \x00'}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000780)='sys_enter\x00', r1}, 0x18) write$selinux_load(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfe59) mkdir(&(0x7f0000000140)='./control\x00', 0x8) rmdir(&(0x7f0000000100)='./control\x00') 1.100383431s ago: executing program 4 (id=942): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0xe, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x90, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x60, 0x2, {{}, [@TCA_NETEM_LOSS={0x30, 0x2, 0x0, 0x1, [@NETEM_LOSS_GE={0x14}, @NETEM_LOSS_GI={0x18}]}, @TCA_NETEM_RATE={0x14, 0xd}]}}}]}, 0x90}}, 0x0) 1.092460732s ago: executing program 0 (id=943): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0xe, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c}}]}, 0x4c}}, 0x0) 1.079807043s ago: executing program 4 (id=944): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)="2e00000038000511d25a80698c63940d0124fc602f6e35400c000200001ec00037153e370a00018025581d00d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x39c}, 0x0) 1.021129918s ago: executing program 4 (id=945): sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x800) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x2}) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xb, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x73cea2d47785b264, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r5}, 0x18) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r6, &(0x7f0000001280)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000001400)=ANY=[@ANYBLOB="280000002d000100fcffffff0000000008000000", @ANYRES32], 0x28}], 0x1, 0x0, 0x0, 0x4}, 0x0) pread64(r3, &(0x7f0000000040)=""/46, 0x2e, 0x2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @random="71e2b87f9b2d"}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r2, 0x4058534c, 0x0) r8 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SG_BLKTRACETEARDOWN(r8, 0x1276, 0x0) preadv(r8, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) 1.020274828s ago: executing program 0 (id=946): syz_mount_image$vfat(&(0x7f0000001200), &(0x7f0000001240)='./file0\x00', 0x2004000, &(0x7f0000000040)=ANY=[@ANYRES64=0x0], 0xfe, 0x1227, &(0x7f00000024c0)="$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") socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000a0db000000000000000000850000000e000000d50000002a00c50095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0) write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0xfe59) rmdir(&(0x7f0000000100)='./control\x00') 910.948196ms ago: executing program 3 (id=947): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000180000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000f0850000002d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x47, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000002c0), 0x4) syz_read_part_table(0x593, &(0x7f00000005c0)="$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") 858.391921ms ago: executing program 0 (id=948): r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001140)=[{&(0x7f0000000fc0)=""/83, 0x53}, {&(0x7f0000001040)=""/137, 0x89}, {&(0x7f0000001100)=""/23, 0x17}], 0x3, &(0x7f0000001180)=""/61, 0x3d}, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) socket(0x2, 0x80805, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) openat$autofs(0xffffffffffffff9c, 0x0, 0xc02, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc0004}]}) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x800002, &(0x7f0000000000)={[{@noblock_validity}, {@dioread_nolock}, {@errors_remount}, {@minixdf}, {@jqfmt_vfsv0}, {@usrjquota, 0x2e}], [], 0x22}, 0x84, 0x464, &(0x7f0000000ac0)="$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") r2 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="d2ba2a4973", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000660000000000"], 0x0, 0x7ff}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) r5 = socket$pppl2tp(0x18, 0x1, 0x1) r6 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r5, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r6, {0x2, 0x0, @multicast2}, 0x2, 0x0, 0x1}}, 0x2e) r7 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r7, &(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}, 0x2, 0x2}}, 0x26) close_range(r6, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2000007d, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r9}, 0x10) r10 = socket(0x10, 0x3, 0x4) close_range(r3, r1, 0x0) fchown(r10, 0x0, 0x0) 673.980555ms ago: executing program 3 (id=950): r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x2000000b, 0x80, &(0x7f0000000240)={0x3, 0x0, 0xfffa, 0x4360}, 0x8, 0x6, 0x7d, 0x0, 0x1, 0x101, 0x0}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$USBDEVFS_REAPURBNDELAY(r0, 0x4008550d, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000180000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000f0850000002d00000095"], &(0x7f0000000300)='GPL\x00', 0x1ff, 0x0, 0x0, 0x40f00, 0x47, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r2 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SCSI_IOCTL_GET_PCI(r2, 0x5393, &(0x7f0000000000)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) fgetxattr(r3, &(0x7f00000004c0)=@known='trusted.overlay.redirect\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000002c0), 0x4) syz_read_part_table(0x593, &(0x7f00000005c0)="$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") 611.89314ms ago: executing program 2 (id=951): sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) r1 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x800) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x2}) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xb, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x73cea2d47785b264, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r4}, 0x18) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r5, &(0x7f0000001280)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000001400)=ANY=[@ANYBLOB="280000002d000100fcffffff0000000008000000", @ANYRES32], 0x28}], 0x1, 0x0, 0x0, 0x4}, 0x0) pread64(r2, &(0x7f0000000040)=""/46, 0x2e, 0x2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @random="71e2b87f9b2d"}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, 0x0) ioctl$SG_BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) 476.824862ms ago: executing program 2 (id=952): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x844}, 0x40) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000000d0a010800000000000000200a0000010900020073797a31000000000900010073797a31000000001c0003801800008008000340000000020c000a800500010021000000"], 0x48}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, &(0x7f0000000640)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newtfilter={0x24, 0x11, 0x1, 0x691522eb, 0x0, {0x0, 0x0, 0x74, r4, {0x10, 0x4}, {}, {0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000700000045000000a000020095"], &(0x7f0000000080)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000003c0)='kfree\x00', r5}, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000380)=ANY=[@ANYBLOB="2c000e82", @ANYRES16=r2, @ANYBLOB="0100d0000000fbdbdf252100000018000180140002007665746831"], 0x2c}, 0x1, 0x0, 0x0, 0x840}, 0x4008800) syz_genetlink_get_family_id$nl80211(0x0, r1) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a0000000100000008"], 0x48) r6 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="080000000000cc3c2877b0df030000000060e613"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41002, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r7}, 0x18) writev(r6, &(0x7f0000000940)=[{&(0x7f0000000200)='\f7', 0x2}, {&(0x7f0000000100)='0', 0x1}, {&(0x7f00000007c0)="f8079ee78c9711b36402abae104bad8870fe4f0df779249a3b835b1dfa8185cf76e13098a89383752048ec"}, {&(0x7f0000000800)="50563ab467b22c4008f83b8961076a"}], 0x10000000000002ff) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) clock_nanosleep(0x6, 0x0, &(0x7f0000000000)={r8, r9+10000000}, 0x0) 410.405427ms ago: executing program 3 (id=953): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r0}, 0x0, &(0x7f0000000280)='%pS \x00'}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000780)='sys_enter\x00', r1}, 0x18) write$selinux_load(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfe59) mkdir(&(0x7f0000000140)='./control\x00', 0x8) rmdir(&(0x7f0000000100)='./control\x00') 408.843127ms ago: executing program 2 (id=954): syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f00000001c0)='./file3\x00', 0x88, &(0x7f0000000740)={[{@nogrpid}, {@min_batch_time}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x64}}, {@norecovery}, {@nodiscard}, {@grpquota}]}, 0x6, 0x42f, &(0x7f0000000940)="$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") prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000ff01000000000000002000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c00000002"], 0x0, 0x56, 0x0, 0x3}, 0x28) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2240, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x1}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x9, 0x4, 0x7ffc0002}]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xe, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x38, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x4) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r1}, &(0x7f0000000040), &(0x7f0000000280)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10) bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000100)=@base={0x18, 0x4, 0x9, 0x0, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4002, 0x5}, 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x18, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pwrite64(r0, &(0x7f0000000680)="f266dc2a9c868ab9769960957f5c01466f58bbc07714ce8cabec23ac0a99de6cfc595e4fbc9841bc60361c326bd50f6f6819aaa880f791ed441e78ade424511eaedb1cb3b4edc5ba28cae66907629e43e54a8f2c029a25ba744ceb221bb5a2ac74cedcd1f942e86c1f1cf186c64f4659a28f1b48b5ba0c3b4d3e4b204f9c8fe31ba0461e", 0x84, 0x10) 326.519414ms ago: executing program 3 (id=955): syz_mount_image$vfat(&(0x7f0000001200), &(0x7f0000001240)='./file0\x00', 0x2004000, &(0x7f0000000040)=ANY=[@ANYRES64=0x0], 0xfe, 0x1227, &(0x7f00000024c0)="$eJzs3M9rHGUYB/DHTdrUxPxQa7WC9MVe9DIkOXhRkCApSBeUthFaQZiajS4Zd0NmCayI0ZNXL/4BXsWjN0G86SUe/Bu85eLRgzrSnbY2djVotRPD53PZh33nC8+7s7zwLvvO/gsfv7O5UWYb+SBaD7wYra2IyV9SpGjFLR/Es89/8+1Tl69eu7jSbq9eSunCypWl51JKc+e+ev29z5/+ejDz2hdzX07F3sIb+z8u/7B3Zu/s/q9X3u6WqVumXn+Q8nS93x/k14tOWu+Wm1lKrxadvOykbq/sbB8Y3yj6W1vDlPfWZ6e3tjtlmfLeMG12hmnQT4PtYcrfyru9lGVZmp0O7sXaZz9VVRVRVSfiZFRVVT0Y09GKh2I25mI+FuLheCQejdPxWJyJx+OJODu6qum+AQAAAAAAAAAAAAAAAAAA4HgZd/5/5q7z/59EjDv/f67h5gEAAAAAAAAAAAAAAAAAAOCYuHz12sWVdnv1UkqnIoqPdtZ21urXenxlI7pRRCcWYz5+jtHp/1pdn4z26mIaWYgPi92b+d2dtYmD+aXR4wTuyl94ub26VOfTwfxUTN+ZX475OD0+v/yH/PlR/lQ8c/6OfBbz8f2b0Y8i1uNG9vf8+0spvfRK+3b+u7167usN3hcAAAD4N2XptrH79yz7s/E6f9jvAzf214tj9/eT8eRks3Mnohy+u5kXRWe78eJWR/U7uxFxRBr7x0UrIo5AG39RnDj0mpkGGvt0JuIe4hMHvkhH4nP+PxaHrRwT/+m6xP1x86ZPNd0HAAAAAAAAAAAAf8/9+Dth03MEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4Dd24FgAAAAAQJi/dRodGwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMBXAQAA//+siMjP") socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f00000000c0)='netlink_extack\x00'}, 0x11) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0) write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0xfe59) rmdir(&(0x7f0000000100)='./control\x00') 263.140119ms ago: executing program 2 (id=956): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0xe, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x90, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x60, 0x2, {{}, [@TCA_NETEM_LOSS={0x30, 0x2, 0x0, 0x1, [@NETEM_LOSS_GE={0x14}, @NETEM_LOSS_GI={0x18}]}, @TCA_NETEM_RATE={0x14, 0xd}]}}}]}, 0x90}}, 0x0) 248.12208ms ago: executing program 1 (id=957): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, 0x0, 0x0) 184.781305ms ago: executing program 1 (id=958): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x5, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r4}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r5}, 0x10) sendmsg$TIPC_CMD_GET_MAX_PORTS(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x1c}, 0x1c}, 0x1, 0x0, 0x0, 0xc001}, 0x0) recvmsg$unix(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000006c0)=""/171, 0xab}, {&(0x7f0000000380)=""/168}], 0x35}, 0x0) r6 = socket(0x40000000015, 0x5, 0x0) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001080)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000c5000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7020000140000fbb703000000e31f008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000c00)='sys_enter\x00', r8}, 0x10) pivot_root(0x0, 0x0) connect$inet(r6, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r6, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f00006dbffc), 0x4) ioctl$AUTOFS_IOC_PROTOSUBVER(0xffffffffffffffff, 0x80049367, &(0x7f0000000280)) bind$inet(r6, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) bpf$PROG_LOAD(0x5, 0x0, 0x0) r9 = socket$inet_smc(0x2b, 0x1, 0x0) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000340)='kfree\x00', r10, 0x0, 0x200000000}, 0x18) setsockopt$IP_VS_SO_SET_STARTDAEMON(r9, 0x0, 0x48b, &(0x7f0000000000)={0x1, 'veth0_virt_wifi\x00', 0x2000000}, 0x18) sendmsg$xdp(r6, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) 184.118215ms ago: executing program 3 (id=959): sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x800) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x2}) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xb, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x73cea2d47785b264, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r5}, 0x18) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r6, &(0x7f0000001280)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000001400)=ANY=[@ANYBLOB="280000002d000100fcffffff0000000008000000", @ANYRES32], 0x28}], 0x1, 0x0, 0x0, 0x4}, 0x0) pread64(r3, &(0x7f0000000040)=""/46, 0x2e, 0x2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @random="71e2b87f9b2d"}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r2, 0x4058534c, 0x0) r8 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SG_BLKTRACETEARDOWN(r8, 0x1276, 0x0) preadv(r8, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) 140.129799ms ago: executing program 2 (id=960): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000004c0)='./file1\x00', 0x3000046, &(0x7f00000005c0)={[{@dioread_nolock}, {@data_err_abort}, {@jqfmt_vfsold}, {@delalloc}, {@data_err_ignore}, {@discard}, {@data_err_ignore}, {@grpquota}, {@noblock_validity}, {@user_xattr}, {@block_validity}, {@errors_remount}]}, 0x1, 0x553, &(0x7f0000001080)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x40) pwritev2(r0, &(0x7f0000000100), 0x0, 0x5405, 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f00000000c0)={0x0, 0x8000000003ff, 0x5, 0x6, 0x1e}) 83.536243ms ago: executing program 1 (id=961): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000780)='sys_enter\x00', r1}, 0x18) mkdir(&(0x7f0000000140)='./control\x00', 0x8) rmdir(&(0x7f0000000100)='./control\x00') 15.731119ms ago: executing program 1 (id=962): sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) r1 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x800) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x2}) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xb, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x73cea2d47785b264, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r4}, 0x18) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r5, &(0x7f0000001280)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000001400)=ANY=[@ANYBLOB="280000002d000100fcffffff0000000008000000", @ANYRES32], 0x28}], 0x1, 0x0, 0x0, 0x4}, 0x0) pread64(r2, &(0x7f0000000040)=""/46, 0x2e, 0x2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @random="71e2b87f9b2d"}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, 0x0) ioctl$SG_BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) 14.890209ms ago: executing program 4 (id=963): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000840)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="100000002d000b02d25a806f8c6394f9101a04000a7401", 0x17}], 0x1}, 0x880) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="93430000520033d487", @ANYRES32, @ANYRES8=r0], 0xfe33) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="01000000040000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000780)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r1 = memfd_create(0x0, 0x0) fallocate(r1, 0x0, 0x400000002000000, 0x2) socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, 0x0, 0x4000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f00000033c0)={0x53, 0x0, 0x0, 0x6b, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000000), &(0x7f0000002240)=""/4103, 0x0, 0x0, 0x0, 0x0}) 0s ago: executing program 2 (id=964): r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x2000000b, 0x80, &(0x7f0000000240)={0x3, 0x0, 0xfffa, 0x4360}, 0x8, 0x6, 0x7d, 0x0, 0x1, 0x101, 0x0}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$USBDEVFS_REAPURBNDELAY(r0, 0x4008550d, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000180000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000f0850000002d00000095"], &(0x7f0000000300)='GPL\x00', 0x1ff, 0x0, 0x0, 0x40f00, 0x47, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r2 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SCSI_IOCTL_GET_PCI(r2, 0x5393, &(0x7f0000000000)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) fgetxattr(r3, &(0x7f00000004c0)=@known='trusted.overlay.redirect\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000002c0), 0x4) syz_read_part_table(0x593, &(0x7f00000005c0)="$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") kernel console output (not intermixed with test programs): 042c119, mo2=0002] [ 70.618774][ T4764] EXT4-fs error (device loop4): ext4_iget_extra_inode:5104: inode #15: comm syz.4.467: corrupted in-inode xattr: e_value size too large [ 70.634701][ T4764] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.467: couldn't read orphan inode 15 (err -117) [ 70.653174][ T4760] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4760 comm=syz.3.466 [ 70.781312][ T4773] loop3: detected capacity change from 0 to 512 [ 70.789110][ T4773] EXT4-fs: Ignoring removed mblk_io_submit option [ 70.801994][ T4773] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 70.817335][ T4773] EXT4-fs (loop3): 1 truncate cleaned up [ 70.877591][ T4776] loop4: detected capacity change from 0 to 8192 [ 70.935098][ T4776] SELinux: ebitmap: truncated map [ 70.949003][ T4776] SELinux: failed to load policy [ 71.230206][ T4786] FAULT_INJECTION: forcing a failure. [ 71.230206][ T4786] name failslab, interval 1, probability 0, space 0, times 0 [ 71.243513][ T4786] CPU: 1 UID: 0 PID: 4786 Comm: syz.1.475 Not tainted 6.17.0-rc1-syzkaller #0 PREEMPT(voluntary) [ 71.243547][ T4786] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 71.243626][ T4786] Call Trace: [ 71.243634][ T4786] [ 71.243642][ T4786] __dump_stack+0x1d/0x30 [ 71.243727][ T4786] dump_stack_lvl+0xe8/0x140 [ 71.243759][ T4786] dump_stack+0x15/0x1b [ 71.243780][ T4786] should_fail_ex+0x265/0x280 [ 71.243868][ T4786] should_failslab+0x8c/0xb0 [ 71.243895][ T4786] __kmalloc_noprof+0xa5/0x3e0 [ 71.243923][ T4786] ? crypto_gcm_setkey+0xd2/0x2c0 [ 71.243951][ T4786] crypto_gcm_setkey+0xd2/0x2c0 [ 71.244014][ T4786] crypto_aead_setkey+0xe1/0x150 [ 71.244051][ T4786] tls_set_sw_offload+0x6fd/0xba0 [ 71.244080][ T4786] tls_setsockopt+0xa02/0xce0 [ 71.244122][ T4786] sock_common_setsockopt+0x69/0x80 [ 71.244181][ T4786] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 71.244220][ T4786] __sys_setsockopt+0x184/0x200 [ 71.244248][ T4786] __x64_sys_setsockopt+0x64/0x80 [ 71.244274][ T4786] x64_sys_call+0x20ec/0x2ff0 [ 71.244420][ T4786] do_syscall_64+0xd2/0x200 [ 71.244456][ T4786] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 71.244487][ T4786] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 71.244517][ T4786] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 71.244541][ T4786] RIP: 0033:0x7fb60199ebe9 [ 71.244611][ T4786] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 71.244633][ T4786] RSP: 002b:00007fb6003ff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 71.244654][ T4786] RAX: ffffffffffffffda RBX: 00007fb601bc5fa0 RCX: 00007fb60199ebe9 [ 71.244669][ T4786] RDX: 0000000000000002 RSI: 000000000000011a RDI: 0000000000000003 [ 71.244716][ T4786] RBP: 00007fb6003ff090 R08: 0000000000000038 R09: 0000000000000000 [ 71.244730][ T4786] R10: 0000200000000280 R11: 0000000000000246 R12: 0000000000000001 [ 71.244751][ T4786] R13: 00007fb601bc6038 R14: 00007fb601bc5fa0 R15: 00007ffd81b3ff38 [ 71.244773][ T4786] [ 71.474628][ T4793] netlink: 4 bytes leftover after parsing attributes in process `syz.0.476'. [ 71.562139][ T4795] loop2: detected capacity change from 0 to 8192 [ 71.609854][ T4797] netlink: 24 bytes leftover after parsing attributes in process `syz.1.479'. [ 71.630518][ T4793] pim6reg1: entered allmulticast mode [ 71.647355][ T3311] EXT4-fs unmount: 73 callbacks suppressed [ 71.647373][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.751627][ T4806] netlink: 12 bytes leftover after parsing attributes in process `syz.3.481'. [ 71.820653][ T4810] loop4: detected capacity change from 0 to 8192 [ 71.852805][ T4813] loop2: detected capacity change from 0 to 512 [ 71.859339][ T29] kauditd_printk_skb: 541 callbacks suppressed [ 71.859391][ T29] audit: type=1326 audit(1754949891.196:8086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4807 comm="syz.2.483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7cff70ebe9 code=0x7ffc0000 [ 71.889120][ T29] audit: type=1326 audit(1754949891.196:8087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4807 comm="syz.2.483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f7cff70ebe9 code=0x7ffc0000 [ 71.891436][ T4814] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4814 comm=syz.1.479 [ 71.913210][ T29] audit: type=1326 audit(1754949891.196:8088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4807 comm="syz.2.483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f7cff70ec23 code=0x7ffc0000 [ 71.949069][ T29] audit: type=1326 audit(1754949891.206:8089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4807 comm="syz.2.483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f7cff70d69f code=0x7ffc0000 [ 71.972469][ T29] audit: type=1326 audit(1754949891.206:8090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4807 comm="syz.2.483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f7cff70ec77 code=0x7ffc0000 [ 71.989981][ T4810] SELinux: ebitmap: truncated map [ 71.995738][ T29] audit: type=1326 audit(1754949891.206:8091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4807 comm="syz.2.483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7cff70d550 code=0x7ffc0000 [ 72.013314][ T4810] SELinux: failed to load policy [ 72.024184][ T29] audit: type=1326 audit(1754949891.206:8092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4807 comm="syz.2.483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f7cff70e7eb code=0x7ffc0000 [ 72.075943][ T29] audit: type=1326 audit(1754949891.406:8093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4807 comm="syz.2.483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f7cff70d84a code=0x7ffc0000 [ 72.099242][ T29] audit: type=1326 audit(1754949891.406:8094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4807 comm="syz.2.483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f7cff70d84a code=0x7ffc0000 [ 72.122859][ T29] audit: type=1326 audit(1754949891.406:8095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4807 comm="syz.2.483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f7cff70d457 code=0x7ffc0000 [ 72.131762][ T4813] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 72.160521][ T4813] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.483: invalid indirect mapped block 2683928664 (level 1) [ 72.188824][ T4813] EXT4-fs (loop2): Remounting filesystem read-only [ 72.205569][ T4813] EXT4-fs (loop2): 1 truncate cleaned up [ 72.300118][ T4813] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.340482][ T4823] loop3: detected capacity change from 0 to 512 [ 72.360006][ T4823] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 72.387848][ T4823] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.486: invalid indirect mapped block 2683928664 (level 1) [ 72.404518][ T4823] EXT4-fs (loop3): Remounting filesystem read-only [ 72.415572][ T4823] EXT4-fs (loop3): 1 truncate cleaned up [ 72.421939][ T4823] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.514618][ T4838] loop4: detected capacity change from 0 to 512 [ 72.521701][ T4838] EXT4-fs: Ignoring removed mblk_io_submit option [ 72.529490][ T4838] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 72.546009][ T4838] EXT4-fs (loop4): 1 truncate cleaned up [ 72.552401][ T4838] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.593442][ T4843] FAULT_INJECTION: forcing a failure. [ 72.593442][ T4843] name failslab, interval 1, probability 0, space 0, times 0 [ 72.606229][ T4843] CPU: 0 UID: 0 PID: 4843 Comm: syz.0.493 Not tainted 6.17.0-rc1-syzkaller #0 PREEMPT(voluntary) [ 72.606262][ T4843] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 72.606275][ T4843] Call Trace: [ 72.606282][ T4843] [ 72.606290][ T4843] __dump_stack+0x1d/0x30 [ 72.606318][ T4843] dump_stack_lvl+0xe8/0x140 [ 72.606342][ T4843] dump_stack+0x15/0x1b [ 72.606414][ T4843] should_fail_ex+0x265/0x280 [ 72.606442][ T4843] should_failslab+0x8c/0xb0 [ 72.606475][ T4843] kmem_cache_alloc_node_noprof+0x57/0x320 [ 72.606514][ T4843] ? dup_task_struct+0x70/0x6a0 [ 72.606595][ T4843] dup_task_struct+0x70/0x6a0 [ 72.606625][ T4843] ? _parse_integer+0x27/0x40 [ 72.606701][ T4843] copy_process+0x399/0x2000 [ 72.606726][ T4843] ? kstrtouint+0x76/0xc0 [ 72.606745][ T4843] ? kstrtouint_from_user+0x9f/0xf0 [ 72.606767][ T4843] ? __rcu_read_unlock+0x4f/0x70 [ 72.606871][ T4843] kernel_clone+0x16c/0x5c0 [ 72.606966][ T4843] ? vfs_write+0x7e8/0x960 [ 72.606990][ T4843] __x64_sys_clone+0xe6/0x120 [ 72.607035][ T4843] x64_sys_call+0x119c/0x2ff0 [ 72.607063][ T4843] do_syscall_64+0xd2/0x200 [ 72.607133][ T4843] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 72.607157][ T4843] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 72.607184][ T4843] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 72.607281][ T4843] RIP: 0033:0x7fe066e3ebe9 [ 72.607299][ T4843] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 72.607386][ T4843] RSP: 002b:00007fe065885fe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 72.607405][ T4843] RAX: ffffffffffffffda RBX: 00007fe067066090 RCX: 00007fe066e3ebe9 [ 72.607417][ T4843] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000060000400 [ 72.607431][ T4843] RBP: 00007fe065886090 R08: 0000000000000000 R09: 0000000000000000 [ 72.607447][ T4843] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 72.607462][ T4843] R13: 00007fe067066128 R14: 00007fe067066090 R15: 00007fffb805f748 [ 72.607487][ T4843] [ 72.846540][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.248743][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.398725][ T4851] loop0: detected capacity change from 0 to 8192 [ 73.410258][ T4854] netlink: 24 bytes leftover after parsing attributes in process `syz.1.498'. [ 73.493798][ T4851] SELinux: ebitmap: truncated map [ 73.514901][ T4851] SELinux: failed to load policy [ 73.533552][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.644616][ T4858] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4858 comm=syz.1.498 [ 73.658027][ T4867] netlink: 4 bytes leftover after parsing attributes in process `syz.4.499'. [ 73.735907][ T4867] pim6reg1: entered allmulticast mode [ 73.788122][ T4876] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.836762][ T4877] program syz.1.505 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 73.854854][ T4877] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 73.873874][ T4876] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.902151][ T4883] loop2: detected capacity change from 0 to 512 [ 73.933468][ T4883] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 73.947977][ T4883] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.506: invalid indirect mapped block 2683928664 (level 1) [ 73.980968][ T4883] EXT4-fs (loop2): Remounting filesystem read-only [ 73.987887][ T4883] EXT4-fs (loop2): 1 truncate cleaned up [ 74.003422][ T4883] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.017789][ T4888] loop3: detected capacity change from 0 to 512 [ 74.025865][ T4876] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.049655][ T4888] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 74.064576][ T4888] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.508: invalid indirect mapped block 2683928664 (level 1) [ 74.090715][ T4888] EXT4-fs (loop3): Remounting filesystem read-only [ 74.105176][ T4888] EXT4-fs (loop3): 1 truncate cleaned up [ 74.113095][ T4876] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.131247][ T4888] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.224195][ T1888] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.237340][ T1888] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.252764][ T2645] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.266932][ T37] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.307193][ T4895] loop1: detected capacity change from 0 to 512 [ 74.326025][ T4895] EXT4-fs: Ignoring removed mblk_io_submit option [ 74.332953][ T4895] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 74.348052][ T4895] EXT4-fs (loop1): 1 truncate cleaned up [ 74.354548][ T4895] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.538601][ T4901] loop4: detected capacity change from 0 to 8192 [ 74.593661][ T4901] SELinux: ebitmap: truncated map [ 74.603471][ T4901] SELinux: failed to load policy [ 74.681522][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.764698][ T4912] netlink: 24 bytes leftover after parsing attributes in process `syz.2.516'. [ 74.797094][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.938710][ T4915] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4915 comm=syz.2.516 [ 75.079895][ T4931] netlink: 4 bytes leftover after parsing attributes in process `syz.3.521'. [ 75.116717][ T4933] FAULT_INJECTION: forcing a failure. [ 75.116717][ T4933] name failslab, interval 1, probability 0, space 0, times 0 [ 75.129549][ T4933] CPU: 0 UID: 0 PID: 4933 Comm: syz.2.522 Not tainted 6.17.0-rc1-syzkaller #0 PREEMPT(voluntary) [ 75.129620][ T4933] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 75.129659][ T4933] Call Trace: [ 75.129669][ T4933] [ 75.129678][ T4933] __dump_stack+0x1d/0x30 [ 75.129700][ T4933] dump_stack_lvl+0xe8/0x140 [ 75.129719][ T4933] dump_stack+0x15/0x1b [ 75.129736][ T4933] should_fail_ex+0x265/0x280 [ 75.129764][ T4933] should_failslab+0x8c/0xb0 [ 75.129874][ T4933] kmem_cache_alloc_noprof+0x50/0x310 [ 75.129902][ T4933] ? security_inode_alloc+0x37/0x100 [ 75.129940][ T4933] security_inode_alloc+0x37/0x100 [ 75.129993][ T4933] inode_init_always_gfp+0x4b7/0x500 [ 75.130077][ T4933] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 75.130101][ T4933] alloc_inode+0x58/0x170 [ 75.130123][ T4933] new_inode+0x1d/0xe0 [ 75.130204][ T4933] shmem_get_inode+0x244/0x750 [ 75.130235][ T4933] __shmem_file_setup+0x113/0x210 [ 75.130271][ T4933] shmem_file_setup+0x3b/0x50 [ 75.130355][ T4933] __se_sys_memfd_create+0x2c3/0x590 [ 75.130378][ T4933] __x64_sys_memfd_create+0x31/0x40 [ 75.130398][ T4933] x64_sys_call+0x2abe/0x2ff0 [ 75.130419][ T4933] do_syscall_64+0xd2/0x200 [ 75.130520][ T4933] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 75.130550][ T4933] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 75.130574][ T4933] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.130658][ T4933] RIP: 0033:0x7f7cff70ebe9 [ 75.130678][ T4933] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 75.130700][ T4933] RSP: 002b:00007f7cfe176e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 75.130770][ T4933] RAX: ffffffffffffffda RBX: 000000000000042f RCX: 00007f7cff70ebe9 [ 75.130785][ T4933] RDX: 00007f7cfe176ef0 RSI: 0000000000000000 RDI: 00007f7cff7927e8 [ 75.130797][ T4933] RBP: 0000200000000940 R08: 00007f7cfe176bb7 R09: 00007f7cfe176e40 [ 75.130878][ T4933] R10: 000000000000000a R11: 0000000000000202 R12: 00002000000001c0 [ 75.130893][ T4933] R13: 00007f7cfe176ef0 R14: 00007f7cfe176eb0 R15: 0000200000000200 [ 75.130918][ T4933] [ 75.169721][ T4934] pim6reg1: entered allmulticast mode [ 75.370411][ T4944] loop4: detected capacity change from 0 to 512 [ 75.383850][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.403554][ T4944] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 75.413881][ T4947] FAULT_INJECTION: forcing a failure. [ 75.413881][ T4947] name failslab, interval 1, probability 0, space 0, times 0 [ 75.426734][ T4947] CPU: 0 UID: 0 PID: 4947 Comm: syz.2.527 Not tainted 6.17.0-rc1-syzkaller #0 PREEMPT(voluntary) [ 75.426788][ T4947] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 75.426803][ T4947] Call Trace: [ 75.426814][ T4947] [ 75.426825][ T4947] __dump_stack+0x1d/0x30 [ 75.426856][ T4947] dump_stack_lvl+0xe8/0x140 [ 75.426883][ T4947] dump_stack+0x15/0x1b [ 75.426980][ T4947] should_fail_ex+0x265/0x280 [ 75.427009][ T4947] ? request_threaded_irq+0x1ad/0x2c0 [ 75.427045][ T4947] should_failslab+0x8c/0xb0 [ 75.427151][ T4947] __kmalloc_cache_noprof+0x4c/0x320 [ 75.427191][ T4947] ? __pfx_serial8250_interrupt+0x10/0x10 [ 75.427234][ T4947] request_threaded_irq+0x1ad/0x2c0 [ 75.427303][ T4947] ? __pfx_serial8250_interrupt+0x10/0x10 [ 75.427341][ T4947] univ8250_setup_irq+0x2b0/0x310 [ 75.427412][ T4947] serial8250_do_startup+0xa3d/0x1b10 [ 75.427445][ T4947] serial8250_startup+0x41/0x50 [ 75.427565][ T4947] uart_startup+0x465/0x8e0 [ 75.427594][ T4947] uart_ioctl+0xba1/0xe80 [ 75.427642][ T4947] ? do_vfs_ioctl+0x866/0xe10 [ 75.427734][ T4947] ? tty_jobctrl_ioctl+0x29e/0x810 [ 75.427781][ T4947] tty_ioctl+0x7de/0xb80 [ 75.427821][ T4947] ? __pfx_tty_ioctl+0x10/0x10 [ 75.427920][ T4947] __se_sys_ioctl+0xcb/0x140 [ 75.427975][ T4947] __x64_sys_ioctl+0x43/0x50 [ 75.428020][ T4947] x64_sys_call+0x1816/0x2ff0 [ 75.428088][ T4947] do_syscall_64+0xd2/0x200 [ 75.428125][ T4947] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 75.428159][ T4947] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 75.428192][ T4947] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.428258][ T4947] RIP: 0033:0x7f7cff70ebe9 [ 75.428274][ T4947] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 75.428297][ T4947] RSP: 002b:00007f7cfe177038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 75.428322][ T4947] RAX: ffffffffffffffda RBX: 00007f7cff935fa0 RCX: 00007f7cff70ebe9 [ 75.428339][ T4947] RDX: 0000000000000000 RSI: 0000000000005453 RDI: 0000000000000006 [ 75.428356][ T4947] RBP: 00007f7cfe177090 R08: 0000000000000000 R09: 0000000000000000 [ 75.428372][ T4947] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 75.428388][ T4947] R13: 00007f7cff936038 R14: 00007f7cff935fa0 R15: 00007ffe3a0dd5a8 [ 75.428430][ T4947] [ 75.670546][ T4944] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.526: invalid indirect mapped block 2683928664 (level 1) [ 75.689258][ T4950] netlink: 8 bytes leftover after parsing attributes in process `syz.0.528'. [ 75.739037][ T4944] EXT4-fs (loop4): Remounting filesystem read-only [ 75.759408][ T4944] EXT4-fs (loop4): 1 truncate cleaned up [ 75.767453][ T4944] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.781698][ T4954] loop1: detected capacity change from 0 to 8192 [ 75.794886][ T4957] loop2: detected capacity change from 0 to 512 [ 75.832134][ T4954] SELinux: ebitmap: truncated map [ 75.840335][ T4954] SELinux: failed to load policy [ 75.867754][ T4957] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 75.878918][ T4957] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.529: invalid indirect mapped block 2683928664 (level 1) [ 75.905063][ T4957] EXT4-fs (loop2): Remounting filesystem read-only [ 75.913159][ T4957] EXT4-fs (loop2): 1 truncate cleaned up [ 75.929204][ T4957] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.972958][ T4965] netlink: 24 bytes leftover after parsing attributes in process `syz.1.533'. [ 76.083204][ T4965] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4965 comm=syz.1.533 [ 76.138586][ T4973] loop1: detected capacity change from 0 to 512 [ 76.146082][ T4973] EXT4-fs: Ignoring removed mblk_io_submit option [ 76.166663][ T4973] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 76.177391][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.208235][ T4973] EXT4-fs (loop1): 1 truncate cleaned up [ 76.228845][ T4976] loop3: detected capacity change from 0 to 1764 [ 76.235766][ T4973] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 76.256778][ T4976] ISOFS: Bad logical zone size 2051 [ 76.321318][ T4976] FAULT_INJECTION: forcing a failure. [ 76.321318][ T4976] name failslab, interval 1, probability 0, space 0, times 0 [ 76.334314][ T4976] CPU: 1 UID: 0 PID: 4976 Comm: syz.3.537 Not tainted 6.17.0-rc1-syzkaller #0 PREEMPT(voluntary) [ 76.334348][ T4976] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 76.334363][ T4976] Call Trace: [ 76.334372][ T4976] [ 76.334445][ T4976] __dump_stack+0x1d/0x30 [ 76.334472][ T4976] dump_stack_lvl+0xe8/0x140 [ 76.334496][ T4976] dump_stack+0x15/0x1b [ 76.334679][ T4976] should_fail_ex+0x265/0x280 [ 76.334722][ T4976] should_failslab+0x8c/0xb0 [ 76.334753][ T4976] __kmalloc_node_track_caller_noprof+0xa4/0x410 [ 76.334793][ T4976] ? sidtab_sid2str_get+0xa0/0x130 [ 76.334818][ T4976] kmemdup_noprof+0x2b/0x70 [ 76.334847][ T4976] sidtab_sid2str_get+0xa0/0x130 [ 76.334887][ T4976] security_sid_to_context_core+0x1eb/0x2e0 [ 76.334911][ T4976] security_sid_to_context+0x27/0x40 [ 76.334932][ T4976] selinux_lsmprop_to_secctx+0x67/0xf0 [ 76.334956][ T4976] security_lsmprop_to_secctx+0x43/0x80 [ 76.335017][ T4976] audit_log_task_context+0x77/0x190 [ 76.335115][ T4976] audit_log_task+0xf4/0x250 [ 76.335147][ T4976] audit_seccomp+0x61/0x100 [ 76.335173][ T4976] ? __seccomp_filter+0x68c/0x10d0 [ 76.335207][ T4976] __seccomp_filter+0x69d/0x10d0 [ 76.335231][ T4976] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 76.335261][ T4976] ? vfs_write+0x7e8/0x960 [ 76.335284][ T4976] ? __rcu_read_unlock+0x4f/0x70 [ 76.335310][ T4976] ? __fget_files+0x184/0x1c0 [ 76.335373][ T4976] __secure_computing+0x82/0x150 [ 76.335399][ T4976] syscall_trace_enter+0xcf/0x1e0 [ 76.335429][ T4976] do_syscall_64+0xac/0x200 [ 76.335463][ T4976] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 76.335492][ T4976] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 76.335559][ T4976] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.335586][ T4976] RIP: 0033:0x7f72292cebe9 [ 76.335606][ T4976] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 76.335628][ T4976] RSP: 002b:00007f7227d2f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000124 [ 76.335657][ T4976] RAX: ffffffffffffffda RBX: 00007f72294f5fa0 RCX: 00007f72292cebe9 [ 76.335738][ T4976] RDX: 0000000000080000 RSI: 0000000000000004 RDI: 0000000000000003 [ 76.335753][ T4976] RBP: 00007f7227d2f090 R08: 0000000000000000 R09: 0000000000000000 [ 76.335767][ T4976] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 76.335781][ T4976] R13: 00007f72294f6038 R14: 00007f72294f5fa0 R15: 00007ffcdc2b08a8 [ 76.335804][ T4976] [ 76.632874][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.732291][ T4994] FAULT_INJECTION: forcing a failure. [ 76.732291][ T4994] name failslab, interval 1, probability 0, space 0, times 0 [ 76.745097][ T4994] CPU: 1 UID: 0 PID: 4994 Comm: syz.3.541 Not tainted 6.17.0-rc1-syzkaller #0 PREEMPT(voluntary) [ 76.745127][ T4994] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 76.745141][ T4994] Call Trace: [ 76.745149][ T4994] [ 76.745155][ T4994] __dump_stack+0x1d/0x30 [ 76.745224][ T4994] dump_stack_lvl+0xe8/0x140 [ 76.745248][ T4994] dump_stack+0x15/0x1b [ 76.745268][ T4994] should_fail_ex+0x265/0x280 [ 76.745295][ T4994] should_failslab+0x8c/0xb0 [ 76.745328][ T4994] kmem_cache_alloc_node_noprof+0x57/0x320 [ 76.745435][ T4994] ? __alloc_skb+0x101/0x320 [ 76.745474][ T4994] __alloc_skb+0x101/0x320 [ 76.745567][ T4994] alloc_skb_with_frags+0x7d/0x470 [ 76.745587][ T4994] ? kernel_text_address+0x94/0xb0 [ 76.745619][ T4994] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 76.745731][ T4994] ? __kernel_text_address+0xd/0x40 [ 76.745757][ T4994] sock_alloc_send_pskb+0x43a/0x4f0 [ 76.745787][ T4994] __ip_append_data+0x18bd/0x2440 [ 76.745826][ T4994] ? __sys_sendmmsg+0x178/0x300 [ 76.745906][ T4994] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 76.745945][ T4994] ? __rcu_read_unlock+0x4f/0x70 [ 76.746001][ T4994] ? ipv4_mtu+0x217/0x240 [ 76.746035][ T4994] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 76.746069][ T4994] ip_make_skb+0x137/0x2c0 [ 76.746100][ T4994] udp_sendmsg+0x1013/0x13c0 [ 76.746203][ T4994] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 76.746246][ T4994] ? __pfx_udp_sendmsg+0x10/0x10 [ 76.746277][ T4994] inet_sendmsg+0xac/0xd0 [ 76.746311][ T4994] __sock_sendmsg+0x102/0x180 [ 76.746426][ T4994] ____sys_sendmsg+0x345/0x4e0 [ 76.746457][ T4994] ___sys_sendmsg+0x17b/0x1d0 [ 76.746529][ T4994] __sys_sendmmsg+0x178/0x300 [ 76.746639][ T4994] __x64_sys_sendmmsg+0x57/0x70 [ 76.746667][ T4994] x64_sys_call+0x1c4a/0x2ff0 [ 76.746695][ T4994] do_syscall_64+0xd2/0x200 [ 76.746775][ T4994] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 76.746803][ T4994] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 76.746950][ T4994] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.746980][ T4994] RIP: 0033:0x7f72292cebe9 [ 76.747000][ T4994] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 76.747023][ T4994] RSP: 002b:00007f7227d0e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 76.747049][ T4994] RAX: ffffffffffffffda RBX: 00007f72294f6090 RCX: 00007f72292cebe9 [ 76.747066][ T4994] RDX: 000000000800001d RSI: 0000200000007fc0 RDI: 0000000000000007 [ 76.747083][ T4994] RBP: 00007f7227d0e090 R08: 0000000000000000 R09: 0000000000000000 [ 76.747098][ T4994] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 76.747112][ T4994] R13: 00007f72294f6128 R14: 00007f72294f6090 R15: 00007ffcdc2b08a8 [ 76.747135][ T4994] [ 77.030413][ T36] IPVS: starting estimator thread 0... [ 77.039757][ T4992] loop4: detected capacity change from 0 to 8192 [ 77.046005][ T4988] loop2: detected capacity change from 0 to 2048 [ 77.076162][ T29] kauditd_printk_skb: 478 callbacks suppressed [ 77.076192][ T29] audit: type=1400 audit(1754949896.426:8573): avc: denied { cpu } for pid=4986 comm="syz.3.541" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 77.103648][ T4989] loop3: detected capacity change from 0 to 512 [ 77.117413][ T4989] EXT4-fs: inline encryption not supported [ 77.131082][ T4996] IPVS: using max 2352 ests per chain, 117600 per kthread [ 77.150677][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.163709][ T3294] Alternate GPT is invalid, using primary GPT. [ 77.166627][ T4992] SELinux: ebitmap: truncated map [ 77.170336][ T3294] loop2: p1 p2 p3 [ 77.177794][ T5001] netlink: 4 bytes leftover after parsing attributes in process `syz.0.544'. [ 77.190182][ T4992] SELinux: failed to load policy [ 77.191158][ T29] audit: type=1400 audit(1754949896.466:8574): avc: denied { write } for pid=4987 comm="syz.2.540" name="kcm" dev="proc" ino=4026532481 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 77.200159][ T4989] EXT4-fs error (device loop3): ext4_xattr_inode_iget:442: comm syz.3.541: error while reading EA inode 32 err=-116 [ 77.217872][ T29] audit: type=1400 audit(1754949896.466:8575): avc: denied { read } for pid=4987 comm="syz.2.540" name="rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 77.253515][ T29] audit: type=1400 audit(1754949896.466:8576): avc: denied { open } for pid=4987 comm="syz.2.540" path="/dev/rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 77.277052][ T29] audit: type=1400 audit(1754949896.466:8577): avc: denied { ioctl } for pid=4987 comm="syz.2.540" path="/dev/rtc0" dev="devtmpfs" ino=244 ioctlcmd=0x7005 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 77.306672][ T4989] EXT4-fs (loop3): Remounting filesystem read-only [ 77.313374][ T4989] EXT4-fs warning (device loop3): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 77.324886][ T4989] EXT4-fs (loop3): 1 orphan inode deleted [ 77.332894][ T4989] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 77.345273][ T5004] pim6reg1: entered allmulticast mode [ 77.346734][ T4988] Alternate GPT is invalid, using primary GPT. [ 77.357430][ T4988] loop2: p1 p2 p3 [ 77.375561][ T5008] loop1: detected capacity change from 0 to 1764 [ 77.383802][ T5008] iso9660: Bad value for 'mode' [ 77.389302][ T29] audit: type=1326 audit(1754949896.716:8578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5007 comm="syz.1.545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb60199ebe9 code=0x7ffc0000 [ 77.412879][ T29] audit: type=1326 audit(1754949896.716:8579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5007 comm="syz.1.545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb60199ebe9 code=0x7ffc0000 [ 77.436514][ T29] audit: type=1326 audit(1754949896.716:8580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5007 comm="syz.1.545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb60199ebe9 code=0x7ffc0000 [ 77.455165][ T4989] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.459955][ T29] audit: type=1326 audit(1754949896.716:8581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5007 comm="syz.1.545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb60199ebe9 code=0x7ffc0000 [ 77.459983][ T29] audit: type=1326 audit(1754949896.716:8582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5007 comm="syz.1.545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb60199ebe9 code=0x7ffc0000 [ 77.538013][ T5011] netlink: 24 bytes leftover after parsing attributes in process `syz.4.546'. [ 77.549272][ T2993] Alternate GPT is invalid, using primary GPT. [ 77.555745][ T2993] loop2: p1 p2 p3 [ 77.696922][ T5018] loop1: detected capacity change from 0 to 512 [ 77.712931][ T3294] udevd[3294]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 77.718952][ T5018] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 77.724865][ T3297] udevd[3297]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 77.745837][ T3564] udevd[3564]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 77.767971][ T5018] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.547: invalid indirect mapped block 2683928664 (level 1) [ 77.821350][ T5024] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5024 comm=syz.4.546 [ 77.844076][ T5018] EXT4-fs (loop1): Remounting filesystem read-only [ 77.853577][ T5018] EXT4-fs (loop1): 1 truncate cleaned up [ 77.867572][ T5018] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.046564][ T5038] netlink: 8 bytes leftover after parsing attributes in process `syz.0.552'. [ 78.082983][ T5041] loop4: detected capacity change from 0 to 512 [ 78.095365][ T5041] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 78.128752][ T5041] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.551: invalid indirect mapped block 2683928664 (level 1) [ 78.180783][ T5041] EXT4-fs (loop4): Remounting filesystem read-only [ 78.190607][ T5041] EXT4-fs (loop4): 1 truncate cleaned up [ 78.196875][ T5041] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.231903][ T5049] loop0: detected capacity change from 0 to 512 [ 78.238826][ T5049] EXT4-fs: Ignoring removed mblk_io_submit option [ 78.248092][ T5049] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 78.274536][ T5049] EXT4-fs (loop0): 1 truncate cleaned up [ 78.283226][ T5049] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 78.343989][ T5052] loop2: detected capacity change from 0 to 8192 [ 78.394201][ T5052] SELinux: ebitmap: truncated map [ 78.404029][ T5052] SELinux: failed to load policy [ 78.492166][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.526306][ T5060] loop2: detected capacity change from 0 to 128 [ 78.535709][ T5060] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 78.550172][ T5060] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 78.588180][ T5062] netlink: 24 bytes leftover after parsing attributes in process `syz.1.561'. [ 78.718590][ T5065] netlink: 4 bytes leftover after parsing attributes in process `syz.3.562'. [ 78.735962][ T2645] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 78.783783][ T5068] pim6reg1: entered allmulticast mode [ 78.827620][ T5062] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5062 comm=syz.1.561 [ 78.876462][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.110386][ T5080] loop2: detected capacity change from 0 to 8192 [ 79.120069][ T3308] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.143514][ T5080] SELinux: policydb magic number 0x4c5047 does not match expected magic number 0xf97cff8c [ 79.201590][ T5080] SELinux: failed to load policy [ 79.217449][ T3384] IPVS: starting estimator thread 0... [ 79.306379][ T5082] loop4: detected capacity change from 0 to 512 [ 79.331235][ T5090] IPVS: using max 1872 ests per chain, 93600 per kthread [ 79.342574][ T5082] EXT4-fs: inline encryption not supported [ 79.355256][ T5094] loop2: detected capacity change from 0 to 512 [ 79.379668][ T5094] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 79.389402][ T5094] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.572: invalid indirect mapped block 2683928664 (level 1) [ 79.419383][ T5082] EXT4-fs error (device loop4): ext4_xattr_inode_iget:442: comm syz.4.570: error while reading EA inode 32 err=-116 [ 79.434719][ T5082] EXT4-fs (loop4): Remounting filesystem read-only [ 79.441447][ T5082] EXT4-fs warning (device loop4): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 79.445617][ T5094] EXT4-fs (loop2): Remounting filesystem read-only [ 79.460974][ T5082] EXT4-fs (loop4): 1 orphan inode deleted [ 79.467487][ T5082] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 79.479799][ T5094] EXT4-fs (loop2): 1 truncate cleaned up [ 79.497164][ T5094] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.497558][ T5082] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.724695][ T5112] loop4: detected capacity change from 0 to 512 [ 79.734541][ T5111] netlink: 24 bytes leftover after parsing attributes in process `syz.3.578'. [ 79.752165][ T5112] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 79.762118][ T5112] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.577: invalid indirect mapped block 2683928664 (level 1) [ 79.778225][ T5112] EXT4-fs (loop4): Remounting filesystem read-only [ 79.812526][ T5112] EXT4-fs (loop4): 1 truncate cleaned up [ 79.835457][ T5112] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.875615][ T5111] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5111 comm=syz.3.578 [ 79.946745][ T5120] FAULT_INJECTION: forcing a failure. [ 79.946745][ T5120] name failslab, interval 1, probability 0, space 0, times 0 [ 79.959505][ T5120] CPU: 0 UID: 0 PID: 5120 Comm: syz.3.581 Not tainted 6.17.0-rc1-syzkaller #0 PREEMPT(voluntary) [ 79.959619][ T5120] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 79.959637][ T5120] Call Trace: [ 79.959644][ T5120] [ 79.959652][ T5120] __dump_stack+0x1d/0x30 [ 79.959681][ T5120] dump_stack_lvl+0xe8/0x140 [ 79.959704][ T5120] dump_stack+0x15/0x1b [ 79.959751][ T5120] should_fail_ex+0x265/0x280 [ 79.959773][ T5120] should_failslab+0x8c/0xb0 [ 79.959807][ T5120] kmem_cache_alloc_node_noprof+0x57/0x320 [ 79.959854][ T5120] ? alloc_vmap_area+0x231/0xe50 [ 79.959961][ T5120] alloc_vmap_area+0x231/0xe50 [ 79.960000][ T5120] ? should_failslab+0x8c/0xb0 [ 79.960031][ T5120] ? __kmalloc_cache_node_noprof+0x18a/0x320 [ 79.960137][ T5120] __get_vm_area_node+0x173/0x1d0 [ 79.960171][ T5120] __vmalloc_node_range_noprof+0x273/0xe00 [ 79.960208][ T5120] ? copy_process+0x399/0x2000 [ 79.960281][ T5120] ? __rcu_read_unlock+0x4f/0x70 [ 79.960367][ T5120] __vmalloc_node_noprof+0x89/0xc0 [ 79.960405][ T5120] ? copy_process+0x399/0x2000 [ 79.960434][ T5120] ? copy_process+0x399/0x2000 [ 79.960463][ T5120] dup_task_struct+0x449/0x6a0 [ 79.960521][ T5120] copy_process+0x399/0x2000 [ 79.960553][ T5120] ? copy_clone_args_from_user+0x3ce/0x490 [ 79.960592][ T5120] kernel_clone+0x16c/0x5c0 [ 79.960624][ T5120] __se_sys_clone3+0x1c2/0x200 [ 79.960676][ T5120] __x64_sys_clone3+0x31/0x40 [ 79.960734][ T5120] x64_sys_call+0x1fc9/0x2ff0 [ 79.960761][ T5120] do_syscall_64+0xd2/0x200 [ 79.960795][ T5120] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 79.960831][ T5120] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 79.960862][ T5120] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 79.960955][ T5120] RIP: 0033:0x7f72292cebe9 [ 79.960975][ T5120] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 79.960996][ T5120] RSP: 002b:00007f7227d2ef08 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 79.961022][ T5120] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007f72292cebe9 [ 79.961043][ T5120] RDX: 00007f7227d2ef20 RSI: 0000000000000058 RDI: 00007f7227d2ef20 [ 79.961113][ T5120] RBP: 00007f7227d2f090 R08: 0000000000000000 R09: 0000000000000058 [ 79.961130][ T5120] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 79.961146][ T5120] R13: 00007f72294f6038 R14: 00007f72294f5fa0 R15: 00007ffcdc2b08a8 [ 79.961167][ T5120] [ 80.206277][ T5120] syz.3.581: vmalloc error: size 16384, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 80.221161][ T5120] CPU: 0 UID: 0 PID: 5120 Comm: syz.3.581 Not tainted 6.17.0-rc1-syzkaller #0 PREEMPT(voluntary) [ 80.221196][ T5120] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 80.221220][ T5120] Call Trace: [ 80.221226][ T5120] [ 80.221234][ T5120] __dump_stack+0x1d/0x30 [ 80.221258][ T5120] dump_stack_lvl+0xe8/0x140 [ 80.221309][ T5120] dump_stack+0x15/0x1b [ 80.221325][ T5120] warn_alloc+0x12b/0x1a0 [ 80.221365][ T5120] __vmalloc_node_range_noprof+0x297/0xe00 [ 80.221405][ T5120] ? __rcu_read_unlock+0x4f/0x70 [ 80.221497][ T5120] __vmalloc_node_noprof+0x89/0xc0 [ 80.221530][ T5120] ? copy_process+0x399/0x2000 [ 80.221621][ T5120] ? copy_process+0x399/0x2000 [ 80.221647][ T5120] dup_task_struct+0x449/0x6a0 [ 80.221677][ T5120] copy_process+0x399/0x2000 [ 80.221707][ T5120] ? copy_clone_args_from_user+0x3ce/0x490 [ 80.221800][ T5120] kernel_clone+0x16c/0x5c0 [ 80.221831][ T5120] __se_sys_clone3+0x1c2/0x200 [ 80.221875][ T5120] __x64_sys_clone3+0x31/0x40 [ 80.221904][ T5120] x64_sys_call+0x1fc9/0x2ff0 [ 80.221988][ T5120] do_syscall_64+0xd2/0x200 [ 80.222017][ T5120] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 80.222044][ T5120] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 80.222070][ T5120] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 80.222112][ T5120] RIP: 0033:0x7f72292cebe9 [ 80.222128][ T5120] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 80.222147][ T5120] RSP: 002b:00007f7227d2ef08 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 80.222224][ T5120] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007f72292cebe9 [ 80.222236][ T5120] RDX: 00007f7227d2ef20 RSI: 0000000000000058 RDI: 00007f7227d2ef20 [ 80.222248][ T5120] RBP: 00007f7227d2f090 R08: 0000000000000000 R09: 0000000000000058 [ 80.222261][ T5120] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 80.222273][ T5120] R13: 00007f72294f6038 R14: 00007f72294f5fa0 R15: 00007ffcdc2b08a8 [ 80.222293][ T5120] [ 80.222391][ T5120] Mem-Info: [ 80.365188][ T5122] loop1: detected capacity change from 0 to 512 [ 80.373467][ T5120] active_anon:5827 inactive_anon:0 isolated_anon:0 [ 80.373467][ T5120] active_file:9102 inactive_file:2223 isolated_file:0 [ 80.373467][ T5120] unevictable:0 dirty:17 writeback:0 [ 80.373467][ T5120] slab_reclaimable:3187 slab_unreclaimable:14241 [ 80.373467][ T5120] mapped:29450 shmem:362 pagetables:1124 [ 80.373467][ T5120] sec_pagetables:0 bounce:0 [ 80.373467][ T5120] kernel_misc_reclaimable:0 [ 80.373467][ T5120] free:1904593 free_pcp:7870 free_cma:0 [ 80.386242][ T5122] EXT4-fs: Ignoring removed mblk_io_submit option [ 80.390120][ T5120] Node 0 active_anon:23308kB inactive_anon:0kB active_file:36408kB inactive_file:8892kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:117800kB dirty:68kB writeback:0kB shmem:1448kB kernel_stack:3488kB pagetables:4496kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 80.424533][ T5122] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 80.425703][ T5120] Node 0 [ 80.443181][ T5122] EXT4-fs (loop1): 1 truncate cleaned up [ 80.479901][ T5120] DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 80.479989][ T5120] lowmem_reserve[]: 0 2883 7862 7862 [ 80.480022][ T5120] Node 0 DMA32 free:2949216kB boost:0kB min:4132kB low:7064kB high:9996kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2952848kB mlocked:0kB bounce:0kB free_pcp:3632kB local_pcp:100kB free_cma:0kB [ 80.491374][ T5122] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 80.513856][ T5120] lowmem_reserve[]: 0 0 4978 4978 [ 80.513895][ T5120] Node 0 Normal free:4653796kB boost:0kB min:7184kB low:12280kB high:17376kB reserved_highatomic:0KB free_highatomic:0KB active_anon:23308kB inactive_anon:0kB active_file:36408kB inactive_file:8892kB unevictable:0kB writepending:68kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:27856kB local_pcp:11768kB free_cma:0kB [ 80.645678][ T5120] lowmem_reserve[]: 0 0 0 0 [ 80.650348][ T5120] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 80.663155][ T5120] Node 0 DMA32: 4*4kB (M) 2*8kB (M) 2*16kB (M) 3*32kB (M) 3*64kB (M) 4*128kB (M) 3*256kB (M) 3*512kB (M) 3*1024kB (M) 3*2048kB (M) 717*4096kB (M) = 2949216kB [ 80.679381][ T5120] Node 0 Normal: 1027*4kB (UME) 607*8kB (UM) 214*16kB (UME) 70*32kB (UME) 65*64kB (UME) 57*128kB (UME) 25*256kB (UM) 8*512kB (UM) 3*1024kB (UM) 3*2048kB (UME) 1125*4096kB (M) = 4653796kB [ 80.698187][ T5120] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 80.707698][ T5120] 11703 total pagecache pages [ 80.712453][ T5120] 0 pages in swap cache [ 80.716666][ T5120] Free swap = 124996kB [ 80.720902][ T5120] Total swap = 124996kB [ 80.725100][ T5120] 2097051 pages RAM [ 80.728925][ T5120] 0 pages HighMem/MovableOnly [ 80.733753][ T5120] 80439 pages reserved [ 80.760427][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.770219][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.826227][ T5129] netlink: 4 bytes leftover after parsing attributes in process `syz.4.584'. [ 80.871759][ T5126] loop2: detected capacity change from 0 to 8192 [ 80.886669][ T5131] pim6reg1: entered allmulticast mode [ 80.934827][ T5126] SELinux: policydb magic number 0x4c5047 does not match expected magic number 0xf97cff8c [ 80.945062][ T5126] SELinux: failed to load policy [ 81.035232][ T5134] loop2: detected capacity change from 0 to 256 [ 81.065231][ T5134] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 81.135917][ T5134] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 81.144659][ T5134] FAT-fs (loop2): Filesystem has been set read-only [ 81.209903][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.246718][ T5142] loop3: detected capacity change from 0 to 512 [ 81.418885][ T5147] netlink: 24 bytes leftover after parsing attributes in process `syz.0.590'. [ 81.469901][ T5159] loop3: detected capacity change from 0 to 512 [ 81.512142][ T5161] loop2: detected capacity change from 0 to 512 [ 81.520411][ T5159] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 81.531148][ T5161] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 81.539917][ T5159] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.594: invalid indirect mapped block 2683928664 (level 1) [ 81.557362][ T5161] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.595: invalid indirect mapped block 2683928664 (level 1) [ 81.587081][ T5159] EXT4-fs (loop3): Remounting filesystem read-only [ 81.595440][ T5159] EXT4-fs (loop3): 1 truncate cleaned up [ 81.609461][ T5159] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.613089][ T5161] EXT4-fs (loop2): Remounting filesystem read-only [ 81.632339][ T5160] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5160 comm=syz.0.590 [ 81.655779][ T5161] EXT4-fs (loop2): 1 truncate cleaned up [ 81.665275][ T5161] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.717061][ T5167] FAULT_INJECTION: forcing a failure. [ 81.717061][ T5167] name failslab, interval 1, probability 0, space 0, times 0 [ 81.729916][ T5167] CPU: 0 UID: 0 PID: 5167 Comm: syz.0.596 Not tainted 6.17.0-rc1-syzkaller #0 PREEMPT(voluntary) [ 81.729940][ T5167] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 81.729952][ T5167] Call Trace: [ 81.729957][ T5167] [ 81.729964][ T5167] __dump_stack+0x1d/0x30 [ 81.729983][ T5167] dump_stack_lvl+0xe8/0x140 [ 81.730029][ T5167] dump_stack+0x15/0x1b [ 81.730043][ T5167] should_fail_ex+0x265/0x280 [ 81.730062][ T5167] should_failslab+0x8c/0xb0 [ 81.730083][ T5167] __kmalloc_node_track_caller_noprof+0xa4/0x410 [ 81.730154][ T5167] ? sidtab_sid2str_get+0xa0/0x130 [ 81.730172][ T5167] ? skb_put+0xa9/0xf0 [ 81.730225][ T5167] kmemdup_noprof+0x2b/0x70 [ 81.730248][ T5167] sidtab_sid2str_get+0xa0/0x130 [ 81.730266][ T5167] security_sid_to_context_core+0x1eb/0x2e0 [ 81.730285][ T5167] security_sid_to_context+0x27/0x40 [ 81.730423][ T5167] avc_audit_post_callback+0x9d/0x520 [ 81.730464][ T5167] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 81.730485][ T5167] common_lsm_audit+0x1b8/0x230 [ 81.730513][ T5167] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 81.730536][ T5167] slow_avc_audit+0x104/0x140 [ 81.730606][ T5167] avc_has_perm+0x13a/0x180 [ 81.730645][ T5167] sel_write_avc_cache_threshold+0xae/0x1c0 [ 81.730673][ T5167] ? __pfx_sel_write_avc_cache_threshold+0x10/0x10 [ 81.730848][ T5167] vfs_write+0x269/0x960 [ 81.730876][ T5167] ? __rcu_read_unlock+0x4f/0x70 [ 81.730903][ T5167] ? __fget_files+0x184/0x1c0 [ 81.730933][ T5167] ksys_write+0xda/0x1a0 [ 81.731049][ T5167] __x64_sys_write+0x40/0x50 [ 81.731120][ T5167] x64_sys_call+0x27fe/0x2ff0 [ 81.731148][ T5167] do_syscall_64+0xd2/0x200 [ 81.731174][ T5167] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 81.731195][ T5167] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 81.731216][ T5167] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 81.731337][ T5167] RIP: 0033:0x7fe066e3ebe9 [ 81.731350][ T5167] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 81.731365][ T5167] RSP: 002b:00007fe0658a7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 81.731413][ T5167] RAX: ffffffffffffffda RBX: 00007fe067065fa0 RCX: 00007fe066e3ebe9 [ 81.731437][ T5167] RDX: 0000000000000008 RSI: 0000000000000000 RDI: 0000000000000005 [ 81.731447][ T5167] RBP: 00007fe0658a7090 R08: 0000000000000000 R09: 0000000000000000 [ 81.731458][ T5167] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 81.731469][ T5167] R13: 00007fe067066038 R14: 00007fe067065fa0 R15: 00007fffb805f748 [ 81.731486][ T5167] [ 82.052062][ T5169] loop0: detected capacity change from 0 to 8192 [ 82.084365][ T5169] SELinux: policydb magic number 0x4c5047 does not match expected magic number 0xf97cff8c [ 82.098048][ T5169] SELinux: failed to load policy [ 82.164018][ T29] kauditd_printk_skb: 526 callbacks suppressed [ 82.164040][ T29] audit: type=1326 audit(1754949901.516:9107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5170 comm="syz.4.598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe60cd4ebe9 code=0x7ffc0000 [ 82.220504][ T5176] loop0: detected capacity change from 0 to 512 [ 82.230650][ T29] audit: type=1326 audit(1754949901.526:9108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5170 comm="syz.4.598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe60cd4ebe9 code=0x7ffc0000 [ 82.254594][ T29] audit: type=1326 audit(1754949901.526:9109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5170 comm="syz.4.598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe60cd4ebe9 code=0x7ffc0000 [ 82.278183][ T29] audit: type=1326 audit(1754949901.526:9110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5170 comm="syz.4.598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe60cd4ebe9 code=0x7ffc0000 [ 82.302438][ T5176] EXT4-fs: Ignoring removed mblk_io_submit option [ 82.314992][ T5176] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 82.331810][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.343085][ T29] audit: type=1400 audit(1754949901.656:9111): avc: denied { create } for pid=5179 comm="syz.1.602" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 82.363668][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.374730][ T5176] EXT4-fs (loop0): 1 truncate cleaned up [ 82.382707][ T5176] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 82.412987][ T29] audit: type=1400 audit(1754949901.756:9112): avc: denied { append } for pid=5179 comm="syz.1.602" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 82.520613][ T5194] netlink: 24 bytes leftover after parsing attributes in process `syz.3.607'. [ 82.533623][ T29] audit: type=1400 audit(1754949901.886:9113): avc: denied { read write } for pid=5179 comm="syz.1.602" name="rdma_cm" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 82.558347][ T29] audit: type=1400 audit(1754949901.886:9114): avc: denied { open } for pid=5179 comm="syz.1.602" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 82.687600][ T5201] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5201 comm=syz.3.607 [ 82.735666][ T5205] netlink: 4 bytes leftover after parsing attributes in process `syz.2.609'. [ 82.813863][ T5208] loop4: detected capacity change from 0 to 8192 [ 82.907369][ T29] audit: type=1400 audit(1754949902.256:9115): avc: denied { getopt } for pid=5214 comm="syz.4.613" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 82.927805][ T5209] pim6reg1: entered allmulticast mode [ 82.958677][ T5215] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 82.967250][ T5215] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 83.007771][ T5219] loop3: detected capacity change from 0 to 512 [ 83.014306][ T29] audit: type=1326 audit(1754949902.356:9116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5216 comm="syz.3.614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72292cebe9 code=0x7ffc0000 [ 83.049767][ T5219] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 83.080167][ T3308] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.092020][ T5219] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.614: invalid indirect mapped block 2683928664 (level 1) [ 83.131522][ T5219] EXT4-fs (loop3): Remounting filesystem read-only [ 83.138496][ T5219] EXT4-fs (loop3): 1 truncate cleaned up [ 83.145854][ T5219] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.188471][ T5223] loop0: detected capacity change from 0 to 512 [ 83.206320][ T5223] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 83.214497][ T5223] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.615: invalid indirect mapped block 2683928664 (level 1) [ 83.229055][ T5223] EXT4-fs (loop0): Remounting filesystem read-only [ 83.235905][ T5223] EXT4-fs (loop0): 1 truncate cleaned up [ 83.243693][ T5223] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.643079][ T5234] FAULT_INJECTION: forcing a failure. [ 83.643079][ T5234] name failslab, interval 1, probability 0, space 0, times 0 [ 83.655795][ T5234] CPU: 0 UID: 0 PID: 5234 Comm: syz.1.620 Not tainted 6.17.0-rc1-syzkaller #0 PREEMPT(voluntary) [ 83.655859][ T5234] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 83.655875][ T5234] Call Trace: [ 83.655884][ T5234] [ 83.655894][ T5234] __dump_stack+0x1d/0x30 [ 83.655917][ T5234] dump_stack_lvl+0xe8/0x140 [ 83.655936][ T5234] dump_stack+0x15/0x1b [ 83.655966][ T5234] should_fail_ex+0x265/0x280 [ 83.656061][ T5234] should_failslab+0x8c/0xb0 [ 83.656093][ T5234] kmem_cache_alloc_noprof+0x50/0x310 [ 83.656130][ T5234] ? security_inode_alloc+0x37/0x100 [ 83.656174][ T5234] security_inode_alloc+0x37/0x100 [ 83.656257][ T5234] inode_init_always_gfp+0x4b7/0x500 [ 83.656287][ T5234] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 83.656330][ T5234] alloc_inode+0x58/0x170 [ 83.656367][ T5234] new_inode+0x1d/0xe0 [ 83.656397][ T5234] shmem_get_inode+0x244/0x750 [ 83.656427][ T5234] __shmem_file_setup+0x113/0x210 [ 83.656470][ T5234] shmem_file_setup+0x3b/0x50 [ 83.656516][ T5234] __se_sys_memfd_create+0x2c3/0x590 [ 83.656542][ T5234] __x64_sys_memfd_create+0x31/0x40 [ 83.656568][ T5234] x64_sys_call+0x2abe/0x2ff0 [ 83.656607][ T5234] do_syscall_64+0xd2/0x200 [ 83.656633][ T5234] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 83.656657][ T5234] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 83.656714][ T5234] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.656778][ T5234] RIP: 0033:0x7fb60199ebe9 [ 83.656805][ T5234] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 83.656827][ T5234] RSP: 002b:00007fb6003fee18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 83.656849][ T5234] RAX: ffffffffffffffda RBX: 0000000000000465 RCX: 00007fb60199ebe9 [ 83.656860][ T5234] RDX: 00007fb6003feef0 RSI: 0000000000000000 RDI: 00007fb601a227e8 [ 83.656872][ T5234] RBP: 0000200000000c80 R08: 00007fb6003febb7 R09: 00007fb6003fee40 [ 83.656940][ T5234] R10: 000000000000000a R11: 0000000000000202 R12: 0000200000003040 [ 83.656955][ T5234] R13: 00007fb6003feef0 R14: 00007fb6003feeb0 R15: 0000200000000340 [ 83.656979][ T5234] [ 83.897759][ T5237] netlink: 292 bytes leftover after parsing attributes in process `syz.1.621'. [ 83.907524][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.970863][ T3308] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.999422][ T5241] loop1: detected capacity change from 0 to 8192 [ 84.019150][ T5245] netlink: 24 bytes leftover after parsing attributes in process `syz.0.625'. [ 84.045730][ T5247] loop3: detected capacity change from 0 to 512 [ 84.141257][ T5247] EXT4-fs: Ignoring removed mblk_io_submit option [ 84.173207][ T5247] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 84.196205][ T5247] EXT4-fs (loop3): 1 truncate cleaned up [ 84.197435][ T5258] netlink: 4 bytes leftover after parsing attributes in process `syz.4.628'. [ 84.215711][ T5249] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5249 comm=syz.0.625 [ 84.223388][ T5247] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 84.301213][ T5259] pim6reg1: entered allmulticast mode [ 84.434674][ T5274] loop1: detected capacity change from 0 to 512 [ 84.485711][ T5275] loop0: detected capacity change from 0 to 512 [ 84.500632][ T5275] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 84.511204][ T5275] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.633: invalid indirect mapped block 2683928664 (level 1) [ 84.542180][ T5275] EXT4-fs (loop0): Remounting filesystem read-only [ 84.549005][ T5275] EXT4-fs (loop0): 1 truncate cleaned up [ 84.555288][ T5275] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.617344][ T5279] loop1: detected capacity change from 0 to 512 [ 84.628989][ T5279] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 84.641285][ T5279] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.635: invalid indirect mapped block 2683928664 (level 1) [ 84.655989][ T5279] EXT4-fs (loop1): Remounting filesystem read-only [ 84.663183][ T5279] EXT4-fs (loop1): 1 truncate cleaned up [ 84.670598][ T5279] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.890566][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.113001][ T5293] FAULT_INJECTION: forcing a failure. [ 85.113001][ T5293] name failslab, interval 1, probability 0, space 0, times 0 [ 85.125773][ T5293] CPU: 0 UID: 0 PID: 5293 Comm: syz.4.640 Not tainted 6.17.0-rc1-syzkaller #0 PREEMPT(voluntary) [ 85.125806][ T5293] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 85.125821][ T5293] Call Trace: [ 85.125830][ T5293] [ 85.125840][ T5293] __dump_stack+0x1d/0x30 [ 85.125869][ T5293] dump_stack_lvl+0xe8/0x140 [ 85.125891][ T5293] dump_stack+0x15/0x1b [ 85.125910][ T5293] should_fail_ex+0x265/0x280 [ 85.125958][ T5293] should_failslab+0x8c/0xb0 [ 85.125984][ T5293] kmem_cache_alloc_node_noprof+0x57/0x320 [ 85.126013][ T5293] ? __alloc_skb+0x101/0x320 [ 85.126052][ T5293] __alloc_skb+0x101/0x320 [ 85.126115][ T5291] loop3: detected capacity change from 0 to 8192 [ 85.126217][ T5293] alloc_skb_with_frags+0x7d/0x470 [ 85.126247][ T5293] ? kernel_text_address+0x94/0xb0 [ 85.126286][ T5293] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 85.126363][ T5293] ? __kernel_text_address+0xd/0x40 [ 85.126460][ T5293] sock_alloc_send_pskb+0x43a/0x4f0 [ 85.126502][ T5293] __ip_append_data+0x18bd/0x2440 [ 85.126585][ T5293] ? __sys_sendmmsg+0x178/0x300 [ 85.126617][ T5293] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 85.126716][ T5293] ? __rcu_read_unlock+0x4f/0x70 [ 85.126818][ T5293] ? ipv4_mtu+0x217/0x240 [ 85.126925][ T5293] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 85.126961][ T5293] ip_make_skb+0x137/0x2c0 [ 85.127004][ T5293] udp_sendmsg+0x1013/0x13c0 [ 85.127048][ T5293] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 85.127118][ T5293] ? __pfx_udp_sendmsg+0x10/0x10 [ 85.127150][ T5293] inet_sendmsg+0xac/0xd0 [ 85.127226][ T5293] __sock_sendmsg+0x102/0x180 [ 85.127341][ T5293] ____sys_sendmsg+0x345/0x4e0 [ 85.127376][ T5293] ___sys_sendmsg+0x17b/0x1d0 [ 85.127423][ T5293] __sys_sendmmsg+0x178/0x300 [ 85.127468][ T5293] __x64_sys_sendmmsg+0x57/0x70 [ 85.127499][ T5293] x64_sys_call+0x1c4a/0x2ff0 [ 85.127589][ T5293] do_syscall_64+0xd2/0x200 [ 85.127629][ T5293] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 85.127664][ T5293] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 85.127773][ T5293] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.127803][ T5293] RIP: 0033:0x7fe60cd4ebe9 [ 85.127826][ T5293] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 85.127850][ T5293] RSP: 002b:00007fe60b796038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 85.127947][ T5293] RAX: ffffffffffffffda RBX: 00007fe60cf76090 RCX: 00007fe60cd4ebe9 [ 85.127965][ T5293] RDX: 000000000800001d RSI: 0000200000007fc0 RDI: 0000000000000005 [ 85.127982][ T5293] RBP: 00007fe60b796090 R08: 0000000000000000 R09: 0000000000000000 [ 85.127999][ T5293] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 85.128021][ T5293] R13: 00007fe60cf76128 R14: 00007fe60cf76090 R15: 00007ffed50ada98 [ 85.128049][ T5293] [ 85.264843][ T5297] loop4: detected capacity change from 0 to 512 [ 85.291860][ T5295] netlink: 24 bytes leftover after parsing attributes in process `syz.2.641'. [ 85.300692][ T5297] EXT4-fs: inline encryption not supported [ 85.440430][ T3308] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.484370][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.502305][ T5297] EXT4-fs error (device loop4): ext4_xattr_inode_iget:442: comm syz.4.640: error while reading EA inode 32 err=-116 [ 85.532525][ T5297] EXT4-fs (loop4): Remounting filesystem read-only [ 85.539105][ T5297] EXT4-fs warning (device loop4): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 85.556709][ T5301] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5301 comm=syz.2.641 [ 85.558873][ T5297] EXT4-fs (loop4): 1 orphan inode deleted [ 85.576342][ T5297] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 85.604864][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.621178][ T5309] FAULT_INJECTION: forcing a failure. [ 85.621178][ T5309] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 85.634501][ T5309] CPU: 1 UID: 0 PID: 5309 Comm: syz.0.646 Not tainted 6.17.0-rc1-syzkaller #0 PREEMPT(voluntary) [ 85.634538][ T5309] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 85.634552][ T5309] Call Trace: [ 85.634560][ T5309] [ 85.634571][ T5309] __dump_stack+0x1d/0x30 [ 85.634602][ T5309] dump_stack_lvl+0xe8/0x140 [ 85.634662][ T5309] dump_stack+0x15/0x1b [ 85.634759][ T5309] should_fail_ex+0x265/0x280 [ 85.634836][ T5309] should_fail+0xb/0x20 [ 85.634859][ T5309] should_fail_usercopy+0x1a/0x20 [ 85.634927][ T5309] _copy_from_user+0x1c/0xb0 [ 85.634966][ T5309] memdup_user+0x5e/0xd0 [ 85.634998][ T5309] strndup_user+0x68/0xb0 [ 85.635030][ T5309] perf_uprobe_init+0x48/0x150 [ 85.635084][ T5309] perf_uprobe_event_init+0xc4/0x140 [ 85.635120][ T5309] perf_try_init_event+0xd6/0x540 [ 85.635156][ T5309] ? perf_event_alloc+0xb1c/0x1740 [ 85.635347][ T5309] perf_event_alloc+0xb27/0x1740 [ 85.635393][ T5309] __se_sys_perf_event_open+0x615/0x11c0 [ 85.635477][ T5309] __x64_sys_perf_event_open+0x67/0x80 [ 85.635593][ T5309] x64_sys_call+0x7bd/0x2ff0 [ 85.635623][ T5309] do_syscall_64+0xd2/0x200 [ 85.635658][ T5309] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 85.635692][ T5309] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 85.635756][ T5309] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.635786][ T5309] RIP: 0033:0x7fe066e3ebe9 [ 85.635802][ T5309] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 85.635824][ T5309] RSP: 002b:00007fe0658a7038 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 85.635849][ T5309] RAX: ffffffffffffffda RBX: 00007fe067065fa0 RCX: 00007fe066e3ebe9 [ 85.635862][ T5309] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000200 [ 85.635900][ T5309] RBP: 00007fe0658a7090 R08: 0000000000000000 R09: 0000000000000000 [ 85.635916][ T5309] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001 [ 85.635932][ T5309] R13: 00007fe067066038 R14: 00007fe067065fa0 R15: 00007fffb805f748 [ 85.635956][ T5309] [ 85.881768][ T5313] netlink: 12 bytes leftover after parsing attributes in process `syz.4.645'. [ 85.929180][ T5316] loop0: detected capacity change from 0 to 512 [ 85.936821][ T5316] EXT4-fs: Ignoring removed mblk_io_submit option [ 85.947657][ T5316] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 85.959991][ T5316] EXT4-fs (loop0): 1 truncate cleaned up [ 85.966844][ T5316] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 86.019675][ T5313] 8021q: adding VLAN 0 to HW filter on device bond1 [ 86.033013][ T5318] vlan2: entered allmulticast mode [ 86.038201][ T5318] bond1: entered allmulticast mode [ 86.064663][ T5323] netlink: 4 bytes leftover after parsing attributes in process `syz.2.650'. [ 86.133218][ T5329] pim6reg1: entered allmulticast mode [ 86.283837][ T5334] loop1: detected capacity change from 0 to 512 [ 86.300333][ T5334] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 86.316652][ T5334] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.653: invalid indirect mapped block 2683928664 (level 1) [ 86.332261][ T5334] EXT4-fs (loop1): Remounting filesystem read-only [ 86.338983][ T5334] EXT4-fs (loop1): 1 truncate cleaned up [ 86.350195][ T5334] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 86.474565][ T5339] loop4: detected capacity change from 0 to 512 [ 86.494477][ T5339] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 86.505983][ T5339] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.654: invalid indirect mapped block 2683928664 (level 1) [ 86.520464][ T5339] EXT4-fs (loop4): Remounting filesystem read-only [ 86.527462][ T5339] EXT4-fs (loop4): 1 truncate cleaned up [ 86.534321][ T5339] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 86.822222][ T5342] loop3: detected capacity change from 0 to 8192 [ 86.823651][ T3308] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.897688][ T5342] SELinux: ebitmap: truncated map [ 86.927116][ T5342] SELinux: failed to load policy [ 86.985074][ T5352] netlink: 12 bytes leftover after parsing attributes in process `syz.2.658'. [ 87.007922][ T5352] 8021q: adding VLAN 0 to HW filter on device bond2 [ 87.051128][ T5352] vlan2: entered allmulticast mode [ 87.056390][ T5352] bond2: entered allmulticast mode [ 87.063684][ T5359] netlink: 24 bytes leftover after parsing attributes in process `syz.3.661'. [ 87.078773][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.164189][ T5367] netlink: 16 bytes leftover after parsing attributes in process `syz.0.662'. [ 87.173375][ T29] kauditd_printk_skb: 374 callbacks suppressed [ 87.173392][ T29] audit: type=1400 audit(1754949906.516:9491): avc: denied { create } for pid=5360 comm="syz.0.662" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 87.199363][ T29] audit: type=1400 audit(1754949906.516:9492): avc: denied { setopt } for pid=5360 comm="syz.0.662" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 87.246422][ T29] audit: type=1326 audit(1754949906.586:9493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5370 comm="syz.2.664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7cff70ebe9 code=0x7ffc0000 [ 87.270277][ T29] audit: type=1326 audit(1754949906.586:9494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5370 comm="syz.2.664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f7cff70ebe9 code=0x7ffc0000 [ 87.293782][ T29] audit: type=1326 audit(1754949906.586:9495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5370 comm="syz.2.664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7cff70ebe9 code=0x7ffc0000 [ 87.317157][ T29] audit: type=1326 audit(1754949906.586:9496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5370 comm="syz.2.664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=285 compat=0 ip=0x7f7cff70ebe9 code=0x7ffc0000 [ 87.340608][ T29] audit: type=1326 audit(1754949906.586:9497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5370 comm="syz.2.664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7cff70ebe9 code=0x7ffc0000 [ 87.364126][ T29] audit: type=1326 audit(1754949906.586:9498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5370 comm="syz.2.664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7cff70ebe9 code=0x7ffc0000 [ 87.387637][ T29] audit: type=1326 audit(1754949906.586:9499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5370 comm="syz.2.664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7cff70ebe9 code=0x7ffc0000 [ 87.411100][ T29] audit: type=1326 audit(1754949906.586:9500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5370 comm="syz.2.664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f7cff70ebe9 code=0x7ffc0000 [ 87.461574][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.477523][ T5359] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5359 comm=syz.3.661 [ 87.588208][ T5381] netlink: 4 bytes leftover after parsing attributes in process `syz.2.667'. [ 87.643715][ T5389] loop1: detected capacity change from 0 to 8192 [ 87.658605][ T5390] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 87.680104][ T5391] pim6reg1: entered allmulticast mode [ 87.710531][ T5389] SELinux: ebitmap: truncated map [ 87.717013][ T5389] SELinux: failed to load policy [ 87.727340][ T5392] loop3: detected capacity change from 0 to 512 [ 87.774542][ T5392] EXT4-fs: inline encryption not supported [ 87.793172][ T5392] EXT4-fs error (device loop3): ext4_xattr_inode_iget:442: comm syz.3.669: error while reading EA inode 32 err=-116 [ 87.806342][ T5392] EXT4-fs (loop3): Remounting filesystem read-only [ 87.813084][ T5392] EXT4-fs warning (device loop3): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 87.814496][ T5394] loop1: detected capacity change from 0 to 1024 [ 87.842584][ T5394] ======================================================= [ 87.842584][ T5394] WARNING: The mand mount option has been deprecated and [ 87.842584][ T5394] and is ignored by this kernel. Remove the mand [ 87.842584][ T5394] option from the mount to silence this warning. [ 87.842584][ T5394] ======================================================= [ 87.843310][ T5392] EXT4-fs (loop3): 1 orphan inode deleted [ 87.885019][ T5360] delete_channel: no stack [ 88.007615][ T5392] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 88.181408][ T5401] loop1: detected capacity change from 0 to 512 [ 88.191549][ T5401] EXT4-fs (loop1): fragment/cluster size (2048) != block size (4096) [ 88.239015][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.534097][ T5410] loop3: detected capacity change from 0 to 512 [ 88.545435][ T5410] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 88.555233][ T5410] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.674: invalid indirect mapped block 2683928664 (level 1) [ 88.564644][ T5414] loop2: detected capacity change from 0 to 512 [ 88.604846][ T5415] loop0: detected capacity change from 0 to 2048 [ 88.616162][ T5414] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 88.624582][ T5410] EXT4-fs (loop3): Remounting filesystem read-only [ 88.656949][ T5414] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.676: invalid indirect mapped block 2683928664 (level 1) [ 88.671761][ T5410] EXT4-fs (loop3): 1 truncate cleaned up [ 88.678057][ T5415] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 88.682290][ T5410] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 88.707975][ T5414] EXT4-fs (loop2): Remounting filesystem read-only [ 88.715387][ T5414] EXT4-fs (loop2): 1 truncate cleaned up [ 88.721863][ T5414] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 88.838784][ T5421] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5421 comm=syz.4.677 [ 88.890900][ T5412] bond1: entered promiscuous mode [ 88.896303][ T5412] bond1: entered allmulticast mode [ 88.903471][ T5412] 8021q: adding VLAN 0 to HW filter on device bond1 [ 88.914370][ T5412] bond1 (unregistering): Released all slaves [ 89.068996][ T5432] loop1: detected capacity change from 0 to 8192 [ 89.116098][ T5432] SELinux: ebitmap: truncated map [ 89.125680][ T5432] SELinux: failed to load policy [ 89.332557][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.346194][ T5444] __nla_validate_parse: 3 callbacks suppressed [ 89.346215][ T5444] netlink: 4 bytes leftover after parsing attributes in process `syz.0.687'. [ 89.369718][ T5440] Illegal XDP return value 53 on prog (id 482) dev N/A, expect packet loss! [ 89.392686][ T5440] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 89.422290][ T5449] pim6reg1: entered allmulticast mode [ 89.493104][ T5448] netlink: 24 bytes leftover after parsing attributes in process `syz.2.689'. [ 89.653927][ T5458] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5458 comm=syz.2.689 [ 89.826318][ T5473] netlink: 108 bytes leftover after parsing attributes in process `syz.2.696'. [ 89.936369][ T5475] loop1: detected capacity change from 0 to 8192 [ 89.999520][ T5475] SELinux: ebitmap: truncated map [ 90.029393][ T5485] loop3: detected capacity change from 0 to 512 [ 90.041726][ T5486] loop4: detected capacity change from 0 to 512 [ 90.047430][ T5475] SELinux: failed to load policy [ 90.068860][ T5486] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 90.108290][ T3384] IPVS: starting estimator thread 0... [ 90.122822][ T5485] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 90.131539][ T5486] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.700: invalid indirect mapped block 2683928664 (level 1) [ 90.162571][ T5485] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.699: invalid indirect mapped block 2683928664 (level 1) [ 90.179801][ T5486] EXT4-fs (loop4): Remounting filesystem read-only [ 90.188055][ T5485] EXT4-fs (loop3): Remounting filesystem read-only [ 90.195288][ T5492] netlink: 12 bytes leftover after parsing attributes in process `syz.1.701'. [ 90.206927][ T5486] EXT4-fs (loop4): 1 truncate cleaned up [ 90.212745][ T5490] IPVS: using max 1968 ests per chain, 98400 per kthread [ 90.220639][ T5485] EXT4-fs (loop3): 1 truncate cleaned up [ 90.249672][ T5492] 8021q: adding VLAN 0 to HW filter on device bond1 [ 90.287379][ T5496] loop1: detected capacity change from 0 to 256 [ 90.370142][ T5504] loop0: detected capacity change from 0 to 1024 [ 90.481118][ T5510] netlink: 24 bytes leftover after parsing attributes in process `syz.1.707'. [ 90.698762][ T5515] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5515 comm=syz.1.707 [ 90.928620][ T5521] loop2: detected capacity change from 0 to 8192 [ 90.998666][ T5521] SELinux: ebitmap: truncated map [ 91.005063][ T5521] SELinux: failed to load policy [ 91.021426][ T5528] netlink: 4 bytes leftover after parsing attributes in process `syz.3.713'. [ 91.049666][ T5530] netlink: 'syz.4.715': attribute type 4 has an invalid length. [ 91.062975][ T5530] netlink: 'syz.4.715': attribute type 4 has an invalid length. [ 91.076751][ T5532] netlink: 168 bytes leftover after parsing attributes in process `syz.2.714'. [ 91.087494][ T5533] pim6reg1: entered allmulticast mode [ 91.310354][ T5546] loop2: detected capacity change from 0 to 512 [ 91.324554][ T5546] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 91.342186][ T5546] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.720: invalid indirect mapped block 2683928664 (level 1) [ 91.362008][ T5546] EXT4-fs (loop2): Remounting filesystem read-only [ 91.368622][ T5545] netlink: 24 bytes leftover after parsing attributes in process `syz.0.721'. [ 91.415082][ T5546] EXT4-fs (loop2): 1 truncate cleaned up [ 91.527258][ T5548] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5548 comm=syz.0.721 [ 91.632136][ T5556] loop0: detected capacity change from 0 to 512 [ 91.639999][ T5557] loop4: detected capacity change from 0 to 2048 [ 91.647753][ T5556] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 91.656442][ T5556] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.722: invalid indirect mapped block 2683928664 (level 1) [ 91.708739][ T5556] EXT4-fs (loop0): Remounting filesystem read-only [ 91.717126][ T5556] EXT4-fs (loop0): 1 truncate cleaned up [ 91.723176][ T5557] loop4: detected capacity change from 0 to 128 [ 91.745528][ T5557] syz.4.724: attempt to access beyond end of device [ 91.745528][ T5557] loop4: rw=0, sector=2072, nr_sectors = 1 limit=128 [ 91.765417][ T5561] loop1: detected capacity change from 0 to 8192 [ 91.784171][ T5557] FAT-fs (loop4): error, invalid FAT chain (i_pos 548, last_block 8) [ 91.792395][ T5557] FAT-fs (loop4): Filesystem has been set read-only [ 91.861537][ T5561] SELinux: ebitmap: truncated map [ 91.870367][ T5561] SELinux: failed to load policy [ 91.979385][ T5571] FAULT_INJECTION: forcing a failure. [ 91.979385][ T5571] name failslab, interval 1, probability 0, space 0, times 0 [ 91.992510][ T5571] CPU: 1 UID: 0 PID: 5571 Comm: syz.3.730 Not tainted 6.17.0-rc1-syzkaller #0 PREEMPT(voluntary) [ 91.992544][ T5571] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 91.992560][ T5571] Call Trace: [ 91.992592][ T5571] [ 91.992598][ T5571] __dump_stack+0x1d/0x30 [ 91.992625][ T5571] dump_stack_lvl+0xe8/0x140 [ 91.992665][ T5571] dump_stack+0x15/0x1b [ 91.992687][ T5571] should_fail_ex+0x265/0x280 [ 91.992715][ T5571] should_failslab+0x8c/0xb0 [ 91.992749][ T5571] kmem_cache_alloc_noprof+0x50/0x310 [ 91.992855][ T5571] ? security_file_alloc+0x32/0x100 [ 91.992976][ T5571] security_file_alloc+0x32/0x100 [ 91.993009][ T5571] init_file+0x5c/0x1d0 [ 91.993039][ T5571] alloc_empty_file+0x8b/0x200 [ 91.993175][ T5571] path_openat+0x68/0x2170 [ 91.993198][ T5571] ? _parse_integer_limit+0x170/0x190 [ 91.993228][ T5571] ? kstrtoull+0x111/0x140 [ 91.993319][ T5571] ? kstrtouint+0x76/0xc0 [ 91.993344][ T5571] do_filp_open+0x109/0x230 [ 91.993379][ T5571] do_sys_openat2+0xa6/0x110 [ 91.993420][ T5571] __x64_sys_openat+0xf2/0x120 [ 91.993516][ T5571] x64_sys_call+0x2e9c/0x2ff0 [ 91.993543][ T5571] do_syscall_64+0xd2/0x200 [ 91.993575][ T5571] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 91.993669][ T5571] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 91.993738][ T5571] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.993764][ T5571] RIP: 0033:0x7f72292cebe9 [ 91.993781][ T5571] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 91.993847][ T5571] RSP: 002b:00007f7227d2f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 91.993870][ T5571] RAX: ffffffffffffffda RBX: 00007f72294f5fa0 RCX: 00007f72292cebe9 [ 91.993884][ T5571] RDX: 00000000000c0141 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 91.993931][ T5571] RBP: 00007f7227d2f090 R08: 0000000000000000 R09: 0000000000000000 [ 91.993945][ T5571] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 91.993959][ T5571] R13: 00007f72294f6038 R14: 00007f72294f5fa0 R15: 00007ffcdc2b08a8 [ 91.993982][ T5571] [ 91.997584][ T5573] ÿÿÿÿÿÿ: renamed from vlan1 (while UP) [ 92.029056][ T5575] loop4: detected capacity change from 0 to 512 [ 92.104543][ T5577] netlink: 24 bytes leftover after parsing attributes in process `syz.3.733'. [ 92.156153][ T5575] ext4 filesystem being mounted at /155/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 92.285609][ T29] kauditd_printk_skb: 317 callbacks suppressed [ 92.285702][ T29] audit: type=1326 audit(1754949911.636:9818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5582 comm="syz.2.734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7cff70ebe9 code=0x7ffc0000 [ 92.315655][ T29] audit: type=1326 audit(1754949911.636:9819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5582 comm="syz.2.734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7cff70ebe9 code=0x7ffc0000 [ 92.339538][ T29] audit: type=1326 audit(1754949911.636:9820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5582 comm="syz.2.734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f7cff70ebe9 code=0x7ffc0000 [ 92.363061][ T29] audit: type=1326 audit(1754949911.636:9821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5582 comm="syz.2.734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7cff70ebe9 code=0x7ffc0000 [ 92.383789][ T5580] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5580 comm=syz.3.733 [ 92.386672][ T29] audit: type=1326 audit(1754949911.636:9822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5582 comm="syz.2.734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=285 compat=0 ip=0x7f7cff70ebe9 code=0x7ffc0000 [ 92.422622][ T29] audit: type=1326 audit(1754949911.636:9823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5582 comm="syz.2.734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7cff70ebe9 code=0x7ffc0000 [ 92.446160][ T29] audit: type=1326 audit(1754949911.636:9824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5582 comm="syz.2.734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7cff70ebe9 code=0x7ffc0000 [ 92.469462][ T29] audit: type=1326 audit(1754949911.636:9825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5582 comm="syz.2.734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7cff70ebe9 code=0x7ffc0000 [ 92.493340][ T29] audit: type=1326 audit(1754949911.636:9826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5582 comm="syz.2.734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f7cff70ebe9 code=0x7ffc0000 [ 92.517010][ T29] audit: type=1326 audit(1754949911.636:9827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5582 comm="syz.2.734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7cff70ebe9 code=0x7ffc0000 [ 92.718296][ T5598] netlink: 4 bytes leftover after parsing attributes in process `syz.3.738'. [ 92.773664][ T5601] loop2: detected capacity change from 0 to 8192 [ 92.784616][ T5602] pim6reg1: entered allmulticast mode [ 92.817137][ T5601] SELinux: ebitmap: truncated map [ 92.825248][ T5601] SELinux: failed to load policy [ 92.972637][ T5610] process 'syz.4.742' launched './file1' with NULL argv: empty string added [ 93.064618][ T5619] loop2: detected capacity change from 0 to 512 [ 93.076099][ T5620] loop4: detected capacity change from 0 to 512 [ 93.084581][ T5619] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 93.084581][ T5620] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 93.084850][ T5620] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.746: invalid indirect mapped block 2683928664 (level 1) [ 93.116063][ T5619] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.745: invalid indirect mapped block 2683928664 (level 1) [ 93.138105][ T5620] EXT4-fs (loop4): Remounting filesystem read-only [ 93.147358][ T5620] EXT4-fs (loop4): 1 truncate cleaned up [ 93.152987][ T5619] EXT4-fs (loop2): Remounting filesystem read-only [ 93.161562][ T5619] EXT4-fs (loop2): 1 truncate cleaned up [ 93.348766][ T5624] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5624 comm=syz.1.748 [ 93.664413][ T5634] pim6reg1: entered allmulticast mode [ 93.735846][ T5633] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5633 comm=syz.0.760 [ 93.886784][ T5637] loop3: detected capacity change from 0 to 8192 [ 93.903452][ T5645] vlan2: entered allmulticast mode [ 93.986856][ T5637] SELinux: ebitmap: truncated map [ 94.011749][ T5637] SELinux: failed to load policy [ 94.151681][ T5661] pim6reg1: entered allmulticast mode [ 94.354247][ T5664] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5664 comm=syz.4.763 [ 94.435975][ T5659] syz.4.763 (5659) used greatest stack depth: 9472 bytes left [ 94.513882][ T5680] loop4: detected capacity change from 0 to 512 [ 94.523965][ T5680] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 94.534492][ T5680] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.767: invalid indirect mapped block 2683928664 (level 1) [ 94.549078][ T5680] EXT4-fs (loop4): Remounting filesystem read-only [ 94.556599][ T5680] EXT4-fs (loop4): 1 truncate cleaned up [ 94.561508][ T5682] loop0: detected capacity change from 0 to 512 [ 94.633094][ T5682] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 94.649596][ T5691] loop1: detected capacity change from 0 to 512 [ 94.683282][ T5682] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.768: invalid indirect mapped block 2683928664 (level 1) [ 94.698173][ T5682] EXT4-fs (loop0): Remounting filesystem read-only [ 94.705626][ T5682] EXT4-fs (loop0): 1 truncate cleaned up [ 94.732657][ T5691] ext4 filesystem being mounted at /161/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 94.848274][ T5695] FAULT_INJECTION: forcing a failure. [ 94.848274][ T5695] name failslab, interval 1, probability 0, space 0, times 0 [ 94.861212][ T5695] CPU: 0 UID: 0 PID: 5695 Comm: syz.1.772 Not tainted 6.17.0-rc1-syzkaller #0 PREEMPT(voluntary) [ 94.861280][ T5695] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 94.861297][ T5695] Call Trace: [ 94.861302][ T5695] [ 94.861310][ T5695] __dump_stack+0x1d/0x30 [ 94.861332][ T5695] dump_stack_lvl+0xe8/0x140 [ 94.861351][ T5695] dump_stack+0x15/0x1b [ 94.861366][ T5695] should_fail_ex+0x265/0x280 [ 94.861405][ T5695] should_failslab+0x8c/0xb0 [ 94.861438][ T5695] kmem_cache_alloc_noprof+0x50/0x310 [ 94.861494][ T5695] ? getname_flags+0x80/0x3b0 [ 94.861546][ T5695] getname_flags+0x80/0x3b0 [ 94.861654][ T5695] path_setxattrat+0x223/0x310 [ 94.861696][ T5695] __x64_sys_setxattr+0x6e/0x90 [ 94.861789][ T5695] x64_sys_call+0xad2/0x2ff0 [ 94.861817][ T5695] do_syscall_64+0xd2/0x200 [ 94.861848][ T5695] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 94.861926][ T5695] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 94.861959][ T5695] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.861987][ T5695] RIP: 0033:0x7fb60199ebe9 [ 94.862007][ T5695] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 94.862026][ T5695] RSP: 002b:00007fb6003bd038 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc [ 94.862045][ T5695] RAX: ffffffffffffffda RBX: 00007fb601bc6180 RCX: 00007fb60199ebe9 [ 94.862057][ T5695] RDX: 00002000000001c0 RSI: 00002000000000c0 RDI: 0000200000000000 [ 94.862071][ T5695] RBP: 00007fb6003bd090 R08: 0000000000000000 R09: 0000000000000000 [ 94.862159][ T5695] R10: 000000000000002c R11: 0000000000000246 R12: 0000000000000001 [ 94.862174][ T5695] R13: 00007fb601bc6218 R14: 00007fb601bc6180 R15: 00007ffd81b3ff38 [ 94.862198][ T5695] [ 95.156710][ T5699] loop3: detected capacity change from 0 to 8192 [ 95.193979][ T5699] SELinux: ebitmap: truncated map [ 95.203610][ T5699] SELinux: failed to load policy [ 95.209116][ T5701] openvswitch: netlink: Message has 6 unknown bytes. [ 95.392814][ T5709] __nla_validate_parse: 7 callbacks suppressed [ 95.392953][ T5709] netlink: 24 bytes leftover after parsing attributes in process `syz.4.778'. [ 95.405669][ T5707] loop2: detected capacity change from 0 to 4096 [ 95.569987][ T5718] netlink: 4 bytes leftover after parsing attributes in process `syz.2.781'. [ 95.597622][ T5721] loop0: detected capacity change from 0 to 512 [ 95.616109][ T5721] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 95.629688][ T5721] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.791: invalid indirect mapped block 2683928664 (level 1) [ 95.639231][ T5709] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5709 comm=syz.4.778 [ 95.652761][ T5726] netlink: 4 bytes leftover after parsing attributes in process `syz.3.784'. [ 95.661491][ T5721] EXT4-fs (loop0): Remounting filesystem read-only [ 95.675550][ T5721] EXT4-fs (loop0): 1 truncate cleaned up [ 95.681610][ T5728] pim6reg1: entered allmulticast mode [ 95.727515][ T5731] pim6reg1: entered allmulticast mode [ 96.002791][ T5737] loop4: detected capacity change from 0 to 8192 [ 96.050789][ T5737] SELinux: ebitmap: truncated map [ 96.058719][ T5737] SELinux: failed to load policy [ 96.181930][ T5740] loop4: detected capacity change from 0 to 512 [ 96.202021][ T5740] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 96.210335][ T5740] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.788: invalid indirect mapped block 2683928664 (level 1) [ 96.224668][ T5740] EXT4-fs (loop4): Remounting filesystem read-only [ 96.231490][ T5740] EXT4-fs (loop4): 1 truncate cleaned up [ 96.562143][ T5748] loop0: detected capacity change from 0 to 512 [ 96.576931][ T5748] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 96.592016][ T5752] netlink: 36 bytes leftover after parsing attributes in process `syz.1.793'. [ 96.601116][ T5752] netlink: 36 bytes leftover after parsing attributes in process `syz.1.793'. [ 96.606866][ T5748] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.800: invalid indirect mapped block 2683928664 (level 1) [ 96.615898][ T5752] netlink: 36 bytes leftover after parsing attributes in process `syz.1.793'. [ 96.626586][ T5748] EXT4-fs (loop0): Remounting filesystem read-only [ 96.640129][ T5748] EXT4-fs (loop0): 1 truncate cleaned up [ 96.672106][ T5752] netlink: 36 bytes leftover after parsing attributes in process `syz.1.793'. [ 96.681220][ T5752] netlink: 36 bytes leftover after parsing attributes in process `syz.1.793'. [ 96.690394][ T5752] netlink: 36 bytes leftover after parsing attributes in process `syz.1.793'. [ 96.702609][ T5759] netlink: 14593 bytes leftover after parsing attributes in process `syz.1.793'. [ 96.897475][ T5765] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5765 comm=syz.3.797 [ 97.090473][ T5777] loop2: detected capacity change from 0 to 8192 [ 97.192025][ T5777] SELinux: ebitmap: truncated map [ 97.226141][ T5777] SELinux: failed to load policy [ 97.286144][ T5787] pim6reg1: entered allmulticast mode [ 97.553843][ T5805] loop4: detected capacity change from 0 to 512 [ 97.605388][ T5805] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 97.631157][ T5805] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.812: invalid indirect mapped block 2683928664 (level 1) [ 97.684204][ T5805] EXT4-fs (loop4): Remounting filesystem read-only [ 97.704784][ T5805] EXT4-fs (loop4): 1 truncate cleaned up [ 97.724412][ T5804] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5804 comm=syz.2.814 [ 97.761757][ T29] kauditd_printk_skb: 380 callbacks suppressed [ 97.761773][ T29] audit: type=1326 audit(1754949917.116:10206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5799 comm="syz.4.812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe60cd4ebe9 code=0x7ffc0000 [ 97.813326][ T29] audit: type=1326 audit(1754949917.156:10207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5799 comm="syz.4.812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe60cd4ebe9 code=0x7ffc0000 [ 97.837111][ T29] audit: type=1326 audit(1754949917.156:10208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5799 comm="syz.4.812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe60cd4ebe9 code=0x7ffc0000 [ 97.861289][ T29] audit: type=1326 audit(1754949917.156:10209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5799 comm="syz.4.812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe60cd4ebe9 code=0x7ffc0000 [ 97.885934][ T29] audit: type=1326 audit(1754949917.156:10210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5799 comm="syz.4.812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe60cd4ebe9 code=0x7ffc0000 [ 97.910132][ T29] audit: type=1326 audit(1754949917.156:10211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5799 comm="syz.4.812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe60cd4ebe9 code=0x7ffc0000 [ 97.934026][ T29] audit: type=1326 audit(1754949917.156:10212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5799 comm="syz.4.812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe60cd4ebe9 code=0x7ffc0000 [ 97.957854][ T29] audit: type=1326 audit(1754949917.156:10213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5799 comm="syz.4.812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe60cd4ebe9 code=0x7ffc0000 [ 97.981462][ T29] audit: type=1326 audit(1754949917.156:10214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5799 comm="syz.4.812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe60cd4ebe9 code=0x7ffc0000 [ 98.005029][ T29] audit: type=1326 audit(1754949917.156:10215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5799 comm="syz.4.812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe60cd4ebe9 code=0x7ffc0000 [ 98.095992][ T5815] loop1: detected capacity change from 0 to 8192 [ 98.133600][ T5815] SELinux: ebitmap: truncated map [ 98.141798][ T5815] SELinux: failed to load policy [ 98.196174][ T5822] loop2: detected capacity change from 0 to 512 [ 98.215456][ T5822] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 98.224739][ T5822] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.819: invalid indirect mapped block 2683928664 (level 1) [ 98.239611][ T5822] EXT4-fs (loop2): Remounting filesystem read-only [ 98.246450][ T5822] EXT4-fs (loop2): 1 truncate cleaned up [ 98.423896][ T5835] loop3: detected capacity change from 0 to 8192 [ 98.518761][ T5835] SELinux: ebitmap: truncated map [ 98.528751][ T5835] SELinux: failed to load policy [ 98.637901][ T5839] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5839 comm=syz.4.826 [ 98.882378][ T5855] loop3: detected capacity change from 0 to 8192 [ 98.917983][ T5858] pim6reg1: entered allmulticast mode [ 98.936609][ T5855] SELinux: ebitmap: truncated map [ 98.964431][ T5855] SELinux: failed to load policy [ 99.165141][ T5875] loop2: detected capacity change from 0 to 512 [ 99.230763][ T5875] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 99.308942][ T5875] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.837: invalid indirect mapped block 2683928664 (level 1) [ 99.330718][ T5875] EXT4-fs (loop2): Remounting filesystem read-only [ 99.339142][ T5875] EXT4-fs (loop2): 1 truncate cleaned up [ 99.463442][ T5876] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5876 comm=syz.3.839 [ 99.499448][ T5880] loop1: detected capacity change from 0 to 8192 [ 99.576660][ T5880] SELinux: ebitmap: truncated map [ 99.584855][ T5880] SELinux: failed to load policy [ 99.699792][ T5887] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5887 comm=syz.0.842 [ 99.794614][ T5889] loop3: detected capacity change from 0 to 8192 [ 99.858457][ T5889] SELinux: ebitmap: truncated map [ 99.878519][ T5889] SELinux: failed to load policy [ 100.067553][ T5903] loop4: detected capacity change from 0 to 8192 [ 100.159627][ T5903] SELinux: ebitmap: truncated map [ 100.216838][ T5903] SELinux: failed to load policy [ 100.222061][ T5918] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 100.231847][ T5918] SELinux: failed to load policy [ 100.387570][ T5927] loop3: detected capacity change from 0 to 512 [ 100.424881][ T5927] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 100.442588][ T5927] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.857: invalid indirect mapped block 2683928664 (level 1) [ 100.463449][ T5929] __nla_validate_parse: 10 callbacks suppressed [ 100.463533][ T5929] netlink: 4 bytes leftover after parsing attributes in process `syz.0.858'. [ 100.481948][ T5927] EXT4-fs (loop3): Remounting filesystem read-only [ 100.488698][ T5927] EXT4-fs (loop3): 1 truncate cleaned up [ 100.586968][ T5945] pim6reg1: entered allmulticast mode [ 100.650330][ T5955] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 100.680497][ T5955] SELinux: failed to load policy [ 100.725615][ T5953] loop3: detected capacity change from 0 to 8192 [ 100.810023][ T5953] SELinux: ebitmap: truncated map [ 100.821223][ T5953] SELinux: failed to load policy [ 101.068115][ T5971] loop3: detected capacity change from 0 to 1024 [ 101.218842][ T5980] netlink: 24 bytes leftover after parsing attributes in process `syz.1.886'. [ 101.284823][ T5988] loop4: detected capacity change from 0 to 512 [ 101.376364][ T5988] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 101.431645][ T5988] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.877: invalid indirect mapped block 2683928664 (level 1) [ 101.513240][ T5999] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5999 comm=syz.1.886 [ 101.541101][ T5988] EXT4-fs (loop4): Remounting filesystem read-only [ 101.557957][ T5988] EXT4-fs (loop4): 1 truncate cleaned up [ 101.774184][ T6010] loop2: detected capacity change from 0 to 512 [ 101.795182][ T6010] EXT4-fs mount: 40 callbacks suppressed [ 101.795198][ T6010] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.886565][ T6017] xt_limit: Overflow, try lower: 604147548/4200216962 [ 101.944555][ T6010] ext4 filesystem being mounted at /193/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 102.062322][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.101093][ T6025] netlink: 16 bytes leftover after parsing attributes in process `syz.2.882'. [ 102.109303][ T6022] netlink: 24 bytes leftover after parsing attributes in process `syz.3.887'. [ 102.151933][ T6025] capability: warning: `syz.2.882' uses deprecated v2 capabilities in a way that may be insecure [ 102.224504][ T6034] loop1: detected capacity change from 0 to 512 [ 102.238179][ T6027] loop4: detected capacity change from 0 to 8192 [ 102.274151][ T6034] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.275635][ T6038] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6038 comm=syz.3.887 [ 102.299565][ T6034] ext4 filesystem being mounted at /183/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 102.451704][ T6049] netlink: 4 bytes leftover after parsing attributes in process `syz.0.892'. [ 102.505103][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.544205][ T6049] pim6reg1: entered allmulticast mode [ 102.612416][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.636417][ T6060] loop1: detected capacity change from 0 to 512 [ 102.646471][ T6060] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 102.661809][ T6065] loop3: detected capacity change from 0 to 512 [ 102.673280][ T6065] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 102.683538][ T6060] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.895: invalid indirect mapped block 2683928664 (level 1) [ 102.684459][ T6067] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 102.698152][ T6065] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.897: invalid indirect mapped block 2683928664 (level 1) [ 102.726348][ T6060] EXT4-fs (loop1): Remounting filesystem read-only [ 102.731083][ T6065] EXT4-fs (loop3): Remounting filesystem read-only [ 102.733120][ T6060] EXT4-fs (loop1): 1 truncate cleaned up [ 102.745890][ T6060] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.768367][ T6065] EXT4-fs (loop3): 1 truncate cleaned up [ 102.774176][ T29] kauditd_printk_skb: 403 callbacks suppressed [ 102.774246][ T29] audit: type=1326 audit(1754949922.116:10619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6054 comm="syz.1.895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb60199ebe9 code=0x7ffc0000 [ 102.808133][ T29] audit: type=1326 audit(1754949922.156:10620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6054 comm="syz.1.895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7fb60199ebe9 code=0x7ffc0000 [ 102.831675][ T29] audit: type=1326 audit(1754949922.156:10621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6054 comm="syz.1.895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb60199ebe9 code=0x7ffc0000 [ 102.842224][ T6067] loop2: detected capacity change from 0 to 1024 [ 102.855285][ T29] audit: type=1326 audit(1754949922.156:10622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6054 comm="syz.1.895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb60199ebe9 code=0x7ffc0000 [ 102.886734][ T29] audit: type=1326 audit(1754949922.156:10623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6054 comm="syz.1.895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb60199ebe9 code=0x7ffc0000 [ 102.910895][ T29] audit: type=1326 audit(1754949922.156:10624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6054 comm="syz.1.895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7fb60199ebe9 code=0x7ffc0000 [ 102.934542][ T29] audit: type=1326 audit(1754949922.156:10625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6054 comm="syz.1.895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb60199ebe9 code=0x7ffc0000 [ 102.958245][ T29] audit: type=1326 audit(1754949922.156:10626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6054 comm="syz.1.895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fb60199ebe9 code=0x7ffc0000 [ 102.971978][ T6065] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.981728][ T29] audit: type=1326 audit(1754949922.156:10627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6054 comm="syz.1.895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb60199ebe9 code=0x7ffc0000 [ 102.981771][ T29] audit: type=1326 audit(1754949922.156:10628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6054 comm="syz.1.895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fb60199ebe9 code=0x7ffc0000 [ 103.044456][ T6067] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.095513][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.118384][ T6074] openvswitch: netlink: Message has 6 unknown bytes. [ 103.203625][ T6077] loop2: detected capacity change from 0 to 512 [ 103.215298][ T6077] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 103.223625][ T6077] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.901: invalid indirect mapped block 2683928664 (level 1) [ 103.247887][ T6077] EXT4-fs (loop2): Remounting filesystem read-only [ 103.255957][ T6077] EXT4-fs (loop2): 1 truncate cleaned up [ 103.262396][ T6077] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.354687][ T6084] netlink: 4 bytes leftover after parsing attributes in process `syz.0.903'. [ 103.415756][ T6085] pim6reg1: entered allmulticast mode [ 103.423171][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.445075][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.464201][ T6087] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 103.551464][ T6097] loop3: detected capacity change from 0 to 2048 [ 103.555451][ T6099] loop4: detected capacity change from 0 to 736 [ 103.577706][ T6099] rock: directory entry would overflow storage [ 103.584090][ T6099] rock: sig=0x3b10, size=4, remaining=3 [ 103.603017][ T6099] netlink: 'syz.4.909': attribute type 27 has an invalid length. [ 103.641431][ T6101] loop1: detected capacity change from 0 to 8192 [ 103.733491][ T6099] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.741037][ T6099] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.777659][ T6101] SELinux: ebitmap: truncated map [ 103.796334][ T6106] loop0: detected capacity change from 0 to 2048 [ 103.828445][ T6107] Invalid ELF header magic: != ELF [ 103.905024][ T6107] syz.4.909 uses obsolete (PF_INET,SOCK_PACKET) [ 103.926653][ T6101] SELinux: failed to load policy [ 104.055012][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.091591][ T6115] netlink: 4 bytes leftover after parsing attributes in process `syz.0.913'. [ 104.136879][ T6099] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 105.045009][ T6099] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 105.122542][ T6125] mmap: syz.2.914 (6125) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 105.159336][ T6105] syz_tun: entered allmulticast mode [ 105.194439][ T6107] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.204922][ T6107] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.215454][ T6107] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 105.293839][ T57] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.304435][ T57] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.315057][ T6105] syz_tun: left allmulticast mode [ 105.321544][ T57] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.333659][ T6132] FAULT_INJECTION: forcing a failure. [ 105.333659][ T6132] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 105.346941][ T6132] CPU: 0 UID: 0 PID: 6132 Comm: syz.1.917 Not tainted 6.17.0-rc1-syzkaller #0 PREEMPT(voluntary) [ 105.346975][ T6132] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 105.347066][ T6132] Call Trace: [ 105.347075][ T6132] [ 105.347085][ T6132] __dump_stack+0x1d/0x30 [ 105.347109][ T6132] dump_stack_lvl+0xe8/0x140 [ 105.347128][ T6132] dump_stack+0x15/0x1b [ 105.347144][ T6132] should_fail_ex+0x265/0x280 [ 105.347209][ T6132] should_fail+0xb/0x20 [ 105.347231][ T6132] should_fail_usercopy+0x1a/0x20 [ 105.347255][ T6132] _copy_from_user+0x1c/0xb0 [ 105.347283][ T6132] get_timespec64+0x4c/0x100 [ 105.347377][ T6132] __se_sys_clock_nanosleep+0x10b/0x250 [ 105.347421][ T6132] __x64_sys_clock_nanosleep+0x55/0x70 [ 105.347459][ T6132] x64_sys_call+0x272d/0x2ff0 [ 105.347481][ T6132] do_syscall_64+0xd2/0x200 [ 105.347564][ T6132] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 105.347596][ T6132] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 105.347627][ T6132] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.347752][ T6132] RIP: 0033:0x7fb60199ebe9 [ 105.347773][ T6132] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 105.347796][ T6132] RSP: 002b:00007fb6003ff038 EFLAGS: 00000246 ORIG_RAX: 00000000000000e6 [ 105.347820][ T6132] RAX: ffffffffffffffda RBX: 00007fb601bc5fa0 RCX: 00007fb60199ebe9 [ 105.347836][ T6132] RDX: 00002000000004c0 RSI: 0000000000000000 RDI: 0000000000000009 [ 105.347850][ T6132] RBP: 00007fb6003ff090 R08: 0000000000000000 R09: 0000000000000000 [ 105.347951][ T6132] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 105.347963][ T6132] R13: 00007fb601bc6038 R14: 00007fb601bc5fa0 R15: 00007ffd81b3ff38 [ 105.347982][ T6132] [ 105.349816][ T57] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.442071][ T6137] netlink: 24 bytes leftover after parsing attributes in process `syz.1.921'. [ 105.579186][ T6147] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6147 comm=syz.1.921 [ 105.601923][ T6151] FAULT_INJECTION: forcing a failure. [ 105.601923][ T6151] name failslab, interval 1, probability 0, space 0, times 0 [ 105.603282][ T6146] vhci_hcd: invalid port number 96 [ 105.614830][ T6151] CPU: 1 UID: 0 PID: 6151 Comm: syz.4.925 Not tainted 6.17.0-rc1-syzkaller #0 PREEMPT(voluntary) [ 105.614871][ T6151] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 105.614937][ T6151] Call Trace: [ 105.614945][ T6151] [ 105.614956][ T6151] __dump_stack+0x1d/0x30 [ 105.614988][ T6151] dump_stack_lvl+0xe8/0x140 [ 105.615015][ T6151] dump_stack+0x15/0x1b [ 105.615037][ T6151] should_fail_ex+0x265/0x280 [ 105.615068][ T6151] ? rtnl_newlink+0x5c/0x12d0 [ 105.615106][ T6151] should_failslab+0x8c/0xb0 [ 105.615142][ T6151] __kmalloc_cache_noprof+0x4c/0x320 [ 105.615187][ T6151] rtnl_newlink+0x5c/0x12d0 [ 105.615228][ T6151] ? xas_load+0x413/0x430 [ 105.615336][ T6151] ? cmp_ex_search+0x25/0x40 [ 105.615455][ T6151] ? bsearch+0x95/0xc0 [ 105.615494][ T6151] ? __pfx_cmp_ex_search+0x10/0x10 [ 105.615533][ T6151] ? strncpy_from_kernel_nofault+0x78/0x130 [ 105.615630][ T6151] ? search_extable+0x53/0x80 [ 105.615669][ T6151] ? strncpy_from_kernel_nofault+0x78/0x130 [ 105.615700][ T6151] ? strncpy_from_kernel_nofault+0x78/0x130 [ 105.615794][ T6151] ? __rcu_read_unlock+0x4f/0x70 [ 105.615825][ T6151] ? avc_has_perm_noaudit+0x1b1/0x200 [ 105.615904][ T6151] ? cred_has_capability+0x210/0x280 [ 105.615938][ T6151] ? selinux_capable+0x31/0x40 [ 105.615976][ T6151] ? security_capable+0x83/0x90 [ 105.616009][ T6151] ? ns_capable+0x7d/0xb0 [ 105.616115][ T6151] ? __pfx_rtnl_newlink+0x10/0x10 [ 105.616157][ T6151] rtnetlink_rcv_msg+0x5fb/0x6d0 [ 105.616220][ T6151] netlink_rcv_skb+0x120/0x220 [ 105.616248][ T6151] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 105.616334][ T6151] rtnetlink_rcv+0x1c/0x30 [ 105.616366][ T6151] netlink_unicast+0x5c0/0x690 [ 105.616413][ T6151] netlink_sendmsg+0x58b/0x6b0 [ 105.616466][ T6151] ? __pfx_netlink_sendmsg+0x10/0x10 [ 105.616496][ T6151] __sock_sendmsg+0x145/0x180 [ 105.616578][ T6151] ____sys_sendmsg+0x31e/0x4e0 [ 105.616618][ T6151] ___sys_sendmsg+0x17b/0x1d0 [ 105.616666][ T6151] __x64_sys_sendmsg+0xd4/0x160 [ 105.616701][ T6151] x64_sys_call+0x191e/0x2ff0 [ 105.616731][ T6151] do_syscall_64+0xd2/0x200 [ 105.616823][ T6151] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 105.616856][ T6151] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 105.616950][ T6151] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.616980][ T6151] RIP: 0033:0x7fe60cd4ebe9 [ 105.617003][ T6151] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 105.617029][ T6151] RSP: 002b:00007fe60b7b7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 105.617075][ T6151] RAX: ffffffffffffffda RBX: 00007fe60cf75fa0 RCX: 00007fe60cd4ebe9 [ 105.617093][ T6151] RDX: 0000000000008000 RSI: 0000200000000280 RDI: 0000000000000003 [ 105.617110][ T6151] RBP: 00007fe60b7b7090 R08: 0000000000000000 R09: 0000000000000000 [ 105.617168][ T6151] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 105.617185][ T6151] R13: 00007fe60cf76038 R14: 00007fe60cf75fa0 R15: 00007ffed50ada98 [ 105.617211][ T6151] [ 105.647053][ T6148] loop3: detected capacity change from 0 to 8192 [ 105.651429][ T6146] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 105.765228][ T6149] loop2: detected capacity change from 0 to 2048 [ 105.845240][ T6155] loop0: detected capacity change from 0 to 2048 [ 105.969850][ T6148] SELinux: ebitmap: truncated map [ 105.976362][ T6148] SELinux: failed to load policy [ 106.041087][ T6169] FAULT_INJECTION: forcing a failure. [ 106.041087][ T6169] name failslab, interval 1, probability 0, space 0, times 0 [ 106.053976][ T6169] CPU: 1 UID: 0 PID: 6169 Comm: syz.4.931 Not tainted 6.17.0-rc1-syzkaller #0 PREEMPT(voluntary) [ 106.054032][ T6169] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 106.054047][ T6169] Call Trace: [ 106.054054][ T6169] [ 106.054106][ T6169] __dump_stack+0x1d/0x30 [ 106.054134][ T6169] dump_stack_lvl+0xe8/0x140 [ 106.054157][ T6169] dump_stack+0x15/0x1b [ 106.054238][ T6169] should_fail_ex+0x265/0x280 [ 106.054264][ T6169] should_failslab+0x8c/0xb0 [ 106.054295][ T6169] kmem_cache_alloc_noprof+0x50/0x310 [ 106.054330][ T6169] ? alloc_empty_file+0x76/0x200 [ 106.054410][ T6169] alloc_empty_file+0x76/0x200 [ 106.054447][ T6169] alloc_file_pseudo+0xc6/0x160 [ 106.054490][ T6169] __shmem_file_setup+0x1de/0x210 [ 106.054535][ T6169] shmem_file_setup+0x3b/0x50 [ 106.054631][ T6169] __se_sys_memfd_create+0x2c3/0x590 [ 106.054661][ T6169] __x64_sys_memfd_create+0x31/0x40 [ 106.054688][ T6169] x64_sys_call+0x2abe/0x2ff0 [ 106.054715][ T6169] do_syscall_64+0xd2/0x200 [ 106.054751][ T6169] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 106.054860][ T6169] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 106.054892][ T6169] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.054955][ T6169] RIP: 0033:0x7fe60cd4ebe9 [ 106.054974][ T6169] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 106.054998][ T6169] RSP: 002b:00007fe60b7b6d68 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 106.055032][ T6169] RAX: ffffffffffffffda RBX: 0000000000000593 RCX: 00007fe60cd4ebe9 [ 106.055047][ T6169] RDX: 00007fe60b7b6dec RSI: 0000000000000000 RDI: 00007fe60cdd27e8 [ 106.055063][ T6169] RBP: 00002000000005c0 R08: 00007fe60b7b6b07 R09: 0000000000000000 [ 106.055077][ T6169] R10: 000000000000000a R11: 0000000000000202 R12: 0000000000000001 [ 106.055091][ T6169] R13: 00007fe60b7b6dec R14: 00007fe60b7b6df0 R15: 00007ffed50ada98 [ 106.055115][ T6169] [ 106.268707][ T6168] netlink: 4 bytes leftover after parsing attributes in process `syz.3.929'. [ 106.307079][ T6155] loop0: p2 p3 p7 [ 106.309146][ T6176] netlink: 16255 bytes leftover after parsing attributes in process `syz.4.935'. [ 106.331414][ T6178] pim6reg1: entered allmulticast mode [ 106.448663][ T6186] netlink: 4 bytes leftover after parsing attributes in process `syz.0.938'. [ 106.510292][ T6189] pim6reg1: entered allmulticast mode [ 106.620543][ T6193] loop4: detected capacity change from 0 to 512 [ 106.630284][ T6193] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 106.642949][ T6191] netlink: 4 bytes leftover after parsing attributes in process `syz.1.949'. [ 106.653775][ T6193] EXT4-fs (loop4): 1 truncate cleaned up [ 106.660522][ T6193] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.674557][ T6195] loop0: detected capacity change from 0 to 8192 [ 106.709290][ T6198] pim6reg1: entered allmulticast mode [ 106.724273][ T6195] SELinux: ebitmap: truncated map [ 106.730731][ T6195] SELinux: failed to load policy [ 106.739761][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.840390][ T6206] netlink: 4 bytes leftover after parsing attributes in process `syz.4.945'. [ 106.911222][ T6211] pim6reg1: entered allmulticast mode [ 106.917639][ T6210] loop0: detected capacity change from 0 to 8192 [ 106.962353][ T6210] SELinux: ebitmap: truncated map [ 106.968824][ T6210] SELinux: failed to load policy [ 107.059981][ T6213] loop3: detected capacity change from 0 to 2048 [ 107.097326][ T6216] loop0: detected capacity change from 0 to 512 [ 107.111611][ T6216] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 107.120293][ T6216] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.948: invalid indirect mapped block 2683928664 (level 1) [ 107.142127][ T6216] EXT4-fs (loop0): Remounting filesystem read-only [ 107.149126][ T6216] EXT4-fs (loop0): 1 truncate cleaned up [ 107.156635][ T6216] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.232254][ T6221] netlink: 4 bytes leftover after parsing attributes in process `syz.2.951'. [ 107.243558][ T6219] vhci_hcd: invalid port number 96 [ 107.248743][ T6219] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 107.293486][ T6223] pim6reg1: entered allmulticast mode [ 107.341995][ T6219] loop3: detected capacity change from 0 to 2048 [ 107.402124][ T6219] loop3: p2 p3 p7 [ 107.478576][ T6228] loop2: detected capacity change from 0 to 512 [ 107.492388][ T6228] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 107.509814][ T6228] EXT4-fs (loop2): 1 truncate cleaned up [ 107.516151][ T6228] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.598309][ T6232] loop3: detected capacity change from 0 to 8192 [ 107.609750][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.638090][ T6232] SELinux: ebitmap: truncated map [ 107.661335][ T6232] SELinux: failed to load policy [ 107.696451][ T6237] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6237 comm=syz.1.958 [ 107.733372][ T6239] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 107.753563][ T6242] loop2: detected capacity change from 0 to 1024 [ 107.773781][ T6242] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.787195][ T6243] netlink: 4 bytes leftover after parsing attributes in process `syz.3.959'. [ 107.796122][ T29] kauditd_printk_skb: 415 callbacks suppressed [ 107.796143][ T29] audit: type=1400 audit(1754949927.136:11044): avc: denied { add_name } for pid=6241 comm="syz.2.960" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 107.823164][ T29] audit: type=1400 audit(1754949927.136:11045): avc: denied { create } for pid=6241 comm="syz.2.960" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 107.843796][ T29] audit: type=1400 audit(1754949927.136:11046): avc: denied { read write } for pid=6241 comm="syz.2.960" name="file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 107.866984][ T29] audit: type=1400 audit(1754949927.136:11047): avc: denied { open } for pid=6241 comm="syz.2.960" path="/208/file1/file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 107.890656][ T29] audit: type=1400 audit(1754949927.136:11048): avc: denied { ioctl } for pid=6241 comm="syz.2.960" path="/208/file1/file1" dev="loop2" ino=15 ioctlcmd=0x662a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 107.916366][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.929603][ T3305] ================================================================== [ 107.930671][ T6250] pim6reg1: entered allmulticast mode [ 107.937826][ T3305] BUG: KCSAN: data-race in find_get_block_common / has_bh_in_lru [ 107.937864][ T3305] [ 107.937872][ T3305] read-write to 0xffff888237d26f50 of 8 bytes by task 6251 on cpu 1: [ 107.937891][ T3305] find_get_block_common+0x4f0/0x960 [ 107.967306][ T3305] bdev_getblk+0x83/0x3b0 [ 107.971660][ T3305] __ext4_get_inode_loc+0x303/0x930 [ 107.976884][ T3305] ext4_reserve_inode_write+0xd7/0x250 [ 107.982348][ T3305] __ext4_mark_inode_dirty+0x8c/0x3f0 [ 107.987749][ T3305] ext4_dirty_inode+0x92/0xc0 [ 107.992447][ T3305] __mark_inode_dirty+0x15c/0x760 [ 107.997493][ T3305] touch_atime+0x229/0x340 [ 108.001929][ T3305] ext4_file_mmap_prepare+0x13a/0x1a0 [ 108.007333][ T3305] mmap_region+0x8de/0x1630 [ 108.011868][ T3305] do_mmap+0x9b3/0xbe0 [ 108.015969][ T3305] vm_mmap_pgoff+0x17a/0x2e0 [ 108.020696][ T3305] ksys_mmap_pgoff+0x268/0x310 [ 108.025489][ T3305] x64_sys_call+0x14a3/0x2ff0 [ 108.030211][ T3305] do_syscall_64+0xd2/0x200 [ 108.034733][ T3305] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.040735][ T3305] [ 108.043066][ T3305] read to 0xffff888237d26f50 of 8 bytes by task 3305 on cpu 0: [ 108.050700][ T3305] has_bh_in_lru+0x35/0x1f0 [ 108.055221][ T3305] smp_call_function_many_cond+0x2a9/0xc60 [ 108.061038][ T3305] on_each_cpu_cond_mask+0x3c/0x80 [ 108.066160][ T3305] invalidate_bh_lrus+0x2a/0x30 [ 108.071265][ T3305] invalidate_bdev+0x42/0x70 [ 108.075867][ T3305] ext4_put_super+0x624/0x7d0 [ 108.080658][ T3305] generic_shutdown_super+0xe3/0x210 [ 108.085995][ T3305] kill_block_super+0x2a/0x70 [ 108.090714][ T3305] ext4_kill_sb+0x42/0x80 [ 108.095163][ T3305] deactivate_locked_super+0x72/0x1c0 [ 108.100654][ T3305] deactivate_super+0x97/0xa0 [ 108.105448][ T3305] cleanup_mnt+0x269/0x2e0 [ 108.109973][ T3305] __cleanup_mnt+0x19/0x20 [ 108.114411][ T3305] task_work_run+0x12e/0x1a0 [ 108.119014][ T3305] exit_to_user_mode_loop+0xe4/0x100 [ 108.124309][ T3305] do_syscall_64+0x1d6/0x200 [ 108.129117][ T3305] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.135130][ T3305] [ 108.137642][ T3305] value changed: 0xffff888106f28958 -> 0xffff88810052f958 [ 108.144928][ T3305] [ 108.147259][ T3305] Reported by Kernel Concurrency Sanitizer on: [ 108.153438][ T3305] CPU: 0 UID: 0 PID: 3305 Comm: syz-executor Not tainted 6.17.0-rc1-syzkaller #0 PREEMPT(voluntary) [ 108.164412][ T3305] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 108.174664][ T3305] ================================================================== [ 108.202551][ T6252] netlink: 4 bytes leftover after parsing attributes in process `syz.1.962'. [ 108.230962][ T29] audit: type=1400 audit(1754949927.276:11049): avc: denied { execmem } for pid=6248 comm="syz.4.963" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 108.231460][ T3308] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.272326][ T6253] pim6reg1: entered allmulticast mode [ 108.323785][ T6255] vhci_hcd: invalid port number 96 [ 108.328936][ T6255] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 108.368363][ T6255] loop2: detected capacity change from 0 to 2048 [ 108.427825][ T6255] loop2: p2 p3 p7