last executing test programs: 1.812656917s ago: executing program 2 (id=655): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000c40)={0x11, 0x4, &(0x7f0000000900)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd, @void, @value}, 0x94) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="df9800000400000008000002000000000020004ee7b1fe3c7b8cd617607aff453ef6b7bd001c46f599cbc745d38f07c3094ff202e0868e30c959eed952dac18d7880427b48c990dcce9e2b16f37987e230d2c46abbbeed5309c4320d4100de5c7af016bc4038778e5098d71acad90f18b21b4bc0dd6685ce3d0e50f29e631a6c18a65e0f7b242bde8f83ffe3111fb0e6ec20f4bd040fc3458edf19c10575a73974c79c762a3624d49d2e1c1c84a1d174a3ef92541309b60eb4", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r3, &(0x7f0000000240), &(0x7f00000004c0)=@udp6=r2}, 0x20) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev}, 0x2}}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0x2}, 0x18) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r5 = socket(0x1e, 0x805, 0x0) connect$tipc(r5, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{}, 0x2}}, 0x10) connect$tipc(r5, &(0x7f0000000000)=@id, 0x10) r6 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000006300)={'tunl0\x00', &(0x7f0000006240)={'sit0\x00', 0x0, 0x40, 0x8, 0x28455765, 0x5, {{0x1a, 0x4, 0x0, 0x32, 0x68, 0x67, 0x0, 0x80, 0x2f, 0x0, @loopback, @empty, {[@lsrr={0x83, 0x2b, 0xe0, [@loopback, @empty, @multicast1, @remote, @empty, @local, @multicast2, @remote, @multicast2, @dev={0xac, 0x14, 0x14, 0x1c}]}, @lsrr={0x83, 0x27, 0x2b, [@broadcast, @multicast1, @multicast1, @loopback, @broadcast, @multicast1, @local, @local, @broadcast]}]}}}}}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000006340)={{0x1, 0x1, 0x18, r4, {0xffffffffffffffff, 0xee01}}, './file0\x00'}) bpf$MAP_CREATE(0x0, &(0x7f0000006380)=@bloom_filter={0x1e, 0x7, 0x0, 0x85, 0x10, r3, 0x8, '\x00', r7, r8, 0x5, 0x2, 0x4, 0x9, @void, @value, @void, @value}, 0x50) recvmmsg(r6, &(0x7f0000005d00)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000001240)=""/4096, 0x1000}, {&(0x7f0000000240)=""/58, 0x3a}], 0x2, &(0x7f0000002240)=""/4096, 0x1000}, 0x1}, {{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000380)=""/169, 0xa9}, {&(0x7f00000002c0)=""/43, 0x2b}], 0x2, &(0x7f0000003240)=""/4096, 0x1000}, 0x28e}, {{&(0x7f0000000740)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f0000000f00)=[{&(0x7f0000000580)=""/21, 0x15}, {&(0x7f0000000600)=""/19, 0x13}, {&(0x7f00000007c0)=""/69, 0x45}, {&(0x7f0000000940)=""/131, 0x83}, {&(0x7f0000000b00)=""/203, 0xcb}, {&(0x7f0000000840)=""/115, 0x73}, {&(0x7f0000000d00)=""/215, 0xd7}, {&(0x7f0000000e00)=""/213, 0xd5}, {&(0x7f0000000a00)=""/32, 0x20}], 0x9}, 0xfffffff8}, {{&(0x7f0000000fc0)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f0000004540)=[{&(0x7f0000001040)=""/227, 0xe3}, {&(0x7f0000001140)=""/151, 0x97}, {&(0x7f0000004240)=""/152, 0x98}, {&(0x7f0000004300)=""/96, 0x60}, {&(0x7f0000004380)=""/172, 0xac}, {&(0x7f0000004440)=""/200, 0xc8}], 0x6, &(0x7f00000045c0)=""/138, 0x8a}, 0x9}, {{&(0x7f0000004680)=@xdp, 0x80, &(0x7f0000000c00), 0x0, &(0x7f0000004700)=""/247, 0xf7}, 0x8}, {{&(0x7f0000004800)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f0000005980)=[{&(0x7f0000004880)=""/131, 0x83}, {&(0x7f0000004940)=""/13, 0xd}, {&(0x7f0000004980)=""/4096, 0x1000}], 0x3}, 0x79}, {{&(0x7f00000059c0)=@x25, 0x80, &(0x7f0000005c80)=[{&(0x7f0000005a40)=""/42, 0x2a}, {&(0x7f0000005a80)=""/176, 0xb0}, {&(0x7f0000005b40)=""/141, 0x8d}, {&(0x7f0000005c00)=""/97, 0x61}], 0x4, &(0x7f0000005cc0)=""/47, 0x2f}, 0x3}], 0x7, 0x3, &(0x7f0000005ec0)) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000008c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r10 = syz_open_dev$sg(&(0x7f0000000c00), 0x400, 0x101a01) ioctl$SG_IO(r10, 0x2285, &(0x7f00000061c0)={0x53, 0xfffffffffffffffe, 0xef, 0x9, @buffer={0x0, 0x45, &(0x7f0000005f00)=""/69}, &(0x7f0000005f80)="7c6ac40af7da33a76ec82ed6439551521248a3c21249862f56c7b8d84c48c7a364518c6bdc2ee9946363060626038e703c6e29a138d4c2f73cc4812869c5a321c2c4699d6542c1b2d21ac943853163876b90db2c3e82601b7056393759b2e13123a5229a68f3cc4fec6273e13386f0302faa2f8a6a200b3dc2d2af1329c26ee82e1be6255e6dcfa1c1aa241ffbafd0d3c78ba12b5d245516b884c4aa18d1d79b74aa3897737416b5f3fe447fd8f3a36ecde98d0326f341d9c38cd7a69bcc4c6398da6d674f974bc4a2cf8b3d5bc11b902847aa4aa56aeffc1af0c498de79c5c223c101aba3dfb89b2c1ba7413866fe", &(0x7f0000006080)=""/247, 0x8, 0x10000, 0x3, &(0x7f0000006180)}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001200)={&(0x7f00000005c0)='kmem_cache_free\x00', r9, 0x0, 0x8000000000000000}, 0x18) close(r5) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f000000000000000002000000000000000800010001000000040004"], 0x24}, 0x1, 0x0, 0x0, 0x4005}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000000), 0x4000000000001f2, 0x0) msgsnd(0x0, 0x0, 0x2000, 0x0) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r12}, 0x10) io_uring_setup(0x177d, &(0x7f00000002c0)={0x0, 0x3e12, 0x2, 0x2, 0x3b1}) 1.750307147s ago: executing program 4 (id=656): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0x1, 0x3, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = syz_open_dev$usbmon(&(0x7f00000009c0), 0x9, 0x121140) ioctl$MON_IOCQ_RING_SIZE(r4, 0x9205) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='kfree\x00', r3}, 0x18) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kfree\x00', r6}, 0x18) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000012c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEAUTHENTICATE(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="c50efff40000000000001100000008000300", @ANYRES32=0x0, @ANYBLOB="08002a0084210000"], 0x24}}, 0x0) r9 = socket$inet_sctp(0x2, 0x5, 0x84) close(r9) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r10, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r10, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) sendmsg$inet_sctp(r9, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000640)="be", 0x1}], 0x1, &(0x7f00000000c0)=ANY=[@ANYBLOB="2000000000000000840000000200000006000400280100000b008002", @ANYRES32=r11], 0x20, 0x6044}, 0x6) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r12 = socket$inet6_sctp(0xa, 0x801, 0x84) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendto$inet6(r12, &(0x7f0000000000)='q', 0x1, 0x0, &(0x7f0000001080)={0xa, 0x4e21, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1}, 0x1c) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r12, 0x84, 0x1e, &(0x7f00000010c0), &(0x7f0000001100)=0x4) setreuid(0xee00, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x8100) 1.58589489s ago: executing program 4 (id=661): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0xcc, 0x30, 0x1, 0x0, 0x0, {}, [{0xb8, 0x1, [@m_tunnel_key={0x60, 0x1, 0x0, 0x0, {{0xf}, {0x30, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x0, 0x7, 0x0, 0x54a7}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0x54, 0x2, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x932f, 0x0, 0x7, 0xff, 0x5}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x58c, 0x20000000}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xcc}}, 0x0) 1.56828301s ago: executing program 4 (id=663): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000140)='mm_page_alloc\x00', r1}, 0x10) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r2, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, &(0x7f0000000140)=ANY=[], 0x8) setsockopt$inet6_IPV6_DSTOPTS(r2, 0x29, 0x3b, &(0x7f0000000080)=ANY=[], 0x8) setsockopt$inet6_int(r2, 0x29, 0x3a, &(0x7f0000000040)=0x8, 0x4) recvmmsg(r2, &(0x7f0000004940)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x2, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 1.194214395s ago: executing program 1 (id=680): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'geneve1\x00', 0x0}) sendto$packet(r0, &(0x7f00000002c0)="14419e5465f0006fc8afa8e40800", 0xe, 0x0, &(0x7f00000005c0)={0x11, 0x0, r1, 0x1, 0x40}, 0x14) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_DEP_LINK_UP(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x200, 0x70bd25, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x4000) 1.126071195s ago: executing program 3 (id=682): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f00000001c0)={[{@usrquota}, {@grpjquota}, {@nodelalloc}]}, 0x1, 0x4bc, &(0x7f0000000a40)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$sock_qrtr_TIOCINQ(r0, 0x541b, &(0x7f0000000040)) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) ioctl$EVIOCGPROP(r0, 0x80404509, &(0x7f00000000c0)=""/100) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_emit_ethernet(0x7a, &(0x7f0000000200)={@link_local={0x3, 0x80, 0xc2, 0x0, 0x0, 0x2}, @multicast, @void, {@ipv4={0x800, @generic={{0x14, 0x4, 0x1, 0x22, 0x6c, 0x66, 0x0, 0x9, 0xb529d3f988bdbe0a, 0x0, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@noop, @timestamp={0x44, 0x14, 0x27, 0x0, 0x1, [0xfffffffd, 0x82f, 0x8, 0x9]}, @rr={0x7, 0x13, 0x92, [@private=0xa010102, @empty, @remote, @empty]}, @end, @rr={0x7, 0x7, 0xba, [@multicast2]}, @rr={0x7, 0x7, 0x53, [@multicast2]}, @ra={0x94, 0x4}]}}, "1912aafd80b1be9fb1c356fad58e1b37bb4c7f9edfc332caeeaa816b"}}}}, 0x0) 1.125911926s ago: executing program 1 (id=683): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r0}, 0x10) socket$inet(0x2, 0x2, 0x1) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r1, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) r2 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) ioctl$HIDIOCSFEATURE(r2, 0xc0404806, 0x0) 1.109523015s ago: executing program 1 (id=684): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000001400000000000100c00000095007a22a40aa898c244a14e163cfb4703a09bcfa6f7b56555a11f63c12282189f92fd819f"], &(0x7f0000000240)='GPL\x00', 0x0, 0xfcb58220def8997, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='ext4_ext_handle_unwritten_extents\x00', r0, 0x0, 0x7}, 0x9) readlink(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0) syz_emit_ethernet(0x83, &(0x7f00000000c0)=ANY=[@ANYRESDEC=r0, @ANYRES16=0x0, @ANYRES16=0x0], 0x0) 1.089008186s ago: executing program 1 (id=685): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000300)={0xffffffffffffffff, 0x20, &(0x7f00000002c0)={&(0x7f00000001c0)=""/123, 0x7b, 0x0, &(0x7f00000005c0)=""/249, 0xf9}}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r2, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) bpf$TOKEN_CREATE(0x24, &(0x7f0000000340)={0x0, r0}, 0x8) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) unshare(0x8040480) r5 = syz_open_dev$loop(0x0, 0x10001, 0x40) ioctl$BLKPG(r5, 0x1269, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f0000000080), 0x1, 0x553, &(0x7f0000001080)="$eJzs3d9rW1UcAPDvTdv91nUwhopIYQ9O5tK19ccEH+aj6HCg7zO0d2U0WUaTjrUO3B7ciy8yBBEH4ru++zj8B/wrBjoYMoo++BK56U2XrUmbddnSmc8Hbjkn9ybnfnPv9/TcnBsSwNCayP4UIl6OiG+SiIMRkeTrRiNfObG23er9q7PZkkSj8elfSXO7rN56rdbz9ueVlyLit68ijhc2tltbXlkolcvpYl6frFcuTdaWV05cqJTm0/n04vTMzKm3Z6bfe/edvsX6xtl/vv/k9oenvj66+t0vdw/dTOJ0HMjXtcfxBK61VyZiIn9PxuL0IxtO9aGxnSQZ9A6wLSN5no9F1gccjJE864H/vy8jogEMqUT+w5BqjQNa1/Z9ug5+btz7YO0CaGP8o2ufjcSe5rXRvtXkoSuj7Hp3vA/tZ238+uetm9kS/fscAmBL165HxMnR0Y39X5L3f9t3sodtHm1D/wfPzu1s/PNmp/FPYX38Ex3GP/s75O52bJ3/hbt9aKarbPz3fsfx7/qk1fhIXnuhOeYbS85fKKdZ3/ZiRByLsd1ZfbP5nFOrdxrd1rWP/7Ila781Fsz34+7o7oefM1eql54k5nb3rke80nH8m6wf/6TD8c/ej7M9tnEkvfVat3Vbx/90NX6KeL3j8X8wo5VsPj852TwfJltnxUZ/3zjye7f2Bx1/dvz3bR7/eNI+X1t7/DZ+3PNv2m3dQ/FH7+f/ruSzZnlX/tiVUr2+OBWxK/l44+PTD57bqre2z+I/dnTz/q/T+b83Ij7vMf4bh39+taf4B3T85x7r+D9+4c5HX/zQrf3e+r+3mqVj+SO99H+97uCTvHcAAAAAAACw0xQi4kAkheJ6uVAoFtfu7zgc+wrlaq1+/Hx16eJcNL8rOx5jhdZM98G2+yGm8vthW/XpR+ozEXEoIr4d2dusF2er5blBBw8AAAAAAAAAAAAAAAAAAAA7xP4u3//P/DEy6L0Dnjo/+Q3Da8v878cvPQE7kv//MLzkPwwv+Q/DS/7D8JL/MLzkPwwv+Q/DS/4DAAAAAAAAAAAAAAAAAAAAAAAAAABAX509cyZbGqv3r85m9bnLy0sL1csn5tLaQrGyNFucrS5eKs5Xq/PltDhbrWz1euVq9dLUdCxdmayntfpkbXnlXKW6dLF+7kKlNJ+eS8eeSVQAAAAAAAAAAAAAAAAAAADwfKktryyUyuV0UUFhW4XRnbEbCn0uDLpnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAH/gsAAP//6AY3sQ==") r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r6, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r6, 0x0) r7 = open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x21) pwritev2(r7, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x2000, 0x0, 0x3) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000400)={[{@errors_remount}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x7}}, {@dioread_lock}, {@data_err_ignore}, {@mblk_io_submit}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@nojournal_checksum}]}, 0x1, 0x553, &(0x7f0000001080)="$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") r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001780)={0x18, 0x4, &(0x7f0000000f80)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0xb4}]}, &(0x7f0000000fc0)='GPL\x00', 0x2, 0xc6, &(0x7f0000001600)=""/198, 0x41100, 0x36, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001000)={0x0, 0xc, 0x10, 0x5}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000001040)=[r3, 0xffffffffffffffff, r0, r0, r2], &(0x7f0000001700)=[{0x4, 0x3, 0x7, 0xc}, {0x3, 0x4, 0x9, 0xc}, {0x4, 0x5, 0xd, 0x1}, {0x3, 0x4, 0x8, 0x9}, {0x1, 0x3, 0xa, 0xb}], 0x10, 0x7, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001840)={&(0x7f0000000f40)='rxrpc_rx_done\x00', r8, 0x0, 0x7}, 0x18) r9 = openat(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x0, 0x0) open_by_handle_at(r9, &(0x7f0000000240)=@reiserfs_2={0x8, 0x2, {0xb}}, 0x0) 1.030449127s ago: executing program 3 (id=686): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=@newtaction={0x74, 0x30, 0xb, 0x0, 0x0, {}, [{0x60, 0x1, [@m_vlan={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x9, 0x9}, 0x2}}, @TCA_VLAN_PUSH_VLAN_ID={0x6}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x8000}, 0x8800) (fail_nth: 3) 1.030008047s ago: executing program 3 (id=687): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r2}, 0x10) openat$selinux_checkreqprot(0xffffffffffffff9c, 0x0, 0x80402, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000940)=@newtfilter={0x180, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r5, {0x0, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x150, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x8, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x4}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x1c, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x5}]}, @TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x49}]}]}, @TCA_FLOWER_KEY_CT_ZONE={0x6, 0x5d, 0x5}, @TCA_FLOWER_KEY_ENC_OPTS_MASK={0x10c, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x3c, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x4}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x3000000}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0xc00}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0xff}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x2}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x9}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x5ac}]}, @TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x2c, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x86}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x6}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x6}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x8}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x34, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x19d}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x3}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x4}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x6}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x9}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0xe7}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x2c, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x5}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x8}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x46}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x8}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x1}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x34, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x3}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x8}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x6}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x11a8}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x81}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0xc, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0xb5}]}]}, @TCA_FLOWER_KEY_ARP_THA={0xa, 0x41, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x37}}, @TCA_FLOWER_KEY_ICMPV6_CODE={0x5}]}}]}, 0x180}, 0x1, 0x0, 0x0, 0x80}, 0x800) 1.021157097s ago: executing program 1 (id=688): sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f903", 0x11}], 0x1}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x4) close(r0) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r1, &(0x7f0000000000)={0x0, 0xf00, &(0x7f0000000040)=[{&(0x7f00000000c0)="5c00000014006b02c84e21100af32c6e0a0675f8d34460400000000000005c1e6182949a36c23d3b48dfd8cdbf9367b498fa51f60a64c9f4d493803792684b71bdd70000b6c0504bb9183132be471b93c91b5d7870743719b4b53cf2", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="e03f030013006bcd9e3fe3dc6e48aa31086b8700350000007ea60264160af3653c002e000d000af08bc3a0e69ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg(r1, &(0x7f0000000500)={0x0, 0x300, 0x0, 0x0, 0x0, 0x0, 0xa00}, 0x10000) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a6c52d922ba2a05dd42"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe, @void, @value}, 0x90) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x41, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x800000000003}, 0x1100, 0x5dd8, 0x0, 0x3, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = socket$inet_sctp(0x2, 0x5, 0x84) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bf"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmmsg$inet_sctp(r3, &(0x7f0000000b80)=[{0x0, 0x0, &(0x7f00000008c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="20000000000000008400000008000000ff02000000000000000000000000000118000000000000008400000005000000300000000200000030"], 0xd0, 0x10a0}], 0x1, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x6c, &(0x7f0000000000)='%', 0x0, 0xd01, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 964.122848ms ago: executing program 3 (id=689): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000202300800000000025ad9835850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r2 = socket$inet6(0xa, 0x40000080806, 0x0) keyctl$chown(0x4, 0x0, 0xee00, 0x0) io_uring_register$IORING_UNREGISTER_NAPI(0xffffffffffffffff, 0x1c, 0x0, 0x1) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) close(r2) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r1, 0x0, 0x0}, 0x20) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f0000000080)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) 931.757308ms ago: executing program 3 (id=690): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0x7, &(0x7f0000000540)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r1}, 0x18) clock_gettime(0x0, &(0x7f0000000040)) 870.499119ms ago: executing program 3 (id=691): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x3, &(0x7f0000000140), 0x1, 0x25f, &(0x7f0000000b00)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000900850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kfree\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xb}]}) bpf$MAP_CREATE(0x0, 0x0, 0x48) close_range(r2, 0xffffffffffffffff, 0x0) 870.030549ms ago: executing program 2 (id=692): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0xcc, 0x30, 0x1, 0x0, 0x0, {}, [{0xb8, 0x1, [@m_tunnel_key={0x60, 0x1, 0x0, 0x0, {{0xf}, {0x30, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x0, 0x7, 0x0, 0x54a7}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0x54, 0x2, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x932f, 0x0, 0x7, 0xff, 0x5}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x58c, 0x20000000}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xcc}}, 0x0) 863.746819ms ago: executing program 1 (id=693): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=@newqdisc={0x58, 0x24, 0xf0b, 0x13, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0x5}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x1ff, 0x4, 0x10001, 0x5902, 0x7f, 0x400, 0x800, 0x2, 0xffff294f}}}}]}, 0x58}}, 0x8000) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0xe, 0x9}, {0xfff3, 0x5}, {0xe, 0x2613a1b406814a86}}}, 0x24}}, 0x44804) r2 = socket$inet6(0xa, 0x3, 0xff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bind$inet6(r2, &(0x7f0000000880)={0xa, 0x80, 0x0, @remote, 0x6}, 0x1c) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @mcast1}, 0x1c) epoll_create1(0x80000) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, 0x0, 0x0) r3 = dup2(r2, r2) write$P9_RSTATFS(r3, &(0x7f00000000c0)={0x43, 0x9, 0x0, {0x0, 0xfff, 0x0, 0xffff, 0x0, 0xa7a5, 0x0, 0x3, 0x4a}}, 0x43) mmap(&(0x7f0000afa000/0x1000)=nil, 0x1000, 0x2, 0x810, r0, 0x56ef6000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r4, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r5, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) recvmmsg(r5, &(0x7f0000002f40)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000001cc0)=""/227, 0xe3}], 0x1}, 0x23ff}], 0x1, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) fstat(r5, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_generic(r0, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000002f80)={0x1560, 0x20, 0x200, 0x70bd2d, 0x2ddfdbfb, {0x1}, [@generic="2c8d89b0ce", @typed={0x8, 0xe0, 0x0, 0x0, @ipv4=@private=0xa010101}, @generic="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", @generic="4d7f512ce8e346846884f42870f8abfb2673bf1cf2e3db2b1704724c7b164ba0fadd0801529b8e1e7c374139cbdfa91d43a2ff63bbf51c7f4e91766851", @typed={0x8, 0x6d, 0x0, 0x0, @uid=r6}, @generic="fed995a7bf4a358e14e669fd3ecffb43b4665066bce08e2c6e4b606becc09711eddd", @nested={0x13d7, 0x79, 0x0, 0x1, [@nested={0x4, 0x12e}, @nested={0x1314, 0x46, 0x0, 0x1, [@generic="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", @typed={0xc, 0x4f, 0x0, 0x0, @u64=0x5}, @typed={0x8, 0xd8, 0x0, 0x0, @fd}, @nested={0x2fc, 0x27, 0x0, 0x1, [@typed={0x8, 0x6d, 0x0, 0x0, @str='sfb\x00'}, @nested={0x8, 0x5b, 0x0, 0x1, [@nested={0x4, 0x62}]}, @generic="6f07642012bd824487effb083e11de7ada04659bc6a70b3d4d158091b3e0a422878749aef37c1258057dc9fd9240843791061efaa29df9e68d", @generic, @nested={0x1e8, 0x22, 0x0, 0x1, [@generic="157d496389093273023082cd93e74452dad1f672aee8ed8df75e987fb8ad36ce41fc6aa336ff2d3f20fbd1e3498141b3", @nested={0x4, 0x34}, @typed={0x14, 0xfe, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @remote}}, @generic="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", @typed={0x14, 0x105, 0x0, 0x0, @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}}, @nested={0x4, 0x7b}, @generic="b091a9423e8114996ee6a45895353eaf04cafc5cdfb4b338b274cd5ec56254c632cd2757a17c", @generic="544c28ee4d6d7b0fafa3cdc04d5dff8b32c2a392f063766f37f938241cf677b347d635dd69d0d339f72db1cc629eb19b360ea3f60388", @generic="282100c7961d277a08533742d27315c23a1452ca9fbb781c2201901c8efd6e1b66bd73bf340fa73117cdc8"]}, @generic="446ae1c0fb31ca765b61ec0eb67991c35ce2ce8dffd801da46149e693c9089d1e6657bd35ec67809c1450e34b7701e75360181091edbbd5603e0bf6947f270c9661ccafb29257d4d1e2ab19526c118515f2edc6e695339dd427958b6c36c31d0e2cb185e99c1e383b88bb7f53e9f0781a523078b511edd3ce2de359aa147ac638c8bbfc2c8d7bf40f00ec75a54e26fe9f1bb0489d8e4c74a337a44d52069a3230c7ab56bd619a1528c7e6bf6df3cc3b6d3893ea10fa58dc8305d107834c2c47ef413b806bfa52d"]}]}, @generic="e7593340fcf1cdfb824a371b4924992f202063ef1042f5306e727574bb85e2a3ab9f6aac1c6bdea42f75ff8ea642120460414af882bfe56652e7a84a3d8329e54a336e82489418e9b9a6ab507ad012030f0a67f08a279d79fd0f8a5d82540cc35001b804e9495288589ef4a3be7fba2cb33c976e5d412ddb02a69a3d62b56eb73d97cd5909b6512a0cdc0819c0a8e8fd03bc841c0ec438eb7e38e2aa200c01c28a70a72cf144a6ebbbb7a259c47a5bba97a4e5a188e849", @nested={0x4, 0x127}]}]}, 0x1560}, 0x1, 0x0, 0x0, 0x24008800}, 0x20044000) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000500)='9p_client_req\x00', r8}, 0x10) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup(r9) 841.180049ms ago: executing program 2 (id=694): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r0}, &(0x7f0000000000), &(0x7f00000005c0)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffe0a, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x29) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r2}, 0x18) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) 813.11246ms ago: executing program 2 (id=695): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mremap(&(0x7f0000ff2000/0xd000)=nil, 0xd000, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil) r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) inotify_rm_watch(r1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000021c0), 0x181000) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r2, 0xc0a85320, &(0x7f0000000c40)={{0x80}, 'port0\x00', 0x0, 0x100c40, 0x5, 0x6, 0x2, 0x40, 0x3, 0x0, 0x1, 0x5}) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r2, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00', 0x28, 0x71430, 0x0, 0x4, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x3}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_emit_ethernet(0x66, &(0x7f00000004c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbbbbbbbbbbbbb86dd60003a0400303afffe808d000000000000000000000000bbff020000000000000000000000000001"], 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) connect$bt_l2cap(r4, &(0x7f0000000000)={0x1f, 0xbbfe, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0xb1, 0x1}, 0xe) close(r2) 743.320821ms ago: executing program 2 (id=696): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec8500000050000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x159d0682f53ea167, 0xe, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000004c0)='kfree\x00', r1, 0x0, 0x6}, 0x18) r2 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) ioctl$USBDEVFS_FREE_STREAMS(r2, 0x8008551d, &(0x7f0000000140)={0x5178, 0x1, [{0x1, 0x1}]}) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r3}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500001000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r4}, 0x10) r5 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r5, &(0x7f0000000600)={&(0x7f0000000040)={0x2, 0xffff, @remote}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f00000004c0)="1ed8b7f9d457", 0x6}], 0x2, &(0x7f0000000780)=ANY=[@ANYBLOB="1c000000000000000000000007000000890b040a0101027f00000100000000001c000000000000000000000008"], 0x40}, 0x20000000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kfree\x00', r0, 0x0, 0xfffffffffffffffe}, 0x18) syz_usbip_server_init(0x2) 633.748652ms ago: executing program 4 (id=697): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000001400000000000000ff000000850000000e000000850000000700000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000640)='./bus\x00', 0x1220850, &(0x7f0000000880)=ANY=[@ANYRES16=r1], 0x0, 0x37b, &(0x7f00000008c0)="$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") r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) fadvise64(r2, 0x0, 0x0, 0x4) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r3, &(0x7f0000000000)="3ecacb19c3a7583860ce90aa", 0xc, 0x0, &(0x7f0000000100)={0xa, 0x4e20, 0x3, @remote, 0x3}, 0x1c) 474.473434ms ago: executing program 4 (id=698): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000300)={0xffffffffffffffff, 0x20, &(0x7f00000002c0)={&(0x7f00000001c0)=""/123, 0x7b, 0x0, &(0x7f00000005c0)=""/249, 0xf9}}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r2, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) bpf$TOKEN_CREATE(0x24, &(0x7f0000000340)={0x0, r0}, 0x8) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) unshare(0x8040480) r5 = syz_open_dev$loop(0x0, 0x10001, 0x40) ioctl$BLKPG(r5, 0x1269, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f0000000080), 0x1, 0x553, &(0x7f0000001080)="$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") r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r6, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r6, 0x0) r7 = open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x21) pwritev2(r7, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x2000, 0x0, 0x3) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000400)={[{@errors_remount}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x7}}, {@dioread_lock}, {@data_err_ignore}, {@mblk_io_submit}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@nojournal_checksum}]}, 0x1, 0x553, &(0x7f0000001080)="$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") r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001780)={0x18, 0x4, &(0x7f0000000f80)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0xb4}]}, &(0x7f0000000fc0)='GPL\x00', 0x2, 0xc6, &(0x7f0000001600)=""/198, 0x41100, 0x36, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001000)={0x0, 0xc, 0x10, 0x5}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000001040)=[r3, 0xffffffffffffffff, r0, r0, r2], &(0x7f0000001700)=[{0x4, 0x3, 0x7, 0xc}, {0x3, 0x4, 0x9, 0xc}, {0x4, 0x5, 0xd, 0x1}, {0x3, 0x4, 0x8, 0x9}, {0x1, 0x3, 0xa, 0xb}], 0x10, 0x7, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001840)={&(0x7f0000000f40)='rxrpc_rx_done\x00', r8, 0x0, 0x7}, 0x18) r9 = openat(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x0, 0x0) open_by_handle_at(r9, &(0x7f0000000240)=@reiserfs_2={0x8, 0x2, {0xb}}, 0x0) 338.359186ms ago: executing program 0 (id=702): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) io_setup(0x4, &(0x7f0000000040)=0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x80400, 0x0) mkdirat(r2, &(0x7f0000000300)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x408) io_cancel(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x3, 0x3, r0, &(0x7f0000000080)="b23bf8b4c50f36e7fd64313785e14b2e6fea7be5c10af137472d1845c75faf3b8966a5128c1238096345a1631e9424e04eebde9e5891ed5b5088ffaf111f1074e1a0e76b188d8c03861f8917f8cc856705daab2e341106bb4fe3950b80616ee0fa223f10d43c8b9e0b", 0x69, 0xcbee, 0x0, 0x1, r2}, &(0x7f0000000140)) r3 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r3, 0x65, 0x1, &(0x7f0000000000)=[{{0x0, 0x1, 0x0, 0x1}, {0x1, 0x0, 0x1}}, {{0x4, 0x1, 0x1}, {0x1, 0x0, 0x0, 0x1}}, {{0x4, 0x1, 0x0, 0x1}, {0x3}}, {{0x4, 0x0, 0x1, 0x1}, {0x4, 0x0, 0x0, 0x1}}], 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kmem_cache_free\x00', r4}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) symlink(&(0x7f00000000c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000cc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') readlink(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000001200)=""/4096, 0x1000) setsockopt$CAN_RAW_FILTER(r3, 0x65, 0x1, 0x0, 0x0) 337.620506ms ago: executing program 4 (id=703): perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x56, 0x1, 0x8, 0x0, 0x0, 0x7fef, 0x25423, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1107b7d, 0x1, @perf_bp={0x0, 0x4}, 0x14105, 0x100000001, 0xfffffbff, 0xb, 0x2, 0x0, 0x6, 0x0, 0x2, 0x0, 0xa9e2}, 0x0, 0xfffffffffdffffdf, 0xffffffffffffffff, 0x9) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c0000000300010001"], 0x19) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000040)={r0, &(0x7f0000000600)="84dead3eb16687c49d7c660e39404dc79414c2b914c27cf4803af1e232b8c21b4d385a0a5e10c99f071686b574e65974028c90dc0875634eccff88c2f226274569b90c93cebaeee753340af2b7bc648f48b1c7b6eb61d70d1a6cab92a8d3ca65c7426edc06a5db19c63725c0c59ec52e7f7f1abb139255b3eb53439ba1398ef13298230e", 0x0}, 0x20) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r1, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r1, 0x84, 0x15, &(0x7f00000002c0)={0x2}, 0x1) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x8004, &(0x7f0000000080)={[{@discard}, {@bh}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x7b9, &(0x7f00000007c0)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x1) pwrite64(r2, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x8, 0x30410, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30c3a0e4, 0x1, @perf_config_ext={0x20000000000000, 0x1}, 0x11d08, 0x2, 0x0, 0x2, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$inet6(0xa, 0x1, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0a00000001000000080000000800000000000000", @ANYRES32, @ANYBLOB="000000000000000000000000000000c4169aaf58b346fa1c0000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000318110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r6, &(0x7f0000000000)={0x0, 0xf00, &(0x7f0000000040)=[{&(0x7f00000000c0)="5c00000014006b02c84e21100af32c6e0a0675f8d34460400000000000005c1e6182949a36c23d3b48dfd8cdbf9367b498fa51f60a64c9f4d493803792684b71bdd70000b6c0504bb9183132be471b93c91b5d7870743719b4b53cf2", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000f80)={0x0, 0x0, 0x1, 0x0, '\x00', [{0xeb, 0x3, 0x2, 0x2, 0x101, 0x1}, {0xfffffffd, 0xfffffffd, 0x8000000000000000, 0xc00000000000000, 0xd2bb, 0x200}], ['\x00']}) recvmsg(r6, &(0x7f0000000500)={0x0, 0x300, 0x0, 0x0, 0x0, 0x0, 0xa00}, 0x10000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x18) r7 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r2, 0x84, 0x65, &(0x7f0000000380)=[@in6={0xa, 0x4e22, 0x8, @private2, 0x7d87}, @in6={0xa, 0x4e22, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}], 0x48) sendfile(r7, r7, 0x0, 0x1) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r8, @ANYBLOB="00000000000000001c001a800800028008000200080000003e1200"], 0x44}}, 0x0) r9 = socket(0x10, 0x3, 0x0) sendmmsg(r9, &(0x7f0000000000), 0x4000000000001f2, 0x0) getpeername(r2, &(0x7f00000001c0)=@l2tp6={0xa, 0x0, 0x0, @local}, &(0x7f0000000000)=0x80) ioctl$TIOCGPTPEER(r2, 0x5441, 0x2) ioctl$sock_SIOCETHTOOL(r3, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0x7, 0x0, 0x20000000, 0x0, 0x0, 0x900}}) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x107842, 0x42) 226.250817ms ago: executing program 0 (id=704): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) mlockall(0x2) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xffffffffffff8bc3, 0x3, &(0x7f0000000040)) r1 = getegid() statx(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000240)={{{@in6=@private2, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in=@loopback}}, &(0x7f0000000340)=0xe8) stat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$bpf(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x80400, &(0x7f00000004c0)={[{@gid={'gid', 0x3d, r1}}, {@mode={'mode', 0x3d, 0x4}}, {}, {@gid={'gid', 0x3d, r2}}, {@uid={'uid', 0x3d, r4}}], [{@subj_role={'subj_role', 0x3d, '-(!\\G[)+ ['}}, {@dont_measure}, {@uid_eq={'uid', 0x3d, r5}}, {@euid_eq={'euid', 0x3d, r7}}, {@context={'context', 0x3d, 'root'}}, {@audit}, {@obj_role={'obj_role', 0x3d, '/dev/ptmx\x00'}}, {@fsuuid={'fsuuid', 0x3d, {[0x62, 0x38, 0x61, 0x62, 0x64, 0x61, 0x61, 0x61], 0x2d, [0x64, 0x31, 0x31, 0x66], 0x2d, [0x32, 0x65, 0x62, 0x33], 0x2d, [0x32, 0x65, 0x62, 0x63], 0x2d, [0x30, 0x31, 0x63, 0x35, 0x66, 0x62, 0x36, 0x33]}}}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/ptmx\x00'}}]}) r8 = openat$incfs(0xffffffffffffffff, &(0x7f0000000600)='.pending_reads\x00', 0x64000, 0x1) bind$inet(r8, &(0x7f0000000640)={0x2, 0x4e20, @multicast1}, 0x10) ioctl$LOOP_CONFIGURE(r8, 0x4c0a, &(0x7f0000000680)={r8, 0x80, {0x0, 0x0, 0x0, 0x7, 0x3, 0x0, 0x4, 0x1d, 0x9, "1504773959a31a471015ecb3f2fbf1c268117b7e70c417794a252695e1d35cd5681b9eb99278e7c9fd454789773a3e4bf77913174ffb895abc30ad0203b95b9a", "7f2d7b6af8a44a3f12091adbc68b7921a1fc6d88184dab8af349920a6146751e66e2a39f47b065c2ddf7e9143bb7b8abee17dbce251c12b9332e9c2db240e862", "ff00973ec0df7f060adf431b5e89abb67cadbf58a00e4e676d9010b7a762fbf4", [0x7]}}) pipe2(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) setsockopt$inet_mreqn(r9, 0x0, 0x23, &(0x7f0000000800)={@initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, r3}, 0xc) setresgid(r2, r1, r6) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xfffffffffffffff9, 0x9, &(0x7f0000000840)=0x1) r11 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000008c0)={&(0x7f0000000880)='host1x_channel_submit\x00', r8, 0x0, 0x19d}, 0x18) ioctl$TIOCGPGRP(r9, 0x540f, &(0x7f0000000900)=0x0) r13 = syz_pidfd_open(r12, 0x0) recvmsg$kcm(r9, &(0x7f0000000cc0)={&(0x7f0000000940)=@vsock={0x28, 0x0, 0x0, @local}, 0x80, &(0x7f0000000c00)=[{&(0x7f00000009c0)=""/18, 0x12}, {&(0x7f0000000a00)=""/6, 0x6}, {&(0x7f0000000a40)=""/83, 0x53}, {&(0x7f0000000ac0)=""/70, 0x46}, {&(0x7f0000000b40)=""/110, 0x6e}, {&(0x7f0000000bc0)=""/45, 0x2d}], 0x6, &(0x7f0000000c80)=""/16, 0x10}, 0x1) prctl$PR_SET_NAME(0xf, &(0x7f0000000d00)='host1x_channel_submit\x00') ioctl$PERF_EVENT_IOC_SET_BPF(r11, 0x40042408, r10) socket$inet6(0xa, 0x800, 0x4) r14 = openat$zero(0xffffffffffffff9c, &(0x7f0000000d40), 0x222240, 0x0) r15 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000001f40), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000002000)={0xf, 0x1f, &(0x7f0000000d80)=@raw=[@jmp={0x5, 0x1, 0xd, 0x4, 0x8, 0x6, 0x1}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r10}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r14}}, @jmp={0x5, 0x0, 0x7, 0x5, 0x5, 0x40, 0xfffffffffffffffc}, @jmp={0x5, 0x0, 0x7, 0x0, 0xa, 0x40, 0xfffffffffffffffc}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2}], &(0x7f0000000e80)='syzkaller\x00', 0x1, 0x1000, &(0x7f0000000ec0)=""/4096, 0x40f00, 0x32, '\x00', r3, @cgroup_device, 0xffffffffffffffff, 0x8, &(0x7f0000001ec0)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000001f00)={0x2, 0xb, 0x1, 0x8f}, 0x10, 0xffffffffffffffff, r15, 0x4, &(0x7f0000001f80)=[r10], &(0x7f0000001fc0)=[{0x2, 0x4, 0x0, 0x8}, {0x2, 0x5, 0x0, 0x6}, {0x2, 0x4, 0xa, 0x2}, {0x1, 0x2, 0x4, 0xc}], 0x10, 0x7, @void, @value}, 0x94) socket$tipc(0x1e, 0x5, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r8, 0x29, 0x23, &(0x7f0000002140)={{{@in=@local, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}}}, &(0x7f0000002240)=0xe8) mount$9p_fd(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x2080000, &(0x7f0000002280)={'trans=fd,', {'rfdno', 0x3d, r14}, 0x2c, {'wfdno', 0x3d, r13}, 0x2c, {[{@posixacl}, {@directio}], [{@uid_gt={'uid>', r7}}, {@subj_type}, {@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@uid_eq={'uid', 0x3d, r16}}]}}) 226.037997ms ago: executing program 0 (id=705): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r0}, &(0x7f0000000000), &(0x7f00000005c0)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffe0a, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x29) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r2}, 0x18) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) 198.203188ms ago: executing program 0 (id=706): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_DEL(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000840)={0x1c, r1, 0x1, 0x0, 0x25dfdbfd, {0x54}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8010}, 0x8000) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, r1, 0x1, 0x0, 0x25cfdbfc, {0x54}}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x40010) 174.832018ms ago: executing program 2 (id=707): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000140)='mm_page_alloc\x00', r1}, 0x10) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r2, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, &(0x7f0000000140)=ANY=[], 0x8) setsockopt$inet6_IPV6_DSTOPTS(r2, 0x29, 0x3b, &(0x7f0000000080)=ANY=[], 0x8) setsockopt$inet6_int(r2, 0x29, 0x3a, &(0x7f0000000040)=0x8, 0x4) recvmmsg(r2, &(0x7f0000004940)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x2, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 153.154538ms ago: executing program 0 (id=708): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='cdg\x00', 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r1, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) r3 = socket$kcm(0x10, 0x2, 0x0) r4 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x11300}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000002040)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) sendmsg$kcm(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000480)="d80000001c0081064e81f782db44b9040a1d08041000000000000aa1180015000600142603600e1208000f0000810401a8001600200001400300000007391bd06b3c70c30161c1", 0x47}, {&(0x7f0000000840)="5c4875c6cad162c8a030dbf75c317dad4320e1bb556d3b3e131b77de8bd885166fc0c25d69226ae9915eccf9551f804eae36cf2327896a817179f04f35d9a7deed88adf4ca13a5a0c36a7496d22b9adf2c0fa13e1572ad237e2677a2797d5dd9307bff0bc01e4fd69c546e17a7118272ace242bc6025d0b60a12b3788fa6a7649045e4af16ba69df4bd43527a3d09bb308", 0x91}], 0x2, 0x0, 0x0, 0x7400}, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) r8 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r8, 0x11b, 0x2, &(0x7f0000000180)=0x200008, 0x4) r9 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$EBT_SO_SET_ENTRIES(r9, 0x0, 0x80, &(0x7f00000003c0)=@nat={'nat\x00', 0x19, 0x2, 0x2b4, [0x200000000980, 0x0, 0x0, 0x2000000009b0, 0x2000000009e0], 0x0, &(0x7f0000000380), &(0x7f0000000980)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffc}, {0x0, '\x00', 0x0, 0x2}, {0x0, '\x00', 0x0, 0x7fffffffffffffff, 0x2, [{0x11, 0x1, 0x6007, 'xfrm0\x00', 'dummy0\x00', 'lo\x00', 'caif0\x00', @multicast, [0x0, 0xff], @local, [0x0, 0x0, 0xff, 0xff, 0x0, 0xff], 0x6e, 0x6e, 0xa6, [], [], @snat={'snat\x00', 0x10, {{@empty, 0xfffffffffffffffc}}}}, {0x9, 0x72, 0x4, 'vcan0\x00', 'veth1\x00', 'ip6tnl0\x00', 'veth1_to_bond\x00', @local, [0xff, 0x0, 0xff, 0xff, 0x0, 0xff], @broadcast, [0x0, 0x0, 0x0, 0xff, 0x0, 0xff], 0xe6, 0x116, 0x14e, [@connbytes={{'connbytes\x00', 0x0, 0x18}, {{[{0x3}, {0x4}], 0x1, 0x2}}}, @cluster={{'cluster\x00', 0x0, 0x10}, {{0x7fff, 0x6, 0x8}}}], [@common=@STANDARD={'\x00', 0x8, {0xffffffffffffffff}}], @snat={'snat\x00', 0x10, {{@broadcast, 0x10}}}}]}]}, 0x32c) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0) r10 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f000000000000000002000000000000000800010001000000040004"], 0x24}, 0x1, 0x0, 0x0, 0x4005}, 0x0) sendmmsg(r10, &(0x7f0000000000), 0x4000000000001f2, 0x0) connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @dev}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000340)='dctcp\x00', 0x6) 0s ago: executing program 0 (id=709): sigaltstack(&(0x7f0000000480)={&(0x7f0000004000)=""/4126, 0x80000001, 0x101e}, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x1e, 0x12, r0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) kernel console output (not intermixed with test programs): 40.866478][ T3871] RSP: 002b:00007f694bee7000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 40.866570][ T3871] RAX: ffffffffffffffda RBX: 00007f694daa5fa0 RCX: 00007f694d87d41f [ 40.866585][ T3871] RDX: 000000000000004a RSI: 0000200000000000 RDI: 00000000000000c8 [ 40.866599][ T3871] RBP: 00007f694bee7090 R08: 0000000000000000 R09: 0000000000000000 [ 40.866614][ T3871] R10: 000000000000004a R11: 0000000000000293 R12: 0000000000000001 [ 40.866628][ T3871] R13: 0000000000000000 R14: 00007f694daa5fa0 R15: 00007fffd12da9b8 [ 40.866745][ T3871] [ 41.134351][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.329189][ T3873] Invalid logical block size (4128) [ 41.342979][ T3896] tipc: Failed to remove unknown binding: 66,1,1/0:2691277271/2691277272 [ 41.351859][ T3896] tipc: Failed to remove unknown binding: 66,1,1/0:2691277271/2691277272 [ 41.391484][ T3898] syz.2.140 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 41.446465][ T3905] loop4: detected capacity change from 0 to 512 [ 41.454001][ T3905] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 41.471042][ T3905] EXT4-fs (loop4): orphan cleanup on readonly fs [ 41.478170][ T3905] EXT4-fs error (device loop4): ext4_acquire_dquot:6935: comm syz.4.143: Failed to acquire dquot type 1 [ 41.490569][ T3905] EXT4-fs (loop4): 1 truncate cleaned up [ 41.496815][ T3905] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 41.511497][ T3913] netem: change failed [ 41.546596][ T3905] usb usb2: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 41.554087][ T3905] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 41.562520][ T3905] vhci_hcd: default hub control req: 6314 v0008 i0002 l0 [ 41.650055][ T3915] bond1: entered promiscuous mode [ 41.655218][ T3915] bond1: entered allmulticast mode [ 41.660864][ T3915] 8021q: adding VLAN 0 to HW filter on device bond1 [ 41.672190][ T3915] bond1 (unregistering): Released all slaves [ 41.771557][ T3921] netlink: 16 bytes leftover after parsing attributes in process `syz.0.148'. [ 42.112291][ T3941] netlink: 12 bytes leftover after parsing attributes in process `syz.3.157'. [ 42.128078][ T3941] loop3: detected capacity change from 0 to 1024 [ 42.136175][ T3941] EXT4-fs: EXT4-fs: inode_readahead_blks must be 0 or a power of 2 smaller than 2^31 [ 42.260962][ T23] IPVS: starting estimator thread 0... [ 42.322274][ T3355] Process accounting resumed [ 42.334176][ T3961] team0 (unregistering): Port device team_slave_0 removed [ 42.349660][ T3961] team0 (unregistering): Port device team_slave_1 removed [ 42.364585][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.380631][ T3955] IPVS: using max 2208 ests per chain, 110400 per kthread [ 42.419286][ T3971] FAULT_INJECTION: forcing a failure. [ 42.419286][ T3971] name failslab, interval 1, probability 0, space 0, times 0 [ 42.432306][ T3971] CPU: 0 UID: 0 PID: 3971 Comm: +}[@ Not tainted 6.15.0-rc3-syzkaller-00342-g5bc1018675ec #0 PREEMPT(voluntary) [ 42.432334][ T3971] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 42.432349][ T3971] Call Trace: [ 42.432356][ T3971] [ 42.432424][ T3971] __dump_stack+0x1d/0x30 [ 42.432450][ T3971] dump_stack_lvl+0xe8/0x140 [ 42.432475][ T3971] dump_stack+0x15/0x1b [ 42.432496][ T3971] should_fail_ex+0x265/0x280 [ 42.432570][ T3971] ? tcf_action_init_1+0x11e/0x4a0 [ 42.432592][ T3971] should_failslab+0x8c/0xb0 [ 42.432627][ T3971] __kmalloc_cache_noprof+0x4c/0x320 [ 42.432650][ T3971] tcf_action_init_1+0x11e/0x4a0 [ 42.432686][ T3971] tcf_action_init+0x1be/0x5f0 [ 42.432740][ T3971] tc_ctl_action+0x291/0x830 [ 42.432860][ T3971] ? __pfx_tc_ctl_action+0x10/0x10 [ 42.432889][ T3971] rtnetlink_rcv_msg+0x657/0x6d0 [ 42.433056][ T3971] netlink_rcv_skb+0x120/0x220 [ 42.433156][ T3971] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 42.433189][ T3971] rtnetlink_rcv+0x1c/0x30 [ 42.433212][ T3971] netlink_unicast+0x59e/0x670 [ 42.433245][ T3971] netlink_sendmsg+0x58b/0x6b0 [ 42.433353][ T3971] ? __pfx_netlink_sendmsg+0x10/0x10 [ 42.433385][ T3971] __sock_sendmsg+0x142/0x180 [ 42.433439][ T3971] ____sys_sendmsg+0x31e/0x4e0 [ 42.433480][ T3971] ___sys_sendmsg+0x17b/0x1d0 [ 42.433513][ T3971] __x64_sys_sendmsg+0xd4/0x160 [ 42.433537][ T3971] x64_sys_call+0x2999/0x2fb0 [ 42.433558][ T3971] do_syscall_64+0xd0/0x1a0 [ 42.433635][ T3971] ? clear_bhb_loop+0x25/0x80 [ 42.433687][ T3971] ? clear_bhb_loop+0x25/0x80 [ 42.433713][ T3971] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 42.433737][ T3971] RIP: 0033:0x7f708a21e969 [ 42.433752][ T3971] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 42.433769][ T3971] RSP: 002b:00007f7088887038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 42.433787][ T3971] RAX: ffffffffffffffda RBX: 00007f708a445fa0 RCX: 00007f708a21e969 [ 42.433800][ T3971] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000000000000003 [ 42.433823][ T3971] RBP: 00007f7088887090 R08: 0000000000000000 R09: 0000000000000000 [ 42.433836][ T3971] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 42.433881][ T3971] R13: 0000000000000000 R14: 00007f708a445fa0 R15: 00007ffe99b20898 [ 42.433900][ T3971] [ 42.698645][ T3975] FAULT_INJECTION: forcing a failure. [ 42.698645][ T3975] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 42.711816][ T3975] CPU: 1 UID: 0 PID: 3975 Comm: syz.1.170 Not tainted 6.15.0-rc3-syzkaller-00342-g5bc1018675ec #0 PREEMPT(voluntary) [ 42.711900][ T3975] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 42.711963][ T3975] Call Trace: [ 42.712035][ T3975] [ 42.712044][ T3975] __dump_stack+0x1d/0x30 [ 42.712069][ T3975] dump_stack_lvl+0xe8/0x140 [ 42.712092][ T3975] dump_stack+0x15/0x1b [ 42.712112][ T3975] should_fail_ex+0x265/0x280 [ 42.712175][ T3975] should_fail+0xb/0x20 [ 42.712211][ T3975] should_fail_usercopy+0x1a/0x20 [ 42.712312][ T3975] _copy_to_user+0x20/0xa0 [ 42.712460][ T3975] bpf_verifier_vlog+0x36e/0x5b0 [ 42.712516][ T3975] __btf_verifier_log+0x7f/0xb0 [ 42.712536][ T3975] ? btf_parse_hdr+0x234/0x3b0 [ 42.712565][ T3975] btf_parse_hdr+0x246/0x3b0 [ 42.712660][ T3975] btf_new_fd+0x241/0x790 [ 42.712699][ T3975] bpf_btf_load+0x112/0x130 [ 42.712813][ T3975] __sys_bpf+0x561/0x790 [ 42.712893][ T3975] __x64_sys_bpf+0x41/0x50 [ 42.712923][ T3975] x64_sys_call+0x2478/0x2fb0 [ 42.712949][ T3975] do_syscall_64+0xd0/0x1a0 [ 42.712975][ T3975] ? clear_bhb_loop+0x25/0x80 [ 42.713010][ T3975] ? clear_bhb_loop+0x25/0x80 [ 42.713079][ T3975] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 42.713102][ T3975] RIP: 0033:0x7fee6d94e969 [ 42.713120][ T3975] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 42.713164][ T3975] RSP: 002b:00007fee6bfb7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 42.713187][ T3975] RAX: ffffffffffffffda RBX: 00007fee6db75fa0 RCX: 00007fee6d94e969 [ 42.713206][ T3975] RDX: 0000000000000020 RSI: 0000200000000080 RDI: 0000000000000012 [ 42.713217][ T3975] RBP: 00007fee6bfb7090 R08: 0000000000000000 R09: 0000000000000000 [ 42.713285][ T3975] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 42.713300][ T3975] R13: 0000000000000000 R14: 00007fee6db75fa0 R15: 00007ffd0047cab8 [ 42.713322][ T3975] [ 42.935926][ T3978] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 42.944475][ T3978] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 42.962330][ T3980] loop0: detected capacity change from 0 to 1024 [ 42.969539][ T3980] EXT4-fs: Ignoring removed orlov option [ 42.980638][ T3980] EXT4-fs (loop0): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 43.040284][ T3980] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.064708][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.118087][ T3994] sctp: [Deprecated]: syz.1.177 (pid 3994) Use of struct sctp_assoc_value in delayed_ack socket option. [ 43.118087][ T3994] Use struct sctp_sack_info instead [ 43.137323][ T3999] dccp_invalid_packet: P.Data Offset(4) too small [ 43.179776][ T4003] FAULT_INJECTION: forcing a failure. [ 43.179776][ T4003] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 43.193101][ T4003] CPU: 1 UID: 0 PID: 4003 Comm: syz.1.180 Not tainted 6.15.0-rc3-syzkaller-00342-g5bc1018675ec #0 PREEMPT(voluntary) [ 43.193130][ T4003] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 43.193141][ T4003] Call Trace: [ 43.193147][ T4003] [ 43.193154][ T4003] __dump_stack+0x1d/0x30 [ 43.193177][ T4003] dump_stack_lvl+0xe8/0x140 [ 43.193226][ T4003] dump_stack+0x15/0x1b [ 43.193241][ T4003] should_fail_ex+0x265/0x280 [ 43.193273][ T4003] should_fail+0xb/0x20 [ 43.193311][ T4003] should_fail_usercopy+0x1a/0x20 [ 43.193329][ T4003] _copy_from_user+0x1c/0xb0 [ 43.193411][ T4003] ___sys_sendmsg+0xc1/0x1d0 [ 43.193446][ T4003] __x64_sys_sendmsg+0xd4/0x160 [ 43.193471][ T4003] x64_sys_call+0x2999/0x2fb0 [ 43.193497][ T4003] do_syscall_64+0xd0/0x1a0 [ 43.193524][ T4003] ? clear_bhb_loop+0x25/0x80 [ 43.193614][ T4003] ? clear_bhb_loop+0x25/0x80 [ 43.193640][ T4003] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 43.193671][ T4003] RIP: 0033:0x7fee6d94e969 [ 43.193687][ T4003] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 43.193704][ T4003] RSP: 002b:00007fee6bfb7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 43.193722][ T4003] RAX: ffffffffffffffda RBX: 00007fee6db75fa0 RCX: 00007fee6d94e969 [ 43.193733][ T4003] RDX: 0000000000000000 RSI: 0000200000001600 RDI: 0000000000000003 [ 43.193758][ T4003] RBP: 00007fee6bfb7090 R08: 0000000000000000 R09: 0000000000000000 [ 43.193774][ T4003] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 43.193789][ T4003] R13: 0000000000000000 R14: 00007fee6db75fa0 R15: 00007ffd0047cab8 [ 43.193809][ T4003] [ 43.194230][ T4004] loop2: detected capacity change from 0 to 512 [ 43.292022][ T4010] macvlan2: entered promiscuous mode [ 43.300171][ T4004] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 43.313826][ T4010] macvlan2: entered allmulticast mode [ 43.332615][ T4004] EXT4-fs (loop2): invalid journal inode [ 43.397105][ T4004] EXT4-fs (loop2): can't get journal size [ 43.404129][ T4004] EXT4-fs (loop2): 1 truncate cleaned up [ 43.410228][ T4004] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.426116][ T29] kauditd_printk_skb: 188 callbacks suppressed [ 43.426134][ T29] audit: type=1400 audit(1745755920.690:665): avc: denied { create } for pid=3985 comm="syz.2.175" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 43.452855][ T29] audit: type=1400 audit(1745755920.690:666): avc: denied { read write } for pid=3985 comm="syz.2.175" name="file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 43.475402][ T29] audit: type=1400 audit(1745755920.690:667): avc: denied { open } for pid=3985 comm="syz.2.175" path="/30/file1/file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 43.571148][ T4029] loop4: detected capacity change from 0 to 512 [ 43.577956][ T29] audit: type=1400 audit(1745755920.830:668): avc: denied { create } for pid=4022 comm="syz.0.186" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 43.597681][ T29] audit: type=1400 audit(1745755920.830:669): avc: denied { setopt } for pid=4022 comm="syz.0.186" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 43.606840][ T4029] EXT4-fs: Ignoring removed nobh option [ 43.627487][ T4031] SELinux: Context system_u:object_r:agp_device_t:s0 is not valid (left unmapped). [ 43.637111][ T29] audit: type=1400 audit(1745755920.876:670): avc: denied { relabelto } for pid=4030 comm="syz.0.189" name="file2" dev="tmpfs" ino=296 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:agp_device_t:s0" [ 43.647500][ T4031] loop0: detected capacity change from 0 to 1024 [ 43.670178][ T29] audit: type=1400 audit(1745755920.876:671): avc: denied { associate } for pid=4030 comm="syz.0.189" name="file2" dev="tmpfs" ino=296 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:agp_device_t:s0" [ 43.676718][ T4031] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 43.708776][ T4031] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 43.723376][ T4031] JBD2: no valid journal superblock found [ 43.729523][ T4031] EXT4-fs (loop0): Could not load journal inode [ 43.750560][ T4029] EXT4-fs error (device loop4): ext4_do_update_inode:5211: inode #3: comm syz.4.187: corrupted inode contents [ 43.769368][ T4029] EXT4-fs error (device loop4): ext4_dirty_inode:6103: inode #3: comm syz.4.187: mark_inode_dirty error [ 43.784653][ T29] audit: type=1326 audit(1745755921.025:672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4030 comm="syz.0.189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f708a21e969 code=0x7ffc0000 [ 43.788771][ T4031] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=27 sclass=netlink_route_socket pid=4031 comm=syz.0.189 [ 43.808145][ T29] audit: type=1326 audit(1745755921.025:673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4030 comm="syz.0.189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f708a21e969 code=0x7ffc0000 [ 43.843802][ T29] audit: type=1326 audit(1745755921.025:674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4030 comm="syz.0.189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f708a21e969 code=0x7ffc0000 [ 43.845760][ T4029] EXT4-fs error (device loop4): ext4_do_update_inode:5211: inode #3: comm syz.4.187: corrupted inode contents [ 43.880543][ T4031] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 43.883010][ T4029] EXT4-fs error (device loop4): __ext4_ext_dirty:207: inode #3: comm syz.4.187: mark_inode_dirty error [ 43.903767][ T4029] EXT4-fs error (device loop4): ext4_acquire_dquot:6935: comm syz.4.187: Failed to acquire dquot type 0 [ 43.916379][ T4029] EXT4-fs error (device loop4): ext4_do_update_inode:5211: inode #16: comm syz.4.187: corrupted inode contents [ 43.931482][ T4029] EXT4-fs error (device loop4): ext4_dirty_inode:6103: inode #16: comm syz.4.187: mark_inode_dirty error [ 43.943553][ T4029] EXT4-fs error (device loop4): ext4_do_update_inode:5211: inode #16: comm syz.4.187: corrupted inode contents [ 43.957821][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.971539][ T4029] EXT4-fs error (device loop4): __ext4_ext_dirty:207: inode #16: comm syz.4.187: mark_inode_dirty error [ 43.997767][ T4046] netlink: 'syz.2.192': attribute type 21 has an invalid length. [ 44.008472][ T4029] EXT4-fs error (device loop4): ext4_do_update_inode:5211: inode #16: comm syz.4.187: corrupted inode contents [ 44.018536][ T4048] loop0: detected capacity change from 0 to 512 [ 44.029748][ T4046] netlink: 'syz.2.192': attribute type 1 has an invalid length. [ 44.033310][ T4050] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 44.041221][ T4029] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem [ 44.068291][ T4029] EXT4-fs error (device loop4): ext4_do_update_inode:5211: inode #16: comm syz.4.187: corrupted inode contents [ 44.084986][ T4048] ext2: Unknown parameter 'noacl' [ 44.086550][ T4029] EXT4-fs error (device loop4): ext4_truncate:4255: inode #16: comm syz.4.187: mark_inode_dirty error [ 44.126735][ T4029] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem [ 44.137618][ T4029] EXT4-fs (loop4): 1 truncate cleaned up [ 44.144324][ T4029] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.153701][ T4051] infiniband syz!: set active [ 44.162122][ T4051] infiniband syz!: added team_slave_0 [ 44.174858][ T4029] ext4 filesystem being mounted at /40/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 44.204122][ T4029] EXT4-fs error (device loop4): ext4_xattr_block_get:593: inode #15: comm syz.4.187: corrupted xattr block 19: invalid ea_ino [ 44.217008][ T4051] RDS/IB: syz!: added [ 44.218739][ T4029] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 44.232235][ T4029] EXT4-fs error (device loop4): ext4_xattr_block_get:593: inode #15: comm syz.4.187: corrupted xattr block 19: invalid ea_ino [ 44.246006][ T4051] smc: adding ib device syz! with port count 1 [ 44.261364][ T4029] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 44.272334][ T4029] EXT4-fs error (device loop4): ext4_xattr_block_get:593: inode #15: comm syz.4.187: corrupted xattr block 19: invalid ea_ino [ 44.286088][ T4051] smc: ib device syz! port 1 has pnetid [ 44.286840][ T4029] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 44.324735][ T4065] wg2: entered promiscuous mode [ 44.329789][ T4065] wg2: entered allmulticast mode [ 44.336061][ T1576] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 44.350552][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.384167][ T4069] SELinux: Context system_u:object_r:dhcpd_ is not valid (left unmapped). [ 44.457232][ T4078] __nla_validate_parse: 5 callbacks suppressed [ 44.457250][ T4078] netlink: 96 bytes leftover after parsing attributes in process `syz.4.201'. [ 44.469213][ T4071] loop0: detected capacity change from 0 to 512 [ 44.740410][ T4095] netlink: 304 bytes leftover after parsing attributes in process `syz.1.209'. [ 44.749924][ T4095] netlink: 4 bytes leftover after parsing attributes in process `syz.1.209'. [ 45.058606][ T1038] IPVS: starting estimator thread 0... [ 45.132751][ T1038] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 45.176180][ T4118] IPVS: using max 2592 ests per chain, 129600 per kthread [ 45.298358][ T4139] syzkaller1: entered promiscuous mode [ 45.298381][ T4139] syzkaller1: entered allmulticast mode [ 45.316648][ T3621] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 45.364665][ T4148] loop0: detected capacity change from 0 to 1024 [ 45.372892][ T4148] EXT4-fs: Ignoring removed i_version option [ 45.382542][ T4148] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 45.409898][ T4148] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 45.420247][ T4148] EXT4-fs (loop0): required journal recovery suppressed and not mounted read-only [ 45.460903][ T4148] tmpfs: Bad value for 'mpol' [ 45.515742][ T4161] netlink: 'syz.3.237': attribute type 4 has an invalid length. [ 45.523477][ T4161] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.237'. [ 45.622364][ T1038] IPVS: starting estimator thread 0... [ 45.630279][ T4164] loop3: detected capacity change from 0 to 512 [ 45.723980][ T4175] IPVS: using max 2592 ests per chain, 129600 per kthread [ 45.887314][ T4186] netlink: 'syz.4.245': attribute type 10 has an invalid length. [ 45.898524][ T4186] team0: Device dummy0 is up. Set it down before adding it as a team port [ 46.019244][ T3355] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 46.030232][ T3621] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 46.253349][ T23] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 46.697535][ T3621] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 46.902320][ T4228] FAULT_INJECTION: forcing a failure. [ 46.902320][ T4228] name failslab, interval 1, probability 0, space 0, times 0 [ 46.915201][ T4228] CPU: 0 UID: 0 PID: 4228 Comm: syz.3.256 Not tainted 6.15.0-rc3-syzkaller-00342-g5bc1018675ec #0 PREEMPT(voluntary) [ 46.915274][ T4228] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 46.915288][ T4228] Call Trace: [ 46.915295][ T4228] [ 46.915303][ T4228] __dump_stack+0x1d/0x30 [ 46.915323][ T4228] dump_stack_lvl+0xe8/0x140 [ 46.915390][ T4228] dump_stack+0x15/0x1b [ 46.915409][ T4228] should_fail_ex+0x265/0x280 [ 46.915449][ T4228] should_failslab+0x8c/0xb0 [ 46.915524][ T4228] __kmalloc_noprof+0xa5/0x3e0 [ 46.915546][ T4228] ? tcf_idr_create+0x41/0x4a0 [ 46.915574][ T4228] tcf_idr_create+0x41/0x4a0 [ 46.915599][ T4228] tcf_police_init+0x296/0xc80 [ 46.915643][ T4228] tcf_action_init_1+0x367/0x4a0 [ 46.915675][ T4228] tcf_action_init+0x1be/0x5f0 [ 46.915745][ T4228] tc_ctl_action+0x291/0x830 [ 46.915789][ T4228] ? __pfx_tc_ctl_action+0x10/0x10 [ 46.915813][ T4228] rtnetlink_rcv_msg+0x657/0x6d0 [ 46.915846][ T4228] netlink_rcv_skb+0x120/0x220 [ 46.915915][ T4228] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 46.915943][ T4228] rtnetlink_rcv+0x1c/0x30 [ 46.915968][ T4228] netlink_unicast+0x59e/0x670 [ 46.916080][ T4228] netlink_sendmsg+0x58b/0x6b0 [ 46.916189][ T4228] ? __pfx_netlink_sendmsg+0x10/0x10 [ 46.916228][ T4228] __sock_sendmsg+0x142/0x180 [ 46.916252][ T4228] ____sys_sendmsg+0x31e/0x4e0 [ 46.916329][ T4228] ___sys_sendmsg+0x17b/0x1d0 [ 46.916371][ T4228] __x64_sys_sendmsg+0xd4/0x160 [ 46.916394][ T4228] x64_sys_call+0x2999/0x2fb0 [ 46.916414][ T4228] do_syscall_64+0xd0/0x1a0 [ 46.916434][ T4228] ? clear_bhb_loop+0x25/0x80 [ 46.916523][ T4228] ? clear_bhb_loop+0x25/0x80 [ 46.916553][ T4228] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 46.916580][ T4228] RIP: 0033:0x7f213046e969 [ 46.916611][ T4228] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 46.916627][ T4228] RSP: 002b:00007f212ead7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 46.916644][ T4228] RAX: ffffffffffffffda RBX: 00007f2130695fa0 RCX: 00007f213046e969 [ 46.916659][ T4228] RDX: 0000000000000000 RSI: 00002000000037c0 RDI: 0000000000000004 [ 46.916674][ T4228] RBP: 00007f212ead7090 R08: 0000000000000000 R09: 0000000000000000 [ 46.916689][ T4228] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 46.916746][ T4228] R13: 0000000000000000 R14: 00007f2130695fa0 R15: 00007ffc88acc728 [ 46.916765][ T4228] [ 47.191601][ T4231] loop3: detected capacity change from 0 to 1024 [ 47.198861][ T4231] ext4: Bad value for 'init_itable' [ 47.296336][ T4233] loop0: detected capacity change from 0 to 512 [ 47.386343][ T36] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 47.391659][ T3622] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 47.562007][ T4253] loop3: detected capacity change from 0 to 512 [ 47.575046][ T4253] EXT4-fs: Ignoring removed orlov option [ 47.580762][ T4253] EXT4-fs: Ignoring removed nomblk_io_submit option [ 47.587567][ T4253] EXT4-fs: Ignoring removed orlov option [ 47.724075][ T4253] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a846c01c, mo2=0002] [ 47.761297][ T4253] System zones: 1-12 [ 47.787281][ T4253] EXT4-fs error (device loop3): ext4_init_orphan_info:586: comm syz.3.266: inode #0: comm syz.3.266: iget: illegal inode # [ 47.836443][ T4253] EXT4-fs (loop3): get orphan inode failed [ 47.860614][ T4253] EXT4-fs (loop3): mount failed [ 47.935999][ T4268] xt_TPROXY: Can be used only with -p tcp or -p udp [ 47.972816][ T4270] SELinux: Context system_u:object_r:etc_aliases_t:s0 is not valid (left unmapped). [ 47.975181][ T4268] loop2: detected capacity change from 0 to 2048 [ 48.062075][ T4275] loop2: detected capacity change from 0 to 128 [ 48.072818][ T4275] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 48.084891][ T3355] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 48.202307][ T3355] IPVS: starting estimator thread 0... [ 48.308913][ T4294] loop2: detected capacity change from 0 to 1024 [ 48.316011][ T4295] netlink: 8 bytes leftover after parsing attributes in process `syz.3.279'. [ 48.326239][ T4288] IPVS: using max 2688 ests per chain, 134400 per kthread [ 48.333770][ T4294] EXT4-fs: Ignoring removed i_version option [ 48.376594][ T4294] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 48.615233][ T4294] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.277: Invalid block bitmap block 0 in block_group 0 [ 48.643599][ T4301] netlink: 4 bytes leftover after parsing attributes in process `syz.0.280'. [ 48.683175][ T4301] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 48.690853][ T4301] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 48.708592][ T4294] EXT4-fs error (device loop2): ext4_acquire_dquot:6935: comm syz.2.277: Failed to acquire dquot type 0 [ 48.784516][ T4301] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 48.792038][ T4301] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 48.814640][ T4294] EXT4-fs error (device loop2): ext4_free_blocks:6587: comm syz.2.277: Freeing blocks not in datazone - block = 0, count = 4096 [ 48.831717][ T36] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 48.845678][ T4305] loop0: detected capacity change from 0 to 2048 [ 48.852280][ T4302] loop3: detected capacity change from 0 to 2048 [ 48.860914][ T4294] EXT4-fs error (device loop2): ext4_read_inode_bitmap:139: comm syz.2.277: Invalid inode bitmap blk 0 in block_group 0 [ 48.885582][ T1576] __quota_error: 254 callbacks suppressed [ 48.885600][ T1576] Quota error (device loop2): do_check_range: Getting block 0 out of range 1-8 [ 48.900539][ T1576] EXT4-fs error (device loop2): ext4_release_dquot:6971: comm kworker/u8:5: Failed to release dquot type 0 [ 48.920856][ T3008] loop3: p1 < > p3 [ 48.925719][ T4294] EXT4-fs error (device loop2) in ext4_free_inode:361: Corrupt filesystem [ 48.934462][ T3008] loop3: p3 size 134217728 extends beyond EOD, truncated [ 48.945875][ T4294] EXT4-fs (loop2): 1 orphan inode deleted [ 48.947879][ T4305] Alternate GPT is invalid, using primary GPT. [ 48.958068][ T4305] loop0: p2 p3 p7 [ 48.958403][ T4294] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.966726][ T3008] loop3: p1 < > p3 [ 49.339934][ T3008] loop3: p3 size 134217728 extends beyond EOD, truncated [ 49.362418][ T29] audit: type=1326 audit(1745755926.182:925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4299 comm="syz.0.280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f708a21e969 code=0x7ffc0000 [ 49.362431][ T4302] loop3: p1 < > p3 [ 49.363186][ T4302] loop3: p3 size 134217728 extends beyond EOD, [ 49.385919][ T29] audit: type=1326 audit(1745755926.182:926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4299 comm="syz.0.280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f708a21e969 code=0x7ffc0000 [ 49.389706][ T4302] truncated [ 49.510420][ T29] audit: type=1400 audit(1745755926.320:927): avc: denied { read write } for pid=4324 comm="syz.4.290" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 49.586639][ T29] audit: type=1400 audit(1745755926.320:928): avc: denied { open } for pid=4324 comm="syz.4.290" path="/dev/loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 49.611368][ T29] audit: type=1400 audit(1745755926.320:929): avc: denied { ioctl } for pid=4324 comm="syz.4.290" path="/dev/loop-control" dev="devtmpfs" ino=99 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 49.684238][ T3299] udevd[3299]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 49.694326][ T3296] udevd[3296]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 49.737604][ T4063] udevd[4063]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 49.754154][ T4063] udevd[4063]: inotify_add_watch(7, /dev/loop0p7, 10) failed: No such file or directory [ 49.770518][ T4332] loop3: detected capacity change from 0 to 128 [ 49.792138][ T4335] udevd[4335]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 49.856211][ T4063] udevd[4063]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 49.859798][ T4335] udevd[4335]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 49.878957][ T4332] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 49.885382][ T4063] udevd[4063]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 49.887229][ T4335] udevd[4335]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 49.888230][ T4332] ext4 filesystem being mounted at /49/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 49.926066][ T29] audit: type=1400 audit(1745755926.680:930): avc: denied { read append open } for pid=4331 comm="syz.3.292" path="/49/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/cpu.stat" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 49.926152][ T29] audit: type=1326 audit(1745755926.699:931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4331 comm="syz.3.292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f213046e969 code=0x7ffc0000 [ 49.926175][ T29] audit: type=1326 audit(1745755926.699:932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4331 comm="syz.3.292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f213046e969 code=0x7ffc0000 [ 49.926206][ T29] audit: type=1326 audit(1745755926.699:933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4331 comm="syz.3.292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f213046e969 code=0x7ffc0000 [ 49.953228][ T4339] netlink: 4 bytes leftover after parsing attributes in process `syz.4.293'. [ 49.979894][ T23] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 50.134537][ T3313] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 50.153498][ T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 50.263068][ T4356] xt_hashlimit: max too large, truncated to 1048576 [ 50.264757][ T4356] netlink: 260 bytes leftover after parsing attributes in process `syz.3.300'. [ 50.319878][ T4359] Invalid ELF header magic: != ELF [ 50.353003][ T4358] loop3: detected capacity change from 0 to 2048 [ 50.433374][ T4358] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.433450][ T4358] ext4 filesystem being mounted at /52/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 50.447314][ T4350] FAULT_INJECTION: forcing a failure. [ 50.447314][ T4350] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 50.447351][ T4350] CPU: 1 UID: 0 PID: 4350 Comm: syz.1.297 Not tainted 6.15.0-rc3-syzkaller-00342-g5bc1018675ec #0 PREEMPT(voluntary) [ 50.447510][ T4350] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 50.447522][ T4350] Call Trace: [ 50.447529][ T4350] [ 50.447537][ T4350] __dump_stack+0x1d/0x30 [ 50.447562][ T4350] dump_stack_lvl+0xe8/0x140 [ 50.447586][ T4350] dump_stack+0x15/0x1b [ 50.447606][ T4350] should_fail_ex+0x265/0x280 [ 50.447661][ T4350] should_fail+0xb/0x20 [ 50.447740][ T4350] should_fail_usercopy+0x1a/0x20 [ 50.447809][ T4350] _copy_from_iter+0xcf/0xdd0 [ 50.447830][ T4350] ? __build_skb_around+0x1a0/0x200 [ 50.447927][ T4350] ? __alloc_skb+0x223/0x320 [ 50.447957][ T4350] netlink_sendmsg+0x471/0x6b0 [ 50.447991][ T4350] ? __pfx_netlink_sendmsg+0x10/0x10 [ 50.448034][ T4350] __sock_sendmsg+0x142/0x180 [ 50.448062][ T4350] ____sys_sendmsg+0x31e/0x4e0 [ 50.448184][ T4350] ___sys_sendmsg+0x17b/0x1d0 [ 50.448221][ T4350] __x64_sys_sendmsg+0xd4/0x160 [ 50.448291][ T4350] x64_sys_call+0x2999/0x2fb0 [ 50.448311][ T4350] do_syscall_64+0xd0/0x1a0 [ 50.448334][ T4350] ? clear_bhb_loop+0x25/0x80 [ 50.448355][ T4350] ? clear_bhb_loop+0x25/0x80 [ 50.448406][ T4350] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 50.448443][ T4350] RIP: 0033:0x7fee6d94e969 [ 50.448460][ T4350] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 50.448480][ T4350] RSP: 002b:00007fee6bfb7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 50.448497][ T4350] RAX: ffffffffffffffda RBX: 00007fee6db75fa0 RCX: 00007fee6d94e969 [ 50.448509][ T4350] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000004 [ 50.448520][ T4350] RBP: 00007fee6bfb7090 R08: 0000000000000000 R09: 0000000000000000 [ 50.448572][ T4350] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 50.448586][ T4350] R13: 0000000000000000 R14: 00007fee6db75fa0 R15: 00007ffd0047cab8 [ 50.448607][ T4350] [ 50.770039][ T4379] loop4: detected capacity change from 0 to 512 [ 50.772774][ T4379] EXT4-fs: Ignoring removed nomblk_io_submit option [ 50.800853][ T4379] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 50.802068][ T4379] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 50.802261][ T4379] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 50.802406][ T4379] EXT4-fs (loop4): 1 truncate cleaned up [ 50.803244][ T4379] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.041753][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.166440][ T23] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 51.489812][ T4398] netlink: 'syz.4.312': attribute type 3 has an invalid length. [ 51.497727][ T4398] netlink: 8 bytes leftover after parsing attributes in process `syz.4.312'. [ 51.566548][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.585784][ T4403] smc: net device bond0 applied user defined pnetid SYZ2 [ 51.594788][ T4403] smc: net device bond0 erased user defined pnetid SYZ2 [ 51.665161][ T4414] netlink: 'syz.3.318': attribute type 15 has an invalid length. [ 51.673146][ T4414] netlink: 25 bytes leftover after parsing attributes in process `syz.3.318'. [ 51.831290][ T4420] sg_write: data in/out 209152/1 bytes for SCSI command 0xf2-- guessing data in; [ 51.831290][ T4420] program syz.0.319 not setting count and/or reply_len properly [ 52.030365][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.071701][ T4432] FAULT_INJECTION: forcing a failure. [ 52.071701][ T4432] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 52.085001][ T4432] CPU: 1 UID: 0 PID: 4432 Comm: +}[@ Not tainted 6.15.0-rc3-syzkaller-00342-g5bc1018675ec #0 PREEMPT(voluntary) [ 52.085035][ T4432] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 52.085049][ T4432] Call Trace: [ 52.085057][ T4432] [ 52.085067][ T4432] __dump_stack+0x1d/0x30 [ 52.085093][ T4432] dump_stack_lvl+0xe8/0x140 [ 52.085185][ T4432] dump_stack+0x15/0x1b [ 52.085205][ T4432] should_fail_ex+0x265/0x280 [ 52.085244][ T4432] should_fail+0xb/0x20 [ 52.085337][ T4432] should_fail_usercopy+0x1a/0x20 [ 52.085360][ T4432] _copy_from_user+0x1c/0xb0 [ 52.085387][ T4432] ___sys_recvmsg+0xaa/0x370 [ 52.085419][ T4432] ? set_normalized_timespec64+0xe0/0x110 [ 52.085542][ T4432] do_recvmmsg+0x1ef/0x540 [ 52.085572][ T4432] __x64_sys_recvmmsg+0xfb/0x170 [ 52.085599][ T4432] x64_sys_call+0x1c6a/0x2fb0 [ 52.085695][ T4432] do_syscall_64+0xd0/0x1a0 [ 52.085721][ T4432] ? clear_bhb_loop+0x25/0x80 [ 52.085747][ T4432] ? clear_bhb_loop+0x25/0x80 [ 52.085772][ T4432] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 52.085870][ T4432] RIP: 0033:0x7f708a21e969 [ 52.085885][ T4432] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 52.085901][ T4432] RSP: 002b:00007f7088887038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 52.085920][ T4432] RAX: ffffffffffffffda RBX: 00007f708a445fa0 RCX: 00007f708a21e969 [ 52.085943][ T4432] RDX: 0400000000000ec0 RSI: 0000200000002ec0 RDI: 0000000000000008 [ 52.085958][ T4432] RBP: 00007f7088887090 R08: 00002000000001c0 R09: 0000000000000000 [ 52.085973][ T4432] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000002 [ 52.085987][ T4432] R13: 0000000000000000 R14: 00007f708a445fa0 R15: 00007ffe99b20898 [ 52.086060][ T4432] [ 52.272402][ T23] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 52.301494][ T4438] loop2: detected capacity change from 0 to 2048 [ 52.309060][ T4440] loop0: detected capacity change from 0 to 1024 [ 52.315947][ T4440] EXT4-fs: Ignoring removed bh option [ 52.322035][ T23] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 52.343455][ T4440] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.343803][ T4438] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 52.382807][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.423760][ T4448] FAULT_INJECTION: forcing a failure. [ 52.423760][ T4448] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 52.436963][ T4448] CPU: 0 UID: 0 PID: 4448 Comm: syz.0.328 Not tainted 6.15.0-rc3-syzkaller-00342-g5bc1018675ec #0 PREEMPT(voluntary) [ 52.437018][ T4448] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 52.437033][ T4448] Call Trace: [ 52.437039][ T4448] [ 52.437049][ T4448] __dump_stack+0x1d/0x30 [ 52.437086][ T4448] dump_stack_lvl+0xe8/0x140 [ 52.437129][ T4448] dump_stack+0x15/0x1b [ 52.437146][ T4448] should_fail_ex+0x265/0x280 [ 52.437180][ T4448] should_fail+0xb/0x20 [ 52.437268][ T4448] should_fail_usercopy+0x1a/0x20 [ 52.437290][ T4448] _copy_from_user+0x1c/0xb0 [ 52.437314][ T4448] __copy_msghdr+0x244/0x300 [ 52.437360][ T4448] ___sys_sendmsg+0x109/0x1d0 [ 52.437396][ T4448] __x64_sys_sendmsg+0xd4/0x160 [ 52.437437][ T4448] x64_sys_call+0x2999/0x2fb0 [ 52.437456][ T4448] do_syscall_64+0xd0/0x1a0 [ 52.437477][ T4448] ? clear_bhb_loop+0x25/0x80 [ 52.437498][ T4448] ? clear_bhb_loop+0x25/0x80 [ 52.437522][ T4448] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 52.437598][ T4448] RIP: 0033:0x7f708a21e969 [ 52.437617][ T4448] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 52.437635][ T4448] RSP: 002b:00007f7088887038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 52.437654][ T4448] RAX: ffffffffffffffda RBX: 00007f708a445fa0 RCX: 00007f708a21e969 [ 52.437668][ T4448] RDX: 0000000000000000 RSI: 0000200000004440 RDI: 0000000000000008 [ 52.437682][ T4448] RBP: 00007f7088887090 R08: 0000000000000000 R09: 0000000000000000 [ 52.437696][ T4448] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 52.437788][ T4448] R13: 0000000000000000 R14: 00007f708a445fa0 R15: 00007ffe99b20898 [ 52.437812][ T4448] [ 52.616985][ T4451] loop4: detected capacity change from 0 to 764 [ 52.645047][ T4450] Symlink component flag not implemented [ 52.651020][ T4450] Symlink component flag not implemented (7) [ 52.764162][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.823684][ T4468] loop0: detected capacity change from 0 to 512 [ 52.868840][ T4468] EXT4-fs (loop0): orphan cleanup on readonly fs [ 52.900415][ T4481] loop3: detected capacity change from 0 to 512 [ 52.913062][ T4481] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities [ 52.923996][ T4483] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 52.932525][ T4468] EXT4-fs error (device loop0): ext4_orphan_get:1417: comm syz.0.338: bad orphan inode 13 [ 52.932772][ T4483] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 52.943760][ T4468] ext4_test_bit(bit=12, block=18) = 1 [ 52.951549][ T4483] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 52.956885][ T4468] is_bad_inode(inode)=0 [ 52.966022][ T4483] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 52.970064][ T4468] NEXT_ORPHAN(inode)=2130706432 [ 52.970154][ T4468] max_ino=32 [ 52.970162][ T4468] i_nlink=1 [ 52.972146][ T4468] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 53.005502][ T4481] loop3: detected capacity change from 0 to 1764 [ 53.008267][ T4485] netlink: 'syz.2.345': attribute type 2 has an invalid length. [ 53.020640][ T4481] iso9660: Bad value for 'gid' [ 53.025539][ T4481] iso9660: Bad value for 'gid' [ 53.155250][ T4499] loop4: detected capacity change from 0 to 512 [ 53.179664][ T4499] EXT4-fs (loop4): orphan cleanup on readonly fs [ 53.205017][ T4508] loop2: detected capacity change from 0 to 128 [ 53.230816][ T4499] EXT4-fs error (device loop4): ext4_orphan_get:1417: comm syz.4.349: bad orphan inode 13 [ 53.247380][ T4511] loop3: detected capacity change from 0 to 512 [ 53.254392][ T4508] FAT-fs (loop2): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 53.274728][ T4508] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 53.282629][ T4508] FAT-fs (loop2): Filesystem has been set read-only [ 53.284817][ T4499] ext4_test_bit(bit=12, block=18) = 1 [ 53.289730][ T4508] syz.2.353: attempt to access beyond end of device [ 53.289730][ T4508] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 53.294679][ T4499] is_bad_inode(inode)=0 [ 53.307957][ T4511] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 53.311976][ T4499] NEXT_ORPHAN(inode)=2130706432 [ 53.326782][ T4499] max_ino=32 [ 53.330052][ T4499] i_nlink=1 [ 53.333533][ T4511] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0002] [ 53.341760][ T4511] System zones: 1-12 [ 53.345054][ T4499] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 53.354469][ T4491] netlink: 52 bytes leftover after parsing attributes in process `syz.0.338'. [ 53.368444][ T4511] EXT4-fs (loop3): 1 truncate cleaned up [ 53.376284][ T4511] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 53.388717][ T4491] netlink: 52 bytes leftover after parsing attributes in process `syz.0.338'. [ 53.391264][ T4511] EXT4-fs warning (device loop3): ext4_block_to_path:107: block 1835430250 > max in inode 18 [ 53.446547][ T23] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 53.470197][ T4491] netlink: 52 bytes leftover after parsing attributes in process `syz.0.338'. [ 53.479428][ T4491] netlink: 52 bytes leftover after parsing attributes in process `syz.0.338'. [ 53.522080][ T4491] netlink: 52 bytes leftover after parsing attributes in process `syz.0.338'. [ 53.531078][ T4491] netlink: 52 bytes leftover after parsing attributes in process `syz.0.338'. [ 53.546050][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.620143][ T4527] IPv6: Can't replace route, no match found [ 53.637001][ T4526] IPv6: Can't replace route, no match found [ 53.698241][ T4524] netlink: 'syz.2.356': attribute type 1 has an invalid length. [ 53.809883][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.855388][ T4538] loop0: detected capacity change from 0 to 512 [ 53.895670][ T4538] EXT4-fs error (device loop0): ext4_acquire_dquot:6935: comm syz.0.362: Failed to acquire dquot type 1 [ 53.933257][ T4538] EXT4-fs (loop0): 1 truncate cleaned up [ 53.943460][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.947594][ T4548] loop4: detected capacity change from 0 to 512 [ 53.954904][ T4538] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.986556][ T4550] loop3: detected capacity change from 0 to 512 [ 53.993122][ T4538] ext4 filesystem being mounted at /83/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 53.997575][ T4548] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 54.012707][ T4550] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 54.021676][ T4548] System zones: 0-2, 18-18, 34-34 [ 54.028100][ T4550] EXT4-fs (loop3): orphan cleanup on readonly fs [ 54.028101][ T4548] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.365: bg 0: block 248: padding at end of block bitmap is not set [ 54.028349][ T4548] EXT4-fs error (device loop4): ext4_acquire_dquot:6935: comm syz.4.365: Failed to acquire dquot type 1 [ 54.046729][ T4550] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.367: bg 0: block 248: padding at end of block bitmap is not set [ 54.061044][ T4550] EXT4-fs error (device loop3): ext4_acquire_dquot:6935: comm syz.3.367: Failed to acquire dquot type 1 [ 54.075362][ T4548] EXT4-fs (loop4): 1 truncate cleaned up [ 54.087102][ T4550] EXT4-fs (loop3): 1 truncate cleaned up [ 54.094260][ T4548] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.099304][ T4550] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 54.112237][ T4538] team0 (unregistering): Port device team_slave_0 removed [ 54.122497][ T4548] ext4 filesystem being mounted at /83/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 54.149723][ T4538] team0 (unregistering): Port device team_slave_1 removed [ 54.171633][ T4550] EXT4-fs error (device loop3): __ext4_remount:6738: comm syz.3.367: Abort forced by user [ 54.182135][ T4550] EXT4-fs (loop3): Remounting filesystem read-only [ 54.188848][ T4550] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000. [ 54.209048][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.313431][ T37] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 54.324570][ T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 54.361164][ T29] kauditd_printk_skb: 358 callbacks suppressed [ 54.361182][ T29] audit: type=1326 audit(1745755930.797:1286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4546 comm="syz.4.365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f694d87e969 code=0x7ffc0000 [ 54.403225][ T29] audit: type=1326 audit(1745755930.797:1287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4546 comm="syz.4.365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f694d87e969 code=0x7ffc0000 [ 54.426947][ T29] audit: type=1326 audit(1745755930.843:1288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4546 comm="syz.4.365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f694d87e969 code=0x7ffc0000 [ 54.451548][ T29] audit: type=1326 audit(1745755930.843:1289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4546 comm="syz.4.365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f694d87e969 code=0x7ffc0000 [ 54.475374][ T29] audit: type=1326 audit(1745755930.843:1290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4546 comm="syz.4.365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f694d87e969 code=0x7ffc0000 [ 54.498894][ T29] audit: type=1326 audit(1745755930.843:1291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4546 comm="syz.4.365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f694d87d41f code=0x7ffc0000 [ 54.499949][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.522353][ T29] audit: type=1326 audit(1745755930.843:1292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4546 comm="syz.4.365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f694d87e969 code=0x7ffc0000 [ 54.522405][ T29] audit: type=1326 audit(1745755930.843:1293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4546 comm="syz.4.365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f694d87e969 code=0x7ffc0000 [ 54.579847][ T23] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 54.580431][ T29] audit: type=1326 audit(1745755930.843:1294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4546 comm="syz.4.365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f694d87e969 code=0x7ffc0000 [ 54.613980][ T29] audit: type=1326 audit(1745755930.843:1295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4546 comm="syz.4.365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f694d87e969 code=0x7ffc0000 [ 54.698814][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.716512][ T4575] program syz.0.373 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 54.916592][ T4593] netlink: 'syz.4.378': attribute type 1 has an invalid length. [ 54.940887][ T4596] 9pnet_fd: Insufficient options for proto=fd [ 55.004333][ T4593] SELinux: Context system_u:object_r:mouse_device_t:s0 is not valid (left unmapped). [ 55.016171][ T3355] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 55.122338][ T4581] dccp_close: ABORT with 15584 bytes unread [ 55.239052][ T4615] loop0: detected capacity change from 0 to 512 [ 55.300603][ T4615] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 55.310989][ T4615] System zones: 0-2, 18-18, 34-34 [ 55.320977][ T4615] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.389: bg 0: block 248: padding at end of block bitmap is not set [ 55.361339][ T4615] EXT4-fs error (device loop0): ext4_acquire_dquot:6935: comm syz.0.389: Failed to acquire dquot type 1 [ 55.400907][ T4615] EXT4-fs (loop0): 1 truncate cleaned up [ 55.420443][ T4615] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 55.459327][ T4615] ext4 filesystem being mounted at /88/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 55.637689][ T4639] __nla_validate_parse: 6 callbacks suppressed [ 55.637706][ T4639] netlink: 4 bytes leftover after parsing attributes in process `syz.4.398'. [ 55.654958][ T4639] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 55.662843][ T4639] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 55.682915][ T4639] FAULT_INJECTION: forcing a failure. [ 55.682915][ T4639] name failslab, interval 1, probability 0, space 0, times 0 [ 55.695814][ T4639] CPU: 1 UID: 0 PID: 4639 Comm: syz.4.398 Not tainted 6.15.0-rc3-syzkaller-00342-g5bc1018675ec #0 PREEMPT(voluntary) [ 55.695842][ T4639] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 55.695853][ T4639] Call Trace: [ 55.695860][ T4639] [ 55.695868][ T4639] __dump_stack+0x1d/0x30 [ 55.695956][ T4639] dump_stack_lvl+0xe8/0x140 [ 55.695974][ T4639] dump_stack+0x15/0x1b [ 55.695989][ T4639] should_fail_ex+0x265/0x280 [ 55.696086][ T4639] should_failslab+0x8c/0xb0 [ 55.696114][ T4639] kmem_cache_alloc_node_noprof+0x57/0x320 [ 55.696232][ T4639] ? __alloc_skb+0x101/0x320 [ 55.696324][ T4639] __alloc_skb+0x101/0x320 [ 55.696362][ T4639] rtmsg_ifinfo_build_skb+0x5f/0x1b0 [ 55.696423][ T4639] ? kvfree_call_rcu+0x29a/0x320 [ 55.696446][ T4639] ? __pfx_rtnetlink_event+0x10/0x10 [ 55.696516][ T4639] rtnetlink_event+0x18c/0x200 [ 55.696544][ T4639] raw_notifier_call_chain+0x6c/0x1b0 [ 55.696563][ T4639] ? call_netdevice_notifiers_info+0x9c/0x100 [ 55.696597][ T4639] call_netdevice_notifiers_info+0xae/0x100 [ 55.696629][ T4639] __netdev_upper_dev_unlink+0x17f/0x760 [ 55.696774][ T4639] ? ref_tracker_free+0x28d/0x3e0 [ 55.696810][ T4639] ? kfree+0x187/0x310 [ 55.696880][ T4639] ? batadv_hardif_disable_interface+0x56e/0xaa0 [ 55.696920][ T4639] ? batadv_meshif_destroy_netlink+0x62/0x2e0 [ 55.696941][ T4639] ? rtnl_dellink+0x3ba/0x550 [ 55.696961][ T4639] ? rtnetlink_rcv_msg+0x5fb/0x6d0 [ 55.697017][ T4639] ? netlink_rcv_skb+0x120/0x220 [ 55.697045][ T4639] ? rtnetlink_rcv+0x1c/0x30 [ 55.697069][ T4639] ? netlink_unicast+0x59e/0x670 [ 55.697194][ T4639] ? netlink_sendmsg+0x58b/0x6b0 [ 55.697348][ T4639] ? __sock_sendmsg+0x142/0x180 [ 55.697371][ T4639] ? ____sys_sendmsg+0x31e/0x4e0 [ 55.697402][ T4639] ? ___sys_sendmsg+0x17b/0x1d0 [ 55.697463][ T4639] ? __x64_sys_sendmsg+0xd4/0x160 [ 55.697481][ T4639] ? do_syscall_64+0xd0/0x1a0 [ 55.697500][ T4639] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 55.697527][ T4639] netdev_upper_dev_unlink+0x1d/0x30 [ 55.697611][ T4639] batadv_hardif_disable_interface+0x5c1/0xaa0 [ 55.697648][ T4639] ? __pfx_batadv_meshif_destroy_netlink+0x10/0x10 [ 55.697671][ T4639] batadv_meshif_destroy_netlink+0x62/0x2e0 [ 55.697768][ T4639] ? __pfx_batadv_meshif_destroy_netlink+0x10/0x10 [ 55.697799][ T4639] rtnl_dellink+0x3ba/0x550 [ 55.697849][ T4639] ? security_capable+0x83/0x90 [ 55.697890][ T4639] ? ns_capable+0x7d/0xb0 [ 55.697913][ T4639] ? __pfx_rtnl_dellink+0x10/0x10 [ 55.697940][ T4639] rtnetlink_rcv_msg+0x5fb/0x6d0 [ 55.697972][ T4639] netlink_rcv_skb+0x120/0x220 [ 55.698026][ T4639] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 55.698062][ T4639] rtnetlink_rcv+0x1c/0x30 [ 55.698165][ T4639] netlink_unicast+0x59e/0x670 [ 55.698196][ T4639] netlink_sendmsg+0x58b/0x6b0 [ 55.698274][ T4639] ? __pfx_netlink_sendmsg+0x10/0x10 [ 55.698305][ T4639] __sock_sendmsg+0x142/0x180 [ 55.698388][ T4639] ____sys_sendmsg+0x31e/0x4e0 [ 55.698424][ T4639] ___sys_sendmsg+0x17b/0x1d0 [ 55.698536][ T4639] __x64_sys_sendmsg+0xd4/0x160 [ 55.698558][ T4639] x64_sys_call+0x2999/0x2fb0 [ 55.698586][ T4639] do_syscall_64+0xd0/0x1a0 [ 55.698607][ T4639] ? clear_bhb_loop+0x25/0x80 [ 55.698628][ T4639] ? clear_bhb_loop+0x25/0x80 [ 55.698653][ T4639] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 55.698674][ T4639] RIP: 0033:0x7f694d87e969 [ 55.698688][ T4639] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 55.698772][ T4639] RSP: 002b:00007f694bee7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 55.698791][ T4639] RAX: ffffffffffffffda RBX: 00007f694daa5fa0 RCX: 00007f694d87e969 [ 55.698803][ T4639] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000007 [ 55.698815][ T4639] RBP: 00007f694bee7090 R08: 0000000000000000 R09: 0000000000000000 [ 55.698826][ T4639] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 55.698839][ T4639] R13: 0000000000000000 R14: 00007f694daa5fa0 R15: 00007fffd12da9b8 [ 55.698857][ T4639] [ 55.710689][ T2280] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 55.712538][ T23] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 55.722699][ T3355] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 55.726470][ T4639] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 55.735092][ T2280] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 55.737374][ T4639] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 56.309895][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.392952][ T3355] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 56.428367][ T4657] FAULT_INJECTION: forcing a failure. [ 56.428367][ T4657] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 56.441590][ T4657] CPU: 0 UID: 0 PID: 4657 Comm: syz.0.406 Not tainted 6.15.0-rc3-syzkaller-00342-g5bc1018675ec #0 PREEMPT(voluntary) [ 56.441620][ T4657] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 56.441632][ T4657] Call Trace: [ 56.441637][ T4657] [ 56.441644][ T4657] __dump_stack+0x1d/0x30 [ 56.441664][ T4657] dump_stack_lvl+0xe8/0x140 [ 56.441687][ T4657] dump_stack+0x15/0x1b [ 56.441755][ T4657] should_fail_ex+0x265/0x280 [ 56.441789][ T4657] should_fail+0xb/0x20 [ 56.441820][ T4657] should_fail_usercopy+0x1a/0x20 [ 56.441891][ T4657] _copy_to_user+0x20/0xa0 [ 56.441965][ T4657] simple_read_from_buffer+0xb5/0x130 [ 56.441996][ T4657] proc_fail_nth_read+0x100/0x140 [ 56.442055][ T4657] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 56.442077][ T4657] vfs_read+0x19d/0x6f0 [ 56.442103][ T4657] ? __rcu_read_unlock+0x4f/0x70 [ 56.442128][ T4657] ? __fget_files+0x184/0x1c0 [ 56.442221][ T4657] ksys_read+0xda/0x1a0 [ 56.442245][ T4657] __x64_sys_read+0x40/0x50 [ 56.442267][ T4657] x64_sys_call+0x2d77/0x2fb0 [ 56.442318][ T4657] do_syscall_64+0xd0/0x1a0 [ 56.442345][ T4657] ? clear_bhb_loop+0x25/0x80 [ 56.442394][ T4657] ? clear_bhb_loop+0x25/0x80 [ 56.442456][ T4657] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 56.442479][ T4657] RIP: 0033:0x7f708a21d37c [ 56.442515][ T4657] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 56.442531][ T4657] RSP: 002b:00007f7088887030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 56.442548][ T4657] RAX: ffffffffffffffda RBX: 00007f708a445fa0 RCX: 00007f708a21d37c [ 56.442561][ T4657] RDX: 000000000000000f RSI: 00007f70888870a0 RDI: 0000000000000009 [ 56.442577][ T4657] RBP: 00007f7088887090 R08: 0000000000000000 R09: 0000000000000000 [ 56.442591][ T4657] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 56.442608][ T4657] R13: 0000000000000000 R14: 00007f708a445fa0 R15: 00007ffe99b20898 [ 56.442632][ T4657] [ 56.667400][ T4658] netlink: 28 bytes leftover after parsing attributes in process `syz.1.405'. [ 56.694316][ T4660] FAULT_INJECTION: forcing a failure. [ 56.694316][ T4660] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 56.707484][ T4660] CPU: 1 UID: 0 PID: 4660 Comm: syz.0.407 Not tainted 6.15.0-rc3-syzkaller-00342-g5bc1018675ec #0 PREEMPT(voluntary) [ 56.707589][ T4660] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 56.707601][ T4660] Call Trace: [ 56.707608][ T4660] [ 56.707617][ T4660] __dump_stack+0x1d/0x30 [ 56.707643][ T4660] dump_stack_lvl+0xe8/0x140 [ 56.707665][ T4660] dump_stack+0x15/0x1b [ 56.707747][ T4660] should_fail_ex+0x265/0x280 [ 56.707822][ T4660] should_fail+0xb/0x20 [ 56.707858][ T4660] should_fail_usercopy+0x1a/0x20 [ 56.707880][ T4660] _copy_to_user+0x20/0xa0 [ 56.707907][ T4660] simple_read_from_buffer+0xb5/0x130 [ 56.708013][ T4660] proc_fail_nth_read+0x100/0x140 [ 56.708040][ T4660] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 56.708136][ T4660] vfs_read+0x19d/0x6f0 [ 56.708159][ T4660] ? __rcu_read_unlock+0x4f/0x70 [ 56.708202][ T4660] ? __fget_files+0x184/0x1c0 [ 56.708238][ T4660] ksys_read+0xda/0x1a0 [ 56.708261][ T4660] __x64_sys_read+0x40/0x50 [ 56.708346][ T4660] x64_sys_call+0x2d77/0x2fb0 [ 56.708373][ T4660] do_syscall_64+0xd0/0x1a0 [ 56.708506][ T4660] ? clear_bhb_loop+0x25/0x80 [ 56.708532][ T4660] ? clear_bhb_loop+0x25/0x80 [ 56.708564][ T4660] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 56.708590][ T4660] RIP: 0033:0x7f708a21d37c [ 56.708608][ T4660] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 56.708627][ T4660] RSP: 002b:00007f7088887030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 56.708730][ T4660] RAX: ffffffffffffffda RBX: 00007f708a445fa0 RCX: 00007f708a21d37c [ 56.708746][ T4660] RDX: 000000000000000f RSI: 00007f70888870a0 RDI: 0000000000000004 [ 56.708757][ T4660] RBP: 00007f7088887090 R08: 0000000000000000 R09: 0000000000000000 [ 56.708768][ T4660] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 56.708791][ T4660] R13: 0000000000000000 R14: 00007f708a445fa0 R15: 00007ffe99b20898 [ 56.708811][ T4660] [ 56.943567][ T23] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 56.976959][ T4663] loop4: detected capacity change from 0 to 256 [ 57.003380][ T4663] msdos: Unknown parameter '}NS¶®ãÕ‰fáH.:' [ 57.044633][ T4664] batadv_slave_0: entered promiscuous mode [ 57.085460][ T4664] netlink: 4 bytes leftover after parsing attributes in process `syz.0.409'. [ 57.098303][ T3621] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 57.151591][ T4664] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 57.189898][ T4664] batadv_slave_0 (unregistering): left promiscuous mode [ 57.469719][ T4685] loop0: detected capacity change from 0 to 512 [ 57.476818][ T4685] EXT4-fs: inline encryption not supported [ 57.484304][ T4685] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 57.492847][ T4685] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 57.501926][ T4685] EXT4-fs (loop0): blocks per group (39) and clusters per group (32768) inconsistent [ 58.200531][ T4698] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 58.246806][ T4698] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 58.304371][ T4698] loop2: detected capacity change from 0 to 512 [ 58.364221][ T23] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 58.365344][ T3355] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 58.566542][ T4685] loop0: detected capacity change from 0 to 8192 [ 58.605173][ T4698] EXT4-fs (loop2): orphan cleanup on readonly fs [ 58.620650][ T4698] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.419: bg 0: block 248: padding at end of block bitmap is not set [ 58.636081][ T4698] EXT4-fs error (device loop2): ext4_acquire_dquot:6935: comm syz.2.419: Failed to acquire dquot type 1 [ 58.755762][ T4698] EXT4-fs (loop2): 1 truncate cleaned up [ 58.762070][ T4698] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 58.807016][ T4698] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 58.905037][ T4704] netlink: 24 bytes leftover after parsing attributes in process `syz.3.421'. [ 58.917220][ T4698] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 59.070648][ T4709] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 59.127984][ T4710] sctp: [Deprecated]: syz.3.422 (pid 4710) Use of int in maxseg socket option. [ 59.127984][ T4710] Use struct sctp_assoc_value instead [ 59.534068][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.577241][ T4719] Falling back ldisc for ttyS3. [ 59.780146][ T4736] loop3: detected capacity change from 0 to 512 [ 59.796309][ T4736] EXT4-fs: Ignoring removed mblk_io_submit option [ 59.824774][ T4736] EXT4-fs: Ignoring removed oldalloc option [ 59.857701][ T4736] EXT4-fs: Invalid want_extra_isize 2728 [ 59.863897][ T3355] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 59.875013][ T37] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 59.899827][ T4738] loop0: detected capacity change from 0 to 512 [ 59.918281][ T4738] ext4: Unknown parameter 'subj_type' [ 59.950335][ T29] kauditd_printk_skb: 247 callbacks suppressed [ 59.950354][ T29] audit: type=1400 audit(1745755935.957:1538): avc: denied { read } for pid=4737 comm="syz.0.431" name="usbmon7" dev="devtmpfs" ino=163 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 59.985030][ T4738] loop0: detected capacity change from 0 to 512 [ 60.022923][ T4738] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 60.041979][ T29] audit: type=1400 audit(1745755935.994:1539): avc: denied { open } for pid=4737 comm="syz.0.431" path="/dev/usbmon7" dev="devtmpfs" ino=163 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 60.076381][ T4738] EXT4-fs (loop0): 1 truncate cleaned up [ 60.083046][ T4738] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 60.119292][ T29] audit: type=1400 audit(1745755936.114:1540): avc: denied { mounton } for pid=4737 comm="syz.0.431" path="/95/file0" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 60.442158][ T23] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 60.453164][ T36] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 60.530743][ T4745] loop2: detected capacity change from 0 to 512 [ 60.553261][ T3355] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 60.564555][ T37] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 60.582703][ T4745] ext4: Unknown parameter 'fsuuid' [ 60.596101][ T29] audit: type=1400 audit(1745755936.539:1541): avc: denied { mounton } for pid=4744 comm="syz.2.428" path="/71/file1" dev="tmpfs" ino=404 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 60.622620][ T4745] macvlan1: entered promiscuous mode [ 60.651420][ T4745] ipvlan0: entered promiscuous mode [ 60.664284][ T4745] ipvlan0: left promiscuous mode [ 60.679881][ T4745] macvlan1: left promiscuous mode [ 60.690882][ T4760] SELinux: Context system_u:object_r:man_t:s0 is not valid (left unmapped). [ 60.704068][ T4759] loop1: detected capacity change from 0 to 512 [ 60.727273][ T4759] EXT4-fs: Ignoring removed mblk_io_submit option [ 60.870736][ T4713] lo speed is unknown, defaulting to 1000 [ 60.876986][ T4713] lo speed is unknown, defaulting to 1000 [ 60.884819][ T4713] lo speed is unknown, defaulting to 1000 [ 60.893907][ T4713] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 60.905098][ T4713] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 60.931165][ T4713] lo speed is unknown, defaulting to 1000 [ 60.939929][ T4713] lo speed is unknown, defaulting to 1000 [ 60.949001][ T4713] lo speed is unknown, defaulting to 1000 [ 60.957815][ T4713] lo speed is unknown, defaulting to 1000 [ 60.966323][ T4713] lo speed is unknown, defaulting to 1000 [ 60.978540][ T29] audit: type=1326 audit(1745755936.641:1542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4754 comm="syz.3.433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f213046e969 code=0x7ffc0000 [ 61.002225][ T29] audit: type=1326 audit(1745755936.641:1543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4754 comm="syz.3.433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f213046e969 code=0x7ffc0000 [ 61.025600][ T29] audit: type=1326 audit(1745755936.641:1544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4754 comm="syz.3.433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f213046e969 code=0x7ffc0000 [ 61.043819][ T4738] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 61.048934][ T29] audit: type=1326 audit(1745755936.641:1545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4754 comm="syz.3.433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=188 compat=0 ip=0x7f213046e969 code=0x7ffc0000 [ 61.080986][ T29] audit: type=1400 audit(1745755936.650:1546): avc: denied { relabelto } for pid=4754 comm="syz.3.433" name="88" dev="tmpfs" ino=486 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:man_t:s0" [ 61.104039][ T4759] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 61.106501][ T29] audit: type=1400 audit(1745755936.650:1547): avc: denied { associate } for pid=4754 comm="syz.3.433" name="88" dev="tmpfs" ino=486 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:man_t:s0" [ 61.120755][ T4759] EXT4-fs (loop1): 1 truncate cleaned up [ 61.151539][ T4759] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 61.164931][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.216807][ T4759] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 61.249630][ T1576] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 61.335056][ T4787] loop0: detected capacity change from 0 to 128 [ 61.361044][ T4787] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 61.374722][ T4787] ext4 filesystem being mounted at /97/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 61.451999][ T4775] program syz.0.438 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 61.533599][ T3306] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 61.555451][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.595103][ T23] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 61.672229][ T4817] loop1: detected capacity change from 0 to 512 [ 61.716950][ T4823] vhci_hcd: invalid port number 96 [ 61.722253][ T4823] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 61.813147][ T4833] loop3: detected capacity change from 0 to 512 [ 61.847437][ T4833] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 61.863501][ T4833] System zones: 0-2, 18-18, 34-34 [ 61.873078][ T4833] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.454: bg 0: block 248: padding at end of block bitmap is not set [ 61.898563][ T4833] EXT4-fs error (device loop3): ext4_acquire_dquot:6935: comm syz.3.454: Failed to acquire dquot type 1 [ 61.940642][ T3355] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 61.972643][ T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 61.993729][ T3383] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 62.012418][ T2273] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 62.024043][ T2280] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 62.058615][ T4833] EXT4-fs (loop3): 1 truncate cleaned up [ 62.064894][ T4833] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 62.113424][ T4833] ext4 filesystem being mounted at /90/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 62.634127][ T3355] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 62.645553][ T1972] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 62.723921][ T23] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 62.736400][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.826880][ T4859] FAULT_INJECTION: forcing a failure. [ 62.826880][ T4859] name failslab, interval 1, probability 0, space 0, times 0 [ 62.839852][ T4859] CPU: 1 UID: 0 PID: 4859 Comm: syz.1.461 Not tainted 6.15.0-rc3-syzkaller-00342-g5bc1018675ec #0 PREEMPT(voluntary) [ 62.839881][ T4859] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 62.839896][ T4859] Call Trace: [ 62.839903][ T4859] [ 62.839912][ T4859] __dump_stack+0x1d/0x30 [ 62.839937][ T4859] dump_stack_lvl+0xe8/0x140 [ 62.839958][ T4859] dump_stack+0x15/0x1b [ 62.840020][ T4859] should_fail_ex+0x265/0x280 [ 62.840061][ T4859] should_failslab+0x8c/0xb0 [ 62.840097][ T4859] kmem_cache_alloc_node_noprof+0x57/0x320 [ 62.840159][ T4859] ? perf_event_alloc+0x152/0x15c0 [ 62.840227][ T4859] perf_event_alloc+0x152/0x15c0 [ 62.840257][ T4859] inherit_event+0x7e/0x680 [ 62.840351][ T4859] inherit_task_group+0x268/0x680 [ 62.840382][ T4859] ? _raw_spin_unlock_irqrestore+0x2b/0x60 [ 62.840420][ T4859] perf_event_init_task+0x226/0x3b0 [ 62.840454][ T4859] copy_process+0xb33/0x1f90 [ 62.840521][ T4859] ? kstrtouint+0x76/0xc0 [ 62.840552][ T4859] ? __rcu_read_unlock+0x4f/0x70 [ 62.840655][ T4859] kernel_clone+0x16c/0x5b0 [ 62.840688][ T4859] ? vfs_write+0x75e/0x8d0 [ 62.840721][ T4859] __x64_sys_clone+0xe6/0x120 [ 62.840761][ T4859] x64_sys_call+0x2c59/0x2fb0 [ 62.840858][ T4859] do_syscall_64+0xd0/0x1a0 [ 62.840885][ T4859] ? clear_bhb_loop+0x25/0x80 [ 62.840913][ T4859] ? clear_bhb_loop+0x25/0x80 [ 62.840977][ T4859] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 62.840999][ T4859] RIP: 0033:0x7fee6d94e969 [ 62.841019][ T4859] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 62.841042][ T4859] RSP: 002b:00007fee6bfb6fe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 62.841066][ T4859] RAX: ffffffffffffffda RBX: 00007fee6db75fa0 RCX: 00007fee6d94e969 [ 62.841081][ T4859] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000630c1000 [ 62.841096][ T4859] RBP: 00007fee6bfb7090 R08: 0000000000000000 R09: 0000000000000000 [ 62.841149][ T4859] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 62.841207][ T4859] R13: 0000000000000000 R14: 00007fee6db75fa0 R15: 00007ffd0047cab8 [ 62.841230][ T4859] [ 63.111878][ T4861] syzkaller0: entered promiscuous mode [ 63.117471][ T4861] syzkaller0: entered allmulticast mode [ 63.214418][ T4861] block device autoloading is deprecated and will be removed. [ 63.230865][ T4861] syz.3.460: attempt to access beyond end of device [ 63.230865][ T4861] md30: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 63.253449][ T4871] loop2: detected capacity change from 0 to 1024 [ 63.268055][ T4871] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 63.279279][ T4871] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 63.303047][ T4871] JBD2: no valid journal superblock found [ 63.308929][ T4871] EXT4-fs (loop2): Could not load journal inode [ 63.332942][ T2280] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 63.392508][ T4881] netlink: 'syz.1.469': attribute type 3 has an invalid length. [ 63.415636][ T4878] loop3: detected capacity change from 0 to 512 [ 63.447426][ T4878] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 63.455603][ T4878] System zones: 0-2, 18-18, 34-34 [ 63.463124][ T4879] openvswitch: netlink: Message has 6 unknown bytes. [ 63.477574][ T4878] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.468: bg 0: block 248: padding at end of block bitmap is not set [ 63.504363][ T4883] loop1: detected capacity change from 0 to 512 [ 63.515873][ T4878] EXT4-fs error (device loop3): ext4_acquire_dquot:6935: comm syz.3.468: Failed to acquire dquot type 1 [ 63.675409][ T4878] EXT4-fs (loop3): 1 truncate cleaned up [ 63.683761][ T4878] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 63.748455][ T4878] ext4 filesystem being mounted at /92/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 63.871965][ T1038] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 64.020463][ T3355] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 64.048992][ T1576] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 64.522105][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.747721][ T4953] netlink: 28 bytes leftover after parsing attributes in process `syz.0.493'. [ 64.756804][ T4953] netlink: 28 bytes leftover after parsing attributes in process `syz.0.493'. [ 64.956654][ T4955] lo speed is unknown, defaulting to 1000 [ 64.983525][ T36] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 65.071373][ T4970] loop2: detected capacity change from 0 to 1764 [ 65.093065][ T3621] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 65.101002][ T3621] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 65.108977][ T3621] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 65.116948][ T3621] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 65.124752][ T3621] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 65.132579][ T3621] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 65.140378][ T3621] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 65.143326][ T4972] ALSA: seq fatal error: cannot create timer (-22) [ 65.148147][ T3621] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 65.148177][ T3621] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 65.164970][ T4972] netlink: 4 bytes leftover after parsing attributes in process `syz.4.497'. [ 65.170195][ T3621] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 65.170226][ T3621] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 65.170252][ T3621] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x2 [ 65.183199][ T4972] netlink: 4 bytes leftover after parsing attributes in process `syz.4.497'. [ 65.186833][ T3621] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 65.186860][ T3621] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 65.226821][ T3621] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x4 [ 65.234666][ T3621] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 65.242457][ T3621] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 65.250278][ T3621] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 65.258108][ T3621] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 65.265908][ T3621] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 65.273680][ T3621] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 65.281593][ T3621] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 65.289682][ T3621] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 65.297879][ T3621] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 65.305645][ T3621] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 65.313517][ T3621] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 65.321337][ T3621] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 65.329126][ T3621] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 65.337171][ T3621] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 65.344960][ T3621] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 65.352851][ T3621] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 65.360605][ T3621] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 65.368381][ T3621] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 65.376331][ T3621] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 65.380123][ T29] kauditd_printk_skb: 297 callbacks suppressed [ 65.380139][ T29] audit: type=1326 audit(1745755940.970:1841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4941 comm="syz.3.488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f2130465927 code=0x7ffc0000 [ 65.384205][ T3621] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 65.392028][ T29] audit: type=1326 audit(1745755940.979:1842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4941 comm="syz.3.488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f213040ab39 code=0x7ffc0000 [ 65.413701][ T3621] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 65.413735][ T3621] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 65.419427][ T3621] hid-generic 0000:0000:20000000.0001: hidraw0: HID v0.01 Device [syz0] on syz1 [ 65.453115][ T29] audit: type=1326 audit(1745755941.007:1843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4941 comm="syz.3.488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f2130465927 code=0x7ffc0000 [ 65.469188][ T3383] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 65.470904][ T29] audit: type=1326 audit(1745755941.007:1844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4941 comm="syz.3.488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f213040ab39 code=0x7ffc0000 [ 65.528687][ T29] audit: type=1326 audit(1745755941.007:1845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4941 comm="syz.3.488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=304 compat=0 ip=0x7f213046e969 code=0x7ffc0000 [ 65.552363][ T29] audit: type=1326 audit(1745755941.081:1846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4941 comm="syz.3.488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f2130465927 code=0x7ffc0000 [ 65.575663][ T29] audit: type=1326 audit(1745755941.081:1847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4941 comm="syz.3.488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f213040ab39 code=0x7ffc0000 [ 65.599116][ T29] audit: type=1326 audit(1745755941.081:1848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4941 comm="syz.3.488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=304 compat=0 ip=0x7f213046e969 code=0x7ffc0000 [ 65.622912][ T29] audit: type=1326 audit(1745755941.081:1849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4941 comm="syz.3.488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f2130465927 code=0x7ffc0000 [ 65.646566][ T29] audit: type=1326 audit(1745755941.081:1850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4941 comm="syz.3.488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f213040ab39 code=0x7ffc0000 [ 65.782628][ T4985] loop2: detected capacity change from 0 to 512 [ 65.820043][ T4991] FAULT_INJECTION: forcing a failure. [ 65.820043][ T4991] name failslab, interval 1, probability 0, space 0, times 0 [ 65.832834][ T4991] CPU: 0 UID: 0 PID: 4991 Comm: syz.0.505 Not tainted 6.15.0-rc3-syzkaller-00342-g5bc1018675ec #0 PREEMPT(voluntary) [ 65.832979][ T4991] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 65.832994][ T4991] Call Trace: [ 65.832999][ T4991] [ 65.833037][ T4991] __dump_stack+0x1d/0x30 [ 65.833057][ T4991] dump_stack_lvl+0xe8/0x140 [ 65.833075][ T4991] dump_stack+0x15/0x1b [ 65.833090][ T4991] should_fail_ex+0x265/0x280 [ 65.833168][ T4991] should_failslab+0x8c/0xb0 [ 65.833206][ T4991] __kmalloc_noprof+0xa5/0x3e0 [ 65.833228][ T4991] ? genl_family_rcv_msg_attrs_parse+0x75/0x190 [ 65.833260][ T4991] genl_family_rcv_msg_attrs_parse+0x75/0x190 [ 65.833288][ T4991] genl_family_rcv_msg_doit+0x48/0x1b0 [ 65.833346][ T4991] ? security_capable+0x83/0x90 [ 65.833497][ T4991] ? ns_capable+0x7d/0xb0 [ 65.833523][ T4991] genl_rcv_msg+0x422/0x460 [ 65.833552][ T4991] ? __pfx_mptcp_pm_nl_add_addr_doit+0x10/0x10 [ 65.833580][ T4991] netlink_rcv_skb+0x120/0x220 [ 65.833609][ T4991] ? __pfx_genl_rcv_msg+0x10/0x10 [ 65.833638][ T4991] genl_rcv+0x28/0x40 [ 65.833662][ T4991] netlink_unicast+0x59e/0x670 [ 65.833779][ T4991] netlink_sendmsg+0x58b/0x6b0 [ 65.833822][ T4991] ? __pfx_netlink_sendmsg+0x10/0x10 [ 65.833860][ T4991] __sock_sendmsg+0x142/0x180 [ 65.833967][ T4991] ____sys_sendmsg+0x31e/0x4e0 [ 65.834004][ T4991] ___sys_sendmsg+0x17b/0x1d0 [ 65.834046][ T4991] __x64_sys_sendmsg+0xd4/0x160 [ 65.834117][ T4991] x64_sys_call+0x2999/0x2fb0 [ 65.834137][ T4991] do_syscall_64+0xd0/0x1a0 [ 65.834216][ T4991] ? clear_bhb_loop+0x25/0x80 [ 65.834248][ T4991] ? clear_bhb_loop+0x25/0x80 [ 65.834299][ T4991] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 65.834326][ T4991] RIP: 0033:0x7f708a21e969 [ 65.834345][ T4991] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 65.834361][ T4991] RSP: 002b:00007f7088887038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 65.834523][ T4991] RAX: ffffffffffffffda RBX: 00007f708a445fa0 RCX: 00007f708a21e969 [ 65.834606][ T4991] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000003 [ 65.834621][ T4991] RBP: 00007f7088887090 R08: 0000000000000000 R09: 0000000000000000 [ 65.834636][ T4991] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 65.834682][ T4991] R13: 0000000000000000 R14: 00007f708a445fa0 R15: 00007ffe99b20898 [ 65.834700][ T4991] [ 66.102837][ T1576] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 66.114069][ T1038] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 66.114523][ T4989] 9pnet: Could not find request transport: t [ 66.144794][ T4985] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 66.152862][ T4985] System zones: 0-2, 18-18, 34-34 [ 66.193592][ T4985] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.503: bg 0: block 248: padding at end of block bitmap is not set [ 66.212833][ T4985] EXT4-fs error (device loop2): ext4_acquire_dquot:6935: comm syz.2.503: Failed to acquire dquot type 1 [ 66.213060][ T5002] netlink: 1676 bytes leftover after parsing attributes in process `syz.4.508'. [ 66.242763][ T4985] EXT4-fs (loop2): 1 truncate cleaned up [ 66.256202][ T4985] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 66.289906][ T4985] ext4 filesystem being mounted at /94/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 66.707528][ T5037] netlink: 8 bytes leftover after parsing attributes in process `syz.4.523'. [ 66.736730][ T5043] netlink: 96 bytes leftover after parsing attributes in process `syz.0.526'. [ 66.747419][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.808417][ T5052] loop2: detected capacity change from 0 to 128 [ 66.820276][ T3621] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 66.832548][ T1972] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 66.870481][ T5057] loop4: detected capacity change from 0 to 1024 [ 66.923419][ T5057] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 67.007885][ T5073] netlink: 12 bytes leftover after parsing attributes in process `syz.1.530'. [ 67.067345][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.228301][ T1038] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 67.240059][ T5091] netlink: 60 bytes leftover after parsing attributes in process `syz.4.543'. [ 67.255124][ T5090] netlink: 60 bytes leftover after parsing attributes in process `+}[@'. [ 67.270323][ T5094] loop3: detected capacity change from 0 to 512 [ 67.324348][ T5094] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 67.332412][ T5094] System zones: 0-2, 18-18, 34-34 [ 67.338450][ T5094] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.544: bg 0: block 248: padding at end of block bitmap is not set [ 67.368602][ T5094] EXT4-fs error (device loop3): ext4_acquire_dquot:6935: comm syz.3.544: Failed to acquire dquot type 1 [ 67.382303][ T5094] EXT4-fs (loop3): 1 truncate cleaned up [ 67.410859][ T5094] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.430900][ T5094] ext4 filesystem being mounted at /106/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 67.496652][ T1972] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 67.507577][ T3621] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 67.682974][ T5123] FAULT_INJECTION: forcing a failure. [ 67.682974][ T5123] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 67.696121][ T5123] CPU: 0 UID: 0 PID: 5123 Comm: syz.1.554 Not tainted 6.15.0-rc3-syzkaller-00342-g5bc1018675ec #0 PREEMPT(voluntary) [ 67.696276][ T5123] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 67.696289][ T5123] Call Trace: [ 67.696296][ T5123] [ 67.696306][ T5123] __dump_stack+0x1d/0x30 [ 67.696331][ T5123] dump_stack_lvl+0xe8/0x140 [ 67.696355][ T5123] dump_stack+0x15/0x1b [ 67.696376][ T5123] should_fail_ex+0x265/0x280 [ 67.696499][ T5123] should_fail+0xb/0x20 [ 67.696540][ T5123] should_fail_usercopy+0x1a/0x20 [ 67.696689][ T5123] _copy_from_user+0x1c/0xb0 [ 67.696709][ T5123] restore_altstack+0x4b/0x2d0 [ 67.696733][ T5123] ? __set_task_blocked+0x23a/0x2a0 [ 67.696754][ T5123] __ia32_sys_rt_sigreturn+0xdc/0x350 [ 67.696812][ T5123] ? _raw_spin_unlock_irq+0x26/0x50 [ 67.696840][ T5123] ? signal_setup_done+0x266/0x290 [ 67.696870][ T5123] ? fpu__clear_user_states+0x3b/0x280 [ 67.696970][ T5123] ? arch_do_signal_or_restart+0x2ed/0x480 [ 67.697115][ T5123] ? __rcu_read_unlock+0x4f/0x70 [ 67.697185][ T5123] ? fpregs_assert_state_consistent+0x84/0xa0 [ 67.697223][ T5123] x64_sys_call+0x2e8a/0x2fb0 [ 67.697274][ T5123] do_syscall_64+0xd0/0x1a0 [ 67.697297][ T5123] ? clear_bhb_loop+0x25/0x80 [ 67.697321][ T5123] ? clear_bhb_loop+0x25/0x80 [ 67.697347][ T5123] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 67.697374][ T5123] RIP: 0033:0x7fee6d8eab39 [ 67.697459][ T5123] Code: 64 c7 00 16 00 00 00 b8 ff ff ff ff c3 0f 1f 40 00 90 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 c7 c0 0f 00 00 00 0f 05 <0f> 1f 80 00 00 00 00 48 81 ec 48 01 00 00 49 89 d0 64 48 8b 04 25 [ 67.697481][ T5123] RSP: 002b:00007fee6bfb6a80 EFLAGS: 00000202 ORIG_RAX: 000000000000000f [ 67.697502][ T5123] RAX: ffffffffffffffda RBX: 00007fee6db75fa0 RCX: 00007fee6d8eab39 [ 67.697518][ T5123] RDX: 00007fee6bfb6a80 RSI: 00007fee6bfb6bb0 RDI: 0000000000000021 [ 67.697540][ T5123] RBP: 00007fee6bfb7090 R08: 0000000000000000 R09: 0000000000000000 [ 67.697554][ T5123] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000001 [ 67.697569][ T5123] R13: 0000000000000000 R14: 00007fee6db75fa0 R15: 00007ffd0047cab8 [ 67.697601][ T5123] [ 68.013018][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.065071][ T5142] loop2: detected capacity change from 0 to 512 [ 68.106460][ T5144] loop3: detected capacity change from 0 to 1024 [ 68.120296][ T5144] EXT4-fs (loop3): inodes count not valid: 32 vs 1312 [ 68.134377][ T5146] syzkaller1: entered promiscuous mode [ 68.140077][ T5146] syzkaller1: entered allmulticast mode [ 68.192731][ T1576] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 68.203802][ T23] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 68.204554][ T37] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 68.222702][ T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 68.286012][ T5157] FAULT_INJECTION: forcing a failure. [ 68.286012][ T5157] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 68.299196][ T5157] CPU: 0 UID: 0 PID: 5157 Comm: syz.3.566 Not tainted 6.15.0-rc3-syzkaller-00342-g5bc1018675ec #0 PREEMPT(voluntary) [ 68.299230][ T5157] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 68.299245][ T5157] Call Trace: [ 68.299253][ T5157] [ 68.299262][ T5157] __dump_stack+0x1d/0x30 [ 68.299288][ T5157] dump_stack_lvl+0xe8/0x140 [ 68.299311][ T5157] dump_stack+0x15/0x1b [ 68.299402][ T5157] should_fail_ex+0x265/0x280 [ 68.299441][ T5157] should_fail+0xb/0x20 [ 68.299501][ T5157] should_fail_usercopy+0x1a/0x20 [ 68.299519][ T5157] strncpy_from_user+0x25/0x230 [ 68.299549][ T5157] ? kmem_cache_alloc_noprof+0x186/0x310 [ 68.299590][ T5157] ? getname_flags+0x80/0x3b0 [ 68.299678][ T5157] getname_flags+0xae/0x3b0 [ 68.299714][ T5157] user_path_at+0x28/0x130 [ 68.299763][ T5157] user_statfs+0x4d/0x110 [ 68.299801][ T5157] __x64_sys_statfs+0x65/0xf0 [ 68.299836][ T5157] ? fput+0x8f/0xc0 [ 68.299851][ T5157] ? ksys_write+0x16e/0x1a0 [ 68.299948][ T5157] ? fpregs_assert_state_consistent+0x84/0xa0 [ 68.299977][ T5157] x64_sys_call+0x1edd/0x2fb0 [ 68.299998][ T5157] do_syscall_64+0xd0/0x1a0 [ 68.300083][ T5157] ? clear_bhb_loop+0x25/0x80 [ 68.300110][ T5157] ? clear_bhb_loop+0x25/0x80 [ 68.300136][ T5157] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 68.300159][ T5157] RIP: 0033:0x7f213046e969 [ 68.300178][ T5157] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 68.300196][ T5157] RSP: 002b:00007f212ead7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000089 [ 68.300251][ T5157] RAX: ffffffffffffffda RBX: 00007f2130695fa0 RCX: 00007f213046e969 [ 68.300264][ T5157] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000240 [ 68.300279][ T5157] RBP: 00007f212ead7090 R08: 0000000000000000 R09: 0000000000000000 [ 68.300293][ T5157] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 68.300308][ T5157] R13: 0000000000000000 R14: 00007f2130695fa0 R15: 00007ffc88acc728 [ 68.300329][ T5157] [ 68.514501][ T23] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 68.608774][ T5164] loop4: detected capacity change from 0 to 512 [ 68.651770][ T5164] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 68.661176][ T5164] System zones: 0-2, 18-18, 34-34 [ 68.668969][ T5164] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.568: bg 0: block 248: padding at end of block bitmap is not set [ 68.684397][ T5164] EXT4-fs error (device loop4): ext4_acquire_dquot:6935: comm syz.4.568: Failed to acquire dquot type 1 [ 68.698807][ T5164] EXT4-fs (loop4): 1 truncate cleaned up [ 68.706309][ T5164] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 68.719231][ T5164] ext4 filesystem being mounted at /122/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 68.873593][ T37] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 68.941942][ T5184] binfmt_misc: register: failed to install interpreter file ./file2 [ 69.014906][ T5184] binfmt_misc: register: failed to install interpreter file ./file2 [ 69.095440][ T5199] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 69.103028][ T5199] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 69.129632][ T5199] FAULT_INJECTION: forcing a failure. [ 69.129632][ T5199] name failslab, interval 1, probability 0, space 0, times 0 [ 69.142381][ T5199] CPU: 1 UID: 0 PID: 5199 Comm: syz.1.580 Not tainted 6.15.0-rc3-syzkaller-00342-g5bc1018675ec #0 PREEMPT(voluntary) [ 69.142409][ T5199] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 69.142512][ T5199] Call Trace: [ 69.142519][ T5199] [ 69.142526][ T5199] __dump_stack+0x1d/0x30 [ 69.142546][ T5199] dump_stack_lvl+0xe8/0x140 [ 69.142566][ T5199] dump_stack+0x15/0x1b [ 69.142584][ T5199] should_fail_ex+0x265/0x280 [ 69.142618][ T5199] should_failslab+0x8c/0xb0 [ 69.142684][ T5199] kmem_cache_alloc_node_noprof+0x57/0x320 [ 69.142787][ T5199] ? __alloc_skb+0x101/0x320 [ 69.142820][ T5199] __alloc_skb+0x101/0x320 [ 69.142850][ T5199] ? __rcu_read_unlock+0x4f/0x70 [ 69.142887][ T5199] arp_create+0xa3/0x3c0 [ 69.142920][ T5199] batadv_bla_send_claim+0x15f/0x670 [ 69.142949][ T5199] ? finish_task_switch+0xad/0x2b0 [ 69.142974][ T5199] batadv_bla_update_orig_address+0x282/0x320 [ 69.143070][ T5199] batadv_primary_if_update_addr+0x1e9/0x300 [ 69.143139][ T5199] batadv_primary_if_select+0xf1/0x280 [ 69.143189][ T5199] batadv_hardif_disable_interface+0x43f/0xaa0 [ 69.143239][ T5199] ? __pfx_batadv_meshif_destroy_netlink+0x10/0x10 [ 69.143266][ T5199] batadv_meshif_destroy_netlink+0x62/0x2e0 [ 69.143361][ T5199] ? __pfx_batadv_meshif_destroy_netlink+0x10/0x10 [ 69.143388][ T5199] rtnl_dellink+0x3ba/0x550 [ 69.143556][ T5199] ? security_capable+0x83/0x90 [ 69.143607][ T5199] ? ns_capable+0x7d/0xb0 [ 69.143628][ T5199] ? __pfx_rtnl_dellink+0x10/0x10 [ 69.143658][ T5199] rtnetlink_rcv_msg+0x5fb/0x6d0 [ 69.143685][ T5199] netlink_rcv_skb+0x120/0x220 [ 69.143735][ T5199] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 69.143814][ T5199] rtnetlink_rcv+0x1c/0x30 [ 69.143868][ T5199] netlink_unicast+0x59e/0x670 [ 69.143901][ T5199] netlink_sendmsg+0x58b/0x6b0 [ 69.143939][ T5199] ? __pfx_netlink_sendmsg+0x10/0x10 [ 69.143979][ T5199] __sock_sendmsg+0x142/0x180 [ 69.144035][ T5199] ____sys_sendmsg+0x31e/0x4e0 [ 69.144076][ T5199] ___sys_sendmsg+0x17b/0x1d0 [ 69.144109][ T5199] __x64_sys_sendmsg+0xd4/0x160 [ 69.144134][ T5199] x64_sys_call+0x2999/0x2fb0 [ 69.144234][ T5199] do_syscall_64+0xd0/0x1a0 [ 69.144259][ T5199] ? clear_bhb_loop+0x25/0x80 [ 69.144317][ T5199] ? clear_bhb_loop+0x25/0x80 [ 69.144343][ T5199] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.144426][ T5199] RIP: 0033:0x7fee6d94e969 [ 69.144498][ T5199] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 69.144519][ T5199] RSP: 002b:00007fee6bfb7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 69.144615][ T5199] RAX: ffffffffffffffda RBX: 00007fee6db75fa0 RCX: 00007fee6d94e969 [ 69.144630][ T5199] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000008 [ 69.144643][ T5199] RBP: 00007fee6bfb7090 R08: 0000000000000000 R09: 0000000000000000 [ 69.144656][ T5199] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 69.144669][ T5199] R13: 0000000000000000 R14: 00007fee6db75fa0 R15: 00007ffd0047cab8 [ 69.144697][ T5199] [ 69.448527][ T5199] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 69.456026][ T5199] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 69.461281][ T5207] netlink: 'syz.2.582': attribute type 10 has an invalid length. [ 69.500488][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.501817][ T5207] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 69.518892][ T5209] 0ªX¹¦À: renamed from caif0 [ 69.527962][ T5209] 0ªX¹¦À: entered allmulticast mode [ 69.533390][ T5209] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 69.552463][ T5209] loop3: detected capacity change from 0 to 256 [ 69.566407][ T59] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 69.577542][ T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 69.618503][ T5216] FAULT_INJECTION: forcing a failure. [ 69.618503][ T5216] name failslab, interval 1, probability 0, space 0, times 0 [ 69.631360][ T5216] CPU: 1 UID: 0 PID: 5216 Comm: syz.2.586 Not tainted 6.15.0-rc3-syzkaller-00342-g5bc1018675ec #0 PREEMPT(voluntary) [ 69.631395][ T5216] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 69.631410][ T5216] Call Trace: [ 69.631418][ T5216] [ 69.631425][ T5216] __dump_stack+0x1d/0x30 [ 69.631452][ T5216] dump_stack_lvl+0xe8/0x140 [ 69.631554][ T5216] dump_stack+0x15/0x1b [ 69.631610][ T5216] should_fail_ex+0x265/0x280 [ 69.631705][ T5216] ? basic_init+0x32/0xc0 [ 69.631738][ T5216] should_failslab+0x8c/0xb0 [ 69.631774][ T5216] __kmalloc_cache_noprof+0x4c/0x320 [ 69.631801][ T5216] basic_init+0x32/0xc0 [ 69.631884][ T5216] tcf_proto_create+0x12d/0x1a0 [ 69.631904][ T5216] tc_new_tfilter+0x95c/0x10a0 [ 69.632009][ T5216] ? ns_capable+0x7d/0xb0 [ 69.632035][ T5216] ? __pfx_tc_new_tfilter+0x10/0x10 [ 69.632068][ T5216] rtnetlink_rcv_msg+0x5fb/0x6d0 [ 69.632101][ T5216] netlink_rcv_skb+0x120/0x220 [ 69.632216][ T5216] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 69.632287][ T5216] rtnetlink_rcv+0x1c/0x30 [ 69.632313][ T5216] netlink_unicast+0x59e/0x670 [ 69.632425][ T5216] netlink_sendmsg+0x58b/0x6b0 [ 69.632490][ T5216] ? __pfx_netlink_sendmsg+0x10/0x10 [ 69.632520][ T5216] __sock_sendmsg+0x142/0x180 [ 69.632553][ T5216] ____sys_sendmsg+0x31e/0x4e0 [ 69.632613][ T5216] ___sys_sendmsg+0x17b/0x1d0 [ 69.632651][ T5216] __x64_sys_sendmsg+0xd4/0x160 [ 69.632713][ T5216] x64_sys_call+0x2999/0x2fb0 [ 69.632741][ T5216] do_syscall_64+0xd0/0x1a0 [ 69.632791][ T5216] ? clear_bhb_loop+0x25/0x80 [ 69.632818][ T5216] ? clear_bhb_loop+0x25/0x80 [ 69.632845][ T5216] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.632872][ T5216] RIP: 0033:0x7f46c032e969 [ 69.632887][ T5216] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 69.632966][ T5216] RSP: 002b:00007f46be997038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 69.632989][ T5216] RAX: ffffffffffffffda RBX: 00007f46c0555fa0 RCX: 00007f46c032e969 [ 69.633005][ T5216] RDX: 0000000000000000 RSI: 0000200000006040 RDI: 0000000000000004 [ 69.633055][ T5216] RBP: 00007f46be997090 R08: 0000000000000000 R09: 0000000000000000 [ 69.633068][ T5216] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 69.633079][ T5216] R13: 0000000000000000 R14: 00007f46c0555fa0 R15: 00007ffd82f91958 [ 69.633097][ T5216] [ 69.884072][ T1038] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 69.906033][ T5220] loop3: detected capacity change from 0 to 1024 [ 69.945492][ T5220] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.029453][ T5220] EXT4-fs error (device loop3): mb_free_blocks:1948: group 0, inode 15: block 369:freeing already freed block (bit 23); block bitmap corrupt. [ 70.046868][ T5237] loop2: detected capacity change from 0 to 2048 [ 70.087214][ T4335] loop2: p1 < > p4 [ 70.094975][ T4335] loop2: p4 size 8388608 extends beyond EOD, truncated [ 70.106740][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.120768][ T5237] loop2: p1 < > p4 [ 70.122663][ T5242] netlink: 'syz.1.595': attribute type 7 has an invalid length. [ 70.125622][ T5237] loop2: p4 size 8388608 extends beyond EOD, truncated [ 70.179150][ T5246] __nla_validate_parse: 3 callbacks suppressed [ 70.179167][ T5246] netlink: 96 bytes leftover after parsing attributes in process `syz.3.596'. [ 70.269429][ T5255] FAULT_INJECTION: forcing a failure. [ 70.269429][ T5255] name failslab, interval 1, probability 0, space 0, times 0 [ 70.282272][ T5255] CPU: 0 UID: 0 PID: 5255 Comm: syz.2.599 Not tainted 6.15.0-rc3-syzkaller-00342-g5bc1018675ec #0 PREEMPT(voluntary) [ 70.282382][ T5255] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 70.282394][ T5255] Call Trace: [ 70.282401][ T5255] [ 70.282410][ T5255] __dump_stack+0x1d/0x30 [ 70.282431][ T5255] dump_stack_lvl+0xe8/0x140 [ 70.282454][ T5255] dump_stack+0x15/0x1b [ 70.282531][ T5255] should_fail_ex+0x265/0x280 [ 70.282569][ T5255] ? __tcf_chain_get+0x91/0x280 [ 70.282642][ T5255] should_failslab+0x8c/0xb0 [ 70.282678][ T5255] __kmalloc_cache_noprof+0x4c/0x320 [ 70.282698][ T5255] __tcf_chain_get+0x91/0x280 [ 70.282727][ T5255] ? __tcf_block_find+0x11a/0x1a0 [ 70.282786][ T5255] tc_new_tfilter+0x5ac/0x10a0 [ 70.282820][ T5255] ? __rcu_read_unlock+0x4f/0x70 [ 70.282857][ T5255] ? ns_capable+0x7d/0xb0 [ 70.282880][ T5255] ? __pfx_tc_new_tfilter+0x10/0x10 [ 70.282913][ T5255] rtnetlink_rcv_msg+0x5fb/0x6d0 [ 70.283070][ T5255] netlink_rcv_skb+0x120/0x220 [ 70.283108][ T5255] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 70.283137][ T5255] rtnetlink_rcv+0x1c/0x30 [ 70.283158][ T5255] netlink_unicast+0x59e/0x670 [ 70.283222][ T5255] netlink_sendmsg+0x58b/0x6b0 [ 70.283254][ T5255] ? __pfx_netlink_sendmsg+0x10/0x10 [ 70.283305][ T5255] __sock_sendmsg+0x142/0x180 [ 70.283336][ T5255] ____sys_sendmsg+0x31e/0x4e0 [ 70.283393][ T5255] ___sys_sendmsg+0x17b/0x1d0 [ 70.283429][ T5255] __x64_sys_sendmsg+0xd4/0x160 [ 70.283497][ T5255] x64_sys_call+0x2999/0x2fb0 [ 70.283518][ T5255] do_syscall_64+0xd0/0x1a0 [ 70.283539][ T5255] ? clear_bhb_loop+0x25/0x80 [ 70.283562][ T5255] ? clear_bhb_loop+0x25/0x80 [ 70.283658][ T5255] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 70.283679][ T5255] RIP: 0033:0x7f46c032e969 [ 70.283693][ T5255] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 70.283710][ T5255] RSP: 002b:00007f46be997038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 70.283732][ T5255] RAX: ffffffffffffffda RBX: 00007f46c0555fa0 RCX: 00007f46c032e969 [ 70.283746][ T5255] RDX: 0000000020000000 RSI: 0000200000006040 RDI: 0000000000000006 [ 70.283757][ T5255] RBP: 00007f46be997090 R08: 0000000000000000 R09: 0000000000000000 [ 70.283830][ T5255] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 70.283969][ T5255] R13: 0000000000000000 R14: 00007f46c0555fa0 R15: 00007ffd82f91958 [ 70.284051][ T5255] [ 70.543495][ T5242] SELinux: failed to load policy [ 70.666806][ T5269] netlink: 'syz.0.605': attribute type 32 has an invalid length. [ 70.680383][ T5268] vhci_hcd: invalid port number 96 [ 70.685736][ T5268] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 70.689749][ T5274] loop4: detected capacity change from 0 to 2048 [ 70.727701][ T5272] loop2: detected capacity change from 0 to 1024 [ 70.770619][ T5272] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.785320][ T5274] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.800593][ T29] kauditd_printk_skb: 371 callbacks suppressed [ 70.800607][ T29] audit: type=1326 audit(1745755945.973:2216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5271 comm="syz.2.606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46c032e969 code=0x7ffc0000 [ 70.832442][ T5274] ext4 filesystem being mounted at /127/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 70.864122][ T5272] EXT4-fs error (device loop2): mb_free_blocks:1948: group 0, inode 15: block 369:freeing already freed block (bit 23); block bitmap corrupt. [ 70.893619][ T29] audit: type=1326 audit(1745755946.010:2217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5271 comm="syz.2.606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f46c032e969 code=0x7ffc0000 [ 70.917017][ T29] audit: type=1326 audit(1745755946.010:2218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5271 comm="syz.2.606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46c032e969 code=0x7ffc0000 [ 70.940433][ T29] audit: type=1326 audit(1745755946.010:2219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5271 comm="syz.2.606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46c032e969 code=0x7ffc0000 [ 70.963828][ T29] audit: type=1326 audit(1745755946.010:2220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5271 comm="syz.2.606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f46c032e969 code=0x7ffc0000 [ 70.987294][ T29] audit: type=1326 audit(1745755946.019:2221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5271 comm="syz.2.606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46c032e969 code=0x7ffc0000 [ 71.010715][ T29] audit: type=1326 audit(1745755946.019:2222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5271 comm="syz.2.606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46c032e969 code=0x7ffc0000 [ 71.034109][ T29] audit: type=1326 audit(1745755946.019:2223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5271 comm="syz.2.606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f46c032e969 code=0x7ffc0000 [ 71.057471][ T29] audit: type=1326 audit(1745755946.019:2224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5271 comm="syz.2.606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46c032e969 code=0x7ffc0000 [ 71.080931][ T29] audit: type=1326 audit(1745755946.019:2225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5271 comm="syz.2.606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46c032e969 code=0x7ffc0000 [ 71.120697][ T1038] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 71.139193][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.154275][ T5293] 9pnet_fd: Insufficient options for proto=fd [ 71.187898][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.220855][ T5299] loop2: detected capacity change from 0 to 4096 [ 71.241792][ T5299] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.263289][ T5299] netlink: 408 bytes leftover after parsing attributes in process `syz.2.612'. [ 71.273368][ T5299] netlink: 104 bytes leftover after parsing attributes in process `syz.2.612'. [ 71.299502][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.360285][ T5307] loop2: detected capacity change from 0 to 512 [ 71.378158][ T5307] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 71.411628][ T5316] syzkaller0: entered allmulticast mode [ 71.417523][ T5316] syzkaller0: entered promiscuous mode [ 71.450394][ T5307] EXT4-fs (loop2): 1 truncate cleaned up [ 71.488013][ T5307] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.555415][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.600367][ T5316] syzkaller0 (unregistering): left promiscuous mode [ 71.607189][ T5316] syzkaller0 (unregistering): left allmulticast mode [ 71.640740][ T5330] FAULT_INJECTION: forcing a failure. [ 71.640740][ T5330] name failslab, interval 1, probability 0, space 0, times 0 [ 71.653562][ T5330] CPU: 0 UID: 0 PID: 5330 Comm: syz.2.622 Not tainted 6.15.0-rc3-syzkaller-00342-g5bc1018675ec #0 PREEMPT(voluntary) [ 71.653594][ T5330] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 71.653626][ T5330] Call Trace: [ 71.653634][ T5330] [ 71.653642][ T5330] __dump_stack+0x1d/0x30 [ 71.653666][ T5330] dump_stack_lvl+0xe8/0x140 [ 71.653720][ T5330] dump_stack+0x15/0x1b [ 71.653817][ T5330] should_fail_ex+0x265/0x280 [ 71.653913][ T5330] should_failslab+0x8c/0xb0 [ 71.653946][ T5330] __kmalloc_noprof+0xa5/0x3e0 [ 71.653965][ T5330] ? genl_family_rcv_msg_attrs_parse+0x75/0x190 [ 71.654010][ T5330] genl_family_rcv_msg_attrs_parse+0x75/0x190 [ 71.654099][ T5330] genl_family_rcv_msg_doit+0x48/0x1b0 [ 71.654127][ T5330] ? security_capable+0x83/0x90 [ 71.654162][ T5330] ? ns_capable+0x7d/0xb0 [ 71.654184][ T5330] genl_rcv_msg+0x422/0x460 [ 71.654266][ T5330] ? __pfx_ovs_ct_limit_cmd_del+0x10/0x10 [ 71.654296][ T5330] netlink_rcv_skb+0x120/0x220 [ 71.654399][ T5330] ? __pfx_genl_rcv_msg+0x10/0x10 [ 71.654431][ T5330] genl_rcv+0x28/0x40 [ 71.654453][ T5330] netlink_unicast+0x59e/0x670 [ 71.654539][ T5330] netlink_sendmsg+0x58b/0x6b0 [ 71.654612][ T5330] ? __pfx_netlink_sendmsg+0x10/0x10 [ 71.654649][ T5330] __sock_sendmsg+0x142/0x180 [ 71.654722][ T5330] ____sys_sendmsg+0x31e/0x4e0 [ 71.654761][ T5330] ___sys_sendmsg+0x17b/0x1d0 [ 71.654794][ T5330] __x64_sys_sendmsg+0xd4/0x160 [ 71.654819][ T5330] x64_sys_call+0x2999/0x2fb0 [ 71.654843][ T5330] do_syscall_64+0xd0/0x1a0 [ 71.654911][ T5330] ? clear_bhb_loop+0x25/0x80 [ 71.654993][ T5330] ? clear_bhb_loop+0x25/0x80 [ 71.655018][ T5330] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 71.655043][ T5330] RIP: 0033:0x7f46c032e969 [ 71.655061][ T5330] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 71.655081][ T5330] RSP: 002b:00007f46be997038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 71.655143][ T5330] RAX: ffffffffffffffda RBX: 00007f46c0555fa0 RCX: 00007f46c032e969 [ 71.655179][ T5330] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000005 [ 71.655192][ T5330] RBP: 00007f46be997090 R08: 0000000000000000 R09: 0000000000000000 [ 71.655205][ T5330] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 71.655218][ T5330] R13: 0000000000000000 R14: 00007f46c0555fa0 R15: 00007ffd82f91958 [ 71.655239][ T5330] [ 71.655788][ T37] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 71.929266][ T5322] netlink: 20 bytes leftover after parsing attributes in process `syz.4.619'. [ 72.145880][ T5342] loop2: detected capacity change from 0 to 256 [ 72.248086][ T5365] FAULT_INJECTION: forcing a failure. [ 72.248086][ T5365] name failslab, interval 1, probability 0, space 0, times 0 [ 72.260901][ T5365] CPU: 0 UID: 0 PID: 5365 Comm: syz.3.635 Not tainted 6.15.0-rc3-syzkaller-00342-g5bc1018675ec #0 PREEMPT(voluntary) [ 72.260983][ T5365] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 72.260995][ T5365] Call Trace: [ 72.261001][ T5365] [ 72.261009][ T5365] __dump_stack+0x1d/0x30 [ 72.261029][ T5365] dump_stack_lvl+0xe8/0x140 [ 72.261050][ T5365] dump_stack+0x15/0x1b [ 72.261127][ T5365] should_fail_ex+0x265/0x280 [ 72.261162][ T5365] should_failslab+0x8c/0xb0 [ 72.261192][ T5365] kmem_cache_alloc_node_noprof+0x57/0x320 [ 72.261277][ T5365] ? __alloc_skb+0x101/0x320 [ 72.261311][ T5365] __alloc_skb+0x101/0x320 [ 72.261348][ T5365] netlink_ack+0xfd/0x500 [ 72.261391][ T5365] audit_receive+0xff2/0x2180 [ 72.261511][ T5365] ? __netlink_deliver_tap+0x4f5/0x500 [ 72.261540][ T5365] ? __netlink_lookup+0x266/0x2a0 [ 72.261628][ T5365] netlink_unicast+0x59e/0x670 [ 72.261656][ T5365] netlink_sendmsg+0x58b/0x6b0 [ 72.261689][ T5365] ? __pfx_netlink_sendmsg+0x10/0x10 [ 72.261753][ T5365] __sock_sendmsg+0x142/0x180 [ 72.261782][ T5365] ____sys_sendmsg+0x31e/0x4e0 [ 72.261868][ T5365] ___sys_sendmsg+0x17b/0x1d0 [ 72.261971][ T5365] __x64_sys_sendmsg+0xd4/0x160 [ 72.261992][ T5365] x64_sys_call+0x2999/0x2fb0 [ 72.262015][ T5365] do_syscall_64+0xd0/0x1a0 [ 72.262042][ T5365] ? clear_bhb_loop+0x25/0x80 [ 72.262069][ T5365] ? clear_bhb_loop+0x25/0x80 [ 72.262219][ T5365] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 72.262239][ T5365] RIP: 0033:0x7f213046e969 [ 72.262252][ T5365] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 72.262272][ T5365] RSP: 002b:00007f212ead7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 72.262289][ T5365] RAX: ffffffffffffffda RBX: 00007f2130695fa0 RCX: 00007f213046e969 [ 72.262301][ T5365] RDX: 0000000000040000 RSI: 00002000000001c0 RDI: 0000000000000005 [ 72.262323][ T5365] RBP: 00007f212ead7090 R08: 0000000000000000 R09: 0000000000000000 [ 72.262338][ T5365] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 72.262352][ T5365] R13: 0000000000000000 R14: 00007f2130695fa0 R15: 00007ffc88acc728 [ 72.262369][ T5365] [ 72.274859][ T23] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 72.719128][ T5385] program syz.0.643 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 72.770674][ T5389] loop3: detected capacity change from 0 to 512 [ 72.777991][ T5385] program syz.0.643 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 72.792946][ T5389] EXT4-fs: Ignoring removed nomblk_io_submit option [ 72.816238][ T5389] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 72.870807][ T5389] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 72.889665][ T5389] EXT4-fs (loop3): 1 truncate cleaned up [ 72.899517][ T5389] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.919448][ T5395] netlink: 132 bytes leftover after parsing attributes in process `syz.2.646'. [ 72.974989][ T5389] 9pnet_fd: Insufficient options for proto=fd [ 72.985767][ T5389] netlink: 4 bytes leftover after parsing attributes in process `syz.3.644'. [ 73.001537][ T5389] x_tables: duplicate underflow at hook 1 [ 73.019895][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.043420][ T37] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 73.083582][ T5398] netlink: 'syz.3.647': attribute type 11 has an invalid length. [ 73.091455][ T5398] netlink: 32 bytes leftover after parsing attributes in process `syz.3.647'. [ 73.117447][ T5400] netlink: 8 bytes leftover after parsing attributes in process `syz.2.648'. [ 73.146252][ T5400] netlink: 36 bytes leftover after parsing attributes in process `syz.2.648'. [ 73.155371][ T5400] netlink: 16 bytes leftover after parsing attributes in process `syz.2.648'. [ 73.272147][ T5410] loop2: detected capacity change from 0 to 256 [ 73.274550][ T5406] loop3: detected capacity change from 0 to 8192 [ 73.279413][ T5410] msdos: Unknown parameter '' [ 73.381355][ T23] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 73.600959][ T5438] IPVS: set_ctl: invalid protocol: 51 172.30.0.4:65535 [ 73.684210][ T5442] netlink: 'syz.1.665': attribute type 21 has an invalid length. [ 73.693562][ T5442] netlink: 'syz.1.665': attribute type 5 has an invalid length. [ 73.702224][ T5442] netlink: 'syz.1.665': attribute type 6 has an invalid length. [ 73.726029][ T1576] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 73.877369][ T5468] loop3: detected capacity change from 0 to 512 [ 73.883983][ T5468] journal_path: Lookup failure for './file0' [ 73.890153][ T5468] EXT4-fs: error: could not find journal device path [ 73.996793][ T5484] loop3: detected capacity change from 0 to 512 [ 74.000254][ T3621] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 74.011110][ T5484] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 74.011297][ T3621] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 74.042426][ T5484] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.056094][ T5484] ext4 filesystem being mounted at /147/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 74.082227][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.253652][ T5503] loop3: detected capacity change from 0 to 128 [ 74.265979][ T5503] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (30846!=65535) [ 74.292454][ T5503] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 ro without journal. Quota mode: none. [ 74.380491][ T5515] usb usb1: usbfs: process 5515 (syz.2.696) did not claim interface 0 before use [ 74.392475][ T5515] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(12) [ 74.399124][ T5515] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 74.406778][ T5515] vhci_hcd vhci_hcd.0: Device attached [ 74.414377][ T5516] vhci_hcd: connection closed [ 74.414611][ T2273] vhci_hcd: stop threads [ 74.423930][ T2273] vhci_hcd: release socket [ 74.428493][ T2273] vhci_hcd: disconnect device [ 74.428706][ T37] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 74.433769][ T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 74.446862][ T1576] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 74.508007][ T36] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 74.620925][ T5521] loop4: detected capacity change from 0 to 256 [ 74.707157][ T5527] loop4: detected capacity change from 0 to 1024 [ 74.723710][ T5527] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.772093][ T5527] EXT4-fs error (device loop4): mb_free_blocks:1948: group 0, inode 15: block 369:freeing already freed block (bit 23); block bitmap corrupt. [ 74.819405][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.847804][ T5540] loop4: detected capacity change from 0 to 2048 [ 74.854708][ T5540] EXT4-fs: Ignoring removed bh option [ 74.864435][ T5540] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 75.112436][ T37] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 75.168370][ T3313] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 75.179434][ T3008] ================================================================== [ 75.187594][ T3008] BUG: KCSAN: data-race in block_uevent / inc_diskseq [ 75.194372][ T3008] [ 75.196722][ T3008] write to 0xffff8881021cee20 of 8 bytes by task 3313 on cpu 1: [ 75.204361][ T3008] inc_diskseq+0x2d/0x40 [ 75.208636][ T3008] disk_force_media_change+0x9e/0xe0 [ 75.213953][ T3008] lo_release+0x2cb/0x400 [ 75.218302][ T3008] bdev_release+0x370/0x3d0 [ 75.223081][ T3008] blkdev_release+0x15/0x20 [ 75.227606][ T3008] __fput+0x298/0x650 [ 75.231596][ T3008] fput_close_sync+0x6e/0x120 [ 75.236282][ T3008] __x64_sys_close+0x56/0xf0 [ 75.240898][ T3008] x64_sys_call+0x2747/0x2fb0 [ 75.245686][ T3008] do_syscall_64+0xd0/0x1a0 [ 75.250821][ T3008] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.257004][ T3008] [ 75.259335][ T3008] read to 0xffff8881021cee20 of 8 bytes by task 3008 on cpu 0: [ 75.266888][ T3008] block_uevent+0x31/0x50 [ 75.271228][ T3008] dev_uevent+0x349/0x3d0 [ 75.275577][ T3008] uevent_show+0x117/0x200 [ 75.280023][ T3008] dev_attr_show+0x3c/0xa0 [ 75.284458][ T3008] sysfs_kf_seq_show+0x1a0/0x280 [ 75.289423][ T3008] kernfs_seq_show+0x7f/0xa0 [ 75.294036][ T3008] seq_read_iter+0x316/0x940 [ 75.298740][ T3008] kernfs_fop_read_iter+0xc4/0x300 [ 75.303940][ T3008] vfs_read+0x5ca/0x6f0 [ 75.308125][ T3008] ksys_read+0xda/0x1a0 [ 75.312294][ T3008] __x64_sys_read+0x40/0x50 [ 75.316910][ T3008] x64_sys_call+0x2d77/0x2fb0 [ 75.321620][ T3008] do_syscall_64+0xd0/0x1a0 [ 75.326139][ T3008] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.332130][ T3008] [ 75.334454][ T3008] value changed: 0x00000000000000cf -> 0x00000000000000d5 [ 75.341733][ T3008] [ 75.344079][ T3008] Reported by Kernel Concurrency Sanitizer on: [ 75.350237][ T3008] CPU: 0 UID: 0 PID: 3008 Comm: udevd Not tainted 6.15.0-rc3-syzkaller-00342-g5bc1018675ec #0 PREEMPT(voluntary) [ 75.362242][ T3008] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 75.372586][ T3008] ================================================================== [ 75.406065][ T59] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 75.422134][ T59] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 75.434664][ T59] EXT4-fs (loop4): This should not happen!! Data will be lost [ 75.434664][ T59] [ 75.444432][ T59] EXT4-fs (loop4): Total free blocks count 0 [ 75.450489][ T59] EXT4-fs (loop4): Free/Dirty block details [ 75.456418][ T59] EXT4-fs (loop4): free_blocks=2415919104 [ 75.456753][ T5562] loop3: detected capacity change from 0 to 512 [ 75.462177][ T59] EXT4-fs (loop4): dirty_blocks=8224 [ 75.462196][ T59] EXT4-fs (loop4): Block reservation details [ 75.462209][ T59] EXT4-fs (loop4): i_reserved_data_blocks=514 [ 75.490816][ T59] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 18 with max blocks 2048 with error 28 [ 75.668603][ T36] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 75.805797][ T59] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 75.817033][ T59] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 75.837129][ T36] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 76.760814][ T1038] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 77.203199][ T59] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 77.885717][ T59] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 77.887843][ T1038] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 78.578951][ T59] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 79.014543][ T1038] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 79.965643][ T1576] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 79.965702][ T37] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 80.151804][ T23] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 80.583131][ T37] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 80.659024][ T1576] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 80.659123][ T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 81.267251][ T23] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 82.045674][ T37] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 82.046479][ T1576] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 82.393553][ T23] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 83.432046][ T36] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 83.432254][ T1576] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 83.520211][ T1038] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 84.125437][ T37] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 84.125623][ T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 84.647944][ T23] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration