last executing test programs: 3.005606201s ago: executing program 1 (id=6875): r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x19c) dup2(r0, r0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0a00000000000000000000000000000000002798eb1d0000", @ANYRES32, @ANYBLOB="0100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r3}, &(0x7f0000000180), &(0x7f00000001c0)=r2}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0x14, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r4}, 0x10) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000000)="ffa0c66448b646817e101a9b90174c1c794786330785861b45fb95465c18ac", 0x1f, 0x80, &(0x7f0000000080)={0xa, 0x4e23, 0xfffffffc, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xad}, 0x1c) socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e1f, @loopback}, 0x10) socket$pppl2tp(0x18, 0x1, 0x1) r5 = syz_io_uring_setup(0x10d, &(0x7f0000000200)={0x0, 0x9e74, 0x0, 0x4}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg$unix(r8, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x100}, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r9, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x12, r9, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080), 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000040)=@IORING_OP_WRITE={0x17, 0x0, 0x4007, @fd_index=0x7fffffd, 0x2, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r5, 0x3f70, 0x0, 0x0, 0x0, 0x0) 2.634776276s ago: executing program 4 (id=6884): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000e40)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000054850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000000c0)='fsi_master_gpio_cmd_abs_addr\x00', r0}, 0x18) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r1}, &(0x7f0000000000), &(0x7f00000005c0)}, 0x20) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r2 = getpid() madvise(&(0x7f0000a5e000/0x1000)=nil, 0x1000, 0x16) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) 2.440776088s ago: executing program 4 (id=6892): syz_usb_disconnect(0xffffffffffffffff) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r1, 0x0, 0x4}, 0x18) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000080)=@broute={'broute\x00', 0x70, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x200000001300, 0x200000001330], 0x0, 0x0, &(0x7f0000001300)=ANY=[@ANYBLOB="0000000000000000000000000000b2ba2e4fc12a990000000000000000000000000000000000000000000000000000feffffff00000000001f0000000000000000180000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fc"]}, 0x108) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2010008, &(0x7f00000001c0), 0xff, 0x52e, &(0x7f0000000640)="$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") socket$nl_netfilter(0x10, 0x3, 0xc) 2.100071733s ago: executing program 1 (id=6900): unshare(0x42000000) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_usb_disconnect(0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000020000000180100002020702500000000002020207b1af8ff00000000bf"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2, 0x3, 0x0, 0x3, 0xc, 0x0, 0x700, 0x0, [@sadb_key={0x2, 0x9, 0x18, 0x0, "e9255b"}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @private}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xd}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}]}, 0x60}, 0x1, 0x7}, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r3}, 0x4) socket$igmp(0x2, 0x3, 0x2) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2010008, &(0x7f00000001c0), 0xff, 0x52e, &(0x7f0000000640)="$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") r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000010900010073797a310000000048000000030a01010000000000000000010000000900030073797a3100000000080007006e6174000900010073797a310000000014000480080002407c40280f080001"], 0xb8}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) 1.884056505s ago: executing program 0 (id=6904): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0xffffffff}, 0x1320, 0x0, 0x3, 0x5, 0x0, 0x800001, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$tipc(0x1e, 0x2, 0x0) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) r1 = socket$kcm(0x1e, 0x1, 0x0) sendmsg$kcm(r1, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@name={0x1e, 0x2, 0x2, {{0x1, 0x1}}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000300)="80", 0x1}], 0x1}, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000680)={0x42, 0xfffffffa, 0x1}, 0x10) socket$tipc(0x1e, 0x5, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000d40)={0x44, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x44}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0xfffc}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast1=0xe0004001}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x0) 1.834345336s ago: executing program 0 (id=6905): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x61780, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$inet6(0xa, 0x805, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f0000000140)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @loopback={0x0, 0xffff888101827518}, 0x0, 0x20, 0x6}}) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01030000000000000000320000000c00990000000000"], 0x28}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r8}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000008000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa106000000000000000000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r8, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x1b, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000100001000b000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f08000340000000045c0000000c0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xe8}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r8) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r11 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001a00006c"], 0x14}}, 0x0) write$tun(r10, &(0x7f0000000140)={@val={0x3, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x14}, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x8016, 0x1400, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @dest_unreach={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @local, @loopback}}}}, 0xfdef) sendmsg$NL80211_CMD_START_P2P_DEVICE(r4, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, r6, 0x100, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x8, 0x3c}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x40081}, 0x40081) write$rfkill(0xffffffffffffffff, &(0x7f0000000080)={0x5, 0x8, 0x3, 0x1}, 0x8) ioctl$TIOCGPTPEER(r3, 0x5441, 0x0) 1.579227539s ago: executing program 4 (id=6907): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x2c, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_LOG_FLAGS={0x8, 0x6, 0x1, 0x0, 0x10}, @NFTA_LOG_PREFIX={0x5, 0x2, 0x1, 0x0, '\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) 1.54043223s ago: executing program 4 (id=6909): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) inotify_init1(0x800) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', 0xffffffffffffffff, 0x0, 0x178}, 0x18) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) bpf$MAP_CREATE(0x700000000000000, &(0x7f0000000280)=@base={0x1d, 0x4, 0x2, 0x0, 0x201, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x0, 0x0, @void, @value, @void, @value}, 0x50) 1.287550813s ago: executing program 1 (id=6916): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x61780, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$inet6(0xa, 0x805, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f0000000140)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @loopback={0x0, 0xffff888101827518}, 0x0, 0x20, 0x6}}) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01030000000000000000320000000c00990000000000"], 0x28}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r8}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000008000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa106000000000000000000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r8, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x1b, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000100001000b000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f08000340000000045c0000000c0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xe8}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r8) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r11 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001a00006c"], 0x14}}, 0x0) write$tun(r10, &(0x7f0000000140)={@val={0x3, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x14}, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x8016, 0x1400, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @dest_unreach={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @local, @loopback}}}}, 0xfdef) sendmsg$NL80211_CMD_START_P2P_DEVICE(r4, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, r6, 0x100, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x8, 0x3c}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x40081}, 0x40081) write$rfkill(0xffffffffffffffff, &(0x7f0000000080)={0x5, 0x8, 0x3, 0x1}, 0x8) ioctl$TIOCGPTPEER(r3, 0x5441, 0x0) (fail_nth: 3) 948.590247ms ago: executing program 4 (id=6918): syz_usb_disconnect(0xffffffffffffffff) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff0000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r1, 0x0, 0x4}, 0x18) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000080)=@broute={'broute\x00', 0x70, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x200000001300, 0x200000001330], 0x0, 0x0, &(0x7f0000001300)=ANY=[@ANYBLOB="0000000000000000000000000000b2ba2e4fc12a990000000000000000000000000000000000000000000000000000feffffff00000000001f0000000000000000180000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fc"]}, 0x108) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2010008, &(0x7f00000001c0), 0xff, 0x52e, &(0x7f0000000640)="$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") socket$nl_netfilter(0x10, 0x3, 0xc) 888.299578ms ago: executing program 1 (id=6919): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x2c, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000080)={0x28, 0x2, 0x1, 0x5, 0x0, 0x0, {0x0, 0x0, 0x5}, [@CTA_FILTER={0x14, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x40}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x204}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x40080}, 0x0) 860.581648ms ago: executing program 1 (id=6921): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) syz_genetlink_get_family_id$batadv(&(0x7f00000003c0), r0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000100)=0x5) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000240)=0x7f) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r1, &(0x7f0000000880)={0x10000000}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000100)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @private=0xa010100, @empty}, {0x0, 0x4e22, 0x8}}}}}, 0x0) close(r5) socket$inet_tcp(0x2, 0x1, 0x0) write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[], 0x240) 741.23327ms ago: executing program 1 (id=6926): unshare(0x42000000) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_usb_disconnect(0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000020000000180100002020702500000000002020207b1af8ff00000000bf"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2, 0x3, 0x0, 0x3, 0xc, 0x0, 0x700, 0x0, [@sadb_key={0x2, 0x9, 0x18, 0x0, "e9255b"}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @private}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xd}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}]}, 0x60}, 0x1, 0x7}, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r3}, 0x4) socket$igmp(0x2, 0x3, 0x2) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2010008, &(0x7f00000001c0), 0xff, 0x52e, &(0x7f0000000640)="$eJzs3cFvI1cZAPBvnDib7GabFDhApZZCi7IVrJ00tI04lCIhOFVClPsSEieK4sRR7LSbqILsX4CEECBxggsXJP4AJLQSF44IqRKcQSoCIdiCBAfoINvjJDjjxFuceNf5/aTZeW/GM9/3vHnjGc/TOIAr69mIeC0i3k/T9IWImMmWF7IpDttT83XvPXh7pTklkaZv/DWJJFvW2VeSzW9km01GxFe/HPGN5HTc+v7B5nK1WtnN6uXG1k65vn9we2Nreb2yXtleXFx4eemVpZeW5gfSzpsR8eoX//i9b//kS6/+4jNv/eHOn299s5nWdLb+ZDse0vhZK9tNL16b7Npg9wMGexQ121PsVKb62+beBeYDAEBvzXP8D0XEJyPihZiJsbNPZwEAAIDHUPr56fh3EpHmm+ixHAAAAHiMFFpjYJNCKRsLMB2FQqnUHsP7kbheqNbqjU+v1fa2V9tjZWejWFjbqFbms7HCs1FMmvWFVvm4/mJXfTEinoyI785MteqllVp1ddhffgAAAMAVcaPr+v8fM+3rfwAAAGDEzA47AQAAAODCuf4HAACA0ef6HwAAAEbaV15/vTmlnd+/Xn1zf2+z9ubt1Up9s7S1t1Jaqe3ulNZrtfXWM/u2zttftVbb+Wxs790tNyr1Rrm+f3Bnq7a33bizEZOX0iAAAADglCc/fv93SUQcfm6qNTVNDDsp4FKMH5WSbJ7T+3//RHv+7iUlBVyKsT5e8+61/OXOE+DxNt69oEdfB0ZPcdgJAEOXnLO+5+CdX2fzTww2HwAAYPDmPpZ///+864GIw8IlpAdcIJ0Yrq6u+//pzLASAS5d6/5/vwN5nCzASCn2NQIQGGX/9/3/c6XpQyUEAAAM3HRrSgql7Ou96SgUSqWIm62fBSgmaxvVynxEPBERv50pXmvWF1pbJn2MEQAAAAAAAAAAAAAAAAAAAAAAAAAAovVU7iRSAAAAYKRFFP6U/LL9LP+5meenu78fmEj+1fpJ4ImIeOuHb3z/7nKjsbvQXP63o+WNH2TLXxzGNxgAAABAt851emv+z2FnAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMCoee/B2yudqY+XTw0q7l++EBGzefHHY7I1n4xiRFz/exLjJ7ZLImJsAPEP70XER/PiJ820jkLmxR/Em3BO/JjN3oW8+DcGEB+usvvN489ref2vEM+25vn9bzzif+ofVO/jXxwd/8Z69P+bfcZ46p2flXvGvxfx1Hj+8acTP+kR/7k+43/9awcHvdalP4qY63z+tI54JyMcl8qNrZ1yff/g9sbW8nplvbK9uLjw8tIrSy8tzZfXNqqV7N/cGN95+ufvn9X+67mff0mWTe/2P5+zv7zPpP+8c/fBhzuVw9Pxbz2XE/9XP85ecTp+IYvzqazcXD/XKR+2yyc989PfPHNW+1eP2198mP//W7122u1UR3m63z8dAOAC1PcPNper1cruyBaaV+mPQBoKj2DhWwPdYZqmabNP5ay6HxH97CeJAbe0kJ/PcaHnEWDYRyYAAGDQjk/6h50JAAAAAAAAAAAAAAAAAAAAXF2X8ZS17pjHj0BOBvEIbQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAgfhvAAAA//89e9P5") r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000010900010073797a310000000048000000030a01010000000000000000010000000900030073797a3100000000080007006e6174000900010073797a310000000014000480080002407c40280f080001"], 0xb8}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) 716.3853ms ago: executing program 2 (id=6927): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet6(0xa, 0x40000080806, 0x0) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x100, @loopback, 0x101}, 0x1c) close(r2) 697.726371ms ago: executing program 3 (id=6928): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0xffffffff}, 0x1320, 0x0, 0x3, 0x5, 0x0, 0x800001, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000d40)={0x14, 0x2, 0x6, 0x5}, 0x14}}, 0x0) 662.595771ms ago: executing program 2 (id=6929): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00810000000d00000000000007020000f8ffff000003000008000000b704000000000000850000005700000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x34, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x23) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007"], 0x0, 0x8, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000000040)=0x0) timer_settime(r3, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f0000000340), 0x11000) 625.775721ms ago: executing program 3 (id=6930): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYRES32=r1], 0x50) mbind(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4005, &(0x7f0000000c00)=0xc, 0x6, 0x2) get_mempolicy(0x0, 0x0, 0x6, &(0x7f0000002000/0x3000)=nil, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x0, 0x7a000000}, 0x4000884) sched_setscheduler(0x0, 0x1, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1b0000007f95cd2b7cfdab6042a077aa8800000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800a8000000000000000000e1d5a26285777838", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x18) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r5, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) shutdown(r5, 0x1) io_uring_setup(0x5170, &(0x7f0000000280)={0x0, 0x2b79, 0x2, 0x3, 0x137, 0x0, r4}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYRES32=r1], 0x50) (async) mbind(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4005, &(0x7f0000000c00)=0xc, 0x6, 0x2) (async) get_mempolicy(0x0, 0x0, 0x6, &(0x7f0000002000/0x3000)=nil, 0x2) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x0, 0x7a000000}, 0x4000884) (async) sched_setscheduler(0x0, 0x1, 0x0) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1b0000007f95cd2b7cfdab6042a077aa8800000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800a8000000000000000000e1d5a26285777838", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x18) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) pipe(&(0x7f00000001c0)) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) (async) sendto$inet6(r5, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) (async) shutdown(r5, 0x1) (async) io_uring_setup(0x5170, &(0x7f0000000280)={0x0, 0x2b79, 0x2, 0x3, 0x137, 0x0, r4}) (async) 600.707582ms ago: executing program 2 (id=6931): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000005"], 0x44}}, 0x0) 536.981753ms ago: executing program 3 (id=6932): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x2c, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000080)={0x28, 0x2, 0x1, 0x5, 0x0, 0x0, {0x0, 0x0, 0x5}, [@CTA_FILTER={0x14, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x40}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x204}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x40080}, 0x0) 525.528503ms ago: executing program 2 (id=6933): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = syz_open_dev$usbfs(&(0x7f00000001c0), 0x800000001fe, 0x2) r3 = dup(r2) ioctl$USBDEVFS_CONTROL(r3, 0xc0185500, &(0x7f0000000040)={0x23, 0x3, 0x17, 0x2, 0x0, 0x0, 0x0}) 507.521103ms ago: executing program 2 (id=6934): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff00000000000000", @ANYRES32=0x1, @ANYBLOB="000000000000000000000000b5b1df1900000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000180)="2e00000011008b88040f80ec59acbc0413a1f8480f0000005e2900421803001825000a001400000002800000121f", 0x2e}], 0x1}, 0x800) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) r3 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000140)) r4 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000240)='kfree\x00', r6, 0x0, 0x9}, 0x18) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001a40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c00038008000140000000000800024000000000180003801400010076657468305f746f5f6873720000000058000000160a0101000b000000000000010000000900020073797a32000000000900010073797a30000000002c000380180003801400010076657468305f746f5f687372000000000800024000440000080001"], 0xf8}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000160000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1802000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r5}, &(0x7f0000000180), &(0x7f00000001c0)=r4}, 0x20) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) faccessat(0xffffffffffffff9c, &(0x7f0000000800)='./file0\x00', 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={0x0, r8}, 0x18) syz_mount_image$ext4(&(0x7f0000000840)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0xca4e9a2efb741a00, &(0x7f0000000bc0)={[{@nobh}, {@data_writeback}], [{@dont_hash}, {@audit}]}, 0x1, 0x5ad, &(0x7f0000000180)="$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") syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f00000006c0), 0x1, 0x513, &(0x7f0000000c40)="$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") r9 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) r10 = inotify_init() inotify_add_watch(r10, &(0x7f0000000000)='./file1\x00', 0x7a8) write$binfmt_elf64(r9, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c460d04000c028000000000000003003e00ecffffff940200000000000040000000000000004d020000000000000000000000003800010001017f000800030000006400000005000000000000000a000000000000000101000000000000a1"], 0x78) close(r9) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000100001000000f5ffffffffffffff000a14000000060a0000000000000000000002"], 0x3c}}, 0x0) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000200)) 489.888673ms ago: executing program 3 (id=6935): r0 = socket$kcm(0x21, 0x2, 0xa) r1 = socket$kcm(0x21, 0x2, 0xa) sendmsg$inet(r1, &(0x7f00000004c0)={&(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x14}}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000a00)="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", 0x1000}, {&(0x7f0000000200)="5e22450bef0d6a94a942b3eee03fcf66dace7a28584b282f21e7", 0x1a}, {&(0x7f0000000280)="6ce72118ef03648e8cde67df2c1dc682b9e1e26cbaa5824e40db6643451ed1b34e1f61892dd0e57f410d4a52056c6afb6e997ba0567b3dcb22e9445afeea7b4c9f6b9df80b2d89d5f2adb932d5cf4efc1060a1d5067dd3cd0ff939a456a96a76ce6cd6333f2c4dc9b442ffc5075acfd593be5bbede0b4872d0464ca432f12b46959654f91a58c90dcbcb3159aec0d8485cefba78739505f39d1b719ebb8e2e497623", 0xa2}, {&(0x7f0000000340)="da958e47b4403c7520b008eb9955dd7d898e35486e5d99bd70869491f6972b6b8e09f9b78410750d57da958df75fc603dd106fc01cfd11c816f384320e45b01a23ce05c607798b840aa70156fb7748399438a0dd842c8a90d85fcda044a948290946a20433f0c7b15bbb202eeaec1ad9c3cd69cea7ac435784d8b92f7e7c6eb356e3bff1b497b0f2698c78628ab9e90e1216a5f31e0287c93aa92e577350452492b6393e09a57bdcf63f7cd29d205826c62c1bf3589e81dc9da139882c1aacf1c84a08bd542866e068a04e0f06fe85d34462764300f278a93b269c08db73", 0xde}], 0x4, &(0x7f0000000480)=[@ip_ttl={{0x14, 0x0, 0x2, 0x7647a174}}], 0x18}, 0x1001) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0)={0x0, r0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYRES16=r2, @ANYRESHEX, @ANYRES16=r3], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r4, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='rss_stat\x00', r5}, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) 465.244733ms ago: executing program 3 (id=6936): r0 = socket(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb904, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000004c0)={'ip6tnl0\x00', &(0x7f0000000740)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x3, 0x0, 0x0, @local, @local, 0x7, 0x7, 0x202, 0x8}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000600)={'syztnl1\x00', 0x0}) r3 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x40, 0x1, 0x0, 0xfc, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x5, 0xffffffffffffffff}, 0x0, 0x5dd8, 0x4, 0x5, 0x0, 0x8, 0x4, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x5, 0x3, &(0x7f0000000500)=ANY=[], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) r5 = socket$netlink(0x10, 0x3, 0x14) bpf$MAP_CREATE(0x0, 0x0, 0x48) close(0x3) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x20000000000000a7, &(0x7f00000007c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r8 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r9, 0x0, 0x80000}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r6}, &(0x7f0000000080), &(0x7f0000000240)=r7}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r7, 0x18000000000002a0, 0xe, 0x20, &(0x7f0000000280)="b9ff03076804268c989e14f088a8", 0x0, 0x3f, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x21}, 0x50) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a2f000000000800410072786500140033007465616d5f736c6176655f30"], 0x38}, 0x1, 0x0, 0x0, 0x4000051}, 0x8844) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r11) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=ANY=[@ANYBLOB="01000000010000001c0012000c000100627269646765a8a0acfcbe591a77b1100c172700e8dfe6f0c2e93559eb0b4c9852522ef12420bcde8e46356bc583bf2120995fb90a540acc0c2f050000006abd4f0ccc03f5173bef94e334a200000000", @ANYBLOB="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", @ANYBLOB="3c0000f5de8fb10ca2eeffff11ffff00ff000000", @ANYRES64=r0, @ANYRESHEX=r5], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@delchain={0x2c, 0x65, 0x200, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r12, {0x8, 0x7}, {0x1, 0x10}, {0x10, 0x6}}, [@TCA_CHAIN={0x8, 0xb, 0xfffffff7}]}, 0x2c}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x20, 0x8, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESDEC=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 413.367164ms ago: executing program 2 (id=6937): mknod(&(0x7f0000000a40)='./file0\x00', 0x8000, 0x40) r0 = open$dir(&(0x7f0000000100)='./file0\x00', 0x149800, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000380)={0xffffffffffffffff, 0x20, &(0x7f0000000280)={&(0x7f0000000240)=""/44, 0x2c, 0x0, &(0x7f0000000300)=""/68, 0x44}}, 0x10) r2 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000880)=@o_path={&(0x7f00000003c0)='./file0\x00', 0x0, 0x4000, r0}, 0x18) r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000008c0), 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0xf}, [@ldst={0x3, 0x3, 0x4, 0xb, 0x6, 0x30, 0xfffffffffffffff0}]}, &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x50, '\x00', 0x0, @cgroup_sock_addr=0x33, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x0, 0x3}, 0x8, 0x10, 0x0, 0x0, r1, 0xffffffffffffffff, 0x1, &(0x7f0000000900)=[r2, 0xffffffffffffffff], &(0x7f0000000940)=[{0x2, 0x4, 0x10, 0xa}], 0x10, 0x100, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xc, &(0x7f0000000c80)=ANY=[@ANYBLOB="c760bf77521769c9a7f168883c0c99fe040fa033323b036c86500a39b9eed4c1c2229c595981ea3bbe4c124aa42c17a8634153925705f60acd016a0d059ddbaf3a832fe7b9100ef9faf12d9da6a771ad7f7afe87731a0be776dab0bbd6d3f58a8fcae899e406abf2c7e7240ddab02bc1ed", @ANYRESDEC=0x0, @ANYRES32, @ANYRESOCT, @ANYRES64=r2, @ANYRESDEC=r2, @ANYRES64=r2, @ANYRESDEC=r3, @ANYRESDEC=r0], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000900850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kfree\x00', r5}, 0x10) r6 = socket$can_raw(0x1d, 0x3, 0x1) fsetxattr$security_selinux(r6, &(0x7f0000000080), &(0x7f0000000240)='system_u:object_r:mount_tmp_t:s0\x00', 0x21, 0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000c40)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x3c, 0x2, 0x6, 0x201, 0x0, 0x0, {0x3, 0x0, 0x1}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x28eb8ebc}]}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20044044}, 0x8000) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fdffffff850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a80)={&(0x7f0000000080)='sched_switch\x00', r9}, 0x18) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x3c1, 0x3, 0x3a8, 0x1d8, 0x12, 0x60d, 0x10000000, 0x202, 0x2d8, 0x2e8, 0x2e8, 0x2d8, 0x2c0, 0x4, 0x0, {[{{@ipv6={@private1, @remote, [], [], 'veth0_to_team\x00', 'macsec0\x00'}, 0x0, 0x190, 0x1d8, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "000000165a2e2e0617ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f672225d6147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac05a602061c96baebc989f1f34a214e6726401fe4b124e0f7323a587d2a1fcf07000000eca0a7b66c60c527bac2b5", 0x7, 0x2}}, @inet=@rpfilter={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0xd0, 0x100, 0x0, {}, [@common=@hl={{0x28}}]}, @common=@inet=@SET2={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x408) socket$nl_route(0x10, 0x3, 0x0) r10 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) r11 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) close_range(r10, r11, 0x0) syz_mount_image$iso9660(&(0x7f0000000180), &(0x7f0000000040)='./file0\x00', 0x1a0c097, &(0x7f00000000c0)=ANY=[@ANYRES32=0x0], 0x0, 0x70a, &(0x7f0000001400)="$eJzs3V+P21gZBvDnJJkkk0JVAapWVbdzOmWlqRhSJ7NNFRUkjHOSMSRxZHtgRkJaFTqDRs0UaItEc9PODX+k5Qtwtzdc8CFW4oKr/RZwBdIKhIR2BUJGPraTTOJkJm3a2aXPb7Qb5/j18etjr896xj4GERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERQVgNw6gItO3uzq6czWq4Tif5ksXU/Ki2FdyMJm7OW+dKuF5AhP+gWMRbUfFbXxmFXA7/tY6r0berKIYfRQwuXL5098u5TLL8nIRfBBat8PHTwYN7/f7+ozPEZrFw9ecJmTMEtVTX9hy7Y7aUtD1H1ms149Z205NNu628Pc9XHWm5KuM7rtywbspKvb4lVXnP2em2GmZbJYV3vl41jJr8TiHa0QDKnrVtt9t2t6VjwtlhzB35/g+iAGV2pDw47O9vjeXzLK2Nw6BKSvKZ8eAwqHra5laNarVSqVYrtdv123cMIzdVYISEMYSpiKUftHSeMvHxusAiyzt5E72kjNX4j/FnAbRRRBc72IVM/bHQgAsHnRnzY0n//84tNXe94/1/0suvjGZfge7/r0Xfrs3q/2fkIiH1AmlzxIzyxX5WdEYSj/EUAzzAPfTRxz4eLaFuCbn20jXkjbgll5LPzJ8WFLqw4cGBjQ5MtPBFyLhEoo4aajDwHrbRhAeJJmy0oeBhDx58qPCIyoeZKpjw4cCFxAYs3IREBXXUsQUJhTL24GAHXbTQgIlPgiA4wKFu9604n+cpW40kqDJjIwrIJcfdPqpztnZW///DZ9HScf9vsP9/U0XHQSH6+GheDNFnQBBf/y9o7dVkQ0RERERERESvgtC/fRf6r/JvAwjQtNvKOBFTOLfsiIiIiIiIiGgZBIICrkJEd+XjbYjp638iIiIiIiIi+nwT+hk7AaCkb+oXo8elzvJLgOxrSJGIiIiIiIiIXpJ+8v9aHgj0Xf5rEAtd/xMRERERERHR58Cvx8bYz2XjMXaD5M/6GQBrfymID/9egLsijnu7XxVHZjjHPIpjpu4A8JtXxMV4oF79kQegv1nqqojXJoF/Jb99CH18kD7W//MgIoRwJxLIZ8crmJGACNdcy8Xf8D6uR4tcj8eZvz/IQM+JRhQuNe22KltO+24Fpnkx46td/+cPD38BuMPtPDjs75d/9JP+fZ3LcVh0fBRW+uxEOpn0xhjl8kSPt6CfuUgb3XgVzWSVv+l2SkKv10i2PwvzKDO+onk7oLYKRFv5S6xH+2w9iGJLg+GI+wJY04M/VMp6l53YendFjLKoTG552o6YseVFncWNKObGxo3oI2mTsJ6MKH4tC1TLk/sgTHQsi+p4Fqe3hfjHRPvPzwKiGLbFVpjFH8OKJtri+x9GC2/1dpPhMc6SxdRRQER0Xg5GvZAexHxqjP2ke0hOamfvd5AD4rPcjN59tJYg7j+S3v3J74Koh8oCufhvE+lrSfoVhGf0DaHryUcDuueupJzRjfKnQRCYF4sYP6P/NwiSDTIW6N2OgyCYPKP/YfQOpDjtqSz+HQTB3YruSX470at+EC7wwcz1eu1qFkUU8OTop/gkmb3/4/2H1epWzXjXMG5XsaL/VyH+yIJ9DxERTTn9HTs6IjMnQryL61Ed1+//7Z1o6kSP96X4lgLtFtDHfWwmrxBYS6+1hAN885/RbQib0VUrsF6KPksDefnS3fCqdhh7KHL6DS+bM6/qdGcZxerbG6rD2OS9Q5NXgKPYrVe8F4iIiF6v9Rn9MHCi/8fJ/r94ov/fxEYUsXEl9bq7NHZL4WZydTy8pB9cOE6NrZye/LeW3BhERERvCOV+LEr+r4Tr2r33KvV6xfS3lXQd67vStRstJe2ur1xr2+y2lOy5ju9YTlv2XBTsVeVJb6fXc1xfNh1X9hzP3tVvfpfxq9891TG7vm15vbYyPSUtp+ubli8btmfJ3s6327a3rVy9sNdTlt20LdO3na70nB3XUmUpPaXGAu2G6vp20w4nu7Ln2h3T3ZPfc9o7HSUbyrNcu+c7UYXJuuxu03E7utoygoVfdEhERPT/6PHTwYN7/f7+o8mJ1fDSPCo5xoyY6Yl8SoUcI4iIiOgzZtRdL7BQ8RUmREREREREREREREREREREREREREREREREU05/pG/BiZW0hwWBYcnPLsYleI7RI4ZT9Qi8bD6fun/SA/u9yOKZYYkAcIalkkciBg8+mhO8OixJmn885niRDHEJeOH2+esXgAu6BFFJbokHwPTzo0s/xtImvnEQteisGD0zdVZhuC9yy//PIZx4+PvpWSJs+SAIgvmLF062Yf7sx3MOwKP8nF2wesrx87rPRET0uv0vAAD//ySOL9Y=") bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000ec0)=ANY=[@ANYBLOB="1b000000000000000000", @ANYRES32=0x1, @ANYBLOB="c6350000000000000000000000000000000000008357123d44c9a8983b43f0c4ab7beac60bdf064839bc0ac6456f7306aad50cce6a868bed0d7e", @ANYRES32=0x0, @ANYRES32=r3, @ANYBLOB="03000000020000000400"/28], 0x50) 324.171525ms ago: executing program 0 (id=6938): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x454e, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0xc, &(0x7f0000000000)=0x56, 0x4) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x18) 293.833696ms ago: executing program 3 (id=6939): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)=ANY=[@ANYRESOCT=0x0, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="03000200"/28], 0x50) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x17, &(0x7f0000000340)=@framed={{0x18, 0x0, 0x0, 0x0, 0xf26, 0x0, 0x0, 0x0, 0x7}, [@cb_func={0x18, 0x2, 0x4, 0x0, 0x5}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0xfb6d}, @alu={0x4, 0x1, 0xd, 0x3, 0xad4a448a0afb78b4, 0x30, 0x8}, @jmp={0x5, 0x0, 0x8, 0xd, 0xa, 0x80, 0x10}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffffff20, 0x0, 0x0, 0x0, 0x1000}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0xe, 0x0, 0x0, 0x0, 0xdd}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f0000000180)='GPL\x00', 0x10d3, 0x0, 0x0, 0x40f00, 0x4b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000001c0)={0x1, 0x5, 0x8001, 0x8}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000200)=[0x1], 0x0, 0x10, 0x97d, @void, @value}, 0x94) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000300)=@o_path={&(0x7f0000000000)='./file0\x00', r0, 0x4000, r1}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), r2) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f00000003c0)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000800)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000ffdbdf250100000008000100", @ANYRES32=r4, @ANYBLOB="4c00088048"], 0x68}}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x9, 0x4, 0x3c56, 0x1, 0x2, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf79d}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x9, 0x6}, 0x10800, 0x0, 0x0, 0x0, 0x4, 0xfffffc00, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2) io_uring_setup(0x38eb, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, 0x0, 0x3d) openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) 116.193328ms ago: executing program 0 (id=6940): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x2c, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_LOG_FLAGS={0x8, 0x6, 0x1, 0x0, 0x10}, @NFTA_LOG_PREFIX={0x5, 0x2, 0x1, 0x0, '\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) 61.105019ms ago: executing program 0 (id=6941): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00810000000d00000000000007020000f8ffff000003000008000000b704000000000000850000005700000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x34, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x23) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007"], 0x0, 0x8, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000000040)=0x0) timer_settime(r3, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f0000000340), 0x11000) 19.090509ms ago: executing program 4 (id=6942): pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x5800) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x4000, 0x4) mknodat$null(r2, &(0x7f0000000140)='./file0\x00', 0x400, 0x103) io_setup(0xb0b, &(0x7f0000000180)=0x0) r4 = eventfd2(0x1000, 0x800) r5 = signalfd(r1, &(0x7f0000001340)={[0x5]}, 0x8) io_submit(r3, 0x3, &(0x7f00000013c0)=[&(0x7f00000011c0)={0x0, 0x0, 0x0, 0x0, 0x440, r0, &(0x7f00000001c0)="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", 0x1000, 0x9}, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x3, 0x6, r2, &(0x7f0000001200)="87a00a58f50b588ec5315513ea03031fbb08b14ea6a81571a2962ac884675d75291166f9ef546124d336e3a446f0bd846b215f42e21376c95d3a0a137f0acb71c87efb30ecf5829bcd0aaeabf38a1c7766fbeacfec83a45cebb3c061932e4af28ea69f0a24a38c6e1abc8b361c1cbc6be62dbe8eff0c1d50d22233c31549a12e801e5d9ccb94af10d337e7f02c54a6a0c3358963", 0x94, 0x7fffffffffffffff, 0x0, 0x1, r4}, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x2, 0x4, r1, &(0x7f0000001300)="9cfff155740636835d9d424b518eb9a1b81059fb6e0ecc16468b", 0x1a, 0x7, 0x0, 0x3, r5}]) r6 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000001400), 0x132a80, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001740)={0x18, 0x20, &(0x7f0000001440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @map_idx={0x18, 0xe, 0x5, 0x0, 0x9}, @exit, @jmp={0x5, 0x1, 0x1, 0x4, 0x5, 0x1, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x5}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r5}}, @map_val={0x18, 0x6, 0x2, 0x0, r5, 0x0, 0x0, 0x0, 0x9}, @tail_call={{0x18, 0x2, 0x1, 0x0, r5}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001540)='GPL\x00', 0x4, 0xe1, &(0x7f0000001580)=""/225, 0x40f00, 0x13, '\x00', 0x0, 0x0, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001680)={0x4, 0x2, 0x4, 0x6}, 0x10, 0x0, 0x0, 0x3, &(0x7f00000016c0)=[r5, r5, r5, r5], &(0x7f0000001700)=[{0x5, 0x2, 0x0, 0x1}, {0x2, 0x4, 0x8, 0xa}, {0x1, 0x4, 0x3, 0x7}], 0x10, 0x10000, @void, @value}, 0x94) poll(&(0x7f0000001800)=[{r0, 0x4010}, {r5, 0x10000}, {r4, 0x10}, {r6, 0x6438}, {r2, 0xc498}, {r4, 0xa000}, {r7, 0x120}, {r0, 0x80c2}], 0x8, 0x7f) r8 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000001840), 0x0, 0x0) vmsplice(r8, &(0x7f0000002b40)=[{&(0x7f0000001880)="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", 0xff}, {&(0x7f0000001980)="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", 0x1000}, {&(0x7f0000002980)="b6eb19a8", 0x4}, {&(0x7f00000029c0)="9c5c5a601f62c07aa8c13f9bbfd376ce56b3b1421383f1768e9681fbfb615b7e8365f800e7d92f5ad4db8324954f43f8460521c435cd8c02a09c3c986a0824f10c1935c7e2c7c341d7d1fdddaafcef50f7118b6599233d30cb1f9c1816cb460d477f37de8b988d675794759aebfb0235ea5b4d5d9820653a44dc09193100d03d43d4d43cc9e6c189f20038aabf2f1bcc29b95ead48b168e6c39f476259ad4db5e6781e946843f5b235facb1cfeb4cd5eb6b25df4ff6ce00a52e089a7cd15f7d609174fcdd5cc3e407278a2130233731c99a1", 0xd2}, {&(0x7f0000002ac0)="4787f10f9eac046f41a4af8dd228bd08a66792cdf42e30a2bd1a1c49ce93cbfddba521e22f938ba241a93fdd0b0c0d9885e3e368b0485133eb23324562b7250d6e4d94bfc7ac37713e98f68eb2f2e677cfc66007eb11548436", 0x59}], 0x5, 0x0) r9 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000002bc0), 0x0, 0x0) syz_io_uring_setup(0x3853, &(0x7f0000002c00)={0x0, 0xb86d, 0x1000, 0x1, 0x18b, 0x0, r9}, &(0x7f0000002c80), &(0x7f0000002cc0)) openat$pidfd(0xffffffffffffff9c, &(0x7f0000002d00), 0x15d540, 0x0) io_setup(0x2, &(0x7f0000002d40)=0x0) r11 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r12 = syz_open_dev$hiddev(&(0x7f0000002e40), 0x1, 0x80000) io_submit(r10, 0x2, &(0x7f0000002f40)=[&(0x7f0000002e00)={0x0, 0x0, 0x0, 0x1, 0x7fff, r11, &(0x7f0000002d80)="f2aed7a843227b948b09d19e26cdc67ad97992465e455ea4d0ba548212c3dc1e81c17865f371a3a7fcaf3e3b27b7c1d1d08ebc830a1bc164fa2c0f784e9606172487f71a2802d0b7246286f9a89a1fbe549edd133eb366273b876781f7ccba34c9700e12b0c91258400733939a", 0x6d, 0x1ff, 0x0, 0x1, r9}, &(0x7f0000002f00)={0x0, 0x0, 0x0, 0x2, 0x1, r12, &(0x7f0000002e80)="bb7ff70f4775de0a5891e62e6c0f7e4413ab7f99bca69dcd8882bef2626ae3d84493ef6faa3383a699b5a788447c262d1679bac642991e28b5840d7063519478ba4da448ca02d3351162", 0x4a, 0x9, 0x0, 0x2}]) io_getevents(0x0, 0xb, 0x1, &(0x7f0000002f80)=[{}], &(0x7f0000002fc0)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000003080)={{r5, 0xffffffffffffffff}, &(0x7f0000003000), &(0x7f0000003040)=r8}, 0x20) r14 = getpid() capset(&(0x7f00000030c0)={0x19980330, r14}, &(0x7f0000003100)={0x6, 0x7, 0x0, 0x6, 0xa97, 0x1}) lsetxattr$security_capability(&(0x7f0000003140)='./file0\x00', &(0x7f0000003180), &(0x7f00000031c0)=@v1={0x1000000, [{0x5, 0x6}]}, 0xc, 0x1) mlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000003200), 0xffffffffffffffff) connect$inet(r5, &(0x7f0000003240)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) ioctl$VFAT_IOCTL_READDIR_SHORT(r1, 0x82307202, &(0x7f0000003280)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) ppoll(&(0x7f00000034c0)=[{r5, 0x8}, {r13, 0x10}, {r12, 0x8}], 0x3, &(0x7f0000003500)={0x0, 0x989680}, &(0x7f0000003540)={[0x9]}, 0x8) 0s ago: executing program 0 (id=6943): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = gettid() timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) (async) clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x0, 0x989680}, 0x0) (async) get_robust_list(r2, &(0x7f00000003c0)=0x0, &(0x7f0000000400)=0x4f) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f00000001c0)={'wg2\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=@newchain={0x2c, 0x64, 0x10, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0x5, 0x5}, {0x8, 0x1}, {0x5, 0x15}}, [@TCA_CHAIN={0x8, 0xb, 0x638}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x4044) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"/1664], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffffe, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) (async) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='X'], 0x58}, 0x1, 0x0, 0x0, 0x90}, 0x0) (async) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) kernel console output (not intermixed with test programs): pid=23855 comm="syz.3.5924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f49f054e969 code=0x7ffc0000 [ 310.225720][ T29] audit: type=1326 audit(1748332879.974:27361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23855 comm="syz.3.5924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49f054e969 code=0x7ffc0000 [ 310.249985][T23848] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 310.273114][ T29] audit: type=1326 audit(1748332879.974:27362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23855 comm="syz.3.5924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49f054e969 code=0x7ffc0000 [ 310.305123][ T29] audit: type=1326 audit(1748332879.974:27363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23855 comm="syz.3.5924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f49f054e969 code=0x7ffc0000 [ 310.328959][T23848] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 310.636986][T23897] netlink: 14 bytes leftover after parsing attributes in process `syz.0.5930'. [ 310.662588][T23897] loop0: detected capacity change from 0 to 1024 [ 310.688843][T23897] loop0: detected capacity change from 0 to 512 [ 310.715226][T23897] EXT4-fs (loop0): 1 orphan inode deleted [ 310.727135][T23897] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 310.745261][ T4546] EXT4-fs error (device loop0): ext4_release_dquot:6971: comm kworker/u8:62: Failed to release dquot type 1 [ 310.757366][T23897] ext4 filesystem being mounted at /444/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 310.900613][T13603] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 310.911254][ T4517] EXT4-fs error (device loop0): ext4_release_dquot:6971: comm kworker/u8:33: Failed to release dquot type 1 [ 311.054061][T23942] loop0: detected capacity change from 0 to 764 [ 311.073483][T23948] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 311.085869][T23948] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 311.757133][T24016] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 311.765915][T24016] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 312.177920][T24016] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 312.194651][T24016] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 312.338113][T24064] loop3: detected capacity change from 0 to 512 [ 312.978708][T24064] EXT4-fs warning (device loop3): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 312.998168][T24064] EXT4-fs (loop3): mount failed [ 313.342545][T24160] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5951'. [ 313.579106][T24165] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 313.602010][T24165] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 313.815050][T24167] netlink: 'syz.2.5954': attribute type 3 has an invalid length. [ 313.878579][T24173] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 313.888223][T24173] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 314.013820][T24169] loop0: detected capacity change from 0 to 512 [ 314.032936][T24169] EXT4-fs warning (device loop0): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 314.047882][T24169] EXT4-fs (loop0): mount failed [ 314.298871][T24173] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 314.307479][T24173] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 314.447888][T24187] netlink: 14 bytes leftover after parsing attributes in process `syz.2.5962'. [ 314.471135][T24183] loop3: detected capacity change from 0 to 2048 [ 314.496964][T24190] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5963'. [ 314.506749][T24183] loop3: p1 < > p4 < > [ 314.527988][T24183] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5960'. [ 314.537054][T24183] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5960'. [ 314.602417][T12925] udevd[12925]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 314.632896][T20158] udevd[20158]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 314.643223][T24198] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5964'. [ 314.647091][T24192] infiniband syz!: set active [ 314.656923][T24192] infiniband syz!: added team_slave_0 [ 314.728720][T24192] RDS/IB: syz!: added [ 314.735437][T24192] smc: adding ib device syz! with port count 1 [ 314.753886][T24192] smc: ib device syz! port 1 has pnetid [ 314.914823][T24213] netlink: 'syz.1.5971': attribute type 13 has an invalid length. [ 315.035214][T24217] loop4: detected capacity change from 0 to 512 [ 315.061475][T24217] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 315.084978][T24229] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.093379][T24229] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.097964][T24217] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 315.101697][T24229] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.117823][T24229] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.136698][ T29] kauditd_printk_skb: 264 callbacks suppressed [ 315.136717][ T29] audit: type=1400 audit(1748332885.034:27624): avc: denied { nlmsg_write } for pid=24226 comm="syz.1.5976" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 315.164028][T24229] netlink: 100 bytes leftover after parsing attributes in process `syz.1.5976'. [ 315.173191][T24217] EXT4-fs (loop4): 1 truncate cleaned up [ 315.179281][T24217] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 315.231942][ T29] audit: type=1326 audit(1748332885.094:27625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24214 comm="syz.4.5973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37fadbe969 code=0x7ffc0000 [ 315.255675][ T29] audit: type=1326 audit(1748332885.094:27626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24214 comm="syz.4.5973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f37fadbe969 code=0x7ffc0000 [ 315.279547][ T29] audit: type=1326 audit(1748332885.094:27627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24214 comm="syz.4.5973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37fadbe969 code=0x7ffc0000 [ 315.303238][ T29] audit: type=1326 audit(1748332885.094:27628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24214 comm="syz.4.5973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f37fadbe969 code=0x7ffc0000 [ 315.327107][ T29] audit: type=1326 audit(1748332885.094:27629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24214 comm="syz.4.5973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37fadbe969 code=0x7ffc0000 [ 315.350789][ T29] audit: type=1326 audit(1748332885.094:27630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24214 comm="syz.4.5973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f37fadbe969 code=0x7ffc0000 [ 315.374590][ T29] audit: type=1326 audit(1748332885.094:27631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24214 comm="syz.4.5973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37fadbe969 code=0x7ffc0000 [ 315.398451][ T29] audit: type=1326 audit(1748332885.094:27632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24214 comm="syz.4.5973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f37fadbe969 code=0x7ffc0000 [ 315.422389][ T29] audit: type=1326 audit(1748332885.094:27633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24214 comm="syz.4.5973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37fadbe969 code=0x7ffc0000 [ 315.424138][T24240] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 315.456575][T24240] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 315.479706][T24245] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.534726][T24245] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.575048][T24257] syz!: rxe_newlink: already configured on team_slave_0 [ 315.584794][T24251] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5985'. [ 315.636925][T24245] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.705317][T24245] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.753807][T24245] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.767915][T24245] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.779658][T24245] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.791682][T24245] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.823285][T24266] netlink: 14 bytes leftover after parsing attributes in process `syz.2.5989'. [ 315.847817][T22878] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 315.892314][T24268] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5990'. [ 315.930199][T24274] sctp: [Deprecated]: syz.2.5992 (pid 24274) Use of int in max_burst socket option. [ 315.930199][T24274] Use struct sctp_assoc_value instead [ 316.332585][T24298] loop3: detected capacity change from 0 to 512 [ 316.354053][T24298] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 316.369879][T24298] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2 [ 316.379007][T24298] EXT4-fs (loop3): 1 truncate cleaned up [ 316.391339][T24298] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 316.498143][T24314] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.552378][T24314] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.634870][T24314] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.684943][T24314] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.738413][T24333] tmpfs: Bad value for 'mpol' [ 316.753140][T24314] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.765550][T24314] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.777945][T24314] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.791174][T24314] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.866736][T24340] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 316.875536][T24340] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 317.000437][T24342] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 317.011157][T24342] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 317.021270][T24342] bond0 (unregistering): Released all slaves [ 317.054668][T24343] loop4: detected capacity change from 0 to 1024 [ 317.153073][T24350] FAULT_INJECTION: forcing a failure. [ 317.153073][T24350] name failslab, interval 1, probability 0, space 0, times 0 [ 317.165800][T24350] CPU: 1 UID: 0 PID: 24350 Comm: syz.4.6017 Not tainted 6.15.0-syzkaller-01958-g785cdec46e92 #0 PREEMPT(voluntary) [ 317.165855][T24350] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 317.165871][T24350] Call Trace: [ 317.165879][T24350] [ 317.165888][T24350] __dump_stack+0x1d/0x30 [ 317.165997][T24350] dump_stack_lvl+0xe8/0x140 [ 317.166025][T24350] dump_stack+0x15/0x1b [ 317.166047][T24350] should_fail_ex+0x265/0x280 [ 317.166135][T24350] should_failslab+0x8c/0xb0 [ 317.166206][T24350] kmem_cache_alloc_noprof+0x50/0x310 [ 317.166235][T24350] ? audit_log_start+0x365/0x6c0 [ 317.166279][T24350] audit_log_start+0x365/0x6c0 [ 317.166379][T24350] audit_seccomp+0x48/0x100 [ 317.166490][T24350] ? __seccomp_filter+0x68c/0x10d0 [ 317.166522][T24350] __seccomp_filter+0x69d/0x10d0 [ 317.166553][T24350] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 317.166658][T24350] ? vfs_write+0x75e/0x8e0 [ 317.166694][T24350] ? __rcu_read_unlock+0x4f/0x70 [ 317.166722][T24350] ? __fget_files+0x184/0x1c0 [ 317.166767][T24350] __secure_computing+0x82/0x150 [ 317.166838][T24350] syscall_trace_enter+0xcf/0x1e0 [ 317.166865][T24350] do_syscall_64+0xaa/0x1b0 [ 317.166895][T24350] ? clear_bhb_loop+0x40/0x90 [ 317.166923][T24350] ? clear_bhb_loop+0x40/0x90 [ 317.166980][T24350] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 317.167007][T24350] RIP: 0033:0x7f37fadbe969 [ 317.167027][T24350] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 317.167051][T24350] RSP: 002b:00007f37f9427038 EFLAGS: 00000246 ORIG_RAX: 0000000000000045 [ 317.167075][T24350] RAX: ffffffffffffffda RBX: 00007f37fafe5fa0 RCX: 00007f37fadbe969 [ 317.167092][T24350] RDX: 0000000000000000 RSI: 0000200000000380 RDI: 0000000000000000 [ 317.167117][T24350] RBP: 00007f37f9427090 R08: 0000000000000000 R09: 0000000000000000 [ 317.167130][T24350] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 317.167142][T24350] R13: 0000000000000000 R14: 00007f37fafe5fa0 R15: 00007ffe1390c3d8 [ 317.167167][T24350] [ 317.380518][T22275] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 317.530842][T24369] loop0: detected capacity change from 0 to 1024 [ 317.553084][T24369] loop0: detected capacity change from 0 to 512 [ 317.595788][T24369] EXT4-fs (loop0): 1 orphan inode deleted [ 317.606646][T24369] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 317.619594][ T4517] EXT4-fs error (device loop0): ext4_release_dquot:6971: comm kworker/u8:33: Failed to release dquot type 1 [ 317.655517][T24369] ext4 filesystem being mounted at /458/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 317.710964][T13603] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 317.728094][ T4517] EXT4-fs error (device loop0): ext4_release_dquot:6971: comm kworker/u8:33: Failed to release dquot type 1 [ 317.813031][T24387] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 317.822093][T24387] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 318.030474][T24404] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 318.317480][T24416] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 318.327925][T24416] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 318.407228][ T4517] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.445439][ T4517] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.495282][T24413] chnl_net:caif_netlink_parms(): no params data found [ 318.504931][ T4517] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.545796][ T4517] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.556815][T24413] bridge0: port 1(bridge_slave_0) entered blocking state [ 318.564093][T24413] bridge0: port 1(bridge_slave_0) entered disabled state [ 318.571459][T24413] bridge_slave_0: entered allmulticast mode [ 318.578886][T24413] bridge_slave_0: entered promiscuous mode [ 318.601220][T24413] bridge0: port 2(bridge_slave_1) entered blocking state [ 318.608417][T24413] bridge0: port 2(bridge_slave_1) entered disabled state [ 318.616363][T24413] bridge_slave_1: entered allmulticast mode [ 318.622941][T24413] bridge_slave_1: entered promiscuous mode [ 318.651599][T24413] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 318.671860][T24413] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 318.699121][T24413] team0: Port device team_slave_0 added [ 318.719276][T24413] team0: Port device team_slave_1 added [ 318.767078][T24413] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 318.774125][T24413] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 318.800174][T24413] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 318.822655][T24413] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 318.829742][T24413] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 318.855848][T24413] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 319.001777][T24413] hsr_slave_0: entered promiscuous mode [ 319.014538][T24413] hsr_slave_1: entered promiscuous mode [ 319.027160][T24413] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 319.040629][T24459] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 319.043595][T24413] Cannot create hsr debugfs directory [ 319.056958][ T4517] tipc: Left network mode [ 319.169314][ T4517] hsr_slave_0: left promiscuous mode [ 319.176720][ T4517] hsr_slave_1: left promiscuous mode [ 319.441845][T24482] __nla_validate_parse: 4 callbacks suppressed [ 319.441863][T24482] netlink: 14 bytes leftover after parsing attributes in process `syz.2.6056'. [ 319.465913][T24484] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 319.478174][T24487] netlink: 14 bytes leftover after parsing attributes in process `syz.4.6057'. [ 319.487651][T24484] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 319.510228][T24487] loop4: detected capacity change from 0 to 1024 [ 319.561155][T24493] netlink: 14 bytes leftover after parsing attributes in process `syz.2.6058'. [ 319.566653][T24487] loop4: detected capacity change from 0 to 512 [ 319.599015][T24487] EXT4-fs (loop4): 1 orphan inode deleted [ 319.612205][ T4546] EXT4-fs error (device loop4): ext4_release_dquot:6971: comm kworker/u8:62: Failed to release dquot type 1 [ 319.614826][T24487] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 319.637408][T24487] ext4 filesystem being mounted at /55/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 319.676536][T22878] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 319.707196][ T31] EXT4-fs error (device loop4): ext4_release_dquot:6971: comm kworker/u8:1: Failed to release dquot type 1 [ 319.815007][T24413] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 319.838919][T24413] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 319.870824][T24413] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 319.893312][T24413] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 319.917721][T24519] SELinux: policydb version -1141833270 does not match my version range 15-34 [ 319.926997][T24519] SELinux: failed to load policy [ 320.072132][T24413] 8021q: adding VLAN 0 to HW filter on device bond0 [ 320.117765][T24413] 8021q: adding VLAN 0 to HW filter on device team0 [ 320.144102][ T4517] bridge0: port 1(bridge_slave_0) entered blocking state [ 320.151291][ T4517] bridge0: port 1(bridge_slave_0) entered forwarding state [ 320.159179][ T29] kauditd_printk_skb: 400 callbacks suppressed [ 320.159195][ T29] audit: type=1326 audit(1748332890.044:28028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24516 comm="syz.2.6063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f925341e969 code=0x7ffc0000 [ 320.171575][ T4517] bridge0: port 2(bridge_slave_1) entered blocking state [ 320.189263][ T29] audit: type=1326 audit(1748332890.044:28029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24516 comm="syz.2.6063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f925341e969 code=0x7ffc0000 [ 320.220403][ T4517] bridge0: port 2(bridge_slave_1) entered forwarding state [ 320.250969][T24413] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 320.261564][T24413] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 320.342204][ T29] audit: type=1326 audit(1748332890.244:28030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24518 comm="syz.4.6064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37fadbe969 code=0x7ffc0000 [ 320.366361][ T29] audit: type=1326 audit(1748332890.244:28031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24518 comm="syz.4.6064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37fadbe969 code=0x7ffc0000 [ 320.466607][T24413] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 320.471213][ T29] audit: type=1326 audit(1748332890.314:28032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24563 comm="syz.0.6074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e4077e969 code=0x7ffc0000 [ 320.497335][ T29] audit: type=1326 audit(1748332890.314:28033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24563 comm="syz.0.6074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e4077e969 code=0x7ffc0000 [ 320.520974][ T29] audit: type=1326 audit(1748332890.314:28034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24563 comm="syz.0.6074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f8e4077e969 code=0x7ffc0000 [ 320.544714][ T29] audit: type=1326 audit(1748332890.314:28035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24563 comm="syz.0.6074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e4077e969 code=0x7ffc0000 [ 320.568431][ T29] audit: type=1326 audit(1748332890.314:28036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24563 comm="syz.0.6074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e4077e969 code=0x7ffc0000 [ 320.592113][ T29] audit: type=1326 audit(1748332890.314:28037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24563 comm="syz.0.6074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8e4077e969 code=0x7ffc0000 [ 320.619416][T24553] loop3: detected capacity change from 0 to 512 [ 320.648019][T24553] EXT4-fs warning (device loop3): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 320.664070][T24553] EXT4-fs (loop3): mount failed [ 320.779230][T24413] veth0_vlan: entered promiscuous mode [ 320.796918][T24413] veth1_vlan: entered promiscuous mode [ 320.834093][T24413] veth0_macvtap: entered promiscuous mode [ 320.841798][T24413] veth1_macvtap: entered promiscuous mode [ 320.853746][T24413] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 320.867637][T24413] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 320.887264][T24413] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.896189][T24413] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.905073][T24413] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.913870][T24413] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.984237][T24612] netlink: 14 bytes leftover after parsing attributes in process `syz.1.6043'. [ 321.020699][T24612] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 321.034452][T24612] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 321.053410][T24612] bond0 (unregistering): Released all slaves [ 321.409614][T24650] netlink: 14 bytes leftover after parsing attributes in process `syz.0.6084'. [ 321.427134][T24650] loop0: detected capacity change from 0 to 1024 [ 321.554207][T24655] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 321.576949][T24655] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6086'. [ 321.691138][T24675] netlink: 14 bytes leftover after parsing attributes in process `syz.0.6096'. [ 321.726223][T24675] loop0: detected capacity change from 0 to 1024 [ 321.784902][T24679] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 321.792180][T24679] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6098'. [ 321.984071][T24699] FAULT_INJECTION: forcing a failure. [ 321.984071][T24699] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 321.997417][T24699] CPU: 0 UID: 0 PID: 24699 Comm: syz.3.6105 Not tainted 6.15.0-syzkaller-01958-g785cdec46e92 #0 PREEMPT(voluntary) [ 321.997453][T24699] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 321.997467][T24699] Call Trace: [ 321.997473][T24699] [ 321.997480][T24699] __dump_stack+0x1d/0x30 [ 321.997504][T24699] dump_stack_lvl+0xe8/0x140 [ 321.997607][T24699] dump_stack+0x15/0x1b [ 321.997632][T24699] should_fail_ex+0x265/0x280 [ 321.997669][T24699] should_fail+0xb/0x20 [ 321.997777][T24699] should_fail_usercopy+0x1a/0x20 [ 321.997815][T24699] _copy_from_user+0x1c/0xb0 [ 321.997864][T24699] ip_options_get+0x11a/0x350 [ 321.997890][T24699] do_ip_setsockopt+0x19d4/0x2240 [ 321.997981][T24699] ip_setsockopt+0x58/0x110 [ 321.998017][T24699] tcp_setsockopt+0x98/0xb0 [ 321.998049][T24699] sock_common_setsockopt+0x66/0x80 [ 321.998111][T24699] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 321.998236][T24699] __sys_setsockopt+0x181/0x200 [ 321.998284][T24699] __x64_sys_setsockopt+0x64/0x80 [ 321.998331][T24699] x64_sys_call+0x2bd5/0x2fb0 [ 321.998422][T24699] do_syscall_64+0xd0/0x1b0 [ 321.998451][T24699] ? clear_bhb_loop+0x40/0x90 [ 321.998559][T24699] ? clear_bhb_loop+0x40/0x90 [ 321.998596][T24699] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 321.998683][T24699] RIP: 0033:0x7f49f054e969 [ 321.998775][T24699] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 321.998800][T24699] RSP: 002b:00007f49eebb7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 321.998826][T24699] RAX: ffffffffffffffda RBX: 00007f49f0775fa0 RCX: 00007f49f054e969 [ 321.998914][T24699] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000003 [ 321.998928][T24699] RBP: 00007f49eebb7090 R08: 0000000000000001 R09: 0000000000000000 [ 321.998943][T24699] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000001 [ 321.998997][T24699] R13: 0000000000000000 R14: 00007f49f0775fa0 R15: 00007ffc1026bdb8 [ 321.999038][T24699] [ 322.222627][T24696] loop4: detected capacity change from 0 to 512 [ 322.234025][T24696] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 322.248284][T24696] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 322.269371][T24696] EXT4-fs (loop4): 1 truncate cleaned up [ 322.275734][T24696] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 322.299696][T24713] FAULT_INJECTION: forcing a failure. [ 322.299696][T24713] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 322.312890][T24713] CPU: 1 UID: 0 PID: 24713 Comm: syz.0.6109 Not tainted 6.15.0-syzkaller-01958-g785cdec46e92 #0 PREEMPT(voluntary) [ 322.312964][T24713] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 322.313053][T24713] Call Trace: [ 322.313059][T24713] [ 322.313065][T24713] __dump_stack+0x1d/0x30 [ 322.313086][T24713] dump_stack_lvl+0xe8/0x140 [ 322.313104][T24713] dump_stack+0x15/0x1b [ 322.313120][T24713] should_fail_ex+0x265/0x280 [ 322.313206][T24713] should_fail+0xb/0x20 [ 322.313227][T24713] should_fail_usercopy+0x1a/0x20 [ 322.313333][T24713] _copy_from_user+0x1c/0xb0 [ 322.313375][T24713] __sys_bind+0x106/0x2a0 [ 322.313438][T24713] __x64_sys_bind+0x3f/0x50 [ 322.313538][T24713] x64_sys_call+0x2086/0x2fb0 [ 322.313560][T24713] do_syscall_64+0xd0/0x1b0 [ 322.313649][T24713] ? clear_bhb_loop+0x40/0x90 [ 322.313669][T24713] ? clear_bhb_loop+0x40/0x90 [ 322.313689][T24713] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 322.313708][T24713] RIP: 0033:0x7f8e4077e969 [ 322.313721][T24713] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 322.313772][T24713] RSP: 002b:00007f8e3ede7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 322.313797][T24713] RAX: ffffffffffffffda RBX: 00007f8e409a5fa0 RCX: 00007f8e4077e969 [ 322.313809][T24713] RDX: 0000000000000010 RSI: 0000200000000200 RDI: 0000000000000006 [ 322.313868][T24713] RBP: 00007f8e3ede7090 R08: 0000000000000000 R09: 0000000000000000 [ 322.313880][T24713] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 322.313891][T24713] R13: 0000000000000000 R14: 00007f8e409a5fa0 R15: 00007ffc04354b38 [ 322.313909][T24713] [ 322.490315][T24711] netlink: 'syz.3.6107': attribute type 3 has an invalid length. [ 322.540199][T24718] netlink: 14 bytes leftover after parsing attributes in process `syz.0.6111'. [ 322.559195][T24718] loop0: detected capacity change from 0 to 1024 [ 322.577698][T24718] loop0: detected capacity change from 0 to 512 [ 322.604886][T24718] EXT4-fs (loop0): 1 orphan inode deleted [ 322.611544][T24718] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 322.631708][ T4509] EXT4-fs error (device loop0): ext4_release_dquot:6971: comm kworker/u8:25: Failed to release dquot type 1 [ 322.642706][T24718] ext4 filesystem being mounted at /485/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 322.675849][T24728] netlink: 14 bytes leftover after parsing attributes in process `syz.1.6115'. [ 322.692422][T13603] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 322.703407][ T4509] EXT4-fs error (device loop0): ext4_release_dquot:6971: comm kworker/u8:25: Failed to release dquot type 1 [ 322.766085][T24737] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 322.774864][T24737] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 322.822715][T22878] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 322.913626][T24747] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 323.349133][T24772] tmpfs: Bad value for 'mpol' [ 323.529276][T24790] sctp: [Deprecated]: syz.2.6140 (pid 24790) Use of int in max_burst socket option. [ 323.529276][T24790] Use struct sctp_assoc_value instead [ 323.748858][T24804] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.793014][T24804] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.845178][T24804] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.916073][T24804] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.969543][T24804] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.988025][T24804] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.999962][T24804] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.018512][T24804] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.074937][T24825] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 324.180493][T24832] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 324.210062][T24835] FAULT_INJECTION: forcing a failure. [ 324.210062][T24835] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 324.223198][T24835] CPU: 1 UID: 0 PID: 24835 Comm: syz.3.6155 Not tainted 6.15.0-syzkaller-01958-g785cdec46e92 #0 PREEMPT(voluntary) [ 324.223235][T24835] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 324.223276][T24835] Call Trace: [ 324.223284][T24835] [ 324.223294][T24835] __dump_stack+0x1d/0x30 [ 324.223318][T24835] dump_stack_lvl+0xe8/0x140 [ 324.223339][T24835] dump_stack+0x15/0x1b [ 324.223419][T24835] should_fail_ex+0x265/0x280 [ 324.223451][T24835] should_fail+0xb/0x20 [ 324.223477][T24835] should_fail_usercopy+0x1a/0x20 [ 324.223573][T24835] _copy_from_user+0x1c/0xb0 [ 324.223674][T24835] __sys_bpf+0x178/0x790 [ 324.223731][T24835] __x64_sys_bpf+0x41/0x50 [ 324.223851][T24835] x64_sys_call+0x2478/0x2fb0 [ 324.223880][T24835] do_syscall_64+0xd0/0x1b0 [ 324.223906][T24835] ? clear_bhb_loop+0x40/0x90 [ 324.224003][T24835] ? clear_bhb_loop+0x40/0x90 [ 324.224031][T24835] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 324.224111][T24835] RIP: 0033:0x7f49f054e969 [ 324.224126][T24835] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 324.224146][T24835] RSP: 002b:00007f49eebb7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 324.224170][T24835] RAX: ffffffffffffffda RBX: 00007f49f0775fa0 RCX: 00007f49f054e969 [ 324.224258][T24835] RDX: 0000000000000020 RSI: 00002000000004c0 RDI: 0000000000000002 [ 324.224276][T24835] RBP: 00007f49eebb7090 R08: 0000000000000000 R09: 0000000000000000 [ 324.224291][T24835] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 324.224303][T24835] R13: 0000000000000000 R14: 00007f49f0775fa0 R15: 00007ffc1026bdb8 [ 324.224324][T24835] [ 324.419580][T24837] netlink: 'syz.3.6156': attribute type 322 has an invalid length. [ 324.476453][T24837] SELinux: failed to load policy [ 324.752613][T24872] __nla_validate_parse: 5 callbacks suppressed [ 324.752689][T24872] netlink: 14 bytes leftover after parsing attributes in process `syz.4.6172'. [ 324.808423][T24872] loop4: detected capacity change from 0 to 1024 [ 324.826552][T24872] loop4: detected capacity change from 0 to 512 [ 324.873431][T24875] loop3: detected capacity change from 0 to 764 [ 324.903785][T24872] EXT4-fs (loop4): 1 orphan inode deleted [ 324.910481][T24872] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 324.924337][ T4546] EXT4-fs error (device loop4): ext4_release_dquot:6971: comm kworker/u8:62: Failed to release dquot type 1 [ 324.935974][T24872] ext4 filesystem being mounted at /70/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 324.999101][T24882] tmpfs: Bad value for 'mpol' [ 325.018101][T22878] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 325.041465][ T4509] EXT4-fs error (device loop4): ext4_release_dquot:6971: comm kworker/u8:25: Failed to release dquot type 1 [ 325.163145][ T29] kauditd_printk_skb: 194 callbacks suppressed [ 325.163164][ T29] audit: type=1326 audit(1748332895.064:28227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24890 comm="syz.2.6180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f925341e969 code=0x7ffc0000 [ 325.218496][T24895] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 325.227847][T24895] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 325.236269][ T29] audit: type=1326 audit(1748332895.094:28228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24890 comm="syz.2.6180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f925341e969 code=0x7ffc0000 [ 325.260081][ T29] audit: type=1326 audit(1748332895.094:28229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24890 comm="syz.2.6180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f925341e969 code=0x7ffc0000 [ 325.283728][ T29] audit: type=1326 audit(1748332895.094:28230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24890 comm="syz.2.6180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f925341e969 code=0x7ffc0000 [ 325.307472][ T29] audit: type=1326 audit(1748332895.094:28231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24890 comm="syz.2.6180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f925341e969 code=0x7ffc0000 [ 325.331177][ T29] audit: type=1326 audit(1748332895.094:28232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24890 comm="syz.2.6180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f925341e969 code=0x7ffc0000 [ 325.354792][ T29] audit: type=1326 audit(1748332895.094:28233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24890 comm="syz.2.6180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f925341e969 code=0x7ffc0000 [ 325.378583][ T29] audit: type=1326 audit(1748332895.094:28234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24890 comm="syz.2.6180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f925341e969 code=0x7ffc0000 [ 325.402386][ T29] audit: type=1326 audit(1748332895.094:28235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24890 comm="syz.2.6180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f925341e969 code=0x7ffc0000 [ 325.426128][ T29] audit: type=1326 audit(1748332895.094:28236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24890 comm="syz.2.6180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f925341e969 code=0x7ffc0000 [ 325.581597][T24911] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 325.590199][T24911] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 325.634602][T24913] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 325.644845][T24913] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 325.729468][T24922] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 326.040449][T24932] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6195'. [ 326.442657][T24943] netlink: 'syz.4.6200': attribute type 3 has an invalid length. [ 326.635465][T24965] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 326.644643][T24965] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 326.708355][T24958] loop3: detected capacity change from 0 to 512 [ 326.739203][T24958] EXT4-fs warning (device loop3): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 326.755871][T24958] EXT4-fs (loop3): mount failed [ 327.406030][T25006] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 327.413299][T25006] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6222'. [ 327.450315][T25015] loop4: detected capacity change from 0 to 256 [ 327.526097][T25019] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 327.539534][T25019] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 328.021633][T25046] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 328.029285][T25046] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6237'. [ 328.046748][T25048] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 328.537922][T25065] loop3: detected capacity change from 0 to 512 [ 328.561888][T25081] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 328.571346][T25081] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 328.577074][T25065] EXT4-fs warning (device loop3): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 328.594164][T25065] EXT4-fs (loop3): mount failed [ 329.107109][T25088] loop4: detected capacity change from 0 to 1024 [ 329.122214][T25088] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 329.176399][T22878] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 329.242334][T25092] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 329.249566][T25092] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6253'. [ 329.845497][T25133] FAULT_INJECTION: forcing a failure. [ 329.845497][T25133] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 329.858741][T25133] CPU: 0 UID: 0 PID: 25133 Comm: syz.1.6266 Not tainted 6.15.0-syzkaller-01958-g785cdec46e92 #0 PREEMPT(voluntary) [ 329.858778][T25133] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 329.858796][T25133] Call Trace: [ 329.858806][T25133] [ 329.858817][T25133] __dump_stack+0x1d/0x30 [ 329.858846][T25133] dump_stack_lvl+0xe8/0x140 [ 329.858948][T25133] dump_stack+0x15/0x1b [ 329.858971][T25133] should_fail_ex+0x265/0x280 [ 329.859004][T25133] should_fail+0xb/0x20 [ 329.859084][T25133] should_fail_usercopy+0x1a/0x20 [ 329.859122][T25133] _copy_from_user+0x1c/0xb0 [ 329.859173][T25133] ___sys_sendmsg+0xc1/0x1d0 [ 329.859208][T25133] __x64_sys_sendmsg+0xd4/0x160 [ 329.859292][T25133] x64_sys_call+0x2999/0x2fb0 [ 329.859322][T25133] do_syscall_64+0xd0/0x1b0 [ 329.859352][T25133] ? clear_bhb_loop+0x40/0x90 [ 329.859379][T25133] ? clear_bhb_loop+0x40/0x90 [ 329.859401][T25133] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 329.859477][T25133] RIP: 0033:0x7f8b3c66e969 [ 329.859497][T25133] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 329.859520][T25133] RSP: 002b:00007f8b3acd7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 329.859545][T25133] RAX: ffffffffffffffda RBX: 00007f8b3c895fa0 RCX: 00007f8b3c66e969 [ 329.859562][T25133] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000006 [ 329.859574][T25133] RBP: 00007f8b3acd7090 R08: 0000000000000000 R09: 0000000000000000 [ 329.859655][T25133] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 329.859669][T25133] R13: 0000000000000000 R14: 00007f8b3c895fa0 R15: 00007ffdbd55b448 [ 329.859688][T25133] [ 330.042844][T25123] loop4: detected capacity change from 0 to 512 [ 330.064327][T25123] EXT4-fs warning (device loop4): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 330.079653][T25123] EXT4-fs (loop4): mount failed [ 330.181480][ T29] kauditd_printk_skb: 266 callbacks suppressed [ 330.181499][ T29] audit: type=1326 audit(1748332900.084:28500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25142 comm="syz.0.6269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e4077e969 code=0x7ffc0000 [ 330.254879][ T29] audit: type=1326 audit(1748332900.114:28501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25142 comm="syz.0.6269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7f8e4077e969 code=0x7ffc0000 [ 330.279170][ T29] audit: type=1326 audit(1748332900.114:28502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25142 comm="syz.0.6269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e4077e969 code=0x7ffc0000 [ 330.302859][ T29] audit: type=1326 audit(1748332900.114:28503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25142 comm="syz.0.6269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e4077e969 code=0x7ffc0000 [ 330.431110][T25146] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 330.438419][T25146] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6270'. [ 330.449654][T25150] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6271'. [ 330.458605][T25150] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6271'. [ 330.521024][ T29] audit: type=1326 audit(1748332900.414:28504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25157 comm="syz.0.6273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e4077e969 code=0x7ffc0000 [ 330.544794][ T29] audit: type=1326 audit(1748332900.414:28505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25157 comm="syz.0.6273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=89 compat=0 ip=0x7f8e4077e969 code=0x7ffc0000 [ 330.568672][ T29] audit: type=1326 audit(1748332900.414:28506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25157 comm="syz.0.6273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e4077e969 code=0x7ffc0000 [ 330.596964][T25150] hub 9-0:1.0: USB hub found [ 330.616305][T25150] hub 9-0:1.0: 8 ports detected [ 330.748560][ T29] audit: type=1326 audit(1748332900.634:28507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25176 comm="syz.4.6279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37fadbe969 code=0x7ffc0000 [ 330.772552][ T29] audit: type=1326 audit(1748332900.634:28508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25176 comm="syz.4.6279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37fadbe969 code=0x7ffc0000 [ 330.796805][ T29] audit: type=1326 audit(1748332900.644:28509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25176 comm="syz.4.6279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f37fadbe969 code=0x7ffc0000 [ 331.003332][T25186] loop4: detected capacity change from 0 to 764 [ 331.005814][T25191] loop3: detected capacity change from 0 to 164 [ 331.080081][T25196] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 331.124063][T25191] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 331.169849][T25211] netlink: 64 bytes leftover after parsing attributes in process `syz.3.6286'. [ 331.317045][T25220] loop3: detected capacity change from 0 to 8192 [ 331.328088][T25220] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 331.386401][T25236] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6293'. [ 331.907353][T25300] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 332.306168][T25348] loop0: detected capacity change from 0 to 512 [ 332.344875][T25348] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 0 overlaps block group descriptors [ 332.355966][T25348] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 0 not in group (block 2)! [ 332.366078][T25348] EXT4-fs (loop0): group descriptors corrupted! [ 332.721862][T25368] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 332.897554][T25375] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6313'. [ 332.925200][T25376] loop3: detected capacity change from 0 to 512 [ 332.964956][T25376] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 332.981065][T25376] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2 [ 333.019702][T25376] EXT4-fs (loop3): 1 truncate cleaned up [ 333.026036][T25376] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 333.056530][T25392] loop0: detected capacity change from 0 to 2048 [ 333.142181][T25392] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 333.164329][T25392] ext4 filesystem being mounted at /527/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 333.291367][T25404] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 333.342643][T25412] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.422631][T25412] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.435148][T25416] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6326'. [ 333.569811][T25412] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.596385][T25410] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.6315: bg 0: block 345: padding at end of block bitmap is not set [ 333.628504][T25410] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 240 with error 117 [ 333.641150][T25410] EXT4-fs (loop0): This should not happen!! Data will be lost [ 333.641150][T25410] [ 333.662685][T25412] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.693054][ T31] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 256 with max blocks 2048 with error 117 [ 333.705884][ T31] EXT4-fs (loop0): This should not happen!! Data will be lost [ 333.705884][ T31] [ 333.729318][T25412] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 333.742405][T25412] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 333.754291][T25412] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 333.771998][T25412] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 333.799039][ T31] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 2305 with max blocks 1800 with error 28 [ 333.811971][ T31] EXT4-fs (loop0): This should not happen!! Data will be lost [ 333.811971][ T31] [ 333.822084][ T31] EXT4-fs (loop0): Total free blocks count 0 [ 333.828205][ T31] EXT4-fs (loop0): Free/Dirty block details [ 333.834334][ T31] EXT4-fs (loop0): free_blocks=0 [ 333.847629][T25425] syz!: rxe_newlink: already configured on team_slave_0 [ 333.856415][T22275] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 333.872722][T25425] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6330'. [ 334.061130][T25440] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6337'. [ 334.175668][T25445] netlink: 14 bytes leftover after parsing attributes in process `syz.4.6339'. [ 334.224538][T25445] loop4: detected capacity change from 0 to 1024 [ 334.250172][T25445] loop4: detected capacity change from 0 to 512 [ 334.290237][T25445] EXT4-fs (loop4): 1 orphan inode deleted [ 334.303716][ T31] EXT4-fs error (device loop4): ext4_release_dquot:6971: comm kworker/u8:1: Failed to release dquot type 1 [ 334.326300][T25445] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 334.395349][T25445] ext4 filesystem being mounted at /106/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 334.462970][T22878] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 334.482455][ T31] EXT4-fs error (device loop4): ext4_release_dquot:6971: comm kworker/u8:1: Failed to release dquot type 1 [ 334.778461][T25473] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 335.030202][T25496] FAULT_INJECTION: forcing a failure. [ 335.030202][T25496] name failslab, interval 1, probability 0, space 0, times 0 [ 335.043276][T25496] CPU: 1 UID: 0 PID: 25496 Comm: syz.3.6360 Not tainted 6.15.0-syzkaller-01958-g785cdec46e92 #0 PREEMPT(voluntary) [ 335.043314][T25496] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 335.043407][T25496] Call Trace: [ 335.043413][T25496] [ 335.043421][T25496] __dump_stack+0x1d/0x30 [ 335.043521][T25496] dump_stack_lvl+0xe8/0x140 [ 335.043550][T25496] dump_stack+0x15/0x1b [ 335.043574][T25496] should_fail_ex+0x265/0x280 [ 335.043680][T25496] should_failslab+0x8c/0xb0 [ 335.043715][T25496] kmem_cache_alloc_node_noprof+0x57/0x320 [ 335.043740][T25496] ? __alloc_skb+0x101/0x320 [ 335.043849][T25496] __alloc_skb+0x101/0x320 [ 335.043889][T25496] ? audit_log_start+0x365/0x6c0 [ 335.043939][T25496] audit_log_start+0x380/0x6c0 [ 335.044136][T25496] audit_seccomp+0x48/0x100 [ 335.044169][T25496] ? __seccomp_filter+0x68c/0x10d0 [ 335.044203][T25496] __seccomp_filter+0x69d/0x10d0 [ 335.044236][T25496] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 335.044274][T25496] ? vfs_write+0x75e/0x8e0 [ 335.044302][T25496] ? kmem_cache_free+0xdf/0x300 [ 335.044342][T25496] __secure_computing+0x82/0x150 [ 335.044364][T25496] syscall_trace_enter+0xcf/0x1e0 [ 335.044423][T25496] do_syscall_64+0xaa/0x1b0 [ 335.044454][T25496] ? clear_bhb_loop+0x40/0x90 [ 335.044498][T25496] ? clear_bhb_loop+0x40/0x90 [ 335.044520][T25496] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 335.044571][T25496] RIP: 0033:0x7f49f054e969 [ 335.044592][T25496] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 335.044618][T25496] RSP: 002b:00007f49eebb7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000007 [ 335.044644][T25496] RAX: ffffffffffffffda RBX: 00007f49f0775fa0 RCX: 00007f49f054e969 [ 335.044661][T25496] RDX: 0000000000000009 RSI: 20000000000000b5 RDI: 0000200000000000 [ 335.044679][T25496] RBP: 00007f49eebb7090 R08: 0000000000000000 R09: 0000000000000000 [ 335.044709][T25496] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 335.044726][T25496] R13: 0000000000000000 R14: 00007f49f0775fa0 R15: 00007ffc1026bdb8 [ 335.044823][T25496] [ 335.261676][ T29] kauditd_printk_skb: 392 callbacks suppressed [ 335.261693][ T29] audit: type=1326 audit(1748332905.164:28898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25495 comm="syz.3.6360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f49f054d37c code=0x7ffc0000 [ 335.297733][ T29] audit: type=1326 audit(1748332905.194:28899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25495 comm="syz.3.6360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f49f054d41f code=0x7ffc0000 [ 335.321365][ T29] audit: type=1326 audit(1748332905.194:28900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25495 comm="syz.3.6360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f49f054d5ca code=0x7ffc0000 [ 335.344996][ T29] audit: type=1326 audit(1748332905.194:28901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25495 comm="syz.3.6360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49f054e969 code=0x7ffc0000 [ 335.368628][ T29] audit: type=1326 audit(1748332905.194:28902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25495 comm="syz.3.6360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49f054e969 code=0x7ffc0000 [ 335.422221][ T29] audit: type=1326 audit(1748332905.314:28903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25502 comm="syz.1.6363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b3c66e969 code=0x7ffc0000 [ 335.445960][ T29] audit: type=1326 audit(1748332905.314:28904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25502 comm="syz.1.6363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=89 compat=0 ip=0x7f8b3c66e969 code=0x7ffc0000 [ 335.469830][ T29] audit: type=1326 audit(1748332905.314:28905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25502 comm="syz.1.6363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b3c66e969 code=0x7ffc0000 [ 335.515486][T25507] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 335.747477][ T29] audit: type=1326 audit(1748332905.644:28906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25518 comm="syz.3.6369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49f054e969 code=0x7ffc0000 [ 335.771181][ T29] audit: type=1326 audit(1748332905.644:28907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25518 comm="syz.3.6369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49f054e969 code=0x7ffc0000 [ 335.941022][T25535] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 336.132900][T25553] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.199422][T25553] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.266925][T25553] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.268159][T25564] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 336.332905][T25569] FAULT_INJECTION: forcing a failure. [ 336.332905][T25569] name failslab, interval 1, probability 0, space 0, times 0 [ 336.345637][T25569] CPU: 0 UID: 0 PID: 25569 Comm: syz.0.6391 Not tainted 6.15.0-syzkaller-01958-g785cdec46e92 #0 PREEMPT(voluntary) [ 336.345675][T25569] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 336.345773][T25569] Call Trace: [ 336.345782][T25569] [ 336.345792][T25569] __dump_stack+0x1d/0x30 [ 336.345822][T25569] dump_stack_lvl+0xe8/0x140 [ 336.345849][T25569] dump_stack+0x15/0x1b [ 336.345874][T25569] should_fail_ex+0x265/0x280 [ 336.345905][T25569] should_failslab+0x8c/0xb0 [ 336.346037][T25569] __kmalloc_noprof+0xa5/0x3e0 [ 336.346067][T25569] ? io_alloc_ocqe+0x51/0x250 [ 336.346104][T25569] io_alloc_ocqe+0x51/0x250 [ 336.346182][T25569] ? io_import_rw_buffer+0x33b/0x340 [ 336.346218][T25569] ? io_rw_fail+0xa2/0xb0 [ 336.346251][T25569] io_cqe_overflow_locked+0x26/0x40 [ 336.346361][T25569] __io_submit_flush_completions+0x258/0xa00 [ 336.346391][T25569] ? io_submit_fail_init+0x21a/0x2f0 [ 336.346428][T25569] io_submit_sqes+0xe32/0xfd0 [ 336.346493][T25569] __se_sys_io_uring_enter+0x1c1/0x1b70 [ 336.346592][T25569] ? __rcu_read_unlock+0x4f/0x70 [ 336.346688][T25569] ? get_pid_task+0x96/0xd0 [ 336.346715][T25569] ? proc_fail_nth_write+0x12d/0x160 [ 336.346819][T25569] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 336.346929][T25569] ? vfs_write+0x75e/0x8e0 [ 336.346963][T25569] ? __rcu_read_unlock+0x4f/0x70 [ 336.346990][T25569] ? __fget_files+0x184/0x1c0 [ 336.347093][T25569] ? fput+0x8f/0xc0 [ 336.347123][T25569] __x64_sys_io_uring_enter+0x78/0x90 [ 336.347159][T25569] x64_sys_call+0x28c8/0x2fb0 [ 336.347189][T25569] do_syscall_64+0xd0/0x1b0 [ 336.347220][T25569] ? clear_bhb_loop+0x40/0x90 [ 336.347302][T25569] ? clear_bhb_loop+0x40/0x90 [ 336.347338][T25569] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 336.347367][T25569] RIP: 0033:0x7f8e4077e969 [ 336.347410][T25569] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 336.347429][T25569] RSP: 002b:00007f8e3ede7038 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 336.347508][T25569] RAX: ffffffffffffffda RBX: 00007f8e409a5fa0 RCX: 00007f8e4077e969 [ 336.347521][T25569] RDX: 0000000000000000 RSI: 0000000000005113 RDI: 0000000000000003 [ 336.347533][T25569] RBP: 00007f8e3ede7090 R08: 0000000000000000 R09: 0000000000000000 [ 336.347561][T25569] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 336.347578][T25569] R13: 0000000000000000 R14: 00007f8e409a5fa0 R15: 00007ffc04354b38 [ 336.347603][T25569] [ 336.629541][T25553] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.757749][T25586] 9pnet_fd: Insufficient options for proto=fd [ 336.808273][T25595] __nla_validate_parse: 1 callbacks suppressed [ 336.808295][T25595] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6398'. [ 336.823651][T25595] netlink: 'syz.3.6398': attribute type 5 has an invalid length. [ 336.831421][T25595] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6398'. [ 336.963638][T25595] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 256 - 0 [ 336.971809][T25595] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 256 - 0 [ 336.980010][T25595] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 256 - 0 [ 336.988151][T25595] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 256 - 0 [ 337.011310][T25595] geneve2: entered promiscuous mode [ 337.016590][T25595] geneve2: entered allmulticast mode [ 337.196442][T25605] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 337.213927][T25605] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6406'. [ 337.542007][T25626] loop0: detected capacity change from 0 to 512 [ 337.549384][T25626] EXT4-fs: Ignoring removed mblk_io_submit option [ 337.567274][T25626] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 337.576496][T25634] FAULT_INJECTION: forcing a failure. [ 337.576496][T25634] name failslab, interval 1, probability 0, space 0, times 0 [ 337.589826][T25634] CPU: 0 UID: 0 PID: 25634 Comm: syz.3.6416 Not tainted 6.15.0-syzkaller-01958-g785cdec46e92 #0 PREEMPT(voluntary) [ 337.589859][T25634] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 337.589940][T25634] Call Trace: [ 337.589948][T25634] [ 337.589986][T25634] __dump_stack+0x1d/0x30 [ 337.590008][T25634] dump_stack_lvl+0xe8/0x140 [ 337.590090][T25634] dump_stack+0x15/0x1b [ 337.590109][T25634] should_fail_ex+0x265/0x280 [ 337.590200][T25634] ? batadv_dat_entry_add+0xee/0x460 [ 337.590232][T25634] should_failslab+0x8c/0xb0 [ 337.590266][T25634] __kmalloc_cache_noprof+0x4c/0x320 [ 337.590300][T25634] batadv_dat_entry_add+0xee/0x460 [ 337.590356][T25634] batadv_dat_snoop_outgoing_arp_reply+0xf4/0x150 [ 337.590534][T25634] batadv_interface_tx+0x651/0xb30 [ 337.590566][T25634] dev_hard_start_xmit+0x12f/0x3d0 [ 337.590604][T25634] __dev_queue_xmit+0x10b9/0x1fb0 [ 337.590652][T25634] ? __dev_queue_xmit+0x182/0x1fb0 [ 337.590733][T25634] ? packet_parse_headers+0x511/0x650 [ 337.590796][T25634] ? packet_parse_headers+0x57c/0x650 [ 337.590833][T25634] packet_xmit+0x4b/0x1f0 [ 337.590939][T25634] packet_sendmsg+0x2b45/0x3300 [ 337.590977][T25634] ? selinux_socket_sendmsg+0x175/0x1b0 [ 337.591019][T25634] ? __pfx_packet_sendmsg+0x10/0x10 [ 337.591123][T25634] __sock_sendmsg+0x145/0x180 [ 337.591155][T25634] __sys_sendto+0x268/0x330 [ 337.591205][T25634] __x64_sys_sendto+0x76/0x90 [ 337.591283][T25634] x64_sys_call+0x2eb6/0x2fb0 [ 337.591384][T25634] do_syscall_64+0xd0/0x1b0 [ 337.591407][T25634] ? clear_bhb_loop+0x40/0x90 [ 337.591446][T25634] ? clear_bhb_loop+0x40/0x90 [ 337.591477][T25634] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 337.591523][T25634] RIP: 0033:0x7f49f054e969 [ 337.591565][T25634] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 337.591590][T25634] RSP: 002b:00007f49eebb7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 337.591616][T25634] RAX: ffffffffffffffda RBX: 00007f49f0775fa0 RCX: 00007f49f054e969 [ 337.591633][T25634] RDX: 000000000000002a RSI: 0000200000000100 RDI: 0000000000000003 [ 337.591650][T25634] RBP: 00007f49eebb7090 R08: 0000200000000200 R09: 0000000000000014 [ 337.591666][T25634] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 337.591746][T25634] R13: 0000000000000000 R14: 00007f49f0775fa0 R15: 00007ffc1026bdb8 [ 337.591791][T25634] [ 337.597165][T25626] EXT4-fs (loop0): can't mount with data_err=abort, fs mounted w/o journal [ 337.929171][T25647] FAULT_INJECTION: forcing a failure. [ 337.929171][T25647] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 337.942324][T25647] CPU: 1 UID: 0 PID: 25647 Comm: syz.3.6421 Not tainted 6.15.0-syzkaller-01958-g785cdec46e92 #0 PREEMPT(voluntary) [ 337.942374][T25647] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 337.942387][T25647] Call Trace: [ 337.942402][T25647] [ 337.942412][T25647] __dump_stack+0x1d/0x30 [ 337.942442][T25647] dump_stack_lvl+0xe8/0x140 [ 337.942470][T25647] dump_stack+0x15/0x1b [ 337.942493][T25647] should_fail_ex+0x265/0x280 [ 337.942522][T25647] should_fail+0xb/0x20 [ 337.942624][T25647] should_fail_usercopy+0x1a/0x20 [ 337.942662][T25647] _copy_to_user+0x20/0xa0 [ 337.942746][T25647] simple_read_from_buffer+0xb5/0x130 [ 337.942782][T25647] proc_fail_nth_read+0x100/0x140 [ 337.942841][T25647] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 337.942877][T25647] vfs_read+0x1a0/0x6f0 [ 337.942903][T25647] ? __rcu_read_unlock+0x4f/0x70 [ 337.942927][T25647] ? __rcu_read_unlock+0x4f/0x70 [ 337.943029][T25647] ? __fget_files+0x184/0x1c0 [ 337.943067][T25647] ksys_read+0xda/0x1a0 [ 337.943161][T25647] __x64_sys_read+0x40/0x50 [ 337.943190][T25647] x64_sys_call+0x2d77/0x2fb0 [ 337.943284][T25647] do_syscall_64+0xd0/0x1b0 [ 337.943314][T25647] ? clear_bhb_loop+0x40/0x90 [ 337.943341][T25647] ? clear_bhb_loop+0x40/0x90 [ 337.943364][T25647] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 337.943387][T25647] RIP: 0033:0x7f49f054d37c [ 337.943414][T25647] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 337.943509][T25647] RSP: 002b:00007f49eebb7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 337.943528][T25647] RAX: ffffffffffffffda RBX: 00007f49f0775fa0 RCX: 00007f49f054d37c [ 337.943593][T25647] RDX: 000000000000000f RSI: 00007f49eebb70a0 RDI: 0000000000000007 [ 337.943610][T25647] RBP: 00007f49eebb7090 R08: 0000000000000000 R09: 0000000000000000 [ 337.943626][T25647] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 337.943714][T25647] R13: 0000000000000000 R14: 00007f49f0775fa0 R15: 00007ffc1026bdb8 [ 337.943737][T25647] [ 338.237525][T25553] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 338.263605][T25553] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 338.288801][T25553] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 338.314862][T25553] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 338.442657][T25671] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6431'. [ 338.451639][T25671] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6431'. [ 338.480944][T25671] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6431'. [ 338.518977][T25671] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6431'. [ 338.527939][T25671] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6431'. [ 338.548138][T25653] loop3: detected capacity change from 0 to 512 [ 338.563443][T25653] EXT4-fs warning (device loop3): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 338.577564][T25671] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6431'. [ 338.591161][T25653] EXT4-fs (loop3): mount failed [ 338.655283][T25671] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6431'. [ 338.717820][T25685] loop4: detected capacity change from 0 to 1024 [ 338.976353][T25699] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 339.131991][T25718] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 339.307228][T25733] loop3: detected capacity change from 0 to 1024 [ 339.309934][T25720] loop0: detected capacity change from 0 to 512 [ 339.344199][T25733] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 339.356488][T25720] EXT4-fs warning (device loop0): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 339.393072][T25720] EXT4-fs (loop0): mount failed [ 339.418206][T25745] FAULT_INJECTION: forcing a failure. [ 339.418206][T25745] name failslab, interval 1, probability 0, space 0, times 0 [ 339.431141][T25745] CPU: 1 UID: 0 PID: 25745 Comm: syz.1.6458 Not tainted 6.15.0-syzkaller-01958-g785cdec46e92 #0 PREEMPT(voluntary) [ 339.431174][T25745] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 339.431190][T25745] Call Trace: [ 339.431199][T25745] [ 339.431209][T25745] __dump_stack+0x1d/0x30 [ 339.431233][T25745] dump_stack_lvl+0xe8/0x140 [ 339.431308][T25745] dump_stack+0x15/0x1b [ 339.431331][T25745] should_fail_ex+0x265/0x280 [ 339.431362][T25745] should_failslab+0x8c/0xb0 [ 339.431396][T25745] kmem_cache_alloc_lru_noprof+0x55/0x310 [ 339.431441][T25745] ? shmem_alloc_inode+0x34/0x50 [ 339.431484][T25745] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 339.431606][T25745] shmem_alloc_inode+0x34/0x50 [ 339.431703][T25745] alloc_inode+0x40/0x170 [ 339.431741][T25745] new_inode+0x1d/0xe0 [ 339.431781][T25745] shmem_get_inode+0x244/0x750 [ 339.431824][T25745] shmem_mknod+0x46/0x180 [ 339.431909][T25745] vfs_mknod+0x2cb/0x310 [ 339.431937][T25745] do_mknodat+0x24b/0x610 [ 339.431960][T25745] __x64_sys_mknod+0x51/0x60 [ 339.432005][T25745] x64_sys_call+0x181c/0x2fb0 [ 339.432034][T25745] do_syscall_64+0xd0/0x1b0 [ 339.432088][T25745] ? clear_bhb_loop+0x40/0x90 [ 339.432186][T25745] ? clear_bhb_loop+0x40/0x90 [ 339.432208][T25745] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 339.432232][T25745] RIP: 0033:0x7f8b3c66e969 [ 339.432252][T25745] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 339.432310][T25745] RSP: 002b:00007f8b3acd7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000085 [ 339.432331][T25745] RAX: ffffffffffffffda RBX: 00007f8b3c895fa0 RCX: 00007f8b3c66e969 [ 339.432344][T25745] RDX: 0000000000000702 RSI: 0000000000006000 RDI: 0000200000000180 [ 339.432357][T25745] RBP: 00007f8b3acd7090 R08: 0000000000000000 R09: 0000000000000000 [ 339.432371][T25745] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 339.432387][T25745] R13: 0000000000000000 R14: 00007f8b3c895fa0 R15: 00007ffdbd55b448 [ 339.432411][T25745] [ 340.051683][T25760] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 340.233095][T25773] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 340.425015][ T29] kauditd_printk_skb: 452 callbacks suppressed [ 340.425042][ T29] audit: type=1400 audit(1748332910.324:29358): avc: denied { unmount } for pid=22275 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 340.454232][T22275] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 340.463827][ T29] audit: type=1326 audit(1748332910.354:29359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25787 comm="syz.4.6476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37fadbe969 code=0x7ffc0000 [ 340.487578][ T29] audit: type=1326 audit(1748332910.354:29360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25787 comm="syz.4.6476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37fadbe969 code=0x7ffc0000 [ 340.511375][ T29] audit: type=1326 audit(1748332910.374:29361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25787 comm="syz.4.6476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f37fadbe969 code=0x7ffc0000 [ 340.535083][ T29] audit: type=1326 audit(1748332910.374:29362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25787 comm="syz.4.6476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37fadbe969 code=0x7ffc0000 [ 340.562046][ T29] audit: type=1326 audit(1748332910.374:29363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25787 comm="syz.4.6476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f37fadbe969 code=0x7ffc0000 [ 340.585734][ T29] audit: type=1326 audit(1748332910.374:29364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25787 comm="syz.4.6476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37fadbe969 code=0x7ffc0000 [ 340.609419][ T29] audit: type=1326 audit(1748332910.374:29365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25787 comm="syz.4.6476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f37fadbe969 code=0x7ffc0000 [ 340.632957][ T29] audit: type=1326 audit(1748332910.374:29366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25787 comm="syz.4.6476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37fadbe969 code=0x7ffc0000 [ 340.656633][ T29] audit: type=1400 audit(1748332910.444:29367): avc: denied { create } for pid=25785 comm="syz.0.6474" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 341.062013][T25822] loop4: detected capacity change from 0 to 1024 [ 341.098408][T25822] loop4: detected capacity change from 0 to 512 [ 341.155751][T25822] EXT4-fs (loop4): 1 orphan inode deleted [ 341.167514][T25822] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 341.180249][ T4541] EXT4-fs error (device loop4): ext4_release_dquot:6971: comm kworker/u8:57: Failed to release dquot type 1 [ 341.204811][T25822] ext4 filesystem being mounted at /139/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 341.247217][T22878] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 341.261074][ T4541] EXT4-fs error (device loop4): ext4_release_dquot:6971: comm kworker/u8:57: Failed to release dquot type 1 [ 341.388464][T25843] pimreg: entered allmulticast mode [ 341.394875][T25843] pimreg: left allmulticast mode [ 341.451694][T25851] loop4: detected capacity change from 0 to 512 [ 341.478852][T25851] 9pnet_fd: Insufficient options for proto=fd [ 341.717112][T25873] loop4: detected capacity change from 0 to 2048 [ 341.817842][T25873] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 341.818043][T25882] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 341.840499][T25873] ext4 filesystem being mounted at /145/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 341.888715][T22878] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 341.960690][T25908] __nla_validate_parse: 9 callbacks suppressed [ 341.960710][T25908] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6526'. [ 342.076864][T25919] loop3: detected capacity change from 0 to 1024 [ 342.086504][T25919] EXT4-fs: Ignoring removed orlov option [ 342.118997][T25919] EXT4-fs: Ignoring removed nomblk_io_submit option [ 342.225338][T25919] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 342.311242][T22275] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 342.655545][T25964] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 342.662847][T25964] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6547'. [ 342.690205][T25974] netlink: 1 bytes leftover after parsing attributes in process `syz.1.6551'. [ 342.700971][T25974] netlink: 'syz.1.6551': attribute type 4 has an invalid length. [ 342.708730][T25974] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.6551'. [ 342.782578][T25985] netlink: 14 bytes leftover after parsing attributes in process `syz.0.6556'. [ 342.816129][T25985] loop0: detected capacity change from 0 to 1024 [ 342.836588][T25962] loop4: detected capacity change from 0 to 512 [ 342.848885][T25985] loop0: detected capacity change from 0 to 512 [ 342.865204][T25962] EXT4-fs warning (device loop4): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 342.881158][T25985] EXT4-fs (loop0): 1 orphan inode deleted [ 342.887376][T25985] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 342.900240][ T1745] EXT4-fs error (device loop0): ext4_release_dquot:6971: comm kworker/u8:8: Failed to release dquot type 1 [ 342.913283][T25985] ext4 filesystem being mounted at /576/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 342.917585][T25962] EXT4-fs (loop4): mount failed [ 342.983058][T13603] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 342.997042][ T1745] EXT4-fs error (device loop0): ext4_release_dquot:6971: comm kworker/u8:8: Failed to release dquot type 1 [ 343.049502][T26008] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 343.057162][T26000] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6561'. [ 343.271511][T26031] netlink: 14 bytes leftover after parsing attributes in process `syz.0.6573'. [ 343.350587][T26031] loop0: detected capacity change from 0 to 1024 [ 343.389249][T26031] loop0: detected capacity change from 0 to 512 [ 343.452902][T26031] EXT4-fs (loop0): 1 orphan inode deleted [ 343.462937][T26031] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 343.476156][ T1745] EXT4-fs error (device loop0): ext4_release_dquot:6971: comm kworker/u8:8: Failed to release dquot type 1 [ 343.543733][T26031] ext4 filesystem being mounted at /580/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 343.627743][T13603] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 343.638763][ T1745] EXT4-fs error (device loop0): ext4_release_dquot:6971: comm kworker/u8:8: Failed to release dquot type 1 [ 343.769933][T26062] loop3: detected capacity change from 0 to 512 [ 343.786912][T26062] EXT4-fs: Ignoring removed mblk_io_submit option [ 343.814653][T26062] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 343.823735][T26062] EXT4-fs (loop3): orphan cleanup on readonly fs [ 343.911032][T26062] EXT4-fs warning (device loop3): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 343.956400][T26062] EXT4-fs (loop3): Cannot turn on quotas: error -117 [ 343.972513][T26062] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.6584: bg 0: block 40: padding at end of block bitmap is not set [ 344.001338][T26062] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 344.030397][T26062] EXT4-fs (loop3): 1 truncate cleaned up [ 344.050781][T26062] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 344.064434][T26072] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.179560][T26062] EXT4-fs error (device loop3): ext4_xattr_block_get:593: inode #16: comm syz.3.6584: corrupted xattr block 31: invalid header [ 344.198391][T26062] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=16 [ 344.214077][T26062] EXT4-fs error (device loop3): ext4_xattr_block_get:593: inode #16: comm syz.3.6584: corrupted xattr block 31: invalid header [ 344.229485][T26062] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=16 [ 344.247230][T26062] EXT4-fs error (device loop3): ext4_get_link:106: inode #16: comm syz.3.6584: bad symlink. [ 344.314575][T26083] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.371165][T22275] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 344.381265][T26072] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.435011][T26083] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.478908][T26098] loop3: detected capacity change from 0 to 512 [ 344.500567][T26098] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 344.510260][T26098] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2 [ 344.519641][T26072] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.533175][T26098] EXT4-fs (loop3): 1 truncate cleaned up [ 344.539447][T26098] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 344.564950][T26083] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.589517][T26101] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 344.596823][T26101] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6598'. [ 344.608763][T26072] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.681573][T26083] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.724613][T26072] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 344.738721][T26072] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 344.750645][T26072] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 344.769574][T26072] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 344.769696][T26116] loop0: detected capacity change from 0 to 128 [ 344.795267][T26083] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 344.808779][T26083] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 344.823498][T26083] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 344.855992][T26083] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 344.869123][T26121] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 344.932580][T26127] netlink: 14 bytes leftover after parsing attributes in process `syz.0.6605'. [ 344.949966][T26127] loop0: detected capacity change from 0 to 1024 [ 345.026788][T26137] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6610'. [ 345.126562][T26135] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 345.302368][T22275] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 345.325771][T26165] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 345.471686][ T29] kauditd_printk_skb: 585 callbacks suppressed [ 345.471701][ T29] audit: type=1326 audit(1748332915.374:29945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26176 comm="syz.0.6627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e4077e969 code=0x7ffc0000 [ 345.501618][ T29] audit: type=1326 audit(1748332915.374:29946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26176 comm="syz.0.6627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=98 compat=0 ip=0x7f8e4077e969 code=0x7ffc0000 [ 345.525322][ T29] audit: type=1326 audit(1748332915.374:29947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26176 comm="syz.0.6627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e4077e969 code=0x7ffc0000 [ 345.548917][ T29] audit: type=1326 audit(1748332915.374:29948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26176 comm="syz.0.6627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e4077e969 code=0x7ffc0000 [ 345.587582][ T29] audit: type=1400 audit(1748332915.484:29949): avc: denied { write } for pid=26178 comm="syz.1.6628" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 345.655341][ T29] audit: type=1326 audit(1748332915.554:29950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26186 comm="syz.0.6630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e4077e969 code=0x7ffc0000 [ 345.679218][ T29] audit: type=1326 audit(1748332915.554:29951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26186 comm="syz.0.6630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=283 compat=0 ip=0x7f8e4077e969 code=0x7ffc0000 [ 345.702925][ T29] audit: type=1326 audit(1748332915.554:29952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26186 comm="syz.0.6630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e4077e969 code=0x7ffc0000 [ 345.722427][T26193] FAULT_INJECTION: forcing a failure. [ 345.722427][T26193] name failslab, interval 1, probability 0, space 0, times 0 [ 345.726611][ T29] audit: type=1326 audit(1748332915.554:29953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26186 comm="syz.0.6630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=287 compat=0 ip=0x7f8e4077e969 code=0x7ffc0000 [ 345.739224][T26193] CPU: 0 UID: 0 PID: 26193 Comm: syz.3.6633 Not tainted 6.15.0-syzkaller-01958-g785cdec46e92 #0 PREEMPT(voluntary) [ 345.739304][T26193] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 345.739323][T26193] Call Trace: [ 345.739332][T26193] [ 345.739343][T26193] __dump_stack+0x1d/0x30 [ 345.739374][T26193] dump_stack_lvl+0xe8/0x140 [ 345.739402][T26193] dump_stack+0x15/0x1b [ 345.739433][T26193] should_fail_ex+0x265/0x280 [ 345.739472][T26193] should_failslab+0x8c/0xb0 [ 345.739518][T26193] kmem_cache_alloc_node_noprof+0x57/0x320 [ 345.739551][T26193] ? __alloc_skb+0x101/0x320 [ 345.739698][T26193] __alloc_skb+0x101/0x320 [ 345.739802][T26193] ? audit_log_start+0x365/0x6c0 [ 345.739846][T26193] audit_log_start+0x380/0x6c0 [ 345.739894][T26193] audit_seccomp+0x48/0x100 [ 345.740043][T26193] ? __seccomp_filter+0x68c/0x10d0 [ 345.740076][T26193] __seccomp_filter+0x69d/0x10d0 [ 345.740108][T26193] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 345.740221][T26193] ? vfs_write+0x75e/0x8e0 [ 345.740344][T26193] ? __rcu_read_unlock+0x4f/0x70 [ 345.740374][T26193] ? __fget_files+0x184/0x1c0 [ 345.740453][T26193] __secure_computing+0x82/0x150 [ 345.740484][T26193] syscall_trace_enter+0xcf/0x1e0 [ 345.740517][T26193] do_syscall_64+0xaa/0x1b0 [ 345.740627][T26193] ? clear_bhb_loop+0x40/0x90 [ 345.740658][T26193] ? clear_bhb_loop+0x40/0x90 [ 345.740733][T26193] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 345.740764][T26193] RIP: 0033:0x7f49f054e969 [ 345.740785][T26193] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 345.740810][T26193] RSP: 002b:00007f49eebb7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000062 [ 345.740842][T26193] RAX: ffffffffffffffda RBX: 00007f49f0775fa0 RCX: 00007f49f054e969 [ 345.740859][T26193] RDX: 0000000000000000 RSI: 0000200000001080 RDI: 0000000000000001 [ 345.740950][T26193] RBP: 00007f49eebb7090 R08: 0000000000000000 R09: 0000000000000000 [ 345.740968][T26193] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 345.740984][T26193] R13: 0000000000000000 R14: 00007f49f0775fa0 R15: 00007ffc1026bdb8 [ 345.741010][T26193] [ 345.741039][T26193] audit: audit_lost=7 audit_rate_limit=0 audit_backlog_limit=64 [ 346.106117][T26210] loop4: detected capacity change from 0 to 1024 [ 346.264938][T26210] infiniband syz1: set active [ 346.269881][T26210] infiniband syz1: added veth0_to_bridge [ 346.285371][T26210] RDS/IB: syz1: added [ 346.289476][T26210] smc: adding ib device syz1 with port count 1 [ 346.295867][T26210] smc: ib device syz1 port 1 has pnetid [ 346.384342][ T4509] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.432496][ T4509] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.499754][ T4509] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.525189][T26211] chnl_net:caif_netlink_parms(): no params data found [ 346.558266][ T4509] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.586410][T26211] bridge0: port 1(bridge_slave_0) entered blocking state [ 346.593614][T26211] bridge0: port 1(bridge_slave_0) entered disabled state [ 346.602691][T26211] bridge_slave_0: entered allmulticast mode [ 346.609642][T26211] bridge_slave_0: entered promiscuous mode [ 346.616768][T26211] bridge0: port 2(bridge_slave_1) entered blocking state [ 346.624067][T26211] bridge0: port 2(bridge_slave_1) entered disabled state [ 346.631388][T26211] bridge_slave_1: entered allmulticast mode [ 346.637904][T26211] bridge_slave_1: entered promiscuous mode [ 346.691270][ T4509] bridge_slave_1: left allmulticast mode [ 346.697032][ T4509] bridge_slave_1: left promiscuous mode [ 346.703014][ T4509] bridge0: port 2(bridge_slave_1) entered disabled state [ 346.717358][ T4509] bridge_slave_0: left allmulticast mode [ 346.723167][ T4509] bridge_slave_0: left promiscuous mode [ 346.728963][ T4509] bridge0: port 1(bridge_slave_0) entered disabled state [ 346.887634][T26211] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 346.903871][T26211] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 346.929730][ T4509] tipc: Left network mode [ 347.048786][T26211] team0: Port device team_slave_0 added [ 347.068075][T26211] team0: Port device team_slave_1 added [ 347.136283][T26211] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 347.143341][T26211] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 347.169489][T26211] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 347.272677][ T4509] hsr_slave_0: left promiscuous mode [ 347.278844][ T4509] hsr_slave_1: left promiscuous mode [ 347.285093][ T4509] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 347.292797][ T4509] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 347.304501][ T4509] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 347.312062][ T4509] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 347.329591][ T4509] veth1_macvtap: left promiscuous mode [ 347.335290][ T4509] veth0_macvtap: left promiscuous mode [ 347.342594][ T4509] veth1_vlan: left promiscuous mode [ 347.347918][ T4509] veth0_vlan: left promiscuous mode [ 347.457770][ T4509] team0 (unregistering): Port device team_slave_1 removed [ 347.467735][ T4509] team0 (unregistering): Port device team_slave_0 removed [ 347.504473][T26211] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 347.511524][T26211] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 347.537584][T26211] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 347.609496][T26211] hsr_slave_0: entered promiscuous mode [ 347.618470][T26211] hsr_slave_1: entered promiscuous mode [ 347.677093][T26290] __nla_validate_parse: 2 callbacks suppressed [ 347.677108][T26290] netlink: 14 bytes leftover after parsing attributes in process `syz.1.6659'. [ 348.064282][T26211] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 348.081399][T26211] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 348.108416][T26211] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 348.128224][T26211] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 348.211385][T26211] 8021q: adding VLAN 0 to HW filter on device bond0 [ 348.243737][T26211] 8021q: adding VLAN 0 to HW filter on device team0 [ 348.269552][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 348.276736][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 348.306732][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 348.313942][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 348.473266][T26211] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 348.690033][T26211] veth0_vlan: entered promiscuous mode [ 348.711458][T26211] veth1_vlan: entered promiscuous mode [ 348.738671][T26211] veth0_macvtap: entered promiscuous mode [ 348.770412][T26211] veth1_macvtap: entered promiscuous mode [ 348.853033][T26211] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 348.874392][T26211] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 348.915248][T26407] loop4: detected capacity change from 0 to 1024 [ 348.922025][T26407] EXT4-fs: Ignoring removed orlov option [ 348.934443][T26407] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 348.956634][T26211] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.965541][T26211] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.974365][T26211] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.983208][T26211] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.025427][T26411] loop3: detected capacity change from 0 to 512 [ 349.058422][T22878] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 349.085749][T26411] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.6681: bg 0: block 248: padding at end of block bitmap is not set [ 349.168353][T26411] EXT4-fs error (device loop3): ext4_acquire_dquot:6935: comm syz.3.6681: Failed to acquire dquot type 1 [ 349.215176][T26411] EXT4-fs (loop3): 1 truncate cleaned up [ 349.253333][T26411] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 349.305108][T26411] ext4 filesystem being mounted at /218/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 349.361266][T22275] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 349.745584][T26485] FAULT_INJECTION: forcing a failure. [ 349.745584][T26485] name failslab, interval 1, probability 0, space 0, times 0 [ 349.758371][T26485] CPU: 1 UID: 0 PID: 26485 Comm: syz.0.6703 Not tainted 6.15.0-syzkaller-01958-g785cdec46e92 #0 PREEMPT(voluntary) [ 349.758454][T26485] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 349.758471][T26485] Call Trace: [ 349.758480][T26485] [ 349.758490][T26485] __dump_stack+0x1d/0x30 [ 349.758562][T26485] dump_stack_lvl+0xe8/0x140 [ 349.758669][T26485] dump_stack+0x15/0x1b [ 349.758693][T26485] should_fail_ex+0x265/0x280 [ 349.758726][T26485] should_failslab+0x8c/0xb0 [ 349.758846][T26485] kmem_cache_alloc_node_noprof+0x57/0x320 [ 349.758878][T26485] ? __alloc_skb+0x101/0x320 [ 349.758921][T26485] __alloc_skb+0x101/0x320 [ 349.758958][T26485] alloc_skb_with_frags+0x7d/0x470 [ 349.759050][T26485] ? is_bpf_text_address+0x141/0x160 [ 349.759092][T26485] ? kernel_text_address+0x94/0xb0 [ 349.759124][T26485] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 349.759197][T26485] sock_alloc_send_pskb+0x43a/0x4f0 [ 349.759235][T26485] __ip_append_data+0x1995/0x24a0 [ 349.759315][T26485] ? ___sys_sendmsg+0x17b/0x1d0 [ 349.759341][T26485] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 349.759431][T26485] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 349.759463][T26485] ? __rcu_read_unlock+0x4f/0x70 [ 349.759487][T26485] ? ipv4_mtu+0x210/0x230 [ 349.759514][T26485] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 349.759573][T26485] ip_make_skb+0x137/0x2c0 [ 349.759604][T26485] udp_sendmsg+0x1007/0x13a0 [ 349.759707][T26485] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 349.759752][T26485] ? __pfx_udp_sendmsg+0x10/0x10 [ 349.759815][T26485] inet_sendmsg+0xac/0xd0 [ 349.759901][T26485] __sock_sendmsg+0x102/0x180 [ 349.759937][T26485] ____sys_sendmsg+0x345/0x4e0 [ 349.759967][T26485] ___sys_sendmsg+0x17b/0x1d0 [ 349.760117][T26485] __sys_sendmmsg+0x178/0x300 [ 349.760157][T26485] __x64_sys_sendmmsg+0x57/0x70 [ 349.760184][T26485] x64_sys_call+0x2f2f/0x2fb0 [ 349.760214][T26485] do_syscall_64+0xd0/0x1b0 [ 349.760237][T26485] ? clear_bhb_loop+0x40/0x90 [ 349.760275][T26485] ? clear_bhb_loop+0x40/0x90 [ 349.760326][T26485] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 349.760353][T26485] RIP: 0033:0x7f787d46e969 [ 349.760413][T26485] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 349.760506][T26485] RSP: 002b:00007f787bab6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 349.760528][T26485] RAX: ffffffffffffffda RBX: 00007f787d696080 RCX: 00007f787d46e969 [ 349.760544][T26485] RDX: 000000000800001d RSI: 0000200000007fc0 RDI: 0000000000000004 [ 349.760560][T26485] RBP: 00007f787bab6090 R08: 0000000000000000 R09: 0000000000000000 [ 349.760583][T26485] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 349.760599][T26485] R13: 0000000000000000 R14: 00007f787d696080 R15: 00007ffee3b20878 [ 349.760626][T26485] [ 350.042418][T16056] IPVS: starting estimator thread 0... [ 350.107118][T26495] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 350.114602][T26495] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6704'. [ 350.140956][T26489] IPVS: using max 2256 ests per chain, 112800 per kthread [ 350.743196][ T29] kauditd_printk_skb: 227 callbacks suppressed [ 350.743215][ T29] audit: type=1326 audit(1748332920.644:30178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26548 comm="syz.2.6726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f925341e969 code=0x7ffc0000 [ 350.811960][ T29] audit: type=1326 audit(1748332920.644:30179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26548 comm="syz.2.6726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=89 compat=0 ip=0x7f925341e969 code=0x7ffc0000 [ 350.835697][ T29] audit: type=1326 audit(1748332920.644:30180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26548 comm="syz.2.6726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f925341e969 code=0x7ffc0000 [ 350.859335][ T29] audit: type=1326 audit(1748332920.644:30181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26548 comm="syz.2.6726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f925341e969 code=0x7ffc0000 [ 350.882995][ T29] audit: type=1326 audit(1748332920.694:30182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26546 comm="syz.1.6727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b3c66e969 code=0x7ffc0000 [ 350.906608][ T29] audit: type=1326 audit(1748332920.694:30183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26546 comm="syz.1.6727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b3c66e969 code=0x7ffc0000 [ 350.930217][ T29] audit: type=1326 audit(1748332920.694:30184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26546 comm="syz.1.6727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=283 compat=0 ip=0x7f8b3c66e969 code=0x7ffc0000 [ 350.953906][ T29] audit: type=1326 audit(1748332920.694:30185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26546 comm="syz.1.6727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b3c66e969 code=0x7ffc0000 [ 350.977615][ T29] audit: type=1326 audit(1748332920.694:30186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26546 comm="syz.1.6727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b3c66e969 code=0x7ffc0000 [ 351.001263][ T29] audit: type=1326 audit(1748332920.694:30187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26546 comm="syz.1.6727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=287 compat=0 ip=0x7f8b3c66e969 code=0x7ffc0000 [ 351.143374][T26567] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 351.150668][T26567] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6733'. [ 351.223241][T26570] FAULT_INJECTION: forcing a failure. [ 351.223241][T26570] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 351.236359][T26570] CPU: 1 UID: 0 PID: 26570 Comm: syz.4.6728 Not tainted 6.15.0-syzkaller-01958-g785cdec46e92 #0 PREEMPT(voluntary) [ 351.236435][T26570] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 351.236453][T26570] Call Trace: [ 351.236462][T26570] [ 351.236471][T26570] __dump_stack+0x1d/0x30 [ 351.236500][T26570] dump_stack_lvl+0xe8/0x140 [ 351.236528][T26570] dump_stack+0x15/0x1b [ 351.236565][T26570] should_fail_ex+0x265/0x280 [ 351.236603][T26570] should_fail+0xb/0x20 [ 351.236635][T26570] should_fail_usercopy+0x1a/0x20 [ 351.236664][T26570] _copy_from_user+0x1c/0xb0 [ 351.236709][T26570] ___sys_sendmsg+0xc1/0x1d0 [ 351.236832][T26570] __x64_sys_sendmsg+0xd4/0x160 [ 351.236863][T26570] x64_sys_call+0x2999/0x2fb0 [ 351.236894][T26570] do_syscall_64+0xd0/0x1b0 [ 351.236997][T26570] ? clear_bhb_loop+0x40/0x90 [ 351.237074][T26570] ? clear_bhb_loop+0x40/0x90 [ 351.237102][T26570] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 351.237125][T26570] RIP: 0033:0x7f37fadbe969 [ 351.237179][T26570] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 351.237205][T26570] RSP: 002b:00007f37f93e5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 351.237231][T26570] RAX: ffffffffffffffda RBX: 00007f37fafe6160 RCX: 00007f37fadbe969 [ 351.237244][T26570] RDX: 0000000004000884 RSI: 0000200000000040 RDI: 000000000000000a [ 351.237336][T26570] RBP: 00007f37f93e5090 R08: 0000000000000000 R09: 0000000000000000 [ 351.237354][T26570] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 351.237379][T26570] R13: 0000000000000000 R14: 00007f37fafe6160 R15: 00007ffe1390c3d8 [ 351.237407][T26570] [ 351.814794][T26577] FAULT_INJECTION: forcing a failure. [ 351.814794][T26577] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 351.828097][T26577] CPU: 1 UID: 0 PID: 26577 Comm: syz.0.6736 Not tainted 6.15.0-syzkaller-01958-g785cdec46e92 #0 PREEMPT(voluntary) [ 351.828197][T26577] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 351.828249][T26577] Call Trace: [ 351.828258][T26577] [ 351.828267][T26577] __dump_stack+0x1d/0x30 [ 351.828291][T26577] dump_stack_lvl+0xe8/0x140 [ 351.828312][T26577] dump_stack+0x15/0x1b [ 351.828330][T26577] should_fail_ex+0x265/0x280 [ 351.828394][T26577] should_fail+0xb/0x20 [ 351.828418][T26577] should_fail_usercopy+0x1a/0x20 [ 351.828446][T26577] _copy_from_user+0x1c/0xb0 [ 351.828490][T26577] __sys_bpf+0x178/0x790 [ 351.828584][T26577] __x64_sys_bpf+0x41/0x50 [ 351.828621][T26577] x64_sys_call+0x2478/0x2fb0 [ 351.828723][T26577] do_syscall_64+0xd0/0x1b0 [ 351.828753][T26577] ? clear_bhb_loop+0x40/0x90 [ 351.828778][T26577] ? clear_bhb_loop+0x40/0x90 [ 351.828808][T26577] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 351.828896][T26577] RIP: 0033:0x7f787d46e969 [ 351.828916][T26577] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 351.828937][T26577] RSP: 002b:00007f787bad7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 351.828963][T26577] RAX: ffffffffffffffda RBX: 00007f787d695fa0 RCX: 00007f787d46e969 [ 351.828981][T26577] RDX: 0000000000000050 RSI: 0000200000000280 RDI: 0700000000000000 [ 351.829039][T26577] RBP: 00007f787bad7090 R08: 0000000000000000 R09: 0000000000000000 [ 351.829052][T26577] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 351.829066][T26577] R13: 0000000000000000 R14: 00007f787d695fa0 R15: 00007ffee3b20878 [ 351.829092][T26577] [ 352.183093][T26588] netlink: 14 bytes leftover after parsing attributes in process `syz.0.6742'. [ 352.202701][T26588] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 352.213284][T26588] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 352.232722][T26588] bond0 (unregistering): Released all slaves [ 352.289834][T26593] loop0: detected capacity change from 0 to 1024 [ 352.334975][T26604] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 352.342494][T26604] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6745'. [ 352.352366][T26593] loop0: detected capacity change from 0 to 512 [ 352.390113][T26593] EXT4-fs (loop0): 1 orphan inode deleted [ 352.415544][T26593] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 352.431349][ T166] EXT4-fs error (device loop0): ext4_release_dquot:6971: comm kworker/u8:4: Failed to release dquot type 1 [ 352.472358][T26593] ext4 filesystem being mounted at /10/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 352.480457][T26620] netlink: 14 bytes leftover after parsing attributes in process `syz.4.6749'. [ 352.519296][T26620] loop4: detected capacity change from 0 to 1024 [ 352.557031][T26620] loop4: detected capacity change from 0 to 512 [ 352.623116][T26620] EXT4-fs (loop4): 1 orphan inode deleted [ 352.651137][ T4541] EXT4-fs error (device loop4): ext4_release_dquot:6971: comm kworker/u8:57: Failed to release dquot type 1 [ 352.672270][T26620] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 352.694247][T26645] loop3: detected capacity change from 0 to 1024 [ 352.706990][T26645] rdma_rxe: rxe_newlink: failed to add veth0_to_bridge [ 352.735933][T26620] ext4 filesystem being mounted at /193/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 352.757208][T26649] loop3: detected capacity change from 0 to 512 [ 352.790025][T26649] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 352.809762][T26649] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2 [ 352.824705][T26649] EXT4-fs (loop3): 1 truncate cleaned up [ 352.847810][T22878] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 352.857098][ T4541] EXT4-fs error (device loop4): ext4_release_dquot:6971: comm kworker/u8:57: Failed to release dquot type 1 [ 352.861673][T26649] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 352.993473][T26665] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 353.002696][T26665] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6760'. [ 353.123865][T26675] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 353.224216][T26211] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 353.243513][ T4509] EXT4-fs error (device loop0): ext4_release_dquot:6971: comm kworker/u8:25: Failed to release dquot type 1 [ 353.290086][T26706] FAULT_INJECTION: forcing a failure. [ 353.290086][T26706] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 353.303352][T26706] CPU: 1 UID: 0 PID: 26706 Comm: syz.1.6769 Not tainted 6.15.0-syzkaller-01958-g785cdec46e92 #0 PREEMPT(voluntary) [ 353.303418][T26706] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 353.303435][T26706] Call Trace: [ 353.303444][T26706] [ 353.303454][T26706] __dump_stack+0x1d/0x30 [ 353.303551][T26706] dump_stack_lvl+0xe8/0x140 [ 353.303580][T26706] dump_stack+0x15/0x1b [ 353.303604][T26706] should_fail_ex+0x265/0x280 [ 353.303640][T26706] should_fail+0xb/0x20 [ 353.303717][T26706] should_fail_usercopy+0x1a/0x20 [ 353.303755][T26706] _copy_from_user+0x1c/0xb0 [ 353.303822][T26706] snd_seq_ioctl+0x127/0x2e0 [ 353.303880][T26706] ? __pfx_snd_seq_ioctl+0x10/0x10 [ 353.303916][T26706] __se_sys_ioctl+0xce/0x140 [ 353.303950][T26706] __x64_sys_ioctl+0x43/0x50 [ 353.304033][T26706] x64_sys_call+0x19a8/0x2fb0 [ 353.304062][T26706] do_syscall_64+0xd0/0x1b0 [ 353.304091][T26706] ? clear_bhb_loop+0x40/0x90 [ 353.304114][T26706] ? clear_bhb_loop+0x40/0x90 [ 353.304136][T26706] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 353.304219][T26706] RIP: 0033:0x7f8b3c66e969 [ 353.304237][T26706] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 353.304263][T26706] RSP: 002b:00007f8b3acd7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 353.304288][T26706] RAX: ffffffffffffffda RBX: 00007f8b3c895fa0 RCX: 00007f8b3c66e969 [ 353.304303][T26706] RDX: 0000200000000280 RSI: 0000000040605346 RDI: 0000000000000003 [ 353.304316][T26706] RBP: 00007f8b3acd7090 R08: 0000000000000000 R09: 0000000000000000 [ 353.304390][T26706] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 353.304407][T26706] R13: 0000000000000000 R14: 00007f8b3c895fa0 R15: 00007ffdbd55b448 [ 353.304433][T26706] [ 353.593317][T22275] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 353.786578][T26763] loop0: detected capacity change from 0 to 2048 [ 353.822586][T26763] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 353.864135][T26761] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 353.890120][T26211] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 353.953382][T26781] netlink: 14 bytes leftover after parsing attributes in process `syz.3.6785'. [ 353.996213][T26781] loop3: detected capacity change from 0 to 1024 [ 354.009019][T26781] loop3: detected capacity change from 0 to 512 [ 354.074136][T26781] EXT4-fs (loop3): 1 orphan inode deleted [ 354.095655][T26781] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 354.098773][ T4509] EXT4-fs error (device loop3): ext4_release_dquot:6971: comm kworker/u8:25: Failed to release dquot type 1 [ 354.121018][T26781] ext4 filesystem being mounted at /235/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 354.141257][T26798] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 354.195297][T22275] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 354.304602][ T166] EXT4-fs error (device loop3): ext4_release_dquot:6971: comm kworker/u8:4: Failed to release dquot type 1 [ 354.573431][T26843] loop4: detected capacity change from 0 to 512 [ 354.586757][T26843] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 354.619137][T26851] netlink: 14 bytes leftover after parsing attributes in process `syz.3.6801'. [ 354.647037][T26843] EXT4-fs (loop4): 1 truncate cleaned up [ 354.655089][T26851] loop3: detected capacity change from 0 to 1024 [ 354.690230][T26843] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 354.705597][T26851] loop3: detected capacity change from 0 to 512 [ 354.734379][T26851] EXT4-fs (loop3): 1 orphan inode deleted [ 354.751247][ T4509] EXT4-fs error (device loop3): ext4_release_dquot:6971: comm kworker/u8:25: Failed to release dquot type 1 [ 354.763639][T26851] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 354.778701][T26851] ext4 filesystem being mounted at /240/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 354.804713][T22275] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 354.832135][ T166] EXT4-fs error (device loop3): ext4_release_dquot:6971: comm kworker/u8:4: Failed to release dquot type 1 [ 355.184109][T22878] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 355.327139][T26885] loop4: detected capacity change from 0 to 1024 [ 355.394358][T26885] EXT4-fs: Ignoring removed orlov option [ 355.404233][T26885] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 355.547120][T26900] IPv6: Can't replace route, no match found [ 355.733825][T26915] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6824'. [ 355.750687][T26891] loop3: detected capacity change from 0 to 512 [ 355.791249][T26891] __quota_error: 219 callbacks suppressed [ 355.791345][T26891] Quota error (device loop3): v2_read_file_info: Free block number 1 out of range (1, 6). [ 355.824355][T26891] EXT4-fs warning (device loop3): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 355.839618][T26891] EXT4-fs (loop3): mount failed [ 355.880179][T26915] loop0: detected capacity change from 0 to 8192 [ 355.973181][ T29] audit: type=1400 audit(1748332925.874:30399): avc: denied { mount } for pid=26914 comm="syz.0.6824" name="/" dev="loop0" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 356.051405][ T29] audit: type=1400 audit(1748332925.954:30400): avc: denied { unmount } for pid=26211 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 356.314082][T22878] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 356.590929][ T29] audit: type=1326 audit(1748332926.484:30401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26973 comm="syz.0.6833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f787d46e969 code=0x7ffc0000 [ 356.618770][ T29] audit: type=1326 audit(1748332926.514:30402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26973 comm="syz.0.6833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f787d46e969 code=0x7ffc0000 [ 356.653909][ T29] audit: type=1326 audit(1748332926.514:30403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26973 comm="syz.0.6833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f787d46e969 code=0x7ffc0000 [ 356.655087][T26974] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.677615][ T29] audit: type=1326 audit(1748332926.514:30404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26973 comm="syz.0.6833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f787d46e969 code=0x7ffc0000 [ 356.711590][ T29] audit: type=1326 audit(1748332926.514:30405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26973 comm="syz.0.6833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f787d46e969 code=0x7ffc0000 [ 356.735296][ T29] audit: type=1326 audit(1748332926.544:30406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26973 comm="syz.0.6833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f787d46e969 code=0x7ffc0000 [ 356.758799][ T29] audit: type=1326 audit(1748332926.544:30407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26973 comm="syz.0.6833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f787d46e969 code=0x7ffc0000 [ 356.866728][T26993] netlink: 14 bytes leftover after parsing attributes in process `syz.4.6836'. [ 356.877266][T26974] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.898509][T26993] loop4: detected capacity change from 0 to 1024 [ 356.944107][T26974] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.986025][T26974] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 357.028706][T26974] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.042292][T26974] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.054339][T26974] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.068441][T26974] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.286303][T27052] block device autoloading is deprecated and will be removed. [ 357.469148][T27067] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 357.654824][T27090] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 357.662379][T27090] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6851'. [ 358.015407][T27119] block device autoloading is deprecated and will be removed. [ 358.257563][T27132] FAULT_INJECTION: forcing a failure. [ 358.257563][T27132] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 358.270717][T27132] CPU: 0 UID: 0 PID: 27132 Comm: syz.4.6867 Not tainted 6.15.0-syzkaller-01958-g785cdec46e92 #0 PREEMPT(voluntary) [ 358.270755][T27132] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 358.270771][T27132] Call Trace: [ 358.270779][T27132] [ 358.270789][T27132] __dump_stack+0x1d/0x30 [ 358.270814][T27132] dump_stack_lvl+0xe8/0x140 [ 358.270839][T27132] dump_stack+0x15/0x1b [ 358.270916][T27132] should_fail_ex+0x265/0x280 [ 358.270952][T27132] should_fail+0xb/0x20 [ 358.270983][T27132] should_fail_usercopy+0x1a/0x20 [ 358.271016][T27132] _copy_from_user+0x1c/0xb0 [ 358.271133][T27132] __sys_bpf+0x178/0x790 [ 358.271181][T27132] __x64_sys_bpf+0x41/0x50 [ 358.271216][T27132] x64_sys_call+0x2478/0x2fb0 [ 358.271256][T27132] do_syscall_64+0xd0/0x1b0 [ 358.271285][T27132] ? clear_bhb_loop+0x40/0x90 [ 358.271314][T27132] ? clear_bhb_loop+0x40/0x90 [ 358.271343][T27132] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 358.271431][T27132] RIP: 0033:0x7f37fadbe969 [ 358.271453][T27132] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 358.271477][T27132] RSP: 002b:00007f37f9427038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 358.271502][T27132] RAX: ffffffffffffffda RBX: 00007f37fafe5fa0 RCX: 00007f37fadbe969 [ 358.271519][T27132] RDX: 0000000000000004 RSI: 0000200000000280 RDI: 0000000000000016 [ 358.271535][T27132] RBP: 00007f37f9427090 R08: 0000000000000000 R09: 0000000000000000 [ 358.271551][T27132] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 358.271563][T27132] R13: 0000000000000000 R14: 00007f37fafe5fa0 R15: 00007ffe1390c3d8 [ 358.271596][T27132] [ 358.636914][T27151] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 358.644460][T27151] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 358.661401][T27151] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 358.668860][T27151] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 358.696752][T27153] siw: device registration error -23 [ 358.882199][T27163] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 358.889474][T27163] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6879'. [ 358.902234][T27172] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6883'. [ 358.911319][T27172] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6883'. [ 358.921087][T27172] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6883'. [ 358.963033][T27172] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6883'. [ 358.972037][T27172] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6883'. [ 359.004840][T27172] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6883'. [ 359.050010][T27172] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6883'. [ 359.059029][T27172] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6883'. [ 359.068094][T27172] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6883'. [ 359.117994][T27189] loop0: detected capacity change from 0 to 1024 [ 359.341967][T27194] loop4: detected capacity change from 0 to 512 [ 359.363050][T27194] EXT4-fs warning (device loop4): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 359.402866][T27194] EXT4-fs (loop4): mount failed [ 359.779025][T27231] syzkaller1: entered promiscuous mode [ 359.784804][T27231] syzkaller1: entered allmulticast mode [ 359.928548][T27226] loop3: detected capacity change from 0 to 512 [ 359.942103][T27226] EXT4-fs warning (device loop3): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 359.957257][T27226] EXT4-fs (loop3): mount failed [ 360.145003][T27258] wireguard0: entered promiscuous mode [ 360.150649][T27258] wireguard0: entered allmulticast mode [ 360.311665][T27263] syzkaller1: entered promiscuous mode [ 360.317301][T27263] syzkaller1: entered allmulticast mode [ 360.325185][T27263] FAULT_INJECTION: forcing a failure. [ 360.325185][T27263] name failslab, interval 1, probability 0, space 0, times 0 [ 360.338051][T27263] CPU: 0 UID: 0 PID: 27263 Comm: syz.1.6916 Not tainted 6.15.0-syzkaller-01958-g785cdec46e92 #0 PREEMPT(voluntary) [ 360.338168][T27263] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 360.338186][T27263] Call Trace: [ 360.338195][T27263] [ 360.338206][T27263] __dump_stack+0x1d/0x30 [ 360.338235][T27263] dump_stack_lvl+0xe8/0x140 [ 360.338261][T27263] dump_stack+0x15/0x1b [ 360.338279][T27263] should_fail_ex+0x265/0x280 [ 360.338372][T27263] ? tty_open+0x81/0xaf0 [ 360.338419][T27263] should_failslab+0x8c/0xb0 [ 360.338456][T27263] __kmalloc_cache_noprof+0x4c/0x320 [ 360.338482][T27263] tty_open+0x81/0xaf0 [ 360.338573][T27263] ? kobj_lookup+0x276/0x280 [ 360.338605][T27263] ? __pfx_exact_match+0x10/0x10 [ 360.338688][T27263] chrdev_open+0x2e8/0x3a0 [ 360.338724][T27263] do_dentry_open+0x646/0xa20 [ 360.338746][T27263] ? __pfx_chrdev_open+0x10/0x10 [ 360.338826][T27263] vfs_open+0x37/0x1e0 [ 360.338860][T27263] dentry_open+0x4a/0x90 [ 360.338885][T27263] ptm_open_peer+0x113/0x180 [ 360.338978][T27263] tty_ioctl+0x3bc/0xb80 [ 360.339008][T27263] ? __pfx_tty_ioctl+0x10/0x10 [ 360.339036][T27263] __se_sys_ioctl+0xce/0x140 [ 360.339062][T27263] __x64_sys_ioctl+0x43/0x50 [ 360.339094][T27263] x64_sys_call+0x19a8/0x2fb0 [ 360.339169][T27263] do_syscall_64+0xd0/0x1b0 [ 360.339193][T27263] ? clear_bhb_loop+0x40/0x90 [ 360.339215][T27263] ? clear_bhb_loop+0x40/0x90 [ 360.339316][T27263] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 360.339342][T27263] RIP: 0033:0x7f8b3c66e969 [ 360.339357][T27263] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 360.339421][T27263] RSP: 002b:00007f8b3acd7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 360.339455][T27263] RAX: ffffffffffffffda RBX: 00007f8b3c895fa0 RCX: 00007f8b3c66e969 [ 360.339469][T27263] RDX: 0000000000000000 RSI: 0000000000005441 RDI: 0000000000000005 [ 360.339482][T27263] RBP: 00007f8b3acd7090 R08: 0000000000000000 R09: 0000000000000000 [ 360.339494][T27263] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 360.339506][T27263] R13: 0000000000000000 R14: 00007f8b3c895fa0 R15: 00007ffdbd55b448 [ 360.339528][T27263] [ 360.825439][T27270] loop4: detected capacity change from 0 to 512 [ 360.885751][T27270] __quota_error: 71 callbacks suppressed [ 360.885800][T27270] Quota error (device loop4): v2_read_file_info: Free block number 1 out of range (1, 6). [ 360.906717][T27270] EXT4-fs warning (device loop4): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 360.932119][T27270] EXT4-fs (loop4): mount failed [ 360.969824][ T29] audit: type=1400 audit(1748332930.864:30475): avc: denied { name_bind } for pid=27296 comm="syz.3.6930" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 361.018095][ T29] audit: type=1400 audit(1748332930.864:30476): avc: denied { node_bind } for pid=27296 comm="syz.3.6930" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 361.038780][ T29] audit: type=1400 audit(1748332930.894:30477): avc: denied { sqpoll } for pid=27296 comm="syz.3.6930" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 361.122952][T27313] SELinux: Context system_u:object_r:mount_tmp_t:s0 is not valid (left unmapped). [ 361.125118][ T29] audit: type=1400 audit(1748332931.024:30478): avc: denied { relabelfrom } for pid=27312 comm="syz.2.6937" name="CAN_RAW" dev="sockfs" ino=79718 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 361.155652][ T29] audit: type=1400 audit(1748332931.024:30479): avc: denied { mac_admin } for pid=27312 comm="syz.2.6937" capability=33 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 361.177704][ T29] audit: type=1400 audit(1748332931.034:30480): avc: denied { relabelto } for pid=27312 comm="syz.2.6937" name="CAN_RAW" dev="sockfs" ino=79718 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=can_socket permissive=1 trawcon="system_u:object_r:mount_tmp_t:s0" [ 361.253163][T27315] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 361.585482][T27331] ================================================================== [ 361.593821][T27331] BUG: KCSAN: data-race in mas_state_walk / mas_wmb_replace [ 361.601157][T27331] [ 361.603497][T27331] write to 0xffff888115ff4400 of 8 bytes by task 27329 on cpu 1: [ 361.611239][T27331] mas_wmb_replace+0x20e/0x14a0 [ 361.616201][T27331] mas_wr_store_entry+0x17ae/0x2b60 [ 361.621433][T27331] mas_store_prealloc+0x74d/0x9e0 [ 361.626478][T27331] vma_iter_store_new+0x1c5/0x200 [ 361.631521][T27331] vma_complete+0x125/0x570 [ 361.636053][T27331] __split_vma+0x594/0x610 [ 361.640493][T27331] vma_modify+0x1a4/0x210 [ 361.644857][T27331] vma_modify_flags+0x101/0x130 [ 361.649743][T27331] mprotect_fixup+0x2cc/0x570 [ 361.654435][T27331] do_mprotect_pkey+0x6d6/0x980 [ 361.659311][T27331] __x64_sys_mprotect+0x48/0x60 [ 361.664185][T27331] x64_sys_call+0x2794/0x2fb0 [ 361.668892][T27331] do_syscall_64+0xd0/0x1b0 [ 361.673413][T27331] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 361.679326][T27331] [ 361.681687][T27331] read to 0xffff888115ff4400 of 8 bytes by task 27331 on cpu 0: [ 361.689333][T27331] mas_state_walk+0x485/0x650 [ 361.694034][T27331] mas_walk+0x30/0x120 [ 361.698112][T27331] lock_vma_under_rcu+0xa2/0x2f0 [ 361.703076][T27331] do_user_addr_fault+0x233/0x1090 [ 361.708212][T27331] exc_page_fault+0x3d/0xb0 [ 361.712741][T27331] asm_exc_page_fault+0x26/0x30 [ 361.717601][T27331] [ 361.719924][T27331] value changed: 0xffff888104ab5c41 -> 0xffff888115ff4400 [ 361.727047][T27331] [ 361.729380][T27331] Reported by Kernel Concurrency Sanitizer on: [ 361.735541][T27331] CPU: 0 UID: 0 PID: 27331 Comm: syz.0.6943 Not tainted 6.15.0-syzkaller-01958-g785cdec46e92 #0 PREEMPT(voluntary) [ 361.747705][T27331] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 361.757771][T27331] ================================================================== [ 361.894595][T27328] capability: warning: `syz.4.6942' uses 32-bit capabilities (legacy support in use)