last executing test programs: 3.54938372s ago: executing program 4 (id=2908): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='ext4_insert_range\x00'}, 0x18) r0 = syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0x1ee6, 0x80, 0x1, 0x1f9}, &(0x7f0000000080), &(0x7f0000000240)) io_uring_enter(r0, 0x47bc, 0x2, 0x0, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, 0x0, 0x0) syz_emit_ethernet(0x83, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030086dd601b8b97004d88c19edace00000000000000002100000002ff02000000000000000000000000000104004e20004d13"], 0x0) ppoll(&(0x7f0000000d40)=[{r2}], 0x25, &(0x7f0000000300)={0x0, 0x3938700}, 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x10, 0x803, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000003500)=@newtfilter={0x70, 0x2c, 0xd27, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r5, {0x9, 0x4}, {}, {0x5, 0x10}}, [@filter_kind_options=@f_flow={{0x9}, {0x6a, 0x2, [@TCA_FLOW_EMATCHES={0x3c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xfffb}}, @TCA_EMATCH_TREE_LIST={0x82, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x7, 0x7, 0x2}, {{0x0, 0x1, 0x0, 0x1}, {0x0, 0x1, 0x1, 0x1}}}}, @TCF_EM_META={0x18, 0x2, 0x0, 0x0, {{0xfffb, 0x4, 0x2}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0xe, 0x2}, {0x0, 0x7, 0x2}}}]}}]}]}]}}]}, 0x70}}, 0x240400d4) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x4, @perf_config_ext={0xf60, 0x40ffffffff}, 0x1100, 0x7f, 0x3a63, 0x5, 0x0, 0x5, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r6, &(0x7f0000000000)={0x27}, 0x74) vmsplice(r0, &(0x7f00000000c0)=[{&(0x7f00000001c0)="2bed336559b6a295a7cc716d7b787ebfaffb34f119f0ca9995c05e33f7fb089b81bb8ebbaa54cc408f3abcb2bc0656d620fc8b31a6b3cdaeb5335694bc1737bbfad10d5276dc9173099f5888a15ae7d2f0a9afd91c58650a0a21ac13203197f0bb5acbc3fda9c593a21bfbeac2d864e3a37ac976e57f43ec0a755c34ad065af297bf03401a02c0cbce13e84cab5949464b8f8a6856f8de9b7fecdfc3c87378f501df4265eb6f4972d42ee6024270e8b3714de627f83a3a17a165f19cd398da408ab80b51975e76c18519552207cbab66e814ccfd78a315886f2acc08", 0xdc}, {&(0x7f0000000380)="13e53b03face304d254f95089c4cacb7e804a729848464096e3ac168c8f1eafae74c9d5ad886902d55e5c97a706ed21f28a44103ed2bc0c629875072ee2a8e6af2d6324953e767103a9b59cbaa9145eaf535b4672c01193469d6690903a6955a21d1429dd0b369a262a850d16365c5b61bd526770bc1252239e2a75d7ab8c430b1fe7d1f32abe5d1bf27e206fe9611c0b1f1", 0x92}, {&(0x7f0000000440)="2ed2a1ac62602cd83374265d5e434d79f12f0c4fb1158cf7f49dde93bcbed3a3499282727a8a1fe6a1fc595ea42a5b512f019154d3fb7355bbf285024a07f1fba90e3f38af35df0ea212219de21bd7732669ca620dc17c88124c4acfb612e7d93028f2d040146f0205b6eec7c9ace58fef3ff72b90d84248c8f81f5297431f9a9ea1139ad23bba503293d18c87fb55fca61b15009b06df6a", 0x98}, {&(0x7f0000000000)="df8e6e6b623dad2b1ec6d27c7521c3e677337be253cf12cacb533626b1903497796d49701c564819e5cd5db68594", 0x2e}, {&(0x7f0000000500)="ffa53e2c5947953d41fd314d18d007a185bab1e08a65658eb986949a108fa1e208088bd1c163bac9055414d8f23784e0ac336e3822757e67808516fef99ead416c80d36aecfa1330e71e13e9df894b4659ea75f42dbfddc28307a9480e2b58d965ca104a80db058b12d313c14188cf4907540378a9940c9b757f0f938752e3415c16caeea56fa2e254ab20a2e706f5c417ab91bdf36a56d4d76af62a8f6c3fe18eba5301dcf0", 0xa6}, {&(0x7f0000000600)="28601b5c4efd3a5753143b87ceda76186f9c0bbc41ed2132daa90a0ae813e8c8b93efcc01a4743da6d234e37e133b7658ca3b302fb09b8979ac002c0b46eb0371bf48341cd29ce8b00795bf7e59a39f61f3e6abc23477db571443f4da46d697bd5fa02324cded84d282ac29162b6d0fea9c6223713b7543edf933771b7bb4a5833f7026d2fb746230bf6b791878c421a77433f675d2a5a13f68755a033b01ac04b30a743e393e2f5d3acd5842164ea9af122b97e39aa1c89f7ba295dcf218513556a0e0ec5472dffdcd5d16fa214e833704ecb86713acdc62786af5e7b54337d7c7ea5a5", 0xe4}, {&(0x7f0000000700)="591caef8c1461c0442818353170e645308652583ec00b907ea6361eac76dfffb9f625e9c935e636f4c040f0218b5aca264b3a4433d1822ae728bc557fd4243382823d653194920c31da7c8e00ee1b7295fb2e14ab802434179e215b5004ccac0ca7e73f12bb385afc5a71ef93a3094f37b7190699bee102a1239680762dc76dfc0d50ce2e0603e40a535262c9604d865d3a325d0dea76351d6dd13e6eb65f245c2aa42d0e59dd5811dd4a918c553a7ebc2065fc6c95b53df794028d373ffd698a48312dd9eba197d7776d1c49d17899288340006", 0xd4}], 0x7, 0x4) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={0xffffffffffffffff, 0x0, 0x30, 0x1, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000004c0), 0x0, 0x900000000000000}}, 0x40) ioctl$F2FS_IOC_FLUSH_DEVICE(0xffffffffffffffff, 0x4008f50a, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000340)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) arch_prctl$ARCH_SHSTK_ENABLE(0x5001, 0x0) 3.342544553s ago: executing program 4 (id=2912): r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0xffffffff80000001, r0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000cf00000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1c, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c300000095"], 0x0, 0xe, 0x0, 0x0, 0x41100, 0x14, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={0x0, r2}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000a80)='kfree\x00', r4}, 0x18) r5 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='pagemap\x00') sendfile(r6, r6, 0x0, 0x9) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000380)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x9, 0x60, 0x6, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x7e09}, {0xd, 0x24, 0xf, 0x1, 0x8be, 0x1000, 0xf000, 0x29}, {0x6, 0x24, 0x1a, 0x6, 0x20}}, {{0x9, 0x5, 0x81, 0x3, 0x1714923603f7afb4, 0x8, 0x2, 0x3}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x220, 0x7, 0xcf, 0xa}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x0, 0x2, 0xf}}}}}}}]}}, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) lchown(0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SET_NAME(0xf, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) epoll_create1(0x80000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r7}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r8, 0x0, 0x482, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'lblcr\x00', 0x29, 0x8, 0x11}, 0x2c) 2.674437023s ago: executing program 4 (id=2914): r0 = mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x6, 0x0) 2.633183463s ago: executing program 4 (id=2915): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000380)='fsi_master_acf_crc_rsp_error\x00', r0}, 0x18) r2 = socket$netlink(0x10, 0x3, 0x0) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x12, &(0x7f00000000c0)=@conn_svc_rsp={0x0, 0x0, 0xa, "36d7d4a4", {0x3, 0x103, 0x0, 0x3, 0x2, 0x1e, 0x8}}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x22000406, &(0x7f0000000180)={[{@dioread_lock}, {@discard}, {@abort}, {@init_itable}, {@auto_da_alloc}, {@grpjquota, 0x2e}, {@nouid32}, {@data_err_abort}, {@jqfmt_vfsv1}, {@grpid}], [], 0x2c}, 0x84, 0x4ae, &(0x7f0000000740)="$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") clock_getres(0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newqdisc={0x2c, 0x10, 0x1, 0x600, 0x4, {0x0, 0x0, 0x0, 0x0, {0x9, 0x7}, {0xf}, {0x4351f4c181b00bd4, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8c0}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='kfree\x00'}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x7, 0x0, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r3}, &(0x7f00000006c0), &(0x7f0000000700)=r4}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000500)=ANY=[@ANYRES64, @ANYRES64=r1, @ANYRESOCT=r1], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='signal_generate\x00', r5}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x52) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r6}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) pipe(&(0x7f0000005880)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r8}, &(0x7f0000000000), &(0x7f00000005c0)=r9}, 0x20) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x3, 0x2000000000000174, &(0x7f0000000340)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0xf, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='scsi_dispatch_cmd_start\x00', r10}, 0x10) syz_io_uring_setup(0x5638, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) fsetxattr$security_selinux(r7, &(0x7f00000000c0), &(0x7f0000000040)='system_u:object_r:dhcp_state_t:s0\x00', 0x1e, 0x0) 2.413418126s ago: executing program 1 (id=2919): r0 = socket$kcm(0xa, 0x2, 0x73) r1 = accept4$x25(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000100)=0x12, 0x81000) recvfrom$x25(r1, &(0x7f0000000140)=""/243, 0xf3, 0xea4f8420f9bc8747, &(0x7f0000000240), 0x12) capset(&(0x7f0000000280)={0x20071026}, &(0x7f0000000040)={0x0, 0x7, 0x0, 0x20}) r2 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x35, 0x0, 0x0, 0xbb43}]}) ioctl$SCSI_IOCTL_GET_PCI(r2, 0x5393, &(0x7f0000000000)) sendmsg$inet(r0, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0x10, 0x0}, 0x0) 2.335238188s ago: executing program 2 (id=2920): r0 = openat$incfs(0xffffffffffffffff, &(0x7f0000000000)='.pending_reads\x00', 0x14002, 0x8) ioctl$BLKTRACESTOP(r0, 0x1275, 0x0) syz_clone(0x102311, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x494816459c341ca6}, 0x8002, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x2) readv(r1, &(0x7f0000000000)=[{&(0x7f0000000240)=""/244, 0xf4}], 0x1) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000380), 0x1, r2}, 0x38) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x15, 0xd, &(0x7f0000000240)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r3, 0x0, 0x2}, 0x18) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000780)=@raw={'raw\x00', 0x3c1, 0x3, 0x438, 0x208, 0xc8, 0x8, 0x208, 0x5803, 0x368, 0x2e8, 0x2e8, 0x368, 0x2e8, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast1, [0x0, 0x0, 0x0, 0xffffff00], [], 'erspan0\x00', 'geneve1\x00', {}, {}, 0x0, 0x0, 0x3}, 0x0, 0x198, 0x208, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x10, 'kmp\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f34a214e67262c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b500", 0x1, 0x2}}, @common=@srh={{0x30}, {0x87, 0x1, 0x9, 0x3, 0x6, 0x40, 0x2024}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x6, 0x7, 0x4, 0x1, 0x0, "9c2d68c9fe7a3fe21a38fc41cae3540d864acbf238f3f08750d4b25cbb84846840562379ddc9f61533c3629cdd2b1708b4a1e1fb51c2bfbe4367d4af7009f411"}}}, {{@ipv6={@loopback, @private2, [0xff, 0xff000000, 0xffffff00, 0xff000000], [0xff, 0xff, 0xffffffff, 0xff], 'bond_slave_0\x00', 'nr0\x00', {}, {0xff}, 0x3b, 0xff}, 0x0, 0xf8, 0x160, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x13}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x498) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) write$P9_RREMOVE(r0, &(0x7f00000001c0)={0x7, 0x7b, 0x2}, 0x7) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r6}, 0x10) chmod(&(0x7f0000000000)='./file1\x00', 0x100) syz_io_uring_setup(0x17af, &(0x7f0000000500)={0x0, 0xbc48, 0x13290, 0x0, 0x1e1}, &(0x7f0000000300), &(0x7f0000000340)) 2.334215597s ago: executing program 3 (id=2921): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f00000019c0)={'ip6gre0\x00', &(0x7f0000002640)={'syztnl0\x00', 0x0, 0x29, 0x5, 0x3e, 0x5, 0x5121e59afcdff86d, @empty, @mcast2, 0x7800, 0x96602ec4e0b44a1e}}) r2 = socket(0x10, 0x1, 0xf) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=@newtfilter={0x38, 0x2c, 0xd27, 0x30bd29, 0x40000002, {0x0, 0x0, 0x0, r3, {0x0, 0x6}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_basic={{0xa}, {0x8, 0x2, [@TCA_BASIC_EMATCHES={0x4}]}}]}, 0x38}}, 0x0) r4 = socket(0x10, 0x803, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000040)={'wg2\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, r4, {0x8}}, './file0\x00'}) getsockname$packet(r5, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000700)=0x14) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f00000001c0)={0x0, {0x2, 0x4e23, @multicast2}, {0x2, 0x4e20, @multicast1}, {0x2, 0x4e22, @multicast2}, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8, 0x6487}) bpf$MAP_CREATE(0x0, 0x0, 0x48) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r6 = gettid() timer_create(0x8, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r6}, &(0x7f0000bbdffc)) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x101) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r10 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000080)='9p_client_res\x00', r12}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000080)='9p_client_res\x00', r11}, 0x10) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r8, @ANYBLOB=',wfdno=', @ANYRESHEX=r9]) ioctl$TIOCMIWAIT(r7, 0x545c, 0x3000000) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100fffe08000a40000000000900020073797a32000000000900010073797a3000000000080005400000000f840000000c0a01030000000000000000010000000900020073797a32000000005800038054000080080003400000000248000b80200001800a00010071756f7461000000100002800c0001400000000000000000100001800c000100636f756e74657200140001800a00010072616e6765"], 0x108}}, 0x0) 2.301138868s ago: executing program 1 (id=2922): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f000000850000002300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000d00)='kfree\x00', r0}, 0x18) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000840)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x600, r4, {0xfff3, 0x7}, {}, {0xa, 0x1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x14, 0x2, [@TCA_CGROUP_EMATCHES={0x10, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}, @TCA_EMATCH_TREE_LIST={0x4}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x40010) 2.230381719s ago: executing program 1 (id=2924): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080000000c"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) r4 = io_uring_setup(0x22d6, &(0x7f0000000180)={0x0, 0xa982, 0x40, 0x3, 0x2ac}) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) io_uring_register$IORING_REGISTER_RESTRICTIONS(r4, 0xb, &(0x7f0000000200), 0x0) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) connect$can_j1939(r1, &(0x7f00000010c0)={0x1d, r2, 0x1, {0x0, 0x0, 0x1}, 0xfe}, 0x18) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000005000)=@newtfilter={0x3c, 0x11, 0x1, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x74, r2, {0xffe0, 0x89c77fb34cc3db7f}, {0xa, 0xd}, {0xfff2, 0x7}}, [@TCA_RATE={0x6, 0x5, {0x5, 0x16}}, @TCA_CHAIN={0x8, 0xb, 0x9}, @TCA_CHAIN={0x8, 0xb, 0x4}]}, 0x3c}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x850) 2.219454439s ago: executing program 0 (id=2925): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) kexec_load(0x0, 0x0, 0x0, 0x0) (fail_nth: 7) 2.116348811s ago: executing program 0 (id=2926): socket$kcm(0x10, 0x2, 0x4) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r1}, 0x9) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_buf(r4, 0x6, 0x1c, &(0x7f00000002c0)="0d4b98446d961a873579b9b7631f5f322099068b02ceae36151c17e51b5de8e3e7614fa3c7e77993faf88344c6f29f4b46402ddba4d9d92f0b6065efdde59774ad857b9490", 0x45) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) write$nci(r3, 0x0, 0xfffffeea) ioctl$TCFLSH(r2, 0x5608, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee8, 0x2031, 0xffffffffffffffff, 0x0) r8 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_SECURITY_KEY(r8, 0x110, 0x1, &(0x7f00000000c0)='+,*@{\xdb/#\'@(:\x00', 0xd) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0xfffffffffffffd32) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r10}, 0x10) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r11, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r11, &(0x7f00000000c0)="b2", 0x1, 0x24008844, &(0x7f0000000040)={0xa, 0x2, 0x80398, @empty, 0xfffffffe}, 0x1c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r7, 0x0, 0x2}, 0x18) execve(0x0, 0x0, 0x0) 2.107360551s ago: executing program 1 (id=2927): syz_mount_image$ext4(&(0x7f0000000880)='ext2\x00', &(0x7f0000000000)='./file2\x00', 0x21000e, &(0x7f0000000380), 0x1, 0x52e, &(0x7f0000000e00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x107042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x187842, 0x3) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b7000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000240)={0x3920e, r0, 0x0, 0x0, 0x8, 0x8010000}) 1.714837016s ago: executing program 1 (id=2928): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bf"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x3, 0x800000000003}, 0x1100, 0x5dd8, 0x0, 0x4, 0x2, 0xb, 0xfdfb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syz_usbip_server_init(0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x18) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = socket(0x10, 0x803, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xe, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r4}, 0x10) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0200000004000000008001400200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=r6], 0x50) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@getqdisc={0x48, 0x26, 0x400, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0x8, 0xfff3}, {0xe}, {0xb, 0xc}}, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, 0x48}}, 0x0) r8 = socket(0x10, 0x803, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0xaf}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) r9 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)=@newtfilter={0x24, 0x2c, 0xd2b, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0xb, 0x3}, {}, {0x1, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x81}, 0x800) 1.702355056s ago: executing program 2 (id=2929): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000000000000001000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000280)='netlink_extack\x00', r0}, 0x10) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a60000000060a010400000000000000000200000034000480300001800e000100696d6d6564696174650000001c000280100002800c000280080001bd5f00000308000140000000000900010073797a30000000000900020073797a3200000000140000000cd73b"], 0xbc}, 0x1, 0x0, 0x0, 0x44}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=@newsa={0x158, 0x10, 0x1, 0x0, 0x0, {{@in=@rand_addr=0x64010102, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, {@in, 0x0, 0x32}, @in6=@loopback, {0xfffffffffffffffe}, {}, {}, 0x0, 0x0, 0xa, 0x4, 0x0, 0xaf}, [@algo_auth_trunc={0x4c, 0x14, {{'sha256-avx2\x00'}, 0x0, 0x100}}, @replay_esn_val={0x1c, 0x17, {0x0, 0xffffffff}}]}, 0x158}}, 0x0) 1.700851896s ago: executing program 0 (id=2930): ioctl$sock_inet_SIOCGIFNETMASK(0xffffffffffffffff, 0x891b, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) syz_clone(0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 5) 1.40972366s ago: executing program 4 (id=2931): prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) fchdir(0xffffffffffffffff) openat$sndseq(0xffffffffffffff9c, 0x0, 0x309700) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x34, r1, 0x1, 0x0, 0x10, {}, [@FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e22}, @FOU_ATTR_PEER_V4={0x8, 0x8, @multicast2}, @FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @local}]}, 0x34}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000570000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000040)={0x9, &(0x7f00000000c0)=[{0xffff, 0x0, 0x7, 0x8}, {0x4, 0x6, 0x8, 0xfff}, {0x4, 0x2, 0x1}, {0xb, 0x3, 0x4, 0xe}, {0x0, 0x9, 0x2, 0x100}, {0x9, 0xcd, 0x6, 0xa}, {0x5, 0x4, 0x4, 0x1}, {0x6, 0xc, 0xfd, 0x15c}, {0x6, 0x4, 0x9, 0x5}]}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000200)={[{@lazytime}, {@nomblk_io_submit}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@nombcache}, {@quota}, {@quota}]}, 0xff, 0x443, &(0x7f0000000940)="$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") bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) 1.344244331s ago: executing program 0 (id=2932): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003840), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000038c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010007bd7000fddbdf2555000000080001002500000008000300", @ANYRES32=r3, @ANYBLOB="7d371668f91df45e79ccafc583562bd4553e741f1969319ad2dcf66991de582d203a42937d740b27e1af29dd0b83b43e432435e9d4ef452258788776fdad54e1fe472e06ffeaa8cc4bed07f261d42a3089e142005d05fbeab6f8acd780d695895294ae161ecbca13265c367d35190e1ae952832dea8b8e7f"], 0x24}, 0x1, 0x0, 0x0, 0x40000a0}, 0x0) sendmsg$NL80211_CMD_DEAUTHENTICATE(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000340)={&(0x7f0000000640)=ANY=[@ANYRESDEC, @ANYRES16=r4, @ANYRES8=r5, @ANYRES32=r3, @ANYRES16=0x0], 0x450}, 0x1, 0x0, 0x0, 0x404c811}, 0x20008001) sendmsg$NL80211_CMD_EXTERNAL_AUTH(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x58, r0, 0x8, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x7f, 0x5b}}}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x49}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x4b}, @NL80211_ATTR_BSSID={0xa}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0xb}]}, 0x58}, 0x1, 0x0, 0x0, 0x90}, 0x41) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="24000000180001000000e41f1f52a55a2d"], 0x24}}, 0x0) ioctl$TIOCMGET(r6, 0x5415, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x2c, 0x1, 0x1, 0x401, 0x0, 0x0, {0xa, 0x0, 0xa}, [@CTA_TUPLE_ORIG={0x18, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x1a}}, {0x8, 0x2, @remote}}}]}]}, 0x2c}}, 0x48844) r9 = socket$unix(0x1, 0x1, 0x0) bind$unix(r9, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r10 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x111002, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r10, 0xc018937d, &(0x7f0000000100)={{0x1, 0x1, 0x18, r6, {0x6}}, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}) 1.334093991s ago: executing program 3 (id=2933): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.net/syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@cgroup=r0, 0x7, 0x0, 0x4, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0]}, 0x40) unshare(0x22020600) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) ioperm(0x1, 0xb7, 0x1c) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000002c0)=0x1) 1.219053543s ago: executing program 3 (id=2934): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000400)='kfree\x00', r0}, 0x10) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000040)=@v3, 0x18, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x70, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0xfff, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r3, 0x84, 0x20, &(0x7f0000000740), &(0x7f0000000780)=0x4) perf_event_open(0x0, 0x0, 0x1, r2, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r4, &(0x7f0000001180)='!', 0x34000, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback, 0xc}, 0x1c) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], 0x0, 0x0) 1.218164503s ago: executing program 3 (id=2935): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x8, 0x0, 0x0, 0x0, 0x0, 0x20c64, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x2, @perf_config_ext={0xf60, 0x40ffffffff}, 0x1100, 0x5, 0x3a61, 0x5, 0x0, 0x5, 0xfe01, 0x0, 0x66, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b40)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000880)={&(0x7f00000007c0)={0x8c, 0x0, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x40810}, 0x44040) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1c, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000054850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x10) sendmsg$NL80211_CMD_GET_SCAN(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="0107000000000000000020000000040003713d87311f137d6de7bf706b0a8143f06bf74b9a989aa9c363d36582aececb0896e8ceadb3d7a7c373d4330775dca3b1f6ac72b99a1d141a4eb1b4d2ed1b16437050341d8f6f97967875d6d2a63860ff6660"], 0x1c}, 0x1, 0x0, 0x0, 0x44855}, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000300)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@jqfmt_vfsold}, {@minixdf}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") sendmsg$can_raw(0xffffffffffffffff, 0x0, 0x4040005) ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f0000000240)={'team0\x00', {0x2, 0x0, @multicast1}}) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="18010000010000000000000000"], &(0x7f00000002c0)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r5}, 0x10) r6 = inotify_init1(0x0) inotify_add_watch(r6, &(0x7f0000000400)='.\x00', 0xa4000021) read(r6, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xf, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000022310000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b70300a4bfb7270cf171065caa5e084420df00000100007e00000083000000bf09000000000000550901000000000095000000000000b70200000000008500000085000000b75541c4cde22734"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r8}, 0x10) 1.119191015s ago: executing program 0 (id=2936): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x8000, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x2, @perf_config_ext={0xf60, 0x40ffffffff}, 0x1100, 0x5, 0x3a65, 0x5, 0x0, 0x5, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000340)={'syzkaller0\x00', 0x7101}) r1 = syz_clone(0x808000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$getregs(0xc, r1, 0xffffffffffffdcab, &(0x7f0000000040)=""/45) perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x39, 0x2, 0xe7, 0x7d, 0x0, 0xfffffffffffffffa, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5, 0x1, @perf_bp={&(0x7f0000000000), 0x8}, 0x2c0, 0x5, 0x1, 0x0, 0x1, 0x8, 0x9, 0x0, 0x1, 0x0, 0x4}, r1, 0xe, 0xffffffffffffffff, 0x0) socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = syz_usb_connect$cdc_ncm(0x1, 0x73, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2870c09, &(0x7f00000002c0), 0xff, 0x551, &(0x7f0000001100)="$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") syz_usb_disconnect(r3) r4 = socket$vsock_stream(0x28, 0x1, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r6 = dup3(r4, r5, 0x0) ioctl(r6, 0xe, &(0x7f0000000180)="b930752bfde439e81345f7148d476af6dac1dad790e4bae724530825906c5520d95c5f5911b47cff82f6b60a28ca9b51ce3b6081492e60fdb17c863e4e1c030e58e4a0ebf0be1c37") r7 = socket$inet_tcp(0x2, 0x1, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r9 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000280)={r8, 0xffffffffffffffff, 0x2e, 0x4608, @void}, 0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000080)=r9, 0x4) close_range(r7, 0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e20, @remote}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) recvfrom(0xffffffffffffffff, &(0x7f0000000480)=""/110, 0x28000, 0x734, 0x0, 0xfffffffffffffecb) syz_usb_disconnect(r3) r10 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r10, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) 1.041525645s ago: executing program 2 (id=2937): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000980)={0x3, 0xc, &(0x7f0000000800)=ANY=[@ANYRES32=r0, @ANYRESDEC=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, @void, @value}, 0x94) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002080)={&(0x7f0000000300)='kfree\x00', r2}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0100000004000000e27f01000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000100000000fa0000f2ff000000000000000002f5ecaa5a171102b3fb31378c4302d929e6974e5d8b8db3fac08c68f39bcb493d1006619d3261b808e648d38f233974ae1f43873ee848b40d054892effbbd165f3579f540136b447b3b0590162625ed52976140128f"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000040000007b8af0ff00000000b5a100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a50000009500000000000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) socket$packet(0x11, 0xa, 0x300) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="219a53f271a76d2608004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) sendmsg$tipc(r1, &(0x7f00000005c0)={&(0x7f0000000000), 0x10, &(0x7f0000000480)}, 0x0) r5 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_int(r5, 0x29, 0x46, &(0x7f0000000180)=0x80000000, 0x4) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x180000, @empty}, 0x1c) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_MAKE_EQUIV(r6, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, 0x3f7, 0x400, 0x70bd2d, 0x25dfdbff, {0x5, 0x5, './bus', './bus'}}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x4000000) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r7, 0x6, 0x14, &(0x7f00000013c0)=0x1, 0x4) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYRESHEX=0x0, @ANYRESOCT], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x5f, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r8}, 0x10) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)=ANY=[@ANYBLOB="540000000008010100000000000000000a000000050003002f0000000600024000000000240004800800024000000000080001400000fcff07000140800000010800014080000001090001"], 0x54}, 0x1, 0x0, 0x0, 0x4004}, 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r7, 0x6, 0x15, &(0x7f0000000000)=0xea, 0x4) 955.557117ms ago: executing program 3 (id=2938): openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000a00000008"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r0}, 0x0, &(0x7f0000000240)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000001140), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x6, 0xfd, 0x0, 0x7ffc0002}]}) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xb}]}) r3 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r4, 0x6, &(0x7f0000002000)={0x1, 0x0, 0x200, 0x2}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001080)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6, 0x0, 0x7fff}, 0x18) add_key$keyring(&(0x7f0000000000), &(0x7f0000000840)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) fcntl$lock(r4, 0x26, &(0x7f00000031c0)={0x1, 0x0, 0x0, 0x5}) fcntl$lock(r4, 0x26, &(0x7f0000000080)) accept4$packet(r3, 0x0, &(0x7f0000000fc0), 0x80000) fcntl$lock(r4, 0x7, &(0x7f0000000040)={0x0, 0x4, 0x0, 0x3}) pread64(r0, &(0x7f0000000e00)=""/226, 0xe2, 0x4) close_range(r2, 0xffffffffffffffff, 0x0) 823.201008ms ago: executing program 4 (id=2939): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x80000006}]}, 0x10) sendmsg$AUDIT_USER_AVC(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x10, 0x453, 0x4, 0x70bd27, 0x25dfdbfe}, 0x10}}, 0x20060801) syz_emit_ethernet(0x2ce, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd6ef5c980029829"], 0x0) r2 = fcntl$dupfd(r0, 0x406, r0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x68, 0x0, 0x0, 0x0, 0x0, 0x8, 0x8, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}, 0x2804, 0x0, 0x0, 0x0, 0x400, 0x10001, 0x1, 0x0, 0x0, 0x0, 0x1c0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000009000000440003800800010002000000140002007663616e300000000000000000000000080003"], 0x58}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000400)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000003c0)={&(0x7f0000000b00)=ANY=[@ANYBLOB="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"], 0x3f0}}, 0x40000) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bind$can_raw(0xffffffffffffffff, &(0x7f00000002c0), 0x10) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0207a20802"], 0x10}}, 0x0) 806.255669ms ago: executing program 1 (id=2940): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000004c0)={'ip_vti0\x00', &(0x7f00000003c0)={'syztnl0\x00', 0x0, 0x20, 0x20, 0x5, 0x80000000, {{0x1d, 0x4, 0x0, 0x1f, 0x74, 0x64, 0x0, 0x45, 0x29, 0x0, @local, @remote, {[@end, @end, @timestamp_addr={0x44, 0xc, 0x81, 0x1, 0xa, [{@private=0xa010101, 0x3}]}, @cipso={0x86, 0x51, 0x3, [{0x0, 0x7, "8bdb50e0ba"}, {0x1, 0xf, "cb41fe290e3108cf7369f27e3f"}, {0x0, 0x12, "66675658d04108d24f74cb83db9c751f"}, {0x1, 0x12, "d6fd76fab9ae196afcf69fc0657e9bed"}, {0x6, 0x11, "c507d7742ff7f69c7eef4861c42693"}]}, @end]}}}}}) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000500), 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e40)={0x18, 0x2, &(0x7f00000002c0)=@raw=[@jmp={0x5, 0x0, 0x3, 0x3, 0x0, 0x6}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}], &(0x7f0000000300)='syzkaller\x00', 0x0, 0xfa, &(0x7f0000000c00)=""/250, 0x41100, 0x40, '\x00', r0, 0x0, r1, 0x8, &(0x7f00000009c0)={0x8, 0x1}, 0x8, 0x10, &(0x7f0000000d00)={0x0, 0x0, 0x80000000, 0xffff0000}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000dc0)=[0xffffffffffffffff], &(0x7f0000000e00), 0x10, 0x4, @void, @value}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@bridge_delneigh={0x24, 0x1e, 0x1, 0x0, 0x0, {0x2}, [@NDA_LINK_NETNSID={0x8}]}, 0x24}}, 0x0) gettid() timer_create(0x3, 0x0, &(0x7f0000000a00)) timer_settime(0x0, 0x1, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x25, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x10808, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x4, 0x2fc, &(0x7f00000006c0)="$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") futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, 0x0, 0x1) syz_emit_ethernet(0xf4, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)={0x1, 0x1, [0x321, 0x399, 0xd1e, 0xbf9]}) r3 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(r3, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x60, r4, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7ff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xfffffffd}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}, @TIPC_NLA_PUBL_LOWER={0x1, 0x2, 0xd8e}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}]}, @TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x40}, 0x4) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}}, &(0x7f0000000380)) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x6, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x2, 0x800000000003}, 0x1320, 0xffffffff, 0x3, 0x5, 0x8, 0x1088f109, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) 222.483927ms ago: executing program 2 (id=2941): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000f1ffffff0000000000100000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000780)='mm_page_free\x00', r0}, 0x18) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x3000003, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) r1 = io_uring_setup(0x1694, &(0x7f0000000000)={0x0, 0x2a309, 0x1000}) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) socket$pppl2tp(0x18, 0x1, 0x1) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) (fail_nth: 7) 166.132378ms ago: executing program 0 (id=2942): r0 = perf_event_open(&(0x7f0000000fc0)={0x2, 0x80, 0x82, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20000000}, 0x0, 0x0, 0x3, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)={0x20, 0x3, 0x3, 0x101, 0x0, 0x0, {}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0x2, 0xff}}]}, 0x20}, 0x1, 0x0, 0x0, 0x20004000}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000d80)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3, 0x0, 0x2}, 0x18) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000180)='cpu~=0||!') r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001ec0)=@newtfilter={0x3054, 0x2c, 0x1, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r8, {0xd, 0xf}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_matchall={{0xd}, {0x3020, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0xe, 0xa}}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0x18, 0x10}}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0x10, 0x8}}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0x4, 0x10}}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0xc, 0xf}}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0x4, 0xd}}, @TCA_MATCHALL_ACT={0x2fec, 0x2, [@m_tunnel_key={0x106c, 0x9, 0x0, 0x0, {{0xf}, {0x3c, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_NO_CSUM={0x5, 0xa, 0x1}, @TCA_TUNNEL_KEY_NO_CSUM={0x5}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @local}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @empty}}]}, {0x1004, 0x6, "21635c8b565038e659cf0ba4543dcbc8850ae39928d2b756ede6878a6cc56cda1cac3c73b10fe933211318bba2b9ae915d4c104b096686415ea4eefbfe0389505f48da8f34794fa06e6bd18338ad01ee7d8ef36384cb9f3f1225b9b2657029caaad58e3e63364bda40d86466d411a161989c4649613c4610d86e73a7a8a26f1c6c6eca03b9a18fb6ca29a31acd2ccd0feeddb0f89f453689f5e8ea9451b1ffd1a3938c2fd376486dcf0befe79e1d9f92afa4c8e498f0f56090f4560ea29a4d93b14a715fa2505bfe4b2c3c3cdc6f17f3041518dd9cdace67ff35b3f1a11b67b4613d7c6578f7fe9f8063b505a13b92013b3b0e6e33d0d98f3f74aa1d7136bf1c951916c50bbd574c185b6ba1d88684a3a87795389aeb856a94019ebab806f9173c21e4fdaad493b3df343581fa67549853a96622a3460ea036a6479d094b1f7f862f0a439e598cac44f071eeb9a7c470ab8d0c656e4670659c07815e7b894e923a6232ffc08a840d3fcd52e62b65f50a4212215084afbfd3e9ac74c09b387fb8bc53da6eda3c6101989b98d20ee15b3a22c13e1d2a13ce3685ffddb873314daf8e0468260d01a688d713f940beae92f0eedfc4d50d58f69cc170338c5e29b223df87a24f2ed90e1521e83c5a7ff751bea905ad5df571ec62662dd3f0694298530d434e4dab3363a58e8cd16b36c15128f811e0635a99e084262c0345c8aad96a08992bf18850b086e03caccdb05ba7dc4e00c9c2557513d50f02e7832d5b8fe7cc1ea56b8c61c0b60ef59906e0bef0b5e08528d30e36c8fb03204f40d2a9b8506fa6888e816b03e497ca34d071ac2c3969806b1ec4a67656e2bcaa8591e5d7e6d4081862b5a62dc934a7acd69b4652d49c1efc5bd178e072f4c658bfab983f12b67f86d35f6ee2e0e70168167a4ac9dd04cc9fe4d4607dbfa5879797d69832bb83fd51739779b43ca257831565751fcb3e8268ecf1ac40b8ae91c55eb1e7793cc57c1d280c5933377525d6079dff8b4bbf25d0038c74eae783958fe4fcee14be2c730966ff8427b78b0948a11c36518631bd3cee92e2bc598e7820231c3592f5bc8540b4d9a207af8f1614a263683d880fd07dc4e27db0417b374b4e67feee5926c0606c13b0735f014b3ec3f3454e93fde4fb42465ac9c0ecc2e73a22487351f25ceaa1cb0dd5495fb825f17c64aaf38b7e15bb5f5bfb425842e8a60731c8c2527f4576db1bf28fb24e5e820c16897f5d6a40b24d3b10c1cbd36264dc945e8ff5811ca62f652bc0a629475227003193bb1da22a196d0e18862e9f716299c9500c0f103e3e600cc1b01775503f9b08dd488f62bfba07df504423b5fe9fb4085a2e7081287775ba7f850177f1c3a7f2bb4fe6cca1d7cb2d1ce4e9e6723f1db8479f9993aa3fed7582831c679ec65829367f6b91337acdbaadb669c2bbd26ae5e08b9ae44af0396a946c87b9ded2af2580d4805a4e0cd03fc820c2a272cb158b1c10b11fab9df093d229b892ca46b9bc975fd41e55ddff12d98dd53ba8068b995bd74c32a675a900574cbd2d1dfc73716b63d3c0443aac91fc7663feee9b56cfb28cb76f9d0c0fe2dc7f050f9901af0d17c31c429beceff101929ad28cdd9bfe559d03d5cd140ef21fb764d94323cc493f141d552adcf8612fe0f66a19fbdf50a03a44ab23961c52a6e3bbff111e8ed232d0772dd4e4b5b7ef7e5b9d07351681dde561f21866e7d013f8f0fa5145f188a5792acb53a058e7ae46dec0238a03b9a93bd6ba2c0fbaac141e4c0060bd09fabc133e7e670bbdad1b091ab33e36f914ac34d1de28ad2e095c04397f2831f2352462f386d5f731f2192632e66ac64cebebfdf1a867a73f07b4eef6c9407256604b41e1b4ab2088d81667b99d8fb95b77e90b683a1dda04b69ee3d57657de5712ca19143bc58832028fcf6de149528e692df0a48799e7415c20128a056157d8dfde83097c511bbc505d13ca537797ef0934d72388554c5f4ff34dd15ec5d12c2ffb3a99451c28ddcfdee19f9ffb8c961e3c9cfebf2037b241c0e706e7e77ea6d2dc1f50000a7f915faae8cc620742e65125b215ee09f0d7446a3ddddda91dbf95df472614405476a99ce75b55d6e6a4807e2695d0fbb8cc188ed88d30e823bb9775c6dd00d39a1ed33243bebe62f9865a06cc247cbcc8187e5e327f6af2d93fd65c3c979198308c7f4e80ba381edc394d6394e41bfd4bb1b0781a9e23aa11b8083bd2ca938032d55ceb9ed469095d2a9dffe5d48cf399960a5c32cf5764e7e292f7549d9cb5ea94b16d08a59149c1c4379d64fd5e2bfef3c76f17884bb4f8780f3eae4bf3936a260a7ce2b5fdd176e3f4ef8fa3b51942af8f7a16a6949a3154876808f57965545f39dcc8887964516a8807486d40bbc528341b9c0ebd9b6ffd02820f5c43f9cdc8aeb724e5f5823d4d585f938eee0c1a616edeaff86563b74ffe1541f4b1daf9e1d9d6041069bb451c1433e21df3284f46966100c09e78a330e3949c7bbfadf319fbf88443a72cc7745cd1b9720196efecc4b7ee43cfdcf1ccb92a7efaf861718007fdb9cf87a0095b1cbcbd2eb0f78000a0773e7b0c7e0f65dfc68e6037bb55335ff756dbc1adadcb6243128cf6a23bdee97b389f35261358e7b13e633b97b146b21476e60d8e5dfb8ec6c833c549e4f4f1b6a787cec23cf7e89a90ebd3555cf00deda1fdf31200e4630d3057b29bd372dbf973acf67028d72e35d1444fd6a21bc5f633b3354ef5a83d93d14312536a0bfe1db13fe058bb6335a21b8332c9edc8b804887e580f2ad92bf22696f52b3b29e8c14229464c5a1c2cdc690fe009c86bbf81a80370fd52c183d539ca49fd3a48d426a762d53ae774174fcc28391b061e257701a0bc2b0fc26c7f935b9cf65f35dae2ff6b2a25d29a507b21b97c80284e97ad83504a12c343f26b406d03e838b6ea45da9679a55f9f3a63e2d26f046e2a9d87d29352f22390e3065b5e5bf0886dc2378486c3e56944402821125f90c10e112c3af6012fad6d5fb3d5ba2003af30a5e594e1d9e7cd3358ca5d5accf5d663427271e0a5aafc895b7d7eabe91f070d68278cc4a705cb082035d7c3d7e570305d79ceddb6539ac6d713095d38e86cac77f8c68b171c30879f92306df8fde81c7806c34389a21cf3009a9f7aae31bcb437cf8dd43251873a18d93e1a2a605246a6cb7640fbbd2f4f0bbc7f1f2923b858e5d5283d9ea151da298ccbb2309e5c74259caf21c726a56f7b5fbc0ce3fe443b39c186be3c2c2811447cdbd75569be0eedfec8f4ee67732bfae40a0fc597e1962d46a5e9b40262c1583460f148fdca118cef554452bec174d21d80d5fabe4b048c9e48710cf52206247f811a0c4f0a8366467a2bb28a59c516f99b22a94f7c85c6006f0ad2f3fc6698ddadce1c9184b72d5eb51b82e242e9f016f90d514df676db81ed7d5eb510dc4fe9ddb5673f536604bf024d7255d12d4b32c1cd6613c359ac96180303caac8177157645f5e92f1fc1eedfd31a7418be4e68c5f6b6ddf1dad3208d9106c59a058d918573d00a21c9a2d8cd81e73236eb474830f0b5fed22d3f19786cb023955e84dd00cef5cb3e7e4e19885d8b93498e6dfbcfde059aa95a91d7dc9079828ada1197e3eed5d0c6fc40c240dfcd660654046b12d1029093a7cf2f280f4149839f0763f3ea198e02a118d54a15e607c3e69791fea9ef83459e3734522b7f3933d8c49f45baf101dc707c8d3e059c1cb88f86b8db1e116c85e46666b2a5518525a94138b317a3d29e13324a51ba1c9637eed2d94bb1b754476efd08f52ec0e2817d4dd2e86812c07793fdae153f708245f3e2ab4839a6f0ad159e8946c532db9a11566c45215e2722d586e68c1a32b0370b344dd09649a519d40455d0b8bae7a87089abc292ec8c41344c4400333b024ef5830c3d6e93d7178af12e9c7586b23b57201f0c08d5262e2fa70df62fc04ae96c718e3a38b66278b67714a5a079bb1be9209e68c7dceeb72260541a653296768b74b112911f9285fecccd97723055a11e2d43853d3155d63973467023cd71988f5c86821d0dd2e6e8764012e8b737e1ed7263442f484bf76b3be756195224a9af3880ab29b8353c1632034b7a32c52efc0b628f3088d07a72e32e5aa10cc4b01f8d4b4879af8569cb5ad83305bc7f57902232cb93ae8165d45d534c47ed8256549acea8e3275dc404324620223592886a7364c55489b073135c19b4f9508ca1b00bf18fef70daade8d5f5f15f0e2e17d0e9e21cec28cd5c4632b971529bfdd1988683b914dfe2031cb53ac25fe84bdf9edf61c2a5aee63e1c4af47c0fca57df8689e2ed721b997fdbc6bf11faf96dcc6181e8d33022e68139a556e8c015927a6952e6941fa5cec88a43eee5202acc9b041cfa25e29c415c28d6994e7ea56740e9675e333b3b03821653ebb2204662cf1c6c5d5578e84c503502ff9d9d7c01c64fe841414ac9f2a588421777cf9cdcfeba471c6f81fa7f317cd872e219e1381a33681d3492c11b7749a10b3e9cea8f64b78381366107b12681a0a4ee1a0c7f65ee2221dcba17f41f9d09b07ecb80205a1bf3e08899e403cd4191704bbd3eed220f224e82d7c00e95d97a0fbe067e7635e3e8bf0933c10eeee03226af0ef5451deaa93493d340703b594f28e832341c7a1f6b6febcbd4577601cbcb7a33e12d3fc149279a68955bfcdca590b9afeb646935f3cf034b9a3d6f05c252da43ab317800ae527e1dd53bba868f750ea3a7be020314147980ace60215cf4421212379c21e105969b8bab4cc4e56730fd530e0be6108736609616a332923491a736b30ce40aba7950cdb6103c74aa8a0175997eae7ed50091e38811506dc5d7ca9651267736c59ad8f147f7dfe4a70e5136e82574776ee5b66e79854eb8f122f0b0d821fc13e069e4434ee9a9dc2b38da552ed6cd751665025060e605a845fc9d0f02acf939b9f0a41ce21190044dceb7d826cea2d72b27f0aa73b807808d4b0cacb2e96c32e3038b8b82ad949b9662c6c8d4cd6401c75c84254a64599ac9c6fd5b48b7115ed13521228995ba847ebedb0c56a98b2250f7c2418086f59f65a890a3b8d14752783be7326482644fbb3b1e872c20161e3ca3ea7ea3182ed4001c7aaa179578986ce295963af03b85092a40a6c0218a17fd2ff179ff8d01642d382d92d10674843f5e682a3e146f9e9354414e0379150287fd7b8f25d9ba81e3268b5a9d3003dce8170aeec010c58f4c17ea7760117846e913c4ad171a8549798ee8a7aaf6bbea5aa29976a6aaea7d64232756edc9f8b1e947f879185239c9c605109a7183c541993b11a17ab96a272fb2e65adefe417af0b2104c0009ef27226f5ccb69ca0534ba74541261f84228347719a5a2fe6194565923f69dfac7aeea78138ecf23bf861f92fdf3774444e4a2b68f0f50fa664f675ac3616f6dbed1992a82b9ee77aba01a7e63c33ade2e968b46007817170fd3430b680821429596babc1a72e90adab96779e7f18268bd2152833fcc61c98c2f8729afeb1dab0ce83cac58637acc361c81a3b94729bd475a7fc826e3e96465a17464180c012e7084cc479ef45593840a2a79cacf3ade32a1d2cd61074acd7155147021c95ef17db9d16e3a121391f28ded749f6fe9ebffec7a76e1f6b391073310cb48b019e94d2f1f1b69da63c1d4a33b4a05ae9944d6d443c77aaa091ff2aa522b1e99c2cb27300efa59478156251705d9a36843efee9625739644e0de41641a60d2dd97b0a1435b3527e1c79f0251fe4"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_police={0xd48, 0x1a, 0x0, 0x0, {{0xb}, {0xc64, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x5, 0x40, 0x0, 0x89, 0x80000000, 0x38, 0xfffffff8, 0x3, 0xfffffffd, 0x903, 0x5, 0xa, 0x1, 0x0, 0x1000, 0x94, 0xf, 0x5, 0x1, 0x7, 0x0, 0x186, 0xe, 0xe78b, 0x5, 0x5, 0xb, 0x9, 0x5, 0x5, 0x7fff, 0x9, 0xbcd3, 0x0, 0x476, 0x6, 0x9, 0x10c, 0xc, 0x288, 0x6, 0x40, 0x0, 0x7, 0x3, 0x0, 0x3, 0x800, 0x8, 0xffff, 0x200, 0xffffffff, 0x5, 0x9, 0x3, 0x5, 0x3ff, 0x7, 0x3ff, 0x5, 0x4, 0x2, 0x3, 0x1, 0x7, 0x6, 0x9, 0x5, 0xb, 0xc2, 0xfffffffe, 0x7, 0xcc01, 0xc5c3, 0x8, 0xf, 0x47, 0x4, 0x0, 0x9, 0x81, 0x7f, 0x0, 0x5, 0xe804, 0x0, 0x5, 0xfffffffe, 0x34, 0xffffffff, 0x401, 0x0, 0x4, 0x7, 0x4, 0xfffffff5, 0x9, 0x3, 0x7, 0xaf, 0x1ff, 0x2, 0x3, 0xc3, 0x1, 0x3, 0x401, 0xc, 0xfffffffa, 0x6ca80e81, 0x8, 0x8, 0x40, 0xe3a0, 0x6, 0x81, 0x5, 0xf, 0xa1, 0xc, 0x3, 0x429a, 0x9, 0x4, 0xffff7fff, 0xe, 0x2, 0x0, 0x6c, 0x64b, 0xfffffff7, 0x6, 0x7, 0x55, 0x5, 0x3, 0x0, 0x1, 0x4, 0x77, 0xf, 0x12, 0x4, 0xe, 0xfffffffe, 0x9, 0x7, 0xfffffffb, 0x0, 0x386, 0xd9, 0x7f, 0x4a2, 0x10, 0x5, 0x1abb3bd1, 0xfffffeff, 0x3, 0x2, 0x9, 0x8, 0xc01f, 0x2, 0x0, 0x8, 0xc, 0x3c4a40d6, 0xc6b0, 0x0, 0x5, 0x6, 0x4, 0x5, 0x2, 0xb, 0x4, 0x6, 0xb, 0x80, 0x3c26, 0x3, 0xaf, 0x9, 0x3, 0xb7, 0x400, 0x3, 0x9, 0x264, 0x7, 0xc66, 0x5, 0xf, 0xf2, 0xffffffff, 0x1ff, 0x1, 0x31, 0xa84, 0x4, 0x7, 0x80000000, 0x800, 0x7, 0xae, 0x1fcdb0d3, 0x800, 0x1, 0x3, 0x6, 0xfff, 0x5, 0x4c, 0x6, 0x8, 0x3, 0x3, 0xbd, 0x1d, 0x8, 0x3, 0x1, 0x80000001, 0x700, 0x7, 0x8, 0xdaad, 0x10, 0x6, 0x3, 0x9, 0x1, 0xfffffffd, 0x0, 0x1, 0x3, 0xa, 0xd9, 0x7, 0x3, 0x100, 0xfffffffd, 0x2, 0x2, 0xd9, 0x4436, 0x1, 0x4, 0xf, 0x4, 0x4, 0x8, 0x4, 0xba59, 0xad30, 0x3]}, @TCA_POLICE_RESULT={0x8, 0x5, 0xfff}, @TCA_POLICE_AVRATE={0x8}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x8, 0x5a48bff6, 0x100, 0xf17, 0x7, 0x4f, 0xfb8, 0x2, 0x1, 0x146, 0x3, 0x10, 0x0, 0xffffffff, 0x9, 0x4, 0x724, 0x101, 0x1, 0x8, 0x4, 0x0, 0xb3, 0x0, 0x0, 0x1ff, 0x10000, 0x7, 0x8000, 0x0, 0x4000, 0x34, 0x5, 0x2, 0x10001, 0x8, 0xa86, 0x2, 0x8, 0x5, 0xc345, 0x1, 0x8001, 0x5905, 0xffffff56, 0xfffffffb, 0x1, 0x9, 0x9, 0x8a0a, 0x583, 0xe9b, 0x5, 0x39, 0xffffff00, 0xffffffff, 0x4, 0x3, 0x5f7, 0x7fffffff, 0xaf, 0xfffffff8, 0xde8d, 0x1ff, 0xffffffff, 0x6, 0xffff7fff, 0x6, 0x6, 0x1d7587c7, 0x2, 0x3, 0xffffffb2, 0x9, 0xe42f, 0x99d, 0x200, 0x7, 0x3c06, 0x726, 0x7db, 0x9, 0x0, 0x800, 0x4, 0x9, 0xd, 0xb48c, 0x5, 0x9, 0x8000, 0x8, 0xa6a8, 0x81, 0x1, 0x9, 0x8, 0x8, 0x5, 0x9, 0x2, 0x2, 0x8000, 0x4, 0x6, 0x1, 0x6, 0xda1, 0xa1e7, 0x2, 0x1000, 0x3, 0x1, 0x100, 0x90b, 0x7, 0xfffffff8, 0x8, 0x7fffffff, 0x3, 0x5, 0xfffffe01, 0xdbcf, 0x2, 0xdef, 0x34c2, 0x7, 0x81, 0xfffffffc, 0x3, 0xfffffff8, 0x4, 0x6, 0xfffffffc, 0x1, 0x10040000, 0xf, 0x7, 0x4, 0x17f, 0x7, 0x800, 0x6, 0x1, 0x9, 0xfffffffe, 0x6, 0x8, 0x775, 0x6, 0x9, 0x8, 0xfffffffa, 0xc, 0xffffffff, 0x7, 0x9, 0xdbe, 0x4, 0x2, 0x2, 0x10000, 0x3, 0xd, 0x3, 0x98a7, 0x8, 0x52, 0x40, 0x2435, 0x10001, 0x8, 0x27a6fc16, 0x5dd210dc, 0xc, 0x6, 0x7fffffff, 0x200, 0x1, 0x2, 0x8, 0x5, 0x9, 0x2, 0xa9, 0x1, 0x81, 0x4, 0xd4, 0x6, 0x47b, 0x2, 0x3, 0x28000, 0x8000, 0x3, 0x5, 0x9, 0x9, 0x80000001, 0x9, 0x0, 0xbf3, 0xe, 0x7, 0x4, 0x1000, 0xe, 0x2, 0x1d, 0x8, 0x5, 0x401, 0x1, 0x8, 0x3, 0x0, 0x5, 0x6, 0x10001, 0x8, 0x101, 0xff, 0x9, 0x7, 0x8, 0xd, 0x4, 0x7, 0x7a05, 0x3, 0x4, 0x800, 0x80, 0x9, 0x4, 0x3, 0x3, 0x7fff, 0x8000, 0xb0e9, 0x8c8, 0x4, 0x5, 0x5, 0x56e, 0x4, 0x4, 0x4, 0x4, 0x8, 0x1ff, 0x7fffffff, 0x9, 0x2, 0x8]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x785b, 0x800, 0x7fffffff, 0x6, 0x5, 0x2, 0x5, 0x8, 0x9, 0xfffffe00, 0x3, 0x1, 0x9, 0x4, 0x7, 0x9, 0x5, 0x4, 0x0, 0x4, 0xba36, 0x7, 0x38e, 0x75154f46, 0x9, 0x3ff, 0x10, 0x6, 0x9, 0x32, 0x1, 0x0, 0x6, 0x2, 0x3, 0xe, 0x4, 0x6, 0x7, 0x9, 0x3ff, 0x10, 0x7fffffff, 0x1, 0x7f, 0x8, 0x2f979b07, 0x4, 0x7, 0x5, 0x6, 0x3, 0x1, 0x5, 0x0, 0x6, 0x7fff, 0x9032, 0x4, 0x8, 0x6, 0xe30, 0x8, 0x3, 0x6, 0x80, 0x800, 0x7, 0x5, 0x3, 0xa, 0xfffffff6, 0x6, 0x2, 0xa, 0x1d, 0x1, 0x58, 0x1, 0x8, 0xfffffe00, 0x12d, 0xb0f, 0x6, 0xffff, 0x2, 0x7, 0x72d7, 0x1, 0x5fd0, 0x110, 0x4, 0x1, 0x7, 0x9, 0x845c, 0x6cc, 0x0, 0x6, 0x4, 0x5, 0x0, 0xfffffffc, 0x5, 0x180, 0x800, 0x6, 0x2, 0xff, 0x9, 0x898, 0x100, 0x800, 0xfffffff9, 0x4, 0x5, 0x2, 0x3, 0x6d0, 0x1, 0x4, 0x4, 0x3, 0xd2ad, 0x7f, 0x0, 0x8, 0x3, 0x0, 0x3, 0x80000001, 0x2, 0xff, 0x5, 0x400, 0xf739, 0x0, 0xa2b6, 0x8, 0x1, 0xfffffff8, 0x2, 0x5, 0x4, 0xf, 0x1, 0x1, 0x5, 0x5, 0x10, 0x9, 0x7, 0xc, 0xc5fb, 0x6, 0x1, 0x7fffffff, 0x7, 0x1, 0x1, 0xfffffffb, 0x1000, 0x6, 0x249, 0xc0000000, 0x6, 0xbdc6, 0x3, 0x8, 0x7, 0x9, 0x40, 0x9926, 0x2, 0xbda, 0x800, 0x7, 0xf, 0x5, 0x401, 0x7, 0xff, 0x5, 0x6, 0x2, 0x0, 0x1, 0x0, 0x0, 0x2, 0x5, 0x9, 0x1, 0x74f, 0x4, 0x1, 0x1, 0x0, 0x1000, 0xed0, 0xb4, 0x8, 0xba1, 0xd, 0x101, 0x9, 0x2, 0x1, 0x80000001, 0xe, 0xe, 0x6, 0x9, 0x8, 0xabf1, 0x0, 0xc0000000, 0x80000001, 0x40, 0x9, 0x0, 0x3ff, 0x2, 0xfff, 0x0, 0x0, 0x2, 0x7, 0x80000001, 0xe6f, 0x8, 0x1, 0x5, 0x4, 0x0, 0x80000001, 0x10, 0xfffffeff, 0x2, 0x6, 0x2, 0x2, 0xf28, 0x8, 0x800, 0x7f, 0xe, 0xff, 0x34, 0x8, 0x8, 0x10, 0x6, 0x4, 0xe43, 0x2]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x5, 0x7, 0x6, 0x7, 0x0, {0x6, 0x2, 0x40, 0x4, 0xe, 0x400}, {0x3, 0x0, 0x3ff, 0xfc00, 0x8, 0x3}, 0xfffff001, 0x400, 0x3}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x6}]]}, {0xb9, 0x6, "78170462b9c3c427c86738421c2a2bd3939c002f431425886394faf82555970cf2164d953e873ebff492a9da853ad6da85ed70e9eadab7e08867986ae06017696da087191da6a5793ef402c92bb2e8bd47bb41620f17265a76552ed835b9bdf335a536b0c8bb6c5a2bf34434b316f3fa15073e3ef74522e2a04f289a6b877b3ba768e963af2f9b4cb0b07fe78b1d385963b5a63465d6adbf102d27e9351caa71fa900332739e8823849a02e1eda63a845f5cc31c18"}, {0xc, 0x7, {0x0, 0x670e0bf83fd323a3}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_csum={0xc0, 0xc, 0x0, 0x0, {{0x9}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x401, 0x7, 0x20000000, 0x2, 0x16f7e543}, 0x7b}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x3, 0x53, 0x7, 0x1, 0x7}, 0x71}}]}, {0x5a, 0x6, "41bf96274dfc6afa6efff7ffe757cd5f6a93064595c68ff19b0a1523a4d53d3075cbfadd5f4bc4b050a2511cf2bcc1f7f0dd06e113c94a2249c7903a1f349a57c005b4ba0dccce64c1b840af3d9201328282b1a5229e"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2}}}}, @m_ife={0x134, 0x0, 0x0, 0x0, {{0x8}, {0xc8, 0x2, 0x0, 0x1, [@TCA_IFE_TYPE={0x6, 0x5, 0x8000}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x1, 0xdb1, 0x2, 0x2, 0x20000000}}}, @TCA_IFE_DMAC={0xa, 0x3, @broadcast}, @TCA_IFE_PARMS={0x1c, 0x1, {{0xffffffff, 0x6, 0x20000000, 0x8, 0x6316}, 0x1}}, @TCA_IFE_DMAC={0xa}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x7ff, 0x5, 0x8, 0xffff7fff, 0x4}}}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x9, 0x0, 0x4, 0xf, 0x1}}}, @TCA_IFE_DMAC={0xa, 0x3, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x7, 0x18, 0x7, 0xf27, 0xc9d}, 0x1}}, @TCA_IFE_DMAC={0xa, 0x3, @broadcast}]}, {0x47, 0x6, "0bee68e2e0d4ad6b4280dad590502a4f014223176eeca29d2745cc853e06ba6615542154b3b6ac36742af38f34ac5878001cf0f1ff1ac759b8bfb20528e38108ab92c7"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_ife={0x1040, 0x8, 0x0, 0x0, {{0x8}, {0x18, 0x2, 0x0, 0x1, [@TCA_IFE_TYPE={0x6}, @TCA_IFE_SMAC={0xa, 0x4, @random="90ccfaf4c299"}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}}]}, 0x3054}, 0x1, 0x0, 0x0, 0x26044068}, 0x2004c080) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000300)={'ip6_vti0\x00', &(0x7f0000000280)={'syztnl2\x00', 0x0, 0xa98db4e72a97e1fa, 0x80, 0x1, 0x7, 0xa, @empty, @dev={0xfe, 0x80, '\x00', 0x15}, 0x40, 0x8, 0x5, 0xe69}}) r10 = socket(0x10, 0x803, 0x0) r11 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r12, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r13 = socket(0x1d, 0x2, 0x6) sendmsg$kcm(r13, &(0x7f00000008c0)={&(0x7f0000000580)=@qipcrtr={0x2a, 0x2, 0x3fff}, 0x80, &(0x7f0000000880)=[{&(0x7f0000000600)="cd511ecd22f58105fd8f6601aeec1233802c86dd8ba538ccc3f8fbd41e92602885affaa60a7de4f3b4fcf1ab887d91b472a3acd43518a2d82f4d2c6325766eb0e24e75a825b5117efffaef24ead792c53ba590e696ce176cc8f1bb1761dfa259af125c84debba36bb952b395de3170d0fa4a3a56530f5d61673ed8fc078cade1ca496cba7aa08e103c79c0cb9f513319c8", 0x91}, {&(0x7f00000006c0)="a57c908a0996eeba568f04418f9a46139565e3fcb3cd1da41873733947f80fa8c949dc27b2f76b83978a2c4ed02c14001d09f4fbcbf84d589f44119f6f03865a0e593060bb712c83d99c2c7201669020f80a1c16ccca2ad45299379d14eb3110c8951b7955b5df5a06d982fcb30fd48463eaca8a3b6c79a904b2ff175cf8c85d8ba3cd8002cd1249a0efbba9de358389fbfdf83471af3680950343c663d62194b1ab6fab543615ceb21a1258962176ab32d09ac8cb2623808d1a5a74947cc9e695980a9dc7620e669b504d74820bad3f1869a36d84a75e3a23418eaad0eb16d11708174f95b059bd2ff42d1b7c7a67637e8890ab", 0xf4}], 0x2}, 0x2000050) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_vcan(r13, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r13, &(0x7f0000000380)={0x1d, r14, 0x2, {0x1, 0x0, 0x1}, 0xfd}, 0x16) sendmsg$ETHTOOL_MSG_DEBUG_GET(r4, &(0x7f00000004c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)={0xc0, r5, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0xc0}, 0x1, 0x0, 0x0, 0x20000800}, 0x40040c0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r15 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r16 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRESHEX=r15, @ANYRES8], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r16, 0x0, 0x2}, 0x18) clock_adjtime(0x0, &(0x7f0000000e00)={0xe62b, 0x80000000000000, 0x309, 0x0, 0x8000, 0xa, 0x0, 0x200000000000000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xffffffffffffffec, 0x0, 0x30, 0x920, 0x0, 0x0, 0x0, 0x5, 0xf, 0x0, 0x1}) 111.201459ms ago: executing program 2 (id=2944): setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r0}, 0x10) sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[], 0x1c}}, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x800448d2, &(0x7f0000000100)) syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="d8000000140081044e81f782db44b904021d080211000000040000a118000200e000000000000e1208000f0100810401a80016ea1f000840032e5f54c92011148ed08734843c8802033d0803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000001c0), 0x10000, 0x0) 61.853159ms ago: executing program 3 (id=2945): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000f1ffffff0000000000100000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000780)='mm_page_free\x00', r0}, 0x18) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x3000003, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) r1 = io_uring_setup(0x1694, &(0x7f0000000000)={0x0, 0x2a309, 0x1000}) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) socket$pppl2tp(0x18, 0x1, 0x1) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xf4ff, 0x0, 0x0, 0x2) 0s ago: executing program 2 (id=2946): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001680)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffc01, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000072"], 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r0}, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x2, 0x12062, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x15bd}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001c80)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x62, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x1809049, 0x0, 0xff, 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000040)=@v3, 0x18, 0x0) kernel console output (not intermixed with test programs): 1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 168.109218][T10018] loop0: detected capacity change from 0 to 512 [ 168.154795][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.192646][ T9998] vhci_hcd: connection closed [ 168.210735][T10016] vhci_hcd: connection closed [ 168.216962][T10015] vhci_hcd: connection closed [ 168.224313][ T37] vhci_hcd: stop threads [ 168.232704][T10053] FAULT_INJECTION: forcing a failure. [ 168.232704][T10053] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 168.235795][ T37] vhci_hcd: release socket [ 168.250156][T10053] CPU: 1 UID: 0 PID: 10053 Comm: syz.3.2491 Not tainted 6.15.0-rc7-syzkaller-00014-gd608703fcdd9 #0 PREEMPT(voluntary) [ 168.250197][T10053] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 168.250215][T10053] Call Trace: [ 168.250224][T10053] [ 168.250236][T10053] __dump_stack+0x1d/0x30 [ 168.250268][T10053] dump_stack_lvl+0xe8/0x140 [ 168.250361][T10053] dump_stack+0x15/0x1b [ 168.250386][T10053] should_fail_ex+0x265/0x280 [ 168.250474][T10053] should_fail+0xb/0x20 [ 168.250518][T10053] should_fail_usercopy+0x1a/0x20 [ 168.250548][T10053] _copy_to_user+0x20/0xa0 [ 168.250611][T10053] simple_read_from_buffer+0xb5/0x130 [ 168.250648][T10053] proc_fail_nth_read+0x100/0x140 [ 168.250689][T10053] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 168.250778][T10053] vfs_read+0x19d/0x6f0 [ 168.250815][T10053] ? __rcu_read_unlock+0x4f/0x70 [ 168.250847][T10053] ? __fget_files+0x184/0x1c0 [ 168.250904][T10053] ksys_read+0xda/0x1a0 [ 168.250945][T10053] __x64_sys_read+0x40/0x50 [ 168.250999][T10053] x64_sys_call+0x2d77/0x2fb0 [ 168.251031][T10053] do_syscall_64+0xd0/0x1a0 [ 168.251157][T10053] ? clear_bhb_loop+0x40/0x90 [ 168.251188][T10053] ? clear_bhb_loop+0x40/0x90 [ 168.251219][T10053] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.251250][T10053] RIP: 0033:0x7f92fd64d37c [ 168.251310][T10053] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 168.251338][T10053] RSP: 002b:00007f92fbcb7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 168.251365][T10053] RAX: ffffffffffffffda RBX: 00007f92fd875fa0 RCX: 00007f92fd64d37c [ 168.251384][T10053] RDX: 000000000000000f RSI: 00007f92fbcb70a0 RDI: 0000000000000006 [ 168.251403][T10053] RBP: 00007f92fbcb7090 R08: 0000000000000000 R09: 0000000000000000 [ 168.251431][T10053] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 168.251449][T10053] R13: 0000000000000000 R14: 00007f92fd875fa0 R15: 00007fff70805cf8 [ 168.251508][T10053] [ 168.490711][ T37] vhci_hcd: disconnect device [ 168.512729][ T37] vhci_hcd: stop threads [ 168.517688][ T37] vhci_hcd: release socket [ 168.522457][ T37] vhci_hcd: disconnect device [ 168.546418][T10063] loop1: detected capacity change from 0 to 512 [ 168.582987][T10018] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 168.598053][ T37] vhci_hcd: stop threads [ 168.598717][ T29] kauditd_printk_skb: 146 callbacks suppressed [ 168.598788][ T29] audit: type=1326 audit(1747919375.044:241406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10066 comm="syz.3.2493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92fd64e969 code=0x7ffc0000 [ 168.602562][ T37] vhci_hcd: release socket [ 168.602579][ T37] vhci_hcd: disconnect device [ 168.604611][T10063] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c01c, mo2=0002] [ 168.611177][ T29] audit: type=1326 audit(1747919375.055:241407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10066 comm="syz.3.2493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92fd64e969 code=0x7ffc0000 [ 168.635272][T10063] System zones: 0-2, 18-18 [ 168.645909][T10018] ext4 filesystem being mounted at /517/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 168.653276][T10063] , 34-35 [ 168.653572][ T29] audit: type=1326 audit(1747919375.076:241408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10066 comm="syz.3.2493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f92fd64e969 code=0x7ffc0000 [ 168.653652][ T29] audit: type=1326 audit(1747919375.076:241409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10066 comm="syz.3.2493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92fd64e969 code=0x7ffc0000 [ 168.653843][ T29] audit: type=1326 audit(1747919375.076:241410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10066 comm="syz.3.2493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f92fd64e969 code=0x7ffc0000 [ 168.653973][ T29] audit: type=1326 audit(1747919375.076:241411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10066 comm="syz.3.2493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92fd64e969 code=0x7ffc0000 [ 168.654458][ T29] audit: type=1326 audit(1747919375.097:241412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10066 comm="syz.3.2493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92fd64e969 code=0x7ffc0000 [ 168.654974][ T29] audit: type=1326 audit(1747919375.097:241413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10066 comm="syz.3.2493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f92fd64e969 code=0x7ffc0000 [ 168.655124][ T29] audit: type=1326 audit(1747919375.097:241414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10066 comm="syz.3.2493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92fd64e969 code=0x7ffc0000 [ 168.655424][ T29] audit: type=1326 audit(1747919375.097:241415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10066 comm="syz.3.2493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92fd64e969 code=0x7ffc0000 [ 168.703744][T10063] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 168.703855][T10063] ext4 filesystem being mounted at /496/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 169.151201][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.199963][T10087] loop2: detected capacity change from 0 to 512 [ 169.223710][T10087] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 169.257467][T10094] loop3: detected capacity change from 0 to 256 [ 169.319457][T10087] EXT4-fs (loop2): 1 truncate cleaned up [ 169.327076][T10090] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=524 sclass=netlink_tcpdiag_socket pid=10090 comm=syz.1.2499 [ 169.327428][T10087] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 169.359426][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 169.402764][T10097] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 169.419867][T10108] loop0: detected capacity change from 0 to 512 [ 169.448675][T10108] EXT4-fs warning (device loop0): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 169.467129][T10108] EXT4-fs (loop0): mount failed [ 169.504536][T10108] tipc: Started in network mode [ 169.509668][T10108] tipc: Node identity , cluster identity 4711 [ 169.516896][T10108] tipc: Failed to obtain node identity [ 169.523596][T10108] tipc: Enabling of bearer rejected, failed to enable media [ 169.524482][T10119] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2511'. [ 169.544545][T10119] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2511'. [ 169.561837][T10119] bridge0: port 1(vlan2) entered blocking state [ 169.564764][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.568591][T10119] bridge0: port 1(vlan2) entered disabled state [ 169.569588][T10119] vlan2: entered allmulticast mode [ 169.592298][T10119] bridge0: entered allmulticast mode [ 169.606453][T10119] vlan2: left allmulticast mode [ 169.611606][T10119] bridge0: left allmulticast mode [ 169.637225][T10124] loop4: detected capacity change from 0 to 512 [ 169.813004][T10135] loop2: detected capacity change from 0 to 1024 [ 169.822653][T10135] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 169.832990][T10135] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 169.846193][T10135] EXT4-fs (loop2): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 169.858259][T10135] EXT4-fs error (device loop2): ext4_get_journal_inode:5798: inode #5: comm syz.2.2517: unexpected bad inode w/o EXT4_IGET_BAD [ 169.859150][T10145] FAULT_INJECTION: forcing a failure. [ 169.859150][T10145] name failslab, interval 1, probability 0, space 0, times 0 [ 169.874631][T10135] EXT4-fs (loop2): no journal found [ 169.886595][T10145] CPU: 0 UID: 0 PID: 10145 Comm: syz.0.2521 Not tainted 6.15.0-rc7-syzkaller-00014-gd608703fcdd9 #0 PREEMPT(voluntary) [ 169.886668][T10145] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 169.886686][T10145] Call Trace: [ 169.886696][T10145] [ 169.886707][T10145] __dump_stack+0x1d/0x30 [ 169.886738][T10145] dump_stack_lvl+0xe8/0x140 [ 169.886765][T10145] dump_stack+0x15/0x1b [ 169.886810][T10145] should_fail_ex+0x265/0x280 [ 169.886857][T10145] ? __pfx_cond_bools_destroy+0x10/0x10 [ 169.886888][T10145] should_failslab+0x8c/0xb0 [ 169.886951][T10145] kmem_cache_alloc_noprof+0x50/0x310 [ 169.886979][T10145] ? hashtab_duplicate+0xfe/0x360 [ 169.887018][T10145] ? __pfx_cond_bools_destroy+0x10/0x10 [ 169.887083][T10145] hashtab_duplicate+0xfe/0x360 [ 169.887242][T10145] ? __pfx_cond_bools_copy+0x10/0x10 [ 169.887275][T10145] cond_policydb_dup+0xd2/0x4e0 [ 169.887310][T10145] security_set_bools+0xa0/0x340 [ 169.887364][T10145] sel_commit_bools_write+0x1ea/0x270 [ 169.887396][T10145] vfs_writev+0x3eb/0x870 [ 169.887463][T10145] ? __pfx_sel_commit_bools_write+0x10/0x10 [ 169.887504][T10145] ? mutex_lock+0xd/0x30 [ 169.887530][T10145] do_writev+0xe7/0x210 [ 169.887606][T10145] __x64_sys_writev+0x45/0x50 [ 169.887654][T10145] x64_sys_call+0x2006/0x2fb0 [ 169.887712][T10145] do_syscall_64+0xd0/0x1a0 [ 169.887781][T10145] ? clear_bhb_loop+0x40/0x90 [ 169.887835][T10145] ? clear_bhb_loop+0x40/0x90 [ 169.887865][T10145] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.887959][T10145] RIP: 0033:0x7fdfc638e969 [ 169.887980][T10145] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 169.888006][T10145] RSP: 002b:00007fdfc49f7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 169.888031][T10145] RAX: ffffffffffffffda RBX: 00007fdfc65b5fa0 RCX: 00007fdfc638e969 [ 169.888049][T10145] RDX: 0000000000000001 RSI: 0000200000000080 RDI: 0000000000000004 [ 169.888065][T10145] RBP: 00007fdfc49f7090 R08: 0000000000000000 R09: 0000000000000000 [ 169.888082][T10145] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 169.888152][T10145] R13: 0000000000000000 R14: 00007fdfc65b5fa0 R15: 00007ffd793e01a8 [ 169.888178][T10145] [ 170.017310][T10150] FAULT_INJECTION: forcing a failure. [ 170.017310][T10150] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 170.019301][T10135] EXT4-fs (loop2): can't get journal size [ 170.023440][T10150] CPU: 0 UID: 0 PID: 10150 Comm: syz.3.2523 Not tainted 6.15.0-rc7-syzkaller-00014-gd608703fcdd9 #0 PREEMPT(voluntary) [ 170.023502][T10150] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 170.023549][T10150] Call Trace: [ 170.023560][T10150] [ 170.023572][T10150] __dump_stack+0x1d/0x30 [ 170.023681][T10150] dump_stack_lvl+0xe8/0x140 [ 170.023710][T10150] dump_stack+0x15/0x1b [ 170.023736][T10150] should_fail_ex+0x265/0x280 [ 170.023787][T10150] should_fail+0xb/0x20 [ 170.023860][T10150] should_fail_usercopy+0x1a/0x20 [ 170.023890][T10150] strncpy_from_user+0x25/0x230 [ 170.023934][T10150] strncpy_from_bpfptr+0x43/0x50 [ 170.023967][T10150] bpf_prog_load+0x884/0x1070 [ 170.024058][T10150] ? security_bpf+0x2b/0x90 [ 170.024100][T10150] __sys_bpf+0x51d/0x790 [ 170.024183][T10150] __x64_sys_bpf+0x41/0x50 [ 170.024223][T10150] x64_sys_call+0x2478/0x2fb0 [ 170.024256][T10150] do_syscall_64+0xd0/0x1a0 [ 170.024293][T10150] ? clear_bhb_loop+0x40/0x90 [ 170.024355][T10150] ? clear_bhb_loop+0x40/0x90 [ 170.024389][T10150] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.024421][T10150] RIP: 0033:0x7f92fd64e969 [ 170.024442][T10150] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 170.024475][T10150] RSP: 002b:00007f92fbcb7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 170.024504][T10150] RAX: ffffffffffffffda RBX: 00007f92fd875fa0 RCX: 00007f92fd64e969 [ 170.024523][T10150] RDX: 0000000000000094 RSI: 0000200000000200 RDI: 0000000000000005 [ 170.024541][T10150] RBP: 00007f92fbcb7090 R08: 0000000000000000 R09: 0000000000000000 [ 170.024560][T10150] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 170.024579][T10150] R13: 0000000000000000 R14: 00007f92fd875fa0 R15: 00007fff70805cf8 [ 170.024607][T10150] [ 170.094707][T10155] loop3: detected capacity change from 0 to 512 [ 170.119770][T10135] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 170.390037][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.408601][T10155] EXT4-fs warning (device loop3): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 170.427372][T10163] loop2: detected capacity change from 0 to 128 [ 170.436343][T10155] EXT4-fs (loop3): mount failed [ 170.442856][T10163] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 170.459420][T10163] ext4 filesystem being mounted at /501/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 170.479766][T10163] dvmrp1: entered allmulticast mode [ 170.487572][T10163] dvmrp1: left allmulticast mode [ 170.516771][T10155] tipc: Started in network mode [ 170.522220][T10155] tipc: Node identity , cluster identity 4711 [ 170.528955][T10155] tipc: Failed to obtain node identity [ 170.534839][T10155] tipc: Enabling of bearer rejected, failed to enable media [ 170.677350][ T3321] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 170.724589][T10178] loop2: detected capacity change from 0 to 512 [ 170.754584][T10178] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 170.775660][T10178] ext4 filesystem being mounted at /502/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 170.922758][T10196] FAULT_INJECTION: forcing a failure. [ 170.922758][T10196] name failslab, interval 1, probability 0, space 0, times 0 [ 170.937276][T10196] CPU: 1 UID: 0 PID: 10196 Comm: syz.1.2536 Not tainted 6.15.0-rc7-syzkaller-00014-gd608703fcdd9 #0 PREEMPT(voluntary) [ 170.937425][T10196] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 170.937440][T10196] Call Trace: [ 170.937449][T10196] [ 170.937460][T10196] __dump_stack+0x1d/0x30 [ 170.937490][T10196] dump_stack_lvl+0xe8/0x140 [ 170.937531][T10196] dump_stack+0x15/0x1b [ 170.937548][T10196] should_fail_ex+0x265/0x280 [ 170.937680][T10196] should_failslab+0x8c/0xb0 [ 170.937712][T10196] kmem_cache_alloc_lru_noprof+0x55/0x310 [ 170.937734][T10196] ? __d_alloc+0x3d/0x350 [ 170.937756][T10196] __d_alloc+0x3d/0x350 [ 170.937812][T10196] d_alloc_parallel+0x53/0xc40 [ 170.937839][T10196] ? __rcu_read_unlock+0x4f/0x70 [ 170.937863][T10196] ? __d_lookup+0x316/0x340 [ 170.937891][T10196] ? vsnprintf+0x829/0x890 [ 170.937961][T10196] ? full_name_hash+0x92/0xe0 [ 170.937990][T10196] proc_fill_cache+0x158/0x240 [ 170.938013][T10196] ? __pfx_proc_map_files_instantiate+0x10/0x10 [ 170.938049][T10196] proc_map_files_readdir+0x500/0x680 [ 170.938144][T10196] iterate_dir+0x114/0x330 [ 170.938205][T10196] ? mutex_lock+0xd/0x30 [ 170.938230][T10196] __se_sys_getdents64+0x88/0x1b0 [ 170.938259][T10196] ? __pfx_filldir64+0x10/0x10 [ 170.938286][T10196] __x64_sys_getdents64+0x43/0x50 [ 170.938384][T10196] x64_sys_call+0x1302/0x2fb0 [ 170.938407][T10196] do_syscall_64+0xd0/0x1a0 [ 170.938434][T10196] ? clear_bhb_loop+0x40/0x90 [ 170.938463][T10196] ? clear_bhb_loop+0x40/0x90 [ 170.938494][T10196] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.938564][T10196] RIP: 0033:0x7f8397a1e969 [ 170.938581][T10196] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 170.938600][T10196] RSP: 002b:00007f8396087038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 170.938619][T10196] RAX: ffffffffffffffda RBX: 00007f8397c45fa0 RCX: 00007f8397a1e969 [ 170.938632][T10196] RDX: 0000000000001002 RSI: 0000200000002f40 RDI: 0000000000000006 [ 170.938650][T10196] RBP: 00007f8396087090 R08: 0000000000000000 R09: 0000000000000000 [ 170.938667][T10196] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 170.938748][T10196] R13: 0000000000000000 R14: 00007f8397c45fa0 R15: 00007ffe240a5918 [ 170.938769][T10196] [ 171.241168][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.312559][T10199] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2538'. [ 171.582404][T10220] hub 9-0:1.0: USB hub found [ 171.589345][T10220] hub 9-0:1.0: 8 ports detected [ 171.598120][T10220] 9pnet_fd: Insufficient options for proto=fd [ 171.645113][T10227] loop3: detected capacity change from 0 to 512 [ 171.835613][ T10] usb 7-2: enqueue for inactive port 1 [ 171.842552][ T10] usb 7-2: enqueue for inactive port 1 [ 171.926942][ T10] vhci_hcd: vhci_device speed not set [ 171.941197][T10240] loop2: detected capacity change from 0 to 512 [ 172.008793][T10240] EXT4-fs warning (device loop2): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 172.028970][T10240] EXT4-fs (loop2): mount failed [ 172.112029][T10257] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2558'. [ 172.123991][T10257] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 172.136859][T10257] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 172.190451][T10274] SELinux: Context system_u:object_r:crond_var_run_t:s0 is not valid (left unmapped). [ 172.597142][T10289] loop1: detected capacity change from 0 to 1024 [ 172.640704][T10289] EXT4-fs: Ignoring removed orlov option [ 172.672544][T10289] EXT4-fs: Ignoring removed nomblk_io_submit option [ 172.775751][T10315] loop4: detected capacity change from 0 to 2048 [ 172.805472][T10315] EXT4-fs: Ignoring removed bh option [ 172.812303][T10289] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 172.866186][T10315] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 172.895872][T10315] EXT4-fs (loop4): shut down requested (0) [ 172.946497][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.958652][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.224600][T10330] loop4: detected capacity change from 0 to 512 [ 173.236108][T10334] loop0: detected capacity change from 0 to 128 [ 173.255615][T10334] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 173.270004][T10334] ext4 filesystem being mounted at /526/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 173.293857][T10334] dvmrp1: entered allmulticast mode [ 173.303633][T10334] dvmrp1: left allmulticast mode [ 173.486848][ T3316] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 173.758104][ T29] kauditd_printk_skb: 436 callbacks suppressed [ 173.758124][ T29] audit: type=1326 audit(1747919380.451:241847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10346 comm="syz.3.2592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92fd64e969 code=0x7ffc0000 [ 173.898635][ T29] audit: type=1326 audit(1747919380.514:241848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10346 comm="syz.3.2592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f92fd64e969 code=0x7ffc0000 [ 173.929266][ T29] audit: type=1326 audit(1747919380.514:241849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10346 comm="syz.3.2592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92fd64e969 code=0x7ffc0000 [ 173.957808][ T29] audit: type=1326 audit(1747919380.514:241850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10346 comm="syz.3.2592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92fd64e969 code=0x7ffc0000 [ 173.986142][ T29] audit: type=1326 audit(1747919380.514:241851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10346 comm="syz.3.2592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f92fd64e969 code=0x7ffc0000 [ 174.013427][ T29] audit: type=1326 audit(1747919380.514:241852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10346 comm="syz.3.2592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92fd64e969 code=0x7ffc0000 [ 174.041722][ T29] audit: type=1326 audit(1747919380.514:241853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10346 comm="syz.3.2592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92fd64e969 code=0x7ffc0000 [ 174.073467][ T29] audit: type=1326 audit(1747919380.514:241854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10346 comm="syz.3.2592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f92fd64e969 code=0x7ffc0000 [ 174.103253][ T29] audit: type=1326 audit(1747919380.514:241855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10346 comm="syz.3.2592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92fd64e969 code=0x7ffc0000 [ 174.131500][ T29] audit: type=1326 audit(1747919380.514:241856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10346 comm="syz.3.2592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92fd64e969 code=0x7ffc0000 [ 174.377467][T10372] loop4: detected capacity change from 0 to 512 [ 174.416742][T10372] EXT4-fs warning (device loop4): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 174.435744][T10372] EXT4-fs (loop4): mount failed [ 174.492939][ T3466] usb usb8-port1: attempt power cycle [ 174.780151][T10387] loop4: detected capacity change from 0 to 512 [ 174.995709][T10403] loop3: detected capacity change from 0 to 128 [ 175.006154][T10403] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 175.020552][T10403] ext4 filesystem being mounted at /458/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 175.040339][T10403] dvmrp1: entered allmulticast mode [ 175.047873][T10403] dvmrp1: left allmulticast mode [ 175.127292][ T3314] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 175.138248][T10409] loop2: detected capacity change from 0 to 2048 [ 175.161937][T10409] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 175.183005][ T1464] tipc: Subscription rejected, illegal request [ 175.231728][T10418] loop3: detected capacity change from 0 to 512 [ 175.245640][T10409] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.2613: bg 0: block 234: padding at end of block bitmap is not set [ 175.262478][T10409] EXT4-fs (loop2): Remounting filesystem read-only [ 175.285366][T10418] EXT4-fs warning (device loop3): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 175.321114][T10418] EXT4-fs (loop3): mount failed [ 175.332084][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.563822][T10443] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2624'. [ 175.644924][T10439] loop3: detected capacity change from 0 to 1024 [ 175.662201][T10439] EXT4-fs: Ignoring removed orlov option [ 175.679737][T10439] EXT4-fs: Ignoring removed nomblk_io_submit option [ 175.862784][T10439] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 175.890025][T10466] loop0: detected capacity change from 0 to 2048 [ 175.890398][T10466] EXT4-fs: Ignoring removed bh option [ 175.948032][T10466] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 176.015955][T10466] EXT4-fs (loop0): shut down requested (0) [ 176.063814][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.139309][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.173205][T10481] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2636'. [ 176.189154][T10489] loop3: detected capacity change from 0 to 512 [ 176.210159][T10489] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 176.224356][T10484] loop1: detected capacity change from 0 to 512 [ 176.232206][T10489] ext4 filesystem being mounted at /464/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 176.255743][T10484] EXT4-fs warning (device loop1): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 176.275045][T10484] EXT4-fs (loop1): mount failed [ 176.300093][T10489] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 176.330608][ T3466] usb usb8-port1: unable to enumerate USB device [ 176.401252][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.979516][T10535] can0: slcan on ptm0. [ 177.343580][T10545] loop2: detected capacity change from 0 to 512 [ 177.354060][T10523] loop4: detected capacity change from 0 to 1024 [ 177.399360][T10523] EXT4-fs: Ignoring removed orlov option [ 177.422086][T10523] EXT4-fs: Ignoring removed nomblk_io_submit option [ 177.439058][T10552] loop1: detected capacity change from 0 to 128 [ 177.476234][T10545] EXT4-fs warning (device loop2): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 177.502514][T10545] EXT4-fs (loop2): mount failed [ 177.509176][T10552] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 177.523739][T10524] can0 (unregistered): slcan off ptm0. [ 177.579864][T10552] ext4 filesystem being mounted at /525/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 177.587946][T10523] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 177.631547][T10552] dvmrp1: entered allmulticast mode [ 177.639201][T10552] dvmrp1: left allmulticast mode [ 177.719489][T10576] loop2: detected capacity change from 0 to 512 [ 177.737305][T10574] loop3: detected capacity change from 0 to 2048 [ 177.751881][ T3313] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 177.765403][T10576] EXT4-fs warning (device loop2): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 177.785084][T10574] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 177.803753][T10576] EXT4-fs (loop2): mount failed [ 177.823660][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 178.014465][T10591] syzkaller0: entered promiscuous mode [ 178.021068][T10591] syzkaller0: entered allmulticast mode [ 178.035213][T10574] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.2663: bg 0: block 234: padding at end of block bitmap is not set [ 178.091810][T10574] EXT4-fs (loop3): Remounting filesystem read-only [ 178.379215][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 178.563514][ T12] bridge_slave_1: left allmulticast mode [ 178.570146][T10622] loop2: detected capacity change from 0 to 128 [ 178.570781][ T12] bridge_slave_1: left promiscuous mode [ 178.585661][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 178.605204][T10622] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 178.626345][T10622] ext4 filesystem being mounted at /531/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 178.666765][T10630] loop3: detected capacity change from 0 to 512 [ 178.695088][ T12] bridge_slave_0: left allmulticast mode [ 178.702074][ T12] bridge_slave_0: left promiscuous mode [ 178.708480][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 178.728689][T10630] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 178.739631][T10630] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 178.822712][T10630] EXT4-fs (loop3): warning: checktime reached, running e2fsck is recommended [ 178.863192][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 178.884907][T10630] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 178.894341][T10630] System zones: 0-2, 18-18, 34-34 [ 178.900938][T10630] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:1132: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 178.921617][ T12] bond_slave_0: left allmulticast mode [ 178.940044][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 178.955694][T10630] EXT4-fs (loop3): 1 truncate cleaned up [ 178.970295][ T12] bond_slave_1: left allmulticast mode [ 178.982416][T10630] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 179.018228][ T12] bond0 (unregistering): Released all slaves [ 179.089902][ T3321] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 179.148919][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 179.199458][T10639] xt_hashlimit: max too large, truncated to 1048576 [ 179.253274][ T12] hsr_slave_0: left promiscuous mode [ 179.264506][ T12] hsr_slave_1: left promiscuous mode [ 179.277949][T10639] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2679'. [ 179.290171][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 179.310980][ T29] kauditd_printk_skb: 265 callbacks suppressed [ 179.311000][ T29] audit: type=1326 audit(1747919386.278:242117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10646 comm="syz.1.2682" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8397a1e969 code=0x0 [ 179.351904][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 179.488252][ T29] audit: type=1326 audit(1747919386.467:242118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10656 comm="syz.2.2684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d9d07e969 code=0x7ffc0000 [ 179.490271][T10657] SELinux: Context system_u:object_r:fsa is not valid (left unmapped). [ 179.517902][ T29] audit: type=1326 audit(1747919386.467:242119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10656 comm="syz.2.2684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d9d07e969 code=0x7ffc0000 [ 179.546401][T10657] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2684'. [ 179.553660][ T29] audit: type=1326 audit(1747919386.467:242120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10656 comm="syz.2.2684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4d9d07e969 code=0x7ffc0000 [ 179.590046][ T29] audit: type=1326 audit(1747919386.467:242121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10656 comm="syz.2.2684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d9d07e969 code=0x7ffc0000 [ 179.620730][ T29] audit: type=1326 audit(1747919386.467:242122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10656 comm="syz.2.2684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4d9d07e969 code=0x7ffc0000 [ 179.649642][ T29] audit: type=1326 audit(1747919386.467:242123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10656 comm="syz.2.2684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d9d07e969 code=0x7ffc0000 [ 179.664081][T10605] chnl_net:caif_netlink_parms(): no params data found [ 179.700530][ T29] audit: type=1326 audit(1747919386.467:242124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10656 comm="syz.2.2684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=36 compat=0 ip=0x7f4d9d07e969 code=0x7ffc0000 [ 179.726997][ T29] audit: type=1326 audit(1747919386.467:242125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10656 comm="syz.2.2684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d9d07e969 code=0x7ffc0000 [ 179.753919][ T29] audit: type=1326 audit(1747919386.467:242126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10656 comm="syz.2.2684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4d9d07e969 code=0x7ffc0000 [ 179.827716][T10670] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2687'. [ 179.863321][T10605] bridge0: port 1(bridge_slave_0) entered blocking state [ 179.870943][T10605] bridge0: port 1(bridge_slave_0) entered disabled state [ 179.879912][T10675] loop0: detected capacity change from 0 to 128 [ 179.887444][T10605] bridge_slave_0: entered allmulticast mode [ 179.896461][T10675] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 179.911090][T10605] bridge_slave_0: entered promiscuous mode [ 179.918820][T10605] bridge0: port 2(bridge_slave_1) entered blocking state [ 179.927484][T10605] bridge0: port 2(bridge_slave_1) entered disabled state [ 179.934111][T10675] ext4 filesystem being mounted at /549/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 179.943782][T10605] bridge_slave_1: entered allmulticast mode [ 179.954944][T10605] bridge_slave_1: entered promiscuous mode [ 179.965918][T10675] dvmrp1: entered allmulticast mode [ 179.984282][T10675] dvmrp1: left allmulticast mode [ 179.994617][T10605] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 180.007632][T10605] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 180.032756][T10605] team0: Port device team_slave_0 added [ 180.040942][T10605] team0: Port device team_slave_1 added [ 180.060966][ T3316] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 180.072785][T10605] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 180.080266][T10605] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 180.110512][T10605] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 180.122976][T10605] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 180.132760][T10605] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 180.137173][T10680] loop0: detected capacity change from 0 to 512 [ 180.163003][T10605] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 180.188007][T10680] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 180.200120][T10680] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 180.220759][T10680] EXT4-fs (loop0): warning: checktime reached, running e2fsck is recommended [ 180.230917][T10680] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 180.246207][T10680] System zones: 0-2, 18-18, 34-34 [ 180.253964][T10680] EXT4-fs warning (device loop0): ext4_update_dynamic_rev:1132: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 180.273810][T10605] hsr_slave_0: entered promiscuous mode [ 180.274812][T10680] EXT4-fs (loop0): 1 truncate cleaned up [ 180.280948][T10605] hsr_slave_1: entered promiscuous mode [ 180.290172][T10680] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 180.305462][T10605] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 180.316123][T10605] Cannot create hsr debugfs directory [ 180.476775][T10697] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2696'. [ 180.558006][T10700] loop3: detected capacity change from 0 to 2048 [ 180.608624][T10700] loop3: p1 < > p4 [ 180.614803][T10700] loop3: p4 size 8388608 extends beyond EOD, truncated [ 180.848458][T10605] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 180.880382][T10605] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 180.888190][T10708] netlink: 112 bytes leftover after parsing attributes in process `syz.1.2700'. [ 180.903421][T10605] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 180.918293][T10711] loop0: detected capacity change from 0 to 512 [ 180.929280][T10605] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 180.949381][T10711] EXT4-fs warning (device loop0): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 180.966795][T10711] EXT4-fs (loop0): mount failed [ 180.976638][T10605] 8021q: adding VLAN 0 to HW filter on device bond0 [ 180.993559][T10605] 8021q: adding VLAN 0 to HW filter on device team0 [ 181.005992][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 181.014146][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 181.031293][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 181.039409][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 181.085928][T10721] loop0: detected capacity change from 0 to 512 [ 181.095632][T10721] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 181.106843][T10721] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 181.118606][T10721] EXT4-fs (loop0): warning: checktime reached, running e2fsck is recommended [ 181.128729][T10721] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 181.139014][T10721] System zones: 0-2, 18-18, 34-34 [ 181.139764][T10605] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 181.152456][T10721] EXT4-fs warning (device loop0): ext4_update_dynamic_rev:1132: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 181.168058][T10721] EXT4-fs (loop0): 1 truncate cleaned up [ 181.313640][T10605] veth0_vlan: entered promiscuous mode [ 181.323471][T10605] veth1_vlan: entered promiscuous mode [ 181.345167][T10605] veth0_macvtap: entered promiscuous mode [ 181.353923][T10605] veth1_macvtap: entered promiscuous mode [ 181.368628][T10605] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 181.384288][T10605] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 181.408685][T10605] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.418877][T10605] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.428330][T10605] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.438605][T10605] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.517515][T10746] FAULT_INJECTION: forcing a failure. [ 181.517515][T10746] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 181.532883][T10746] CPU: 1 UID: 0 PID: 10746 Comm: syz.3.2709 Not tainted 6.15.0-rc7-syzkaller-00014-gd608703fcdd9 #0 PREEMPT(voluntary) [ 181.532916][T10746] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 181.532982][T10746] Call Trace: [ 181.532989][T10746] [ 181.532997][T10746] __dump_stack+0x1d/0x30 [ 181.533021][T10746] dump_stack_lvl+0xe8/0x140 [ 181.533057][T10746] dump_stack+0x15/0x1b [ 181.533080][T10746] should_fail_ex+0x265/0x280 [ 181.533144][T10746] should_fail+0xb/0x20 [ 181.533187][T10746] should_fail_usercopy+0x1a/0x20 [ 181.533296][T10746] _copy_from_user+0x1c/0xb0 [ 181.533325][T10746] copy_from_sockptr_offset+0x66/0xa0 [ 181.533363][T10746] do_ip6t_set_ctl+0x5d1/0x840 [ 181.533467][T10746] ? kstrtoull+0x111/0x140 [ 181.533506][T10746] ? __rcu_read_unlock+0x4f/0x70 [ 181.533538][T10746] nf_setsockopt+0x196/0x1b0 [ 181.533564][T10746] ipv6_setsockopt+0x11a/0x130 [ 181.533596][T10746] tcp_setsockopt+0x95/0xb0 [ 181.533651][T10746] sock_common_setsockopt+0x66/0x80 [ 181.533723][T10746] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 181.533770][T10746] __sys_setsockopt+0x181/0x200 [ 181.533799][T10746] __x64_sys_setsockopt+0x64/0x80 [ 181.533827][T10746] x64_sys_call+0x2bd5/0x2fb0 [ 181.533883][T10746] do_syscall_64+0xd0/0x1a0 [ 181.533916][T10746] ? clear_bhb_loop+0x40/0x90 [ 181.533947][T10746] ? clear_bhb_loop+0x40/0x90 [ 181.533978][T10746] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 181.534001][T10746] RIP: 0033:0x7f92fd64e969 [ 181.534018][T10746] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 181.534051][T10746] RSP: 002b:00007f92fbcb7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 181.534078][T10746] RAX: ffffffffffffffda RBX: 00007f92fd875fa0 RCX: 00007f92fd64e969 [ 181.534097][T10746] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 000000000000000d [ 181.534114][T10746] RBP: 00007f92fbcb7090 R08: 0000000000000388 R09: 0000000000000000 [ 181.534205][T10746] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 181.534222][T10746] R13: 0000000000000000 R14: 00007f92fd875fa0 R15: 00007fff70805cf8 [ 181.534248][T10746] [ 181.860154][T10758] loop4: detected capacity change from 0 to 512 [ 181.886263][T10763] loop2: detected capacity change from 0 to 1024 [ 181.895628][T10760] loop1: detected capacity change from 0 to 512 [ 181.899791][T10758] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 181.912953][T10758] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 181.932770][T10758] EXT4-fs (loop4): warning: checktime reached, running e2fsck is recommended [ 181.943145][T10758] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 181.953742][T10758] System zones: 0-2, 18-18, 34-34 [ 181.959629][T10758] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:1132: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 181.994206][T10758] EXT4-fs (loop4): 1 truncate cleaned up [ 182.071467][T10775] loop3: detected capacity change from 0 to 512 [ 182.091022][T10775] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 182.100864][T10775] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 182.131170][T10775] EXT4-fs (loop3): warning: checktime reached, running e2fsck is recommended [ 182.141628][T10775] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 182.149672][T10775] System zones: 0-2, 18-18, 34-34 [ 182.155325][T10775] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:1132: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 182.177697][T10775] EXT4-fs (loop3): 1 truncate cleaned up [ 182.184964][T10783] loop0: detected capacity change from 0 to 128 [ 182.200665][T10783] ext4 filesystem being mounted at /559/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 182.221602][T10783] dvmrp1: entered allmulticast mode [ 182.230617][T10783] dvmrp1: left allmulticast mode [ 182.243498][T10790] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2720'. [ 182.254432][T10790] FAULT_INJECTION: forcing a failure. [ 182.254432][T10790] name failslab, interval 1, probability 0, space 0, times 0 [ 182.268479][T10790] CPU: 1 UID: 0 PID: 10790 Comm: syz.4.2720 Not tainted 6.15.0-rc7-syzkaller-00014-gd608703fcdd9 #0 PREEMPT(voluntary) [ 182.268601][T10790] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 182.268617][T10790] Call Trace: [ 182.268624][T10790] [ 182.268634][T10790] __dump_stack+0x1d/0x30 [ 182.268673][T10790] dump_stack_lvl+0xe8/0x140 [ 182.268764][T10790] dump_stack+0x15/0x1b [ 182.268781][T10790] should_fail_ex+0x265/0x280 [ 182.268819][T10790] should_failslab+0x8c/0xb0 [ 182.268878][T10790] kmem_cache_alloc_noprof+0x50/0x310 [ 182.268905][T10790] ? skb_clone+0x151/0x1f0 [ 182.268928][T10790] skb_clone+0x151/0x1f0 [ 182.268950][T10790] __netlink_deliver_tap+0x2c9/0x500 [ 182.268975][T10790] netlink_sendskb+0x126/0x150 [ 182.269093][T10790] netlink_unicast+0x28a/0x670 [ 182.269200][T10790] netlink_ack+0x4c8/0x500 [ 182.269243][T10790] netlink_rcv_skb+0x192/0x220 [ 182.269279][T10790] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 182.269373][T10790] rtnetlink_rcv+0x1c/0x30 [ 182.269401][T10790] netlink_unicast+0x5a1/0x670 [ 182.269435][T10790] netlink_sendmsg+0x58b/0x6b0 [ 182.269508][T10790] ? __pfx_netlink_sendmsg+0x10/0x10 [ 182.269534][T10790] __sock_sendmsg+0x145/0x180 [ 182.269569][T10790] ____sys_sendmsg+0x31e/0x4e0 [ 182.269696][T10790] ___sys_sendmsg+0x17b/0x1d0 [ 182.269740][T10790] __x64_sys_sendmsg+0xd4/0x160 [ 182.269771][T10790] x64_sys_call+0x2999/0x2fb0 [ 182.269799][T10790] do_syscall_64+0xd0/0x1a0 [ 182.269833][T10790] ? clear_bhb_loop+0x40/0x90 [ 182.269936][T10790] ? clear_bhb_loop+0x40/0x90 [ 182.269966][T10790] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.270051][T10790] RIP: 0033:0x7f98e7eee969 [ 182.270069][T10790] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 182.270094][T10790] RSP: 002b:00007f98e6557038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 182.270119][T10790] RAX: ffffffffffffffda RBX: 00007f98e8115fa0 RCX: 00007f98e7eee969 [ 182.270233][T10790] RDX: 0000000000000010 RSI: 0000200000000680 RDI: 0000000000000004 [ 182.270320][T10790] RBP: 00007f98e6557090 R08: 0000000000000000 R09: 0000000000000000 [ 182.270338][T10790] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 182.270383][T10790] R13: 0000000000000000 R14: 00007f98e8115fa0 R15: 00007ffea1e1ad48 [ 182.270429][T10790] [ 182.573655][T10797] netlink: 'syz.4.2723': attribute type 29 has an invalid length. [ 182.634018][T10800] netlink: 112 bytes leftover after parsing attributes in process `syz.3.2721'. [ 182.923507][T10816] loop2: detected capacity change from 0 to 512 [ 182.936091][T10816] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 182.946136][T10816] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 182.966808][T10816] EXT4-fs (loop2): warning: checktime reached, running e2fsck is recommended [ 182.977030][T10816] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 182.986582][T10816] System zones: 0-2, 18-18, 34-34 [ 182.993962][T10816] EXT4-fs warning (device loop2): ext4_update_dynamic_rev:1132: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 183.011139][T10816] EXT4-fs (loop2): 1 truncate cleaned up [ 183.099452][T10826] loop3: detected capacity change from 0 to 128 [ 183.124136][T10826] ext4 filesystem being mounted at /481/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 183.176189][T10826] dvmrp1: entered allmulticast mode [ 183.190210][T10826] dvmrp1: left allmulticast mode [ 183.318050][T10835] wireguard0: entered promiscuous mode [ 183.480501][T10844] loop2: detected capacity change from 0 to 512 [ 183.489866][T10844] EXT4-fs error (device loop2): ext4_iget_extra_inode:4693: inode #15: comm syz.2.2740: corrupted in-inode xattr: invalid ea_ino [ 183.540167][T10844] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.2740: couldn't read orphan inode 15 (err -117) [ 183.597250][T10854] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2744'. [ 183.630488][T10849] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 183.630488][T10849] The task syz.0.2742 (10849) triggered the difference, watch for misbehavior. [ 183.697996][T10860] loop1: detected capacity change from 0 to 512 [ 183.744105][T10868] loop2: detected capacity change from 0 to 128 [ 183.764013][T10868] ext4 filesystem being mounted at /548/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 183.786661][T10868] dvmrp1: entered allmulticast mode [ 183.793951][T10868] dvmrp1: left allmulticast mode [ 183.855501][T10849] tmpfs: Bad value for 'mpol' [ 183.930039][T10873] FAULT_INJECTION: forcing a failure. [ 183.930039][T10873] name failslab, interval 1, probability 0, space 0, times 0 [ 183.947196][T10873] CPU: 0 UID: 0 PID: 10873 Comm: syz.2.2749 Not tainted 6.15.0-rc7-syzkaller-00014-gd608703fcdd9 #0 PREEMPT(voluntary) [ 183.947281][T10873] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 183.947345][T10873] Call Trace: [ 183.947353][T10873] [ 183.947364][T10873] __dump_stack+0x1d/0x30 [ 183.947395][T10873] dump_stack_lvl+0xe8/0x140 [ 183.947430][T10873] dump_stack+0x15/0x1b [ 183.947454][T10873] should_fail_ex+0x265/0x280 [ 183.947502][T10873] ? alloc_fs_context+0x44/0x4e0 [ 183.947535][T10873] should_failslab+0x8c/0xb0 [ 183.947602][T10873] __kmalloc_cache_noprof+0x4c/0x320 [ 183.947639][T10873] alloc_fs_context+0x44/0x4e0 [ 183.947667][T10873] fs_context_for_mount+0x22/0x30 [ 183.947729][T10873] do_new_mount+0xe9/0x680 [ 183.948362][T10873] path_mount+0x4a4/0xb20 [ 183.948406][T10873] ? user_path_at+0x109/0x130 [ 183.948438][T10873] __se_sys_mount+0x28f/0x2e0 [ 183.948483][T10873] __x64_sys_mount+0x67/0x80 [ 183.948601][T10873] x64_sys_call+0xd36/0x2fb0 [ 183.948652][T10873] do_syscall_64+0xd0/0x1a0 [ 183.948686][T10873] ? clear_bhb_loop+0x40/0x90 [ 183.948716][T10873] ? clear_bhb_loop+0x40/0x90 [ 183.948782][T10873] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 183.948810][T10873] RIP: 0033:0x7f4d9d07e969 [ 183.948830][T10873] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 183.948914][T10873] RSP: 002b:00007f4d9b6e7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 183.948941][T10873] RAX: ffffffffffffffda RBX: 00007f4d9d2a5fa0 RCX: 00007f4d9d07e969 [ 183.948968][T10873] RDX: 0000200000000180 RSI: 0000200000000100 RDI: 0000000000000000 [ 183.948986][T10873] RBP: 00007f4d9b6e7090 R08: 0000200000000500 R09: 0000000000000000 [ 183.949004][T10873] R10: 0000000000018000 R11: 0000000000000246 R12: 0000000000000001 [ 183.949022][T10873] R13: 0000000000000000 R14: 00007f4d9d2a5fa0 R15: 00007ffe335bafc8 [ 183.949045][T10873] [ 184.204135][T10874] bridge_slave_1: left allmulticast mode [ 184.210871][T10874] bridge_slave_1: left promiscuous mode [ 184.217230][T10874] bridge0: port 2(bridge_slave_1) entered disabled state [ 184.230642][T10875] loop0: detected capacity change from 0 to 512 [ 184.244909][ T29] kauditd_printk_skb: 213 callbacks suppressed [ 184.244926][ T29] audit: type=1400 audit(1747919391.465:242339): avc: denied { bind } for pid=10864 comm="syz.3.2748" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 184.285000][T10875] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 184.301094][T10874] bridge_slave_0: left allmulticast mode [ 184.310369][T10874] bridge_slave_0: left promiscuous mode [ 184.317963][T10874] bridge0: port 1(bridge_slave_0) entered disabled state [ 184.327646][T10875] EXT4-fs (loop0): 1 truncate cleaned up [ 184.327915][ T29] audit: type=1326 audit(1747919391.538:242340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10879 comm="syz.2.2750" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4d9d07e969 code=0x0 [ 184.584114][ T29] audit: type=1326 audit(1747919391.822:242341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10879 comm="syz.2.2750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d9d07e969 code=0x7ffc0000 [ 184.611079][ T29] audit: type=1326 audit(1747919391.822:242342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10879 comm="syz.2.2750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d9d07e969 code=0x7ffc0000 [ 184.638957][ T29] audit: type=1326 audit(1747919391.822:242343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10879 comm="syz.2.2750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=245 compat=0 ip=0x7f4d9d07e969 code=0x7ffc0000 [ 184.666135][ T29] audit: type=1326 audit(1747919391.822:242344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10879 comm="syz.2.2750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d9d07e969 code=0x7ffc0000 [ 184.693497][ T29] audit: type=1326 audit(1747919391.822:242345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10879 comm="syz.2.2750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d9d07e969 code=0x7ffc0000 [ 184.744267][ T29] audit: type=1326 audit(1747919391.990:242346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10892 comm="syz.1.2755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8397a1e969 code=0x7ffc0000 [ 184.803806][ T29] audit: type=1326 audit(1747919391.990:242347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10892 comm="syz.1.2755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8397a1e969 code=0x7ffc0000 [ 184.829435][ T29] audit: type=1326 audit(1747919391.990:242348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10892 comm="syz.1.2755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8397a1e969 code=0x7ffc0000 [ 184.928046][T10912] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2759'. [ 185.018536][T10912] loop1: detected capacity change from 0 to 2048 [ 185.146925][T10922] loop0: detected capacity change from 0 to 512 [ 185.155379][T10922] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 185.167305][T10922] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 185.182533][T10924] loop2: detected capacity change from 0 to 128 [ 185.199950][T10924] ext4 filesystem being mounted at /551/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 185.225287][T10922] EXT4-fs (loop0): warning: checktime reached, running e2fsck is recommended [ 185.256327][T10924] dvmrp1: entered allmulticast mode [ 185.264771][T10924] dvmrp1: left allmulticast mode [ 185.297815][T10922] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 185.310509][T10922] System zones: 0-2, 18-18, 34-34 [ 185.319187][T10922] EXT4-fs warning (device loop0): ext4_update_dynamic_rev:1132: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 185.338244][T10922] EXT4-fs (loop0): 1 truncate cleaned up [ 185.382090][T10931] loop0: detected capacity change from 0 to 512 [ 185.558223][T10936] loop1: detected capacity change from 0 to 512 [ 185.566755][T10936] EXT4-fs: Ignoring removed mblk_io_submit option [ 185.574609][T10936] EXT4-fs: Ignoring removed i_version option [ 185.582065][T10936] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 185.608831][T10936] EXT4-fs (loop1): 1 truncate cleaned up [ 185.628443][T10936] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2767'. [ 186.046489][T10946] Unsupported ieee802154 address type: 0 [ 186.052694][T10946] netlink: 256 bytes leftover after parsing attributes in process `syz.3.2770'. [ 186.213027][T10961] loop2: detected capacity change from 0 to 1024 [ 186.270857][T10966] loop2: detected capacity change from 0 to 128 [ 186.280502][T10966] ext4 filesystem being mounted at /555/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 186.301400][T10966] dvmrp1: entered allmulticast mode [ 186.308327][T10966] dvmrp1: left allmulticast mode [ 186.395796][T10974] SELinux: Context system_u:object_r:hald_sonypic_exec_t:s0 is not valid (left unmapped). [ 186.698601][T10992] FAULT_INJECTION: forcing a failure. [ 186.698601][T10992] name failslab, interval 1, probability 0, space 0, times 0 [ 186.712680][T10992] CPU: 1 UID: 0 PID: 10992 Comm: syz.4.2786 Not tainted 6.15.0-rc7-syzkaller-00014-gd608703fcdd9 #0 PREEMPT(voluntary) [ 186.712739][T10992] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 186.712756][T10992] Call Trace: [ 186.712762][T10992] [ 186.712769][T10992] __dump_stack+0x1d/0x30 [ 186.712793][T10992] dump_stack_lvl+0xe8/0x140 [ 186.712830][T10992] dump_stack+0x15/0x1b [ 186.712960][T10992] should_fail_ex+0x265/0x280 [ 186.713013][T10992] ? unix_prepare_fpl+0x82/0x290 [ 186.713056][T10992] should_failslab+0x8c/0xb0 [ 186.713115][T10992] __kmalloc_cache_noprof+0x4c/0x320 [ 186.713144][T10992] unix_prepare_fpl+0x82/0x290 [ 186.713188][T10992] unix_scm_to_skb+0x1aa/0x250 [ 186.713228][T10992] queue_oob+0x92/0x510 [ 186.713296][T10992] unix_stream_sendmsg+0x7c4/0x840 [ 186.713339][T10992] ? __pfx_unix_stream_sendmsg+0x10/0x10 [ 186.713375][T10992] __sock_sendmsg+0x145/0x180 [ 186.713449][T10992] ____sys_sendmsg+0x31e/0x4e0 [ 186.713486][T10992] ___sys_sendmsg+0x17b/0x1d0 [ 186.713563][T10992] __x64_sys_sendmsg+0xd4/0x160 [ 186.713604][T10992] x64_sys_call+0x2999/0x2fb0 [ 186.713636][T10992] do_syscall_64+0xd0/0x1a0 [ 186.713669][T10992] ? clear_bhb_loop+0x40/0x90 [ 186.713697][T10992] ? clear_bhb_loop+0x40/0x90 [ 186.713772][T10992] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.713800][T10992] RIP: 0033:0x7f98e7eee969 [ 186.713822][T10992] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 186.713847][T10992] RSP: 002b:00007f98e6557038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 186.713886][T10992] RAX: ffffffffffffffda RBX: 00007f98e8115fa0 RCX: 00007f98e7eee969 [ 186.713940][T10992] RDX: 0000000004004881 RSI: 0000200000000600 RDI: 0000000000000007 [ 186.713960][T10992] RBP: 00007f98e6557090 R08: 0000000000000000 R09: 0000000000000000 [ 186.713979][T10992] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 186.713998][T10992] R13: 0000000000000000 R14: 00007f98e8115fa0 R15: 00007ffea1e1ad48 [ 186.714052][T10992] [ 186.741982][T10988] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 186.965540][ T10] IPVS: starting estimator thread 0... [ 187.020991][T11004] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 187.047632][T11006] netlink: 'syz.1.2792': attribute type 29 has an invalid length. [ 187.056108][T10994] IPVS: using max 1632 ests per chain, 81600 per kthread [ 187.136021][T11020] loop4: detected capacity change from 0 to 128 [ 187.146796][T11020] ext4 filesystem being mounted at /17/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 187.187006][T11024] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2800'. [ 187.320460][T11043] loop2: detected capacity change from 0 to 128 [ 187.329669][T11043] ext4 filesystem being mounted at /558/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 187.368937][T11043] dvmrp1: entered allmulticast mode [ 187.414371][T11051] tmpfs: Unknown parameter 'mphl' [ 187.476318][T11059] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2812'. [ 187.557503][T11069] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2811'. [ 187.568792][T11069] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2811'. [ 187.980162][T11074] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 187.991134][T11074] SELinux: failed to load policy [ 188.000916][T11076] C: renamed from team_slave_0 (while UP) [ 188.007149][T11076] FAULT_INJECTION: forcing a failure. [ 188.007149][T11076] name failslab, interval 1, probability 0, space 0, times 0 [ 188.021426][T11076] CPU: 0 UID: 0 PID: 11076 Comm: syz.2.2817 Not tainted 6.15.0-rc7-syzkaller-00014-gd608703fcdd9 #0 PREEMPT(voluntary) [ 188.021527][T11076] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 188.021542][T11076] Call Trace: [ 188.021552][T11076] [ 188.021564][T11076] __dump_stack+0x1d/0x30 [ 188.021594][T11076] dump_stack_lvl+0xe8/0x140 [ 188.021615][T11076] dump_stack+0x15/0x1b [ 188.021641][T11076] should_fail_ex+0x265/0x280 [ 188.021688][T11076] should_failslab+0x8c/0xb0 [ 188.021729][T11076] __kmalloc_noprof+0xa5/0x3e0 [ 188.021753][T11076] ? kobject_get_path+0x92/0x1c0 [ 188.021847][T11076] ? kvfree_call_rcu+0x29a/0x320 [ 188.021880][T11076] kobject_get_path+0x92/0x1c0 [ 188.021926][T11076] kobject_rename+0x106/0x350 [ 188.021965][T11076] ? sysfs_rename_link_ns+0x106/0x120 [ 188.022064][T11076] device_rename+0x11f/0x180 [ 188.022095][T11076] netif_change_name+0x1eb/0x6b0 [ 188.022133][T11076] ? nla_strscpy+0xec/0x120 [ 188.022161][T11076] do_setlink+0x766/0x27f0 [ 188.022223][T11076] ? avc_has_perm_noaudit+0x1b1/0x200 [ 188.022260][T11076] ? security_capable+0x83/0x90 [ 188.022309][T11076] ? ns_capable+0x7d/0xb0 [ 188.022337][T11076] ? netlink_ns_capable+0x86/0xa0 [ 188.022378][T11076] rtnl_newlink+0xe75/0x12d0 [ 188.022411][T11076] ? xas_load+0x413/0x430 [ 188.022441][T11076] ? xas_load+0x413/0x430 [ 188.022484][T11076] ? __memcg_slab_free_hook+0xb7/0x1c0 [ 188.022519][T11076] ? __kfree_skb+0x109/0x150 [ 188.022542][T11076] ? __rcu_read_unlock+0x4f/0x70 [ 188.022573][T11076] ? avc_has_perm_noaudit+0x1b1/0x200 [ 188.022600][T11076] ? selinux_capable+0x1f9/0x270 [ 188.022675][T11076] ? security_capable+0x83/0x90 [ 188.022719][T11076] ? ns_capable+0x7d/0xb0 [ 188.022742][T11076] ? __pfx_rtnl_newlink+0x10/0x10 [ 188.022768][T11076] rtnetlink_rcv_msg+0x5fe/0x6d0 [ 188.022836][T11076] netlink_rcv_skb+0x123/0x220 [ 188.022884][T11076] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 188.022923][T11076] rtnetlink_rcv+0x1c/0x30 [ 188.023048][T11076] netlink_unicast+0x5a1/0x670 [ 188.023081][T11076] netlink_sendmsg+0x58b/0x6b0 [ 188.023144][T11076] ? __pfx_netlink_sendmsg+0x10/0x10 [ 188.023171][T11076] __sock_sendmsg+0x145/0x180 [ 188.023205][T11076] ____sys_sendmsg+0x31e/0x4e0 [ 188.023230][T11076] ___sys_sendmsg+0x17b/0x1d0 [ 188.023285][T11076] __x64_sys_sendmsg+0xd4/0x160 [ 188.023318][T11076] x64_sys_call+0x2999/0x2fb0 [ 188.023340][T11076] do_syscall_64+0xd0/0x1a0 [ 188.023364][T11076] ? clear_bhb_loop+0x40/0x90 [ 188.023405][T11076] ? clear_bhb_loop+0x40/0x90 [ 188.023433][T11076] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 188.023461][T11076] RIP: 0033:0x7f4d9d07e969 [ 188.023481][T11076] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 188.023540][T11076] RSP: 002b:00007f4d9b6e7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 188.023567][T11076] RAX: ffffffffffffffda RBX: 00007f4d9d2a5fa0 RCX: 00007f4d9d07e969 [ 188.023583][T11076] RDX: 0000000000004004 RSI: 0000200000000940 RDI: 0000000000000003 [ 188.023598][T11076] RBP: 00007f4d9b6e7090 R08: 0000000000000000 R09: 0000000000000000 [ 188.023611][T11076] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 188.023626][T11076] R13: 0000000000000000 R14: 00007f4d9d2a5fa0 R15: 00007ffe335bafc8 [ 188.023691][T11076] [ 188.461755][T11083] loop3: detected capacity change from 0 to 2048 [ 188.483559][T11085] loop2: detected capacity change from 0 to 8192 [ 188.491282][T11085] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 188.503349][T11089] netlink: 'syz.0.2819': attribute type 1 has an invalid length. [ 188.504812][T11083] EXT4-fs: Ignoring removed bh option [ 188.511108][T11089] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2819'. [ 188.511132][T11089] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 188.526315][T11088] FAULT_INJECTION: forcing a failure. [ 188.526315][T11088] name failslab, interval 1, probability 0, space 0, times 0 [ 188.555985][T11088] CPU: 0 UID: 0 PID: 11088 Comm: syz.1.2822 Not tainted 6.15.0-rc7-syzkaller-00014-gd608703fcdd9 #0 PREEMPT(voluntary) [ 188.556021][T11088] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 188.556038][T11088] Call Trace: [ 188.556048][T11088] [ 188.556113][T11088] __dump_stack+0x1d/0x30 [ 188.556138][T11088] dump_stack_lvl+0xe8/0x140 [ 188.556158][T11088] dump_stack+0x15/0x1b [ 188.556183][T11088] should_fail_ex+0x265/0x280 [ 188.556232][T11088] should_failslab+0x8c/0xb0 [ 188.556275][T11088] kmem_cache_alloc_node_noprof+0x57/0x320 [ 188.556303][T11088] ? __alloc_skb+0x101/0x320 [ 188.556424][T11088] __alloc_skb+0x101/0x320 [ 188.556467][T11088] netlink_alloc_large_skb+0xba/0xf0 [ 188.556543][T11088] netlink_sendmsg+0x3cf/0x6b0 [ 188.556573][T11088] ? __pfx_netlink_sendmsg+0x10/0x10 [ 188.556598][T11088] __sock_sendmsg+0x145/0x180 [ 188.556628][T11088] ____sys_sendmsg+0x31e/0x4e0 [ 188.556714][T11088] ___sys_sendmsg+0x17b/0x1d0 [ 188.556761][T11088] __x64_sys_sendmsg+0xd4/0x160 [ 188.556792][T11088] x64_sys_call+0x2999/0x2fb0 [ 188.556856][T11088] do_syscall_64+0xd0/0x1a0 [ 188.556890][T11088] ? clear_bhb_loop+0x40/0x90 [ 188.556921][T11088] ? clear_bhb_loop+0x40/0x90 [ 188.556951][T11088] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 188.557046][T11088] RIP: 0033:0x7f8397a1e969 [ 188.557063][T11088] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 188.557091][T11088] RSP: 002b:00007f8396087038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 188.557111][T11088] RAX: ffffffffffffffda RBX: 00007f8397c45fa0 RCX: 00007f8397a1e969 [ 188.557124][T11088] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000004 [ 188.557173][T11088] RBP: 00007f8396087090 R08: 0000000000000000 R09: 0000000000000000 [ 188.557190][T11088] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 188.557208][T11088] R13: 0000000000000000 R14: 00007f8397c45fa0 R15: 00007ffe240a5918 [ 188.557235][T11088] [ 188.582353][T11092] loop4: detected capacity change from 0 to 512 [ 188.993981][T11092] EXT4-fs warning (device loop4): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 189.066015][ T29] kauditd_printk_skb: 165 callbacks suppressed [ 189.066038][ T29] audit: type=1326 audit(1747919396.431:242513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11090 comm="syz.4.2823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f98e7eed5ca code=0x7ffc0000 [ 189.097707][ T29] audit: type=1326 audit(1747919396.431:242514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11090 comm="syz.4.2823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f98e7eed5ca code=0x7ffc0000 [ 189.123121][ T29] audit: type=1326 audit(1747919396.431:242515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11090 comm="syz.4.2823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f98e7eed1d7 code=0x7ffc0000 [ 189.148229][ T29] audit: type=1326 audit(1747919396.431:242516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11090 comm="syz.4.2823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f98e7ef010a code=0x7ffc0000 [ 189.196868][T11092] EXT4-fs (loop4): mount failed [ 189.220524][ T29] audit: type=1326 audit(1747919396.683:242517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11090 comm="syz.4.2823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f98e7eed2d0 code=0x7ffc0000 [ 189.247228][ T29] audit: type=1326 audit(1747919396.683:242518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11090 comm="syz.4.2823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f98e7eee56b code=0x7ffc0000 [ 189.272234][ T29] audit: type=1326 audit(1747919396.683:242519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11090 comm="syz.4.2823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f98e7eed5ca code=0x7ffc0000 [ 189.297874][ T29] audit: type=1326 audit(1747919396.683:242520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11090 comm="syz.4.2823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98e7eee969 code=0x7ffc0000 [ 189.478957][ T29] audit: type=1326 audit(1747919396.935:242521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11116 comm="syz.0.2832" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdfc638e969 code=0x0 [ 189.543727][ T29] audit: type=1326 audit(1747919396.956:242522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11115 comm="syz.4.2831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98e7eee969 code=0x7ffc0000 [ 189.571065][T11123] netlink: '+}[@': attribute type 298 has an invalid length. [ 189.603371][T11123] loop2: detected capacity change from 0 to 512 [ 189.619599][T11123] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 189.656944][T11123] EXT4-fs (loop2): orphan cleanup on readonly fs [ 189.711232][T11123] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm +}[@: bg 0: block 248: padding at end of block bitmap is not set [ 189.747252][T11123] EXT4-fs error (device loop2): ext4_acquire_dquot:6935: comm +}[@: Failed to acquire dquot type 1 [ 189.800711][T11125] loop1: detected capacity change from 0 to 1024 [ 189.845653][T11123] EXT4-fs (loop2): 1 truncate cleaned up [ 189.845953][T11125] EXT4-fs: Ignoring removed bh option [ 189.867947][T11125] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 189.905337][T11125] EXT4-fs error (device loop1): ext4_quota_enable:7126: comm syz.1.2833: inode #2304: comm syz.1.2833: iget: illegal inode # [ 189.932217][T11125] EXT4-fs (loop1): Remounting filesystem read-only [ 189.938872][T11125] EXT4-fs warning (device loop1): ext4_enable_quotas:7170: Failed to enable quota tracking (type=2, err=-117, ino=2304). Please run e2fsck to fix. [ 190.057611][T11133] FAULT_INJECTION: forcing a failure. [ 190.057611][T11133] name failslab, interval 1, probability 0, space 0, times 0 [ 190.071980][T11133] CPU: 1 UID: 0 PID: 11133 Comm: syz.2.2836 Not tainted 6.15.0-rc7-syzkaller-00014-gd608703fcdd9 #0 PREEMPT(voluntary) [ 190.072043][T11133] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 190.072107][T11133] Call Trace: [ 190.072176][T11133] [ 190.072245][T11133] __dump_stack+0x1d/0x30 [ 190.072273][T11133] dump_stack_lvl+0xe8/0x140 [ 190.072300][T11133] dump_stack+0x15/0x1b [ 190.072483][T11133] should_fail_ex+0x265/0x280 [ 190.072522][T11133] should_failslab+0x8c/0xb0 [ 190.072568][T11133] kmem_cache_alloc_node_noprof+0x57/0x320 [ 190.072646][T11133] ? __alloc_skb+0x101/0x320 [ 190.072693][T11133] __alloc_skb+0x101/0x320 [ 190.072813][T11133] ? audit_log_start+0x365/0x6c0 [ 190.072857][T11133] audit_log_start+0x380/0x6c0 [ 190.072949][T11133] audit_seccomp+0x48/0x100 [ 190.072984][T11133] ? __seccomp_filter+0x68c/0x10d0 [ 190.073015][T11133] __seccomp_filter+0x69d/0x10d0 [ 190.073045][T11133] ? newary+0x603/0x620 [ 190.073096][T11133] ? up_write+0x18/0x60 [ 190.073119][T11133] ? ipcget+0x4a9/0x4f0 [ 190.073179][T11133] __secure_computing+0x82/0x150 [ 190.073209][T11133] syscall_trace_enter+0xcf/0x1e0 [ 190.073310][T11133] do_syscall_64+0xaa/0x1a0 [ 190.073391][T11133] ? clear_bhb_loop+0x40/0x90 [ 190.073421][T11133] ? clear_bhb_loop+0x40/0x90 [ 190.073447][T11133] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 190.073514][T11133] RIP: 0033:0x7f4d9d07d37c [ 190.073536][T11133] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 190.073562][T11133] RSP: 002b:00007f4d9b6e7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 190.073584][T11133] RAX: ffffffffffffffda RBX: 00007f4d9d2a5fa0 RCX: 00007f4d9d07d37c [ 190.073599][T11133] RDX: 000000000000000f RSI: 00007f4d9b6e70a0 RDI: 000000000000000b [ 190.073613][T11133] RBP: 00007f4d9b6e7090 R08: 0000000000000000 R09: 0000000000000000 [ 190.073648][T11133] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 190.073665][T11133] R13: 0000000000000000 R14: 00007f4d9d2a5fa0 R15: 00007ffe335bafc8 [ 190.073686][T11133] [ 190.179580][T11125] EXT4-fs (loop1): mount failed [ 190.376597][T11137] FAULT_INJECTION: forcing a failure. [ 190.376597][T11137] name failslab, interval 1, probability 0, space 0, times 0 [ 190.389341][T11137] CPU: 0 UID: 0 PID: 11137 Comm: syz.2.2838 Not tainted 6.15.0-rc7-syzkaller-00014-gd608703fcdd9 #0 PREEMPT(voluntary) [ 190.389387][T11137] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 190.389406][T11137] Call Trace: [ 190.389414][T11137] [ 190.389423][T11137] __dump_stack+0x1d/0x30 [ 190.389450][T11137] dump_stack_lvl+0xe8/0x140 [ 190.389475][T11137] dump_stack+0x15/0x1b [ 190.389508][T11137] should_fail_ex+0x265/0x280 [ 190.389544][T11137] should_failslab+0x8c/0xb0 [ 190.389655][T11137] kmem_cache_alloc_noprof+0x50/0x310 [ 190.389682][T11137] ? alloc_empty_file+0x76/0x200 [ 190.389721][T11137] alloc_empty_file+0x76/0x200 [ 190.389748][T11137] alloc_file_pseudo+0xc6/0x160 [ 190.389780][T11137] __shmem_file_setup+0x1b9/0x1f0 [ 190.389820][T11137] shmem_file_setup+0x3b/0x50 [ 190.389989][T11137] __se_sys_memfd_create+0x2c3/0x590 [ 190.390023][T11137] __x64_sys_memfd_create+0x31/0x40 [ 190.390049][T11137] x64_sys_call+0x122f/0x2fb0 [ 190.390082][T11137] do_syscall_64+0xd0/0x1a0 [ 190.390114][T11137] ? clear_bhb_loop+0x40/0x90 [ 190.390209][T11137] ? clear_bhb_loop+0x40/0x90 [ 190.390240][T11137] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 190.390293][T11137] RIP: 0033:0x7f4d9d07e969 [ 190.390360][T11137] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 190.390387][T11137] RSP: 002b:00007f4d9b6e6e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 190.390412][T11137] RAX: ffffffffffffffda RBX: 000000000000042f RCX: 00007f4d9d07e969 [ 190.390430][T11137] RDX: 00007f4d9b6e6ef0 RSI: 0000000000000000 RDI: 00007f4d9d101444 [ 190.390448][T11137] RBP: 0000200000000940 R08: 00007f4d9b6e6bb7 R09: 00007f4d9b6e6e40 [ 190.390464][T11137] R10: 000000000000000a R11: 0000000000000202 R12: 00002000000001c0 [ 190.390479][T11137] R13: 00007f4d9b6e6ef0 R14: 00007f4d9b6e6eb0 R15: 0000200000000200 [ 190.390523][T11137] [ 190.458148][T11140] netlink: 140 bytes leftover after parsing attributes in process `syz.0.2837'. [ 190.642312][T11142] loop1: detected capacity change from 0 to 512 [ 190.652890][T11142] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 190.663169][T11142] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 190.685770][T11142] EXT4-fs (loop1): warning: checktime reached, running e2fsck is recommended [ 190.696350][T11142] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 190.713336][T11142] System zones: 0-2, 18-18, 34-34 [ 190.726527][T11142] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1132: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 190.751453][T11142] EXT4-fs (loop1): 1 truncate cleaned up [ 190.760611][T11149] loop2: detected capacity change from 0 to 512 [ 190.768714][T11149] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 190.778476][T11149] EXT4-fs (loop2): orphan cleanup on readonly fs [ 190.817094][T11149] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.2840: bg 0: block 248: padding at end of block bitmap is not set [ 190.840038][T11149] EXT4-fs error (device loop2): ext4_acquire_dquot:6935: comm syz.2.2840: Failed to acquire dquot type 1 [ 190.849197][T11154] loop1: detected capacity change from 0 to 512 [ 190.866841][T11149] EXT4-fs (loop2): 1 truncate cleaned up [ 191.077358][T11154] EXT4-fs warning (device loop1): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 191.149311][T11154] EXT4-fs (loop1): mount failed [ 191.171262][T11169] FAULT_INJECTION: forcing a failure. [ 191.171262][T11169] name failslab, interval 1, probability 0, space 0, times 0 [ 191.183987][T11169] CPU: 0 UID: 0 PID: 11169 Comm: syz.4.2846 Not tainted 6.15.0-rc7-syzkaller-00014-gd608703fcdd9 #0 PREEMPT(voluntary) [ 191.184026][T11169] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 191.184043][T11169] Call Trace: [ 191.184122][T11169] [ 191.184133][T11169] __dump_stack+0x1d/0x30 [ 191.184161][T11169] dump_stack_lvl+0xe8/0x140 [ 191.184194][T11169] dump_stack+0x15/0x1b [ 191.184217][T11169] should_fail_ex+0x265/0x280 [ 191.184258][T11169] should_failslab+0x8c/0xb0 [ 191.184322][T11169] kmem_cache_alloc_noprof+0x50/0x310 [ 191.184350][T11169] ? getname_flags+0x80/0x3b0 [ 191.184386][T11169] getname_flags+0x80/0x3b0 [ 191.184460][T11169] user_path_create+0x27/0x130 [ 191.184493][T11169] bpf_obj_pin_user+0xe0/0x230 [ 191.184531][T11169] bpf_obj_pin+0xac/0xd0 [ 191.184654][T11169] __sys_bpf+0x6a7/0x790 [ 191.184705][T11169] __x64_sys_bpf+0x41/0x50 [ 191.184804][T11169] x64_sys_call+0x2478/0x2fb0 [ 191.184834][T11169] do_syscall_64+0xd0/0x1a0 [ 191.184944][T11169] ? clear_bhb_loop+0x40/0x90 [ 191.184984][T11169] ? clear_bhb_loop+0x40/0x90 [ 191.185014][T11169] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.185066][T11169] RIP: 0033:0x7f98e7eee969 [ 191.185082][T11169] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 191.185104][T11169] RSP: 002b:00007f98e6557038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 191.185130][T11169] RAX: ffffffffffffffda RBX: 00007f98e8115fa0 RCX: 00007f98e7eee969 [ 191.185219][T11169] RDX: 0000000000000018 RSI: 0000200000000540 RDI: 0000000000000006 [ 191.185237][T11169] RBP: 00007f98e6557090 R08: 0000000000000000 R09: 0000000000000000 [ 191.185253][T11169] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 191.185268][T11169] R13: 0000000000000000 R14: 00007f98e8115fa0 R15: 00007ffea1e1ad48 [ 191.185294][T11169] [ 191.397507][T11094] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 191.459669][T11177] loop4: detected capacity change from 0 to 512 [ 191.479267][T11177] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 191.488436][T11177] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 191.497560][T11177] EXT4-fs (loop4): blocks per group (64) and clusters per group (32768) inconsistent [ 191.551643][T11177] netlink: 181696 bytes leftover after parsing attributes in process `syz.4.2849'. [ 191.561285][T11177] netlink: zone id is out of range [ 191.566555][T11177] netlink: zone id is out of range [ 191.571882][T11177] netlink: zone id is out of range [ 191.577032][T11177] netlink: zone id is out of range [ 191.582310][T11177] netlink: zone id is out of range [ 191.587458][T11177] netlink: zone id is out of range [ 191.592917][T11177] netlink: zone id is out of range [ 191.598078][T11177] netlink: zone id is out of range [ 191.603370][T11177] netlink: zone id is out of range [ 191.608562][T11177] netlink: zone id is out of range [ 191.636178][T11193] loop0: detected capacity change from 0 to 512 [ 191.663541][T11193] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 191.674182][T11193] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 191.714218][T11193] EXT4-fs (loop0): warning: checktime reached, running e2fsck is recommended [ 191.714222][T11197] loop4: detected capacity change from 0 to 512 [ 191.729984][T11197] EXT4-fs: Ignoring removed mblk_io_submit option [ 191.736695][T11197] EXT4-fs: Ignoring removed i_version option [ 191.743393][T11197] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 191.753997][T11193] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 191.762430][T11193] System zones: 0-2, 18-18, 34-34 [ 191.768624][T11193] EXT4-fs warning (device loop0): ext4_update_dynamic_rev:1132: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 191.784807][T11197] EXT4-fs (loop4): 1 truncate cleaned up [ 191.791194][T11197] EXT4-fs mount: 44 callbacks suppressed [ 191.791208][T11197] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 191.811048][T11193] EXT4-fs (loop0): 1 truncate cleaned up [ 191.817222][T11193] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 191.834177][T11197] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2854'. [ 191.860731][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 191.882716][T10605] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 191.956526][T11205] loop0: detected capacity change from 0 to 512 [ 191.990817][T11205] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.2855: bg 0: block 248: padding at end of block bitmap is not set [ 192.032381][T11205] EXT4-fs error (device loop0): ext4_acquire_dquot:6935: comm syz.0.2855: Failed to acquire dquot type 1 [ 192.045845][T11205] EXT4-fs (loop0): 1 truncate cleaned up [ 192.052243][T11204] sch_fq: defrate 2048 ignored. [ 192.057656][T11205] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 192.070735][T11205] ext4 filesystem being mounted at /582/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 192.085985][T11204] siw: device registration error -23 [ 192.098402][T11204] netlink: 'syz.4.2856': attribute type 4 has an invalid length. [ 192.110045][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.258619][T11214] loop0: detected capacity change from 0 to 1024 [ 192.267254][T11214] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 192.290040][T11214] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 192.316673][T11214] EXT4-fs (loop0): orphan cleanup on readonly fs [ 192.336818][T11214] EXT4-fs error (device loop0): ext4_free_blocks:6587: comm syz.0.2859: Freeing blocks not in datazone - block = 0, count = 4096 [ 192.392274][T11214] EXT4-fs (loop0): 1 orphan inode deleted [ 192.409209][T11214] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 192.472743][T11222] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2861'. [ 192.504240][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.544348][T11237] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2862'. [ 192.588178][T11239] loop0: detected capacity change from 0 to 128 [ 192.694287][T11241] loop1: detected capacity change from 0 to 1024 [ 192.748042][T11241] EXT4-fs: Ignoring removed orlov option [ 192.754096][T11241] EXT4-fs: Ignoring removed nomblk_io_submit option [ 192.813964][T11241] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 192.956668][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.203746][T11246] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2865'. [ 193.238758][T11250] netlink: 34 bytes leftover after parsing attributes in process `syz.1.2866'. [ 193.293151][T11252] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2866'. [ 193.731612][T11236] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 193.743953][T11236] EXT4-fs (loop3): This should not happen!! Data will be lost [ 193.743953][T11236] [ 193.753647][T11236] EXT4-fs (loop3): Total free blocks count 0 [ 193.759715][T11236] EXT4-fs (loop3): Free/Dirty block details [ 193.765761][T11236] EXT4-fs (loop3): free_blocks=2415919104 [ 193.771686][T11236] EXT4-fs (loop3): dirty_blocks=5232 [ 193.777075][T11236] EXT4-fs (loop3): Block reservation details [ 193.783208][T11236] EXT4-fs (loop3): i_reserved_data_blocks=327 [ 193.866392][T11258] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2870'. [ 193.887599][T11235] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 18 with max blocks 2048 with error 28 [ 193.900551][T11235] EXT4-fs (loop3): This should not happen!! Data will be lost [ 193.900551][T11235] [ 193.953174][T11258] loop0: detected capacity change from 0 to 512 [ 193.961099][T11258] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 193.980872][T11258] EXT4-fs (loop0): 1 truncate cleaned up [ 193.987124][T11258] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 194.000988][T11258] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.050879][ T29] kauditd_printk_skb: 181 callbacks suppressed [ 194.050899][ T29] audit: type=1400 audit(1747919401.754:242695): avc: denied { connect } for pid=11257 comm="syz.0.2870" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 194.122951][ T29] audit: type=1326 audit(1747919401.807:242696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11266 comm="syz.1.2871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8397a1e969 code=0x7ffc0000 [ 194.148916][ T29] audit: type=1326 audit(1747919401.807:242697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11266 comm="syz.1.2871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f8397a1e969 code=0x7ffc0000 [ 194.175139][ T29] audit: type=1326 audit(1747919401.807:242698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11266 comm="syz.1.2871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8397a1e969 code=0x7ffc0000 [ 194.200524][ T29] audit: type=1326 audit(1747919401.807:242699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11266 comm="syz.1.2871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8397a1e969 code=0x7ffc0000 [ 194.225163][ T29] audit: type=1326 audit(1747919401.807:242700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11266 comm="syz.1.2871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8397a1e969 code=0x7ffc0000 [ 194.250515][ T29] audit: type=1326 audit(1747919401.807:242701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11266 comm="syz.1.2871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f8397a1e969 code=0x7ffc0000 [ 194.275969][ T29] audit: type=1326 audit(1747919401.807:242702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11266 comm="syz.1.2871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8397a1e969 code=0x7ffc0000 [ 194.300834][ T29] audit: type=1326 audit(1747919401.807:242703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11266 comm="syz.1.2871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f8397a1e969 code=0x7ffc0000 [ 194.327287][ T29] audit: type=1326 audit(1747919401.807:242704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11266 comm="syz.1.2871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8397a1e969 code=0x7ffc0000 [ 194.639455][T11284] FAULT_INJECTION: forcing a failure. [ 194.639455][T11284] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 194.653602][T11284] CPU: 1 UID: 0 PID: 11284 Comm: syz.3.2877 Not tainted 6.15.0-rc7-syzkaller-00014-gd608703fcdd9 #0 PREEMPT(voluntary) [ 194.653632][T11284] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 194.653645][T11284] Call Trace: [ 194.653652][T11284] [ 194.653661][T11284] __dump_stack+0x1d/0x30 [ 194.653765][T11284] dump_stack_lvl+0xe8/0x140 [ 194.653787][T11284] dump_stack+0x15/0x1b [ 194.653803][T11284] should_fail_ex+0x265/0x280 [ 194.653842][T11284] should_fail+0xb/0x20 [ 194.653893][T11284] should_fail_usercopy+0x1a/0x20 [ 194.653914][T11284] _copy_from_user+0x1c/0xb0 [ 194.653937][T11284] ___sys_sendmsg+0xc1/0x1d0 [ 194.653980][T11284] __x64_sys_sendmsg+0xd4/0x160 [ 194.654017][T11284] x64_sys_call+0x2999/0x2fb0 [ 194.654066][T11284] do_syscall_64+0xd0/0x1a0 [ 194.654098][T11284] ? clear_bhb_loop+0x40/0x90 [ 194.654125][T11284] ? clear_bhb_loop+0x40/0x90 [ 194.654224][T11284] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 194.654250][T11284] RIP: 0033:0x7f92fd64e969 [ 194.654338][T11284] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 194.654356][T11284] RSP: 002b:00007f92fbcb7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 194.654396][T11284] RAX: ffffffffffffffda RBX: 00007f92fd875fa0 RCX: 00007f92fd64e969 [ 194.654408][T11284] RDX: 0000000000000000 RSI: 0000200000000340 RDI: 0000000000000003 [ 194.654489][T11284] RBP: 00007f92fbcb7090 R08: 0000000000000000 R09: 0000000000000000 [ 194.654500][T11284] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 194.654512][T11284] R13: 0000000000000000 R14: 00007f92fd875fa0 R15: 00007fff70805cf8 [ 194.654532][T11284] [ 195.016710][T11293] loop0: detected capacity change from 0 to 512 [ 195.039060][T11293] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 195.048379][T11293] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 195.065669][T11293] EXT4-fs (loop0): warning: checktime reached, running e2fsck is recommended [ 195.106898][T11301] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2882'. [ 195.133078][T11293] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 195.164614][T11293] System zones: 0-2, 18-18, 34-34 [ 195.197722][T11304] loop3: detected capacity change from 0 to 4096 [ 195.204618][T11304] EXT4-fs: Ignoring removed orlov option [ 195.210400][T11304] EXT4-fs: Ignoring removed nomblk_io_submit option [ 195.228613][T11293] EXT4-fs warning (device loop0): ext4_update_dynamic_rev:1132: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 195.260885][T11293] EXT4-fs (loop0): 1 truncate cleaned up [ 195.261060][T11304] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 195.270339][T11293] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 195.332397][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.378050][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.418432][T11312] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 195.428102][T11312] FAULT_INJECTION: forcing a failure. [ 195.428102][T11312] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 195.443042][T11312] CPU: 1 UID: 0 PID: 11312 Comm: syz.3.2887 Not tainted 6.15.0-rc7-syzkaller-00014-gd608703fcdd9 #0 PREEMPT(voluntary) [ 195.443097][T11312] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 195.443120][T11312] Call Trace: [ 195.443130][T11312] [ 195.443141][T11312] __dump_stack+0x1d/0x30 [ 195.443170][T11312] dump_stack_lvl+0xe8/0x140 [ 195.443256][T11312] dump_stack+0x15/0x1b [ 195.443275][T11312] should_fail_ex+0x265/0x280 [ 195.443321][T11312] should_fail+0xb/0x20 [ 195.443373][T11312] should_fail_usercopy+0x1a/0x20 [ 195.443398][T11312] _copy_to_user+0x20/0xa0 [ 195.443430][T11312] simple_read_from_buffer+0xb5/0x130 [ 195.443504][T11312] proc_fail_nth_read+0x100/0x140 [ 195.443536][T11312] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 195.443570][T11312] vfs_read+0x19d/0x6f0 [ 195.443615][T11312] ? __rcu_read_unlock+0x4f/0x70 [ 195.443640][T11312] ? __fget_files+0x184/0x1c0 [ 195.443744][T11312] ksys_read+0xda/0x1a0 [ 195.443819][T11312] __x64_sys_read+0x40/0x50 [ 195.443848][T11312] x64_sys_call+0x2d77/0x2fb0 [ 195.443873][T11312] do_syscall_64+0xd0/0x1a0 [ 195.443902][T11312] ? clear_bhb_loop+0x40/0x90 [ 195.443988][T11312] ? clear_bhb_loop+0x40/0x90 [ 195.444078][T11312] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.444137][T11312] RIP: 0033:0x7f92fd64d37c [ 195.444156][T11312] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 195.444179][T11312] RSP: 002b:00007f92fbcb7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 195.444255][T11312] RAX: ffffffffffffffda RBX: 00007f92fd875fa0 RCX: 00007f92fd64d37c [ 195.444273][T11312] RDX: 000000000000000f RSI: 00007f92fbcb70a0 RDI: 0000000000000007 [ 195.444291][T11312] RBP: 00007f92fbcb7090 R08: 0000000000000000 R09: 0000000000000000 [ 195.444308][T11312] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 195.444325][T11312] R13: 0000000000000000 R14: 00007f92fd875fa0 R15: 00007fff70805cf8 [ 195.444349][T11312] [ 195.792995][T11321] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2888'. [ 195.802785][T11321] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2888'. [ 195.820447][T11323] netlink: 'syz.0.2889': attribute type 33 has an invalid length. [ 195.828506][T11323] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2889'. [ 195.839077][T11320] sch_tbf: burst 0 is lower than device lo mtu (11337746) ! [ 195.877116][T11323] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2889'. [ 195.956331][T11335] FAULT_INJECTION: forcing a failure. [ 195.956331][T11335] name failslab, interval 1, probability 0, space 0, times 0 [ 195.970005][T11335] CPU: 0 UID: 0 PID: 11335 Comm: syz.1.2892 Not tainted 6.15.0-rc7-syzkaller-00014-gd608703fcdd9 #0 PREEMPT(voluntary) [ 195.970047][T11335] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 195.970244][T11335] Call Trace: [ 195.970256][T11335] [ 195.970269][T11335] __dump_stack+0x1d/0x30 [ 195.970421][T11335] dump_stack_lvl+0xe8/0x140 [ 195.970460][T11335] dump_stack+0x15/0x1b [ 195.970480][T11335] should_fail_ex+0x265/0x280 [ 195.970531][T11335] should_failslab+0x8c/0xb0 [ 195.970600][T11335] kmem_cache_alloc_node_noprof+0x57/0x320 [ 195.970633][T11335] ? __alloc_skb+0x101/0x320 [ 195.970719][T11335] __alloc_skb+0x101/0x320 [ 195.970764][T11335] netlink_dump+0x148/0x7f0 [ 195.970810][T11335] ? mod_objcg_state+0x40e/0x530 [ 195.970854][T11335] __netlink_dump_start+0x43e/0x520 [ 195.970918][T11335] ? __pfx_fib_nl_dumprule+0x10/0x10 [ 195.970951][T11335] rtnetlink_rcv_msg+0x552/0x6d0 [ 195.970983][T11335] ? __pfx_fib_nl_dumprule+0x10/0x10 [ 195.971067][T11335] ? __pfx_fib_nl_dumprule+0x10/0x10 [ 195.971107][T11335] netlink_rcv_skb+0x123/0x220 [ 195.971189][T11335] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 195.971233][T11335] rtnetlink_rcv+0x1c/0x30 [ 195.971339][T11335] netlink_unicast+0x5a1/0x670 [ 195.971389][T11335] netlink_sendmsg+0x58b/0x6b0 [ 195.971433][T11335] ? __pfx_netlink_sendmsg+0x10/0x10 [ 195.971461][T11335] __sock_sendmsg+0x145/0x180 [ 195.971502][T11335] ____sys_sendmsg+0x31e/0x4e0 [ 195.971539][T11335] ___sys_sendmsg+0x17b/0x1d0 [ 195.971593][T11335] __x64_sys_sendmsg+0xd4/0x160 [ 195.971632][T11335] x64_sys_call+0x2999/0x2fb0 [ 195.971664][T11335] do_syscall_64+0xd0/0x1a0 [ 195.971772][T11335] ? clear_bhb_loop+0x40/0x90 [ 195.971860][T11335] ? clear_bhb_loop+0x40/0x90 [ 195.971889][T11335] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.971918][T11335] RIP: 0033:0x7f8397a1e969 [ 195.971942][T11335] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 195.971999][T11335] RSP: 002b:00007f8396087038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 195.972021][T11335] RAX: ffffffffffffffda RBX: 00007f8397c45fa0 RCX: 00007f8397a1e969 [ 195.972036][T11335] RDX: 0000000000000000 RSI: 00002000000016c0 RDI: 0000000000000003 [ 195.972050][T11335] RBP: 00007f8396087090 R08: 0000000000000000 R09: 0000000000000000 [ 195.972068][T11335] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 195.972086][T11335] R13: 0000000000000000 R14: 00007f8397c45fa0 R15: 00007ffe240a5918 [ 195.972153][T11335] [ 196.283717][T11337] loop1: detected capacity change from 0 to 128 [ 196.515941][T11342] loop3: detected capacity change from 0 to 256 [ 196.538000][T11342] FAT-fs (loop3): bogus number of FAT sectors [ 196.544251][T11342] FAT-fs (loop3): Can't find a valid FAT filesystem [ 196.714713][T11346] loop3: detected capacity change from 0 to 1024 [ 196.841761][T11346] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 196.919502][T11346] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 49 with max blocks 51 with error 28 [ 196.933157][T11346] EXT4-fs (loop3): This should not happen!! Data will be lost [ 196.933157][T11346] [ 196.943791][T11346] EXT4-fs (loop3): Total free blocks count 0 [ 196.949919][T11346] EXT4-fs (loop3): Free/Dirty block details [ 196.956856][T11346] EXT4-fs (loop3): free_blocks=0 [ 196.962167][T11346] EXT4-fs (loop3): dirty_blocks=0 [ 196.968087][T11346] EXT4-fs (loop3): Block reservation details [ 196.975758][T11346] EXT4-fs (loop3): i_reserved_data_blocks=0 [ 197.095518][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.287553][T11353] loop3: detected capacity change from 0 to 512 [ 197.305152][T11353] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 197.316139][T11353] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 197.371768][T11353] EXT4-fs (loop3): warning: checktime reached, running e2fsck is recommended [ 197.400698][T11353] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 197.419346][T11353] System zones: 0-2, 18-18, 34-34 [ 197.429131][T11353] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:1132: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 197.454758][T11353] EXT4-fs (loop3): 1 truncate cleaned up [ 197.474568][T11353] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 197.517076][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.527569][ T3388] usb usb8-port1: attempt power cycle [ 197.577640][ T58] bio_check_eod: 11480 callbacks suppressed [ 197.577674][ T58] kworker/u8:5: attempt to access beyond end of device [ 197.577674][ T58] loop1: rw=1, sector=153, nr_sectors = 8 limit=128 [ 197.619727][ T58] kworker/u8:5: attempt to access beyond end of device [ 197.619727][ T58] loop1: rw=1, sector=169, nr_sectors = 8 limit=128 [ 197.657592][ T58] kworker/u8:5: attempt to access beyond end of device [ 197.657592][ T58] loop1: rw=1, sector=185, nr_sectors = 8 limit=128 [ 197.682169][ T58] kworker/u8:5: attempt to access beyond end of device [ 197.682169][ T58] loop1: rw=1, sector=201, nr_sectors = 8 limit=128 [ 197.714297][ T58] kworker/u8:5: attempt to access beyond end of device [ 197.714297][ T58] loop1: rw=1, sector=217, nr_sectors = 8 limit=128 [ 197.747297][ T58] kworker/u8:5: attempt to access beyond end of device [ 197.747297][ T58] loop1: rw=1, sector=233, nr_sectors = 8 limit=128 [ 197.762499][ T58] kworker/u8:5: attempt to access beyond end of device [ 197.762499][ T58] loop1: rw=1, sector=249, nr_sectors = 8 limit=128 [ 197.776959][ T58] kworker/u8:5: attempt to access beyond end of device [ 197.776959][ T58] loop1: rw=1, sector=265, nr_sectors = 8 limit=128 [ 197.811559][ T58] kworker/u8:5: attempt to access beyond end of device [ 197.811559][ T58] loop1: rw=1, sector=281, nr_sectors = 8 limit=128 [ 197.826475][ T58] kworker/u8:5: attempt to access beyond end of device [ 197.826475][ T58] loop1: rw=1, sector=297, nr_sectors = 8 limit=128 [ 197.967599][T11371] FAULT_INJECTION: forcing a failure. [ 197.967599][T11371] name failslab, interval 1, probability 0, space 0, times 0 [ 197.981079][T11371] CPU: 1 UID: 0 PID: 11371 Comm: syz.3.2905 Not tainted 6.15.0-rc7-syzkaller-00014-gd608703fcdd9 #0 PREEMPT(voluntary) [ 197.981156][T11371] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 197.981173][T11371] Call Trace: [ 197.981181][T11371] [ 197.981198][T11371] __dump_stack+0x1d/0x30 [ 197.981352][T11371] dump_stack_lvl+0xe8/0x140 [ 197.981379][T11371] dump_stack+0x15/0x1b [ 197.981397][T11371] should_fail_ex+0x265/0x280 [ 197.981435][T11371] should_failslab+0x8c/0xb0 [ 197.981469][T11371] kmem_cache_alloc_node_noprof+0x57/0x320 [ 197.981517][T11371] ? __alloc_skb+0x101/0x320 [ 197.981564][T11371] __alloc_skb+0x101/0x320 [ 197.981650][T11371] netlink_alloc_large_skb+0xba/0xf0 [ 197.981692][T11371] netlink_sendmsg+0x3cf/0x6b0 [ 197.981791][T11371] ? __pfx_netlink_sendmsg+0x10/0x10 [ 197.981814][T11371] __sock_sendmsg+0x145/0x180 [ 197.981845][T11371] ____sys_sendmsg+0x31e/0x4e0 [ 197.981871][T11371] ___sys_sendmsg+0x17b/0x1d0 [ 197.981923][T11371] __x64_sys_sendmsg+0xd4/0x160 [ 197.981960][T11371] x64_sys_call+0x2999/0x2fb0 [ 197.981988][T11371] do_syscall_64+0xd0/0x1a0 [ 197.982088][T11371] ? clear_bhb_loop+0x40/0x90 [ 197.982114][T11371] ? clear_bhb_loop+0x40/0x90 [ 197.982145][T11371] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 197.982168][T11371] RIP: 0033:0x7f92fd64e969 [ 197.982243][T11371] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 197.982263][T11371] RSP: 002b:00007f92fbcb7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 197.982287][T11371] RAX: ffffffffffffffda RBX: 00007f92fd875fa0 RCX: 00007f92fd64e969 [ 197.982300][T11371] RDX: 0000000000040000 RSI: 0000200000000100 RDI: 0000000000000003 [ 197.982314][T11371] RBP: 00007f92fbcb7090 R08: 0000000000000000 R09: 0000000000000000 [ 197.982331][T11371] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 197.982344][T11371] R13: 0000000000000000 R14: 00007f92fd875fa0 R15: 00007fff70805cf8 [ 197.982378][T11371] [ 198.197009][T11373] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2904'. [ 198.206498][T11373] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2904'. [ 198.254964][T11375] SELinux: failed to load policy [ 198.319840][ T2969] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 198.328145][ T2969] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 198.336368][ T2969] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 198.344882][ T2969] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 198.352553][ T2969] hid-generic 0000:0000:0000.0001: item fetching failed at offset 9/43 [ 198.362759][ T2969] hid-generic 0000:0000:0000.0001: probe with driver hid-generic failed with error -22 [ 198.654265][T11384] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(13) [ 198.662442][T11384] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 198.670403][T11384] vhci_hcd vhci_hcd.0: Device attached [ 198.678518][T11384] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(15) [ 198.685236][T11384] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 198.694228][T11384] vhci_hcd vhci_hcd.0: Device attached [ 198.695443][T11381] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2908'. [ 198.709758][T11384] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 198.722361][T11384] vhci_hcd vhci_hcd.0: pdev(2) rhport(3) sockfd(19) [ 198.729387][T11384] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 198.737675][T11384] vhci_hcd vhci_hcd.0: Device attached [ 198.745043][T11384] vhci_hcd vhci_hcd.0: pdev(2) rhport(4) sockfd(21) [ 198.752322][T11384] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 198.760250][T11391] loop1: detected capacity change from 0 to 512 [ 198.761747][T11384] vhci_hcd vhci_hcd.0: Device attached [ 198.768886][T11391] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 198.774283][T11384] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(23) [ 198.781996][T11391] EXT4-fs (loop1): invalid journal inode [ 198.787367][T11384] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 198.793252][T11391] EXT4-fs (loop1): can't get journal size [ 198.802717][T11384] vhci_hcd vhci_hcd.0: Device attached [ 198.816099][T11384] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 198.826279][T11391] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a056c119, mo2=0002] [ 198.826896][T11384] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 198.843959][T11391] System zones: 1-12, 13-13 [ 198.849946][T11391] EXT4-fs error (device loop1): ext4_iget_extra_inode:4693: inode #15: comm syz.1.2911: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 198.851897][T11400] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 198.868675][ T3466] vhci_hcd: vhci_device speed not set [ 198.869764][T11391] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.2911: couldn't read orphan inode 15 (err -117) [ 198.871923][T11384] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 198.879694][ T29] kauditd_printk_skb: 45 callbacks suppressed [ 198.879715][ T29] audit: type=1400 audit(1747919406.804:242750): avc: denied { ioctl } for pid=11399 comm="syz.4.2912" path="/dev/raw-gadget" dev="devtmpfs" ino=142 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 198.887559][T11400] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 198.946636][T11391] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 198.959679][ T3466] usb 5-1: new full-speed USB device number 2 using vhci_hcd [ 198.968145][ T2969] IPVS: starting estimator thread 0... [ 198.971520][T11384] vhci_hcd vhci_hcd.0: port 0 already used [ 198.993135][T11394] vhci_hcd: connection closed [ 198.993262][T11392] vhci_hcd: connection closed [ 198.993998][T11396] vhci_hcd: connection closed [ 198.998324][T11387] vhci_hcd: connection closed [ 199.004828][T11233] vhci_hcd: stop threads [ 199.009857][T11385] vhci_hcd: connection reset by peer [ 199.013222][T11233] vhci_hcd: release socket [ 199.013242][T11233] vhci_hcd: disconnect device [ 199.021979][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.023662][T11233] vhci_hcd: stop threads [ 199.047192][T11233] vhci_hcd: release socket [ 199.051984][T11233] vhci_hcd: disconnect device [ 199.060049][T11233] vhci_hcd: stop threads [ 199.064921][T11233] vhci_hcd: release socket [ 199.070278][T11233] vhci_hcd: disconnect device [ 199.075799][T11402] IPVS: using max 1920 ests per chain, 96000 per kthread [ 199.075875][T11233] vhci_hcd: stop threads [ 199.083613][T11408] netlink: 108 bytes leftover after parsing attributes in process `syz.1.2913'. [ 199.087701][T11233] vhci_hcd: release socket [ 199.087721][T11233] vhci_hcd: disconnect device [ 199.098440][T11408] netlink: 108 bytes leftover after parsing attributes in process `syz.1.2913'. [ 199.103206][T11233] vhci_hcd: stop threads [ 199.107108][T11408] netlink: 108 bytes leftover after parsing attributes in process `syz.1.2913'. [ 199.116300][T11233] vhci_hcd: release socket [ 199.116320][T11233] vhci_hcd: disconnect device [ 199.136521][T11407] syz.1.2913: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 199.136593][T11407] CPU: 0 UID: 0 PID: 11407 Comm: syz.1.2913 Not tainted 6.15.0-rc7-syzkaller-00014-gd608703fcdd9 #0 PREEMPT(voluntary) [ 199.136658][T11407] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 199.136689][T11407] Call Trace: [ 199.136697][T11407] [ 199.136706][T11407] __dump_stack+0x1d/0x30 [ 199.136733][T11407] dump_stack_lvl+0xe8/0x140 [ 199.136820][T11407] dump_stack+0x15/0x1b [ 199.136840][T11407] warn_alloc+0x12b/0x1a0 [ 199.136911][T11407] ? xa_load+0xb1/0xe0 [ 199.136947][T11407] __vmalloc_node_range_noprof+0x9c/0xdf0 [ 199.136991][T11407] ? tracing_record_taskinfo_sched_switch+0x71/0x260 [ 199.137029][T11407] ? probe_sched_wakeup+0x85/0xa0 [ 199.137058][T11407] ? __rcu_read_unlock+0x4f/0x70 [ 199.137095][T11407] ? avc_has_perm_noaudit+0x1b1/0x200 [ 199.137123][T11407] ? should_fail_ex+0x30/0x280 [ 199.137163][T11407] ? xskq_create+0x36/0xe0 [ 199.137205][T11407] ? should_failslab+0x8c/0xb0 [ 199.137246][T11407] vmalloc_user_noprof+0x59/0x70 [ 199.137348][T11407] ? xskq_create+0x80/0xe0 [ 199.137421][T11407] xskq_create+0x80/0xe0 [ 199.137463][T11407] xsk_init_queue+0x95/0xf0 [ 199.137503][T11407] xsk_setsockopt+0x35c/0x510 [ 199.137542][T11407] ? __pfx_xsk_setsockopt+0x10/0x10 [ 199.137651][T11407] __sys_setsockopt+0x181/0x200 [ 199.137690][T11407] ? fpregs_restore_userregs+0xbb/0x190 [ 199.137731][T11407] __x64_sys_setsockopt+0x64/0x80 [ 199.137759][T11407] x64_sys_call+0x2bd5/0x2fb0 [ 199.137864][T11407] do_syscall_64+0xd0/0x1a0 [ 199.137906][T11407] ? clear_bhb_loop+0x40/0x90 [ 199.137936][T11407] ? clear_bhb_loop+0x40/0x90 [ 199.138008][T11407] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 199.138077][T11407] RIP: 0033:0x7f8397a1e969 [ 199.138097][T11407] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 199.138128][T11407] RSP: 002b:00007f8396087038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 199.138153][T11407] RAX: ffffffffffffffda RBX: 00007f8397c45fa0 RCX: 00007f8397a1e969 [ 199.138172][T11407] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000007 [ 199.138190][T11407] RBP: 00007f8397aa0ab1 R08: 0000000000000004 R09: 0000000000000000 [ 199.138207][T11407] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 199.138225][T11407] R13: 0000000000000000 R14: 00007f8397c45fa0 R15: 00007ffe240a5918 [ 199.138253][T11407] [ 199.138276][T11407] Mem-Info: [ 199.407872][T11407] active_anon:7939 inactive_anon:46 isolated_anon:0 [ 199.407872][T11407] active_file:7880 inactive_file:15660 isolated_file:0 [ 199.407872][T11407] unevictable:0 dirty:421 writeback:0 [ 199.407872][T11407] slab_reclaimable:3162 slab_unreclaimable:74626 [ 199.407872][T11407] mapped:31106 shmem:170 pagetables:1164 [ 199.407872][T11407] sec_pagetables:0 bounce:0 [ 199.407872][T11407] kernel_misc_reclaimable:0 [ 199.407872][T11407] free:1802335 free_pcp:15058 free_cma:0 [ 199.459519][T11407] Node 0 active_anon:31756kB inactive_anon:184kB active_file:31520kB inactive_file:62640kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:124424kB dirty:1684kB writeback:0kB shmem:680kB writeback_tmp:0kB kernel_stack:3280kB pagetables:4656kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 199.490771][T11407] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 199.518479][T11407] lowmem_reserve[]: 0 2884 7863 7863 [ 199.523916][T11407] Node 0 DMA32 free:2949928kB boost:0kB min:4132kB low:7064kB high:9996kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2953560kB mlocked:0kB bounce:0kB free_pcp:3632kB local_pcp:100kB free_cma:0kB [ 199.542099][ T3388] usb usb8-port1: unable to enumerate USB device [ 199.556617][T11407] lowmem_reserve[]: 0 0 4978 4978 [ 199.556719][T11407] Node 0 Normal free:4243820kB boost:0kB min:7184kB low:12280kB high:17376kB reserved_highatomic:0KB active_anon:31640kB inactive_anon:184kB active_file:31520kB inactive_file:62640kB unevictable:0kB writepending:1684kB present:5242880kB managed:5098244kB mlocked:0kB bounce:0kB free_pcp:56880kB local_pcp:55704kB free_cma:0kB [ 199.556874][T11407] lowmem_reserve[]: 0 0 0 0 [ 199.556907][T11407] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 199.557173][T11407] Node 0 DMA32: 2*4kB (M) 2*8kB (M) 1*16kB (M) 4*32kB (M) 2*64kB (M) 2*128kB (M) 3*256kB (M) 3*512kB (M) 4*1024kB (M) 3*2048kB (M) 717*4096kB (M) = 2949928kB [ 199.635207][ T29] audit: type=1400 audit(1747919407.623:242751): avc: denied { unmount } for pid=3316 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 199.635909][T11407] Node 0 Normal: 1250*4kB (UME) 836*8kB (UME) 1037*16kB (UME) 644*32kB (UME) 346*64kB (UME) 142*128kB (UME) 77*256kB (UME) 38*512kB (UME) 11*1024kB (UME) 26*2048kB (UM) 989*4096kB (UM) = 4243832kB [ 199.677993][T11407] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 199.687398][T11414] loop4: detected capacity change from 0 to 512 [ 199.688367][T11407] 23880 total pagecache pages [ 199.698949][T11414] EXT4-fs (loop4): #blocks per group too big: 24576 [ 199.701648][T11407] 125 pages in swap cache [ 199.712980][T11407] Free swap = 124272kB [ 199.718160][T11407] Total swap = 124996kB [ 199.722346][T11407] 2097051 pages RAM [ 199.726709][T11407] 0 pages HighMem/MovableOnly [ 199.732315][T11407] 80260 pages reserved [ 199.796282][ T29] audit: type=1400 audit(1747919407.791:242752): avc: denied { unlink } for pid=3316 comm="syz-executor" name="file0" dev="tmpfs" ino=3173 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 199.845689][T11422] serio: Serial port ptm0 [ 199.959755][T11441] FAULT_INJECTION: forcing a failure. [ 199.959755][T11441] name failslab, interval 1, probability 0, space 0, times 0 [ 199.973618][T11441] CPU: 0 UID: 0 PID: 11441 Comm: syz.0.2925 Not tainted 6.15.0-rc7-syzkaller-00014-gd608703fcdd9 #0 PREEMPT(voluntary) [ 199.973675][T11441] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 199.973689][T11441] Call Trace: [ 199.973696][T11441] [ 199.973705][T11441] __dump_stack+0x1d/0x30 [ 199.973730][T11441] dump_stack_lvl+0xe8/0x140 [ 199.973757][T11441] dump_stack+0x15/0x1b [ 199.973778][T11441] should_fail_ex+0x265/0x280 [ 199.973817][ T29] audit: type=1326 audit(1747919407.959:242753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11440 comm="syz.0.2925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfc638e969 code=0x7ffc0000 [ 199.973897][T11441] should_failslab+0x8c/0xb0 [ 199.973945][T11441] kmem_cache_alloc_noprof+0x50/0x310 [ 199.973975][T11441] ? audit_log_start+0x365/0x6c0 [ 199.974065][T11441] audit_log_start+0x365/0x6c0 [ 199.974136][T11441] audit_seccomp+0x48/0x100 [ 199.974175][T11441] ? __seccomp_filter+0x68c/0x10d0 [ 199.974284][T11441] __seccomp_filter+0x69d/0x10d0 [ 199.974318][T11441] ? bpf_trace_run2+0x124/0x1c0 [ 199.974352][T11441] ? __se_sys_kexec_load+0x13f/0x160 [ 199.974404][T11441] ? __se_sys_kexec_load+0x13f/0x160 [ 199.974460][T11441] __secure_computing+0x82/0x150 [ 199.974546][T11441] syscall_trace_enter+0xcf/0x1e0 [ 199.974592][T11441] do_syscall_64+0xaa/0x1a0 [ 199.974629][T11441] ? clear_bhb_loop+0x40/0x90 [ 199.974690][T11441] ? clear_bhb_loop+0x40/0x90 [ 199.974773][T11441] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 199.974804][T11441] RIP: 0033:0x7fdfc638d37c [ 199.974898][T11441] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 199.974930][T11441] RSP: 002b:00007fdfc49f7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 199.975000][T11441] RAX: ffffffffffffffda RBX: 00007fdfc65b5fa0 RCX: 00007fdfc638d37c [ 199.975020][T11441] RDX: 000000000000000f RSI: 00007fdfc49f70a0 RDI: 0000000000000005 [ 199.975068][T11441] RBP: 00007fdfc49f7090 R08: 0000000000000000 R09: 0000000000000000 [ 199.975087][T11441] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 199.975106][T11441] R13: 0000000000000000 R14: 00007fdfc65b5fa0 R15: 00007ffd793e01a8 [ 199.975136][T11441] [ 199.975149][T11441] audit: audit_lost=27022 audit_rate_limit=0 audit_backlog_limit=64 [ 199.987102][ T29] audit: type=1326 audit(1747919407.959:242754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11440 comm="syz.0.2925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdfc638e969 code=0x7ffc0000 [ 199.997540][T11441] audit: out of memory in audit_log_start [ 200.091090][T11445] loop1: detected capacity change from 0 to 512 [ 200.095590][ T29] audit: type=1326 audit(1747919407.959:242755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11440 comm="syz.0.2925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfc638e969 code=0x7ffc0000 [ 200.095633][ T29] audit: type=1326 audit(1747919407.959:242756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11440 comm="syz.0.2925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfc638e969 code=0x7ffc0000 [ 200.107047][T11445] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 200.107073][T11445] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 200.107736][T11445] EXT4-fs (loop1): warning: checktime reached, running e2fsck is recommended [ 200.108277][T11445] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 200.108318][T11445] System zones: 0-2, 18-18, 34-34 [ 200.113632][ T29] audit: type=1326 audit(1747919407.959:242757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11440 comm="syz.0.2925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdfc638e969 code=0x7ffc0000 [ 200.119779][T11445] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1132: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 200.411778][T11445] EXT4-fs (loop1): 1 truncate cleaned up [ 200.412290][T11445] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 200.467357][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 200.518101][T11455] FAULT_INJECTION: forcing a failure. [ 200.518101][T11455] name failslab, interval 1, probability 0, space 0, times 0 [ 200.534611][T11455] CPU: 1 UID: 0 PID: 11455 Comm: syz.0.2930 Not tainted 6.15.0-rc7-syzkaller-00014-gd608703fcdd9 #0 PREEMPT(voluntary) [ 200.534693][T11455] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 200.534713][T11455] Call Trace: [ 200.534723][T11455] [ 200.534735][T11455] __dump_stack+0x1d/0x30 [ 200.534767][T11455] dump_stack_lvl+0xe8/0x140 [ 200.534872][T11455] dump_stack+0x15/0x1b [ 200.534899][T11455] should_fail_ex+0x265/0x280 [ 200.534953][T11455] should_failslab+0x8c/0xb0 [ 200.535000][T11455] kmem_cache_alloc_noprof+0x50/0x310 [ 200.535026][T11455] ? prepare_creds+0x37/0x4c0 [ 200.535100][T11455] prepare_creds+0x37/0x4c0 [ 200.535134][T11455] copy_creds+0x8f/0x3f0 [ 200.535162][T11455] copy_process+0x658/0x1f90 [ 200.535239][T11455] ? kstrtouint+0x76/0xc0 [ 200.535315][T11455] ? __rcu_read_unlock+0x4f/0x70 [ 200.535353][T11455] kernel_clone+0x16c/0x5b0 [ 200.535396][T11455] ? vfs_write+0x75e/0x8d0 [ 200.535438][T11455] __x64_sys_clone+0xe6/0x120 [ 200.535545][T11455] x64_sys_call+0x2c59/0x2fb0 [ 200.535574][T11455] do_syscall_64+0xd0/0x1a0 [ 200.535667][T11455] ? clear_bhb_loop+0x40/0x90 [ 200.535702][T11455] ? clear_bhb_loop+0x40/0x90 [ 200.535735][T11455] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 200.535815][T11455] RIP: 0033:0x7fdfc638e969 [ 200.535835][T11455] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 200.535864][T11455] RSP: 002b:00007fdfc49f6fe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 200.535893][T11455] RAX: ffffffffffffffda RBX: 00007fdfc65b5fa0 RCX: 00007fdfc638e969 [ 200.535913][T11455] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000002000000 [ 200.535932][T11455] RBP: 00007fdfc49f7090 R08: 0000000000000000 R09: 0000000000000000 [ 200.536006][T11455] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 200.536025][T11455] R13: 0000000000000000 R14: 00007fdfc65b5fa0 R15: 00007ffd793e01a8 [ 200.536055][T11455] [ 200.783396][T11460] loop4: detected capacity change from 0 to 512 [ 200.800041][T11461] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 200.806742][T11461] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 200.814554][T11461] vhci_hcd vhci_hcd.0: Device attached [ 200.825686][T11460] EXT4-fs: Ignoring removed nomblk_io_submit option [ 200.843483][T11464] vhci_hcd: connection closed [ 200.843960][T11460] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 200.862848][T11235] vhci_hcd: stop threads [ 200.870317][T11235] vhci_hcd: release socket [ 200.878116][T11235] vhci_hcd: disconnect device [ 200.914038][T11460] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 200.956921][T11470] __nla_validate_parse: 4 callbacks suppressed [ 200.956945][T11470] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2932'. [ 200.978506][T11477] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2935'. [ 200.994150][T11477] loop3: detected capacity change from 0 to 512 [ 200.999673][T11460] EXT4-fs (loop4): 1 truncate cleaned up [ 201.006797][T11477] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 201.010634][T11460] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 201.068101][T11480] loop0: detected capacity change from 0 to 512 [ 201.074898][T11477] EXT4-fs (loop3): 1 truncate cleaned up [ 201.083211][T11477] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 201.164049][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.270434][T11484] netlink: 'syz.2.2937': attribute type 1 has an invalid length. [ 201.346861][T10605] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.379856][T11492] loop1: detected capacity change from 0 to 128 [ 201.388788][T11492] FAT-fs (loop1): bogus number of reserved sectors [ 201.390920][T11493] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2939'. [ 201.398911][T11492] FAT-fs (loop1): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 201.406254][T11493] IPVS: Unknown mcast interface: vcan0 [ 201.416747][T11492] FAT-fs (loop1): Can't find a valid FAT filesystem [ 201.486522][T11502] bond0: (slave bridge0): Releasing backup interface [ 202.246467][T11236] ================================================================== [ 202.254708][T11236] BUG: KCSAN: data-race in alloc_pid / copy_process [ 202.261437][T11236] [ 202.263952][T11236] read-write to 0xffffffff8685f2b0 of 4 bytes by task 3417 on cpu 0: [ 202.272426][T11236] alloc_pid+0x539/0x720 [ 202.276855][T11236] copy_process+0xe0e/0x1f90 [ 202.281749][T11236] kernel_clone+0x16c/0x5b0 [ 202.286828][T11236] user_mode_thread+0x7d/0xb0 [ 202.292171][T11236] call_usermodehelper_exec_work+0x7a/0x160 [ 202.298116][T11236] process_scheduled_works+0x4cb/0x9d0 [ 202.303807][T11236] worker_thread+0x582/0x770 [ 202.309140][T11236] kthread+0x486/0x510 [ 202.313332][T11236] ret_from_fork+0x4b/0x60 [ 202.318818][T11236] ret_from_fork_asm+0x1a/0x30 [ 202.324578][T11236] [ 202.327016][T11236] read to 0xffffffff8685f2b0 of 4 bytes by task 11236 on cpu 1: [ 202.335116][T11236] copy_process+0x1790/0x1f90 [ 202.340924][T11236] kernel_clone+0x16c/0x5b0 [ 202.345665][T11236] user_mode_thread+0x7d/0xb0 [ 202.350450][T11236] call_usermodehelper_exec_work+0x7a/0x160 [ 202.356518][T11236] process_scheduled_works+0x4cb/0x9d0 [ 202.362358][T11236] worker_thread+0x582/0x770 [ 202.367253][T11236] kthread+0x486/0x510 [ 202.371965][T11236] ret_from_fork+0x4b/0x60 [ 202.376482][T11236] ret_from_fork_asm+0x1a/0x30 [ 202.381752][T11236] [ 202.384798][T11236] value changed: 0x800000df -> 0x800000e0 [ 202.390881][T11236] [ 202.393253][T11236] Reported by Kernel Concurrency Sanitizer on: [ 202.400611][T11236] CPU: 1 UID: 0 PID: 11236 Comm: kworker/u8:18 Not tainted 6.15.0-rc7-syzkaller-00014-gd608703fcdd9 #0 PREEMPT(voluntary) [ 202.415673][T11236] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 202.426532][T11236] Workqueue: events_unbound call_usermodehelper_exec_work [ 202.434257][T11236] ================================================================== [ 202.455609][T11602] FAULT_INJECTION: forcing a failure. [ 202.455609][T11602] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 202.470287][T11602] CPU: 0 UID: 0 PID: 11602 Comm: syz.1.2947 Not tainted 6.15.0-rc7-syzkaller-00014-gd608703fcdd9 #0 PREEMPT(voluntary) [ 202.470319][T11602] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 202.470336][T11602] Call Trace: [ 202.470346][T11602] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 202.470357][T11602] __dump_stack+0x1d/0x30 [ 202.470486][T11602] dump_stack_lvl+0xe8/0x140 [ 202.470509][T11602] dump_stack+0x15/0x1b [ 202.470532][T11602] should_fail_ex+0x265/0x280 [ 202.470582][T11602] should_fail+0xb/0x20 [ 202.470704][T11602] should_fail_usercopy+0x1a/0x20 [ 202.470733][T11602] _copy_from_user+0x1c/0xb0 [ 202.470816][T11602] ___sys_sendmsg+0xc1/0x1d0 [ 202.470856][T11602] __x64_sys_sendmsg+0xd4/0x160 [ 202.470893][T11602] x64_sys_call+0x2999/0x2fb0 [ 202.470924][T11602] do_syscall_64+0xd0/0x1a0 [ 202.470953][T11602] ? clear_bhb_loop+0x40/0x90 [ 202.471011][T11602] ? clear_bhb_loop+0x40/0x90 [ 202.471041][T11602] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 202.471098][T11602] RIP: 0033:0x7f8397a1e969 [ 202.471115][T11602] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 202.471142][T11602] RSP: 002b:00007f8396087038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 202.471217][T11602] RAX: ffffffffffffffda RBX: 00007f8397c45fa0 RCX: 00007f8397a1e969 [ 202.471231][T11602] RDX: 0000000000000000 RSI: 0000200000000340 RDI: 0000000000000003 [ 202.471246][T11602] RBP: 00007f8396087090 R08: 0000000000000000 R09: 0000000000000000 [ 202.471264][T11602] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 202.471281][T11602] R13: 0000000000000000 R14: 00007f8397c45fa0 R15: 00007ffe240a5918 [ 202.471357][T11602] [ 202.483178][T11617] loop3: detected capacity change from 0 to 512 [ 202.824448][T11617] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 202.833823][T11617] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 202.868215][T11617] workqueue: Failed to create a rescuer kthread for wq "ext4-rsv-conversion": -EINTR [ 202.868256][T11617] EXT4-fs: failed to create workqueue [ 202.884357][T11617] EXT4-fs (loop3): mount failed [ 203.173130][T11236] bond1 (unregistering): (slave ip6erspan0): Releasing active interface [ 203.182489][T11236] ip6erspan0 (unregistering): left allmulticast mode [ 203.239962][T11236] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 203.249862][T11236] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 203.260645][T11236] bond0 (unregistering): Released all slaves [ 203.270010][T11236] bond1 (unregistering): Released all slaves [ 203.343488][T11236] hsr_slave_0: left promiscuous mode [ 203.350104][T11236] hsr_slave_1: left promiscuous mode [ 203.391690][ T3417] smc: removing ib device syz2 [ 203.645070][T11236] IPVS: stop unused estimator thread 0... [ 203.689653][T11236] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.742379][ T3466] usb 5-1: enqueue for inactive port 0 [ 203.747928][ T3466] usb 5-1: enqueue for inactive port 0 [ 203.765527][T11236] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.812636][T11236] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.823906][ T3466] vhci_hcd: vhci_device speed not set [ 203.869487][T11236] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.262554][T11236] bridge_slave_1: left allmulticast mode [ 204.268443][T11236] bridge_slave_1: left promiscuous mode [ 204.274129][T11236] bridge0: port 2(bridge_slave_1) entered disabled state [ 204.282907][T11236] bridge_slave_0: left allmulticast mode [ 204.289202][T11236] bridge_slave_0: left promiscuous mode [ 204.295819][T11236] bridge0: port 1(bridge_slave_0) entered disabled state [ 204.564771][T11236] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 204.575128][T11236] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 204.586317][T11236] bond0 (unregistering): Released all slaves [ 204.594906][T11236] bond0 (unregistering): Released all slaves [ 204.604589][T11236] bond1 (unregistering): Released all slaves [ 204.613685][T11236] bond0 (unregistering): Released all slaves [ 204.736480][T11236] hsr_slave_0: left promiscuous mode [ 204.742842][T11236] hsr_slave_1: left promiscuous mode [ 204.748675][T11236] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 204.757158][T11236] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 204.764838][T11236] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 204.772984][T11236] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 204.782472][T11236] hsr_slave_0: left promiscuous mode [ 204.788354][T11236] hsr_slave_1: left promiscuous mode [ 204.796246][T11236] hsr_slave_0: left promiscuous mode [ 204.802124][T11236] hsr_slave_1: left promiscuous mode [ 204.812074][T11236] veth1_macvtap: left promiscuous mode [ 204.817664][T11236] veth0_macvtap: left promiscuous mode [ 204.823338][T11236] veth1_vlan: left promiscuous mode [ 204.829325][T11236] veth0_vlan: left promiscuous mode [ 204.897309][T11236] team0 (unregistering): Port device team_slave_1 removed [ 204.906902][T11236] team0 (unregistering): Port device team_slave_0 removed [ 205.545932][T11236] IPVS: stop unused estimator thread 0... [ 205.552991][T11236] IPVS: stop unused estimator thread 0... [ 205.620941][T11236] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.677626][T11236] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.744551][T11236] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.791879][T11236] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.862338][T11236] bridge_slave_1: left allmulticast mode [ 205.868808][T11236] bridge_slave_1: left promiscuous mode [ 205.874682][T11236] bridge0: port 2(bridge_slave_1) entered disabled state [ 205.882459][T11236] bridge_slave_0: left allmulticast mode [ 205.889033][T11236] bridge_slave_0: left promiscuous mode [ 205.895037][T11236] bridge0: port 1(bridge_slave_0) entered disabled state [ 205.941646][T11236] dvmrp1 (unregistering): left allmulticast mode [ 205.982989][T11236]  (unregistering): (slave bond_slave_0): Releasing backup interface [ 205.993158][T11236]  (unregistering): (slave bond_slave_1): Releasing backup interface [ 206.005437][T11236]  (unregistering): Released all slaves [ 206.014144][T11236] bond0 (unregistering): Released all slaves [ 206.061924][T11236] hsr_slave_0: left promiscuous mode [ 206.067788][T11236] hsr_slave_1: left promiscuous mode [ 206.076256][T11236] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 206.085664][T11236] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 206.096670][T11236] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 206.104935][T11236] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 206.116743][T11236] veth0_macvtap: left promiscuous mode [ 206.122787][T11236] veth1_vlan: left promiscuous mode [ 206.132942][T11236] veth0_vlan: left promiscuous mode [ 206.214946][T11236] team0 (unregistering): Port device team_slave_1 removed [ 206.230053][T11236] team0 (unregistering): Port device team_slave_0 removed [ 206.240902][ T3391] usb usb6-port1: attempt power cycle [ 207.980970][ T3391] usb usb6-port1: unable to enumerate USB device