last executing test programs: 45.648827616s ago: executing program 4 (id=410): socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f4b906", 0x38, 0x3a, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @time_exceed={0x2, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "fd9063", 0x0, 0x33, 0x0, @loopback, @empty, [@dstopts={0x2b}]}}}}}}}, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) inotify_init() bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socketpair(0x23, 0x2, 0x0, &(0x7f0000000040)) 44.665333769s ago: executing program 4 (id=423): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r2}, &(0x7f0000000800), &(0x7f0000000840)=r3}, 0x17) r4 = shmget$private(0x0, 0x4000, 0x1000, &(0x7f0000ffc000/0x4000)=nil) shmctl$SHM_LOCK(r4, 0xb) shmat(r4, &(0x7f0000ffd000/0x1000)=nil, 0x4000) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) sendmsg$kcm(r0, &(0x7f0000000200)={&(0x7f00000000c0)=@in6={0xa, 0x4e23, 0x71a1, @remote, 0x5}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000540)="83b4b000a085f368816de4f4e5afa21890359519cef0fb4cc3e26c38d17e23ef1d66809c9c6cbf67139818626bfcd92f99741bc470c84886dfce647f7d5e715e127389685dae947e11d8e495edcf9ccbf2fb1678bf33d9640746dbda806689a903679d2cd9dc24deae9fbce5e15e031dc27de00825439e0717183790d3e43a6b0fdc838d220176653a99db6de36b8847e3cbbffc1b1d5479bd1c3236c85a22563f6bf0247a8a2cba8bf9c45bb5cf2ee014eb1d158e5451bcc5ad943c5f0b69954d5e7212d4e74273b89f566e115db97dddf5d08cf75a0ca7d90e8fec417440", 0xdf}, {&(0x7f0000000280)="7d9e6076973154c801fa45aa20badb98746fa0a6f8142c8503f41b0e52dd2e3886c429b5c7f038f69f59100d6c74c325579562604e2f0e519783b13be257380ec06fdce42852e46b1838056926da164566211f19a9d06fef90c8216fc19995c37024fe9b336306d4506abdb1285afbcfa5baa176c749f8ab6fcbc02dd989fdb8eb0ab74f62a59526d2b4d11ff041542a40cdca7b51fcce27fa", 0x99}, {&(0x7f0000000640)="8212b867d1fe33c2be04856b7f603919d6eb517bd430e9557f43d292fbbfaf0257b2e567b7e30487bd2a95722eaabf232105c1eab2e6e5ae88833357edab96d20f293300bf04d8b821a9e819187844d57dae7acd4241107b33c3c859395798cc19aec3fc2a396f12a4695171eb251b2933f4417c685f30e5d48fd80212aa94d19796a57586d45213aab61ba62f7901de6297d48a89c4c44bdc6c841fd17d766648", 0xa1}, {&(0x7f00000008c0)="f6816b61d07ff88211f9815c6b13b360f449a2e3859c04b26a6d5c48fe3891ecde2de857a02127d044f35b3e8d64c6f8cf24eb0ea2e552a171efb90291ab0facd0464095de48b6dda0547a634569bf92d2bafbb39b2687025fa433f40f0ea8d4c7dc3989e26495e689654199d01b87d42b41c77b499dd2eaebfdbfaa77e95edae331de7dd3901bb727e88f4cce4aadfbdf7716ddecc470714dae1148cc256d5f168cc2098c3623ef3dce0999f0d2a61409e54776c039c220a9eb5d7f408d8bfe5b644387e06e5da4c71cc22014fc7982f94556", 0xd3}, {&(0x7f0000000140)="8683a8b47f3e80735f32a1e2ea5d9f5f899c5dc77ac2b2ac82c28a1529a4d07063b0e28e856a73aff5479d5eac07bf940cdb8de3db30e325c5b95feddb7708aa8d886e526dc163c7ac30ff54c03915d96405acb0177d03d9d0065c7fd4e16bcca6", 0x61}], 0x5, &(0x7f0000000a00)=[{0xc8, 0x10b, 0x6, "ffdadcf2fa82fc267755d1664133a68fc4ec994d6152905dbb7e788002ae9e23068092a03b650e5acf25530ef6e6f6e35a525425afabd5023365def8f82addfadf50712355a9aee70473b9049585a8a6c7cb3c8b82e81568d5cb03990697c6798282eb43251ece028a204fad2ce10713055b5e1d34fd708baca83978123ca8067b45a54180e304346a9208602e45b9c2cab3015864761f1ad2f9633165fdcd13ee21d4b52e67d7a144425d1218869072e1d2"}, {0x58, 0x114, 0x1, "c662cd4b4eb8897b2927640319ed7d3788add9e0ca88ed453226aff4dea722eff3ceff80e1591c79ad8a7ca1b5a4441590303995c9eddc77b04082af13a84e56da"}, {0x78, 0x0, 0xb6f, "45f04626118144b61e83faad7071e845f56029c7e8ad94770fbc6faa47e2aefb706fde6cc9a49223c00a32fd0d97ad0c926112323cde3d9604812398190aea6267fa5ead1ce3397fe032f2e3120eab4093141f8a4ad51b86ee7da9dce0fd4c5bd2945ed5"}], 0x198}, 0x44054) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@newqdisc={0x24, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) 44.581000681s ago: executing program 4 (id=425): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000001000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008180000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x43, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00'}, 0x10) creat(&(0x7f00000000c0)='./file0\x00', 0x198) lstat(&(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)) 44.378350314s ago: executing program 4 (id=428): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r3 = syz_open_dev$usbfs(&(0x7f0000000080), 0x72, 0x101301) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000200)) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f0000000240)={0x5000000, 0x2, 0x5, {0xfffffbff, 0x3d}, 0x8, 0x5}) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000005c0)={'gretap0\x00', &(0x7f0000000580)={'syztnl2\x00', 0x0, 0x7fa7, 0x40, 0xa, 0x28, {{0x5, 0x4, 0x3, 0x1, 0x14, 0x66, 0x0, 0x40, 0x4, 0x0, @rand_addr=0x64010102, @multicast1}}}}) 43.953405229s ago: executing program 4 (id=430): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1b, 0x2000000000000019, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000640)={&(0x7f0000000a40)=ANY=[@ANYBLOB="9feb0100180000000000000010000000100f000005000000f26712f70f415d4e3ed274900934fd84d600000000807e1dd3c8da729256e8ed97bbd1cac662a06c13f07e4f02d3c5a2629c69e87e6a530189f6abdd42005bd8cbb3e86ef4de5c35619b9404445940f7e31712bc6d1cb7adf6c2b239d273d4da32b06a2db990bda23d38e889c53716917e547a29bf94d191161ab2075f508af63466af0ef7255a3bacd4f6c7a6522672b2428f760cae6854875d12da7c78cca7934f051a34377ee3e89b723d55796e4fd36a9fa8e76069ac0f9e50fadcb2a0122236fdc8c2"], &(0x7f00000003c0)=""/102, 0x2d, 0x66, 0x0, 0x6, 0x0, @void, @value}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRESDEC=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1de8, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r5}, 0x10) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000140)={{0x1, 0x1, 0x18, r1}, './file0/../file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r7, 0xc0189373, &(0x7f0000000180)={{0x1, 0x1, 0x18, r6, {0x6f76}}, './file1\x00'}) inotify_add_watch(r8, &(0x7f0000000380)='./file0/../file0/../file0/../file0\x00', 0x4000000) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2901090, 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') mount(0x0, &(0x7f0000000d40)='./file0/../file0/../file0\x00', &(0x7f00000002c0)='sysfs\x00', 0x0, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c00038008000140000000000800024000000000180003801400010076657468305f746f5f687372000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c0003801400010076657468305f746f5f687372000000001400010076657468315f766c616e"], 0xfc}}, 0x0) pivot_root(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f00000001c0)='./file0/../file0/../file0\x00') syz_open_dev$tty1(0xc, 0x4, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f00000009c0)='kfree\x00', r4, 0x0, 0xfffffffffffffffe}, 0x18) r10 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$EBT_SO_SET_ENTRIES(r10, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x800000000000, 0x0, 0x0, 0x751, 0x7, 0x200000000080], 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000200000000000000000000000000000000000000000000000000fcffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff00000000"]}, 0x108) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) 43.814728491s ago: executing program 4 (id=433): r0 = open(&(0x7f00000003c0)='./file0\x00', 0x2, 0x20) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r0, &(0x7f0000000680)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000580)={0xd0, 0x0, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x975}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x4}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x1}}]}, 0xd0}, 0x1, 0x0, 0x0, 0x40}, 0x80) creat(&(0x7f00000000c0)='./file0\x00', 0x198) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r3 = dup(r2) write$P9_RLERRORu(r3, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x100000000000000, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) 30.216795981s ago: executing program 2 (id=605): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x2002) r1 = syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0x86f7, 0x10100}, &(0x7f0000002000)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x22}) io_uring_enter(r1, 0x48e9, 0x0, 0x2, 0x0, 0x0) write$evdev(r0, &(0x7f0000000040)=[{{}, 0x0, 0x2}], 0x37) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000f7850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @void, @value}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000013c0)={0x11, 0xc, &(0x7f0000001080)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000900850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kfree\x00', r6, 0x0, 0xffffffffffffffff}, 0x18) r7 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r8 = dup(r7) ioctl$PTP_EXTTS_REQUEST2(r8, 0x43403d05, 0x0) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f0000000340)={0x3, 0x30, '\x00', 0x0, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000300)='kfree\x00', r9}, 0x18) syz_emit_ethernet(0x6e, &(0x7f0000000800)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x38, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x5dc, {0x0, 0x6, "8cb02b", 0x4, 0x2f, 0x0, @loopback, @local, [@srh={0x2b, 0x0, 0x4, 0x0, 0x0, 0x10}]}}}}}}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) memfd_create(&(0x7f0000000000)='security.selinux\x00', 0x2) getxattr(0x0, &(0x7f00000000c0)=@known='security.selinux\x00', 0x0, 0x0) 30.118175762s ago: executing program 2 (id=606): r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000010080)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000006c0)={{r1}, &(0x7f0000000080), &(0x7f0000000680)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r2}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000010c0)={&(0x7f0000001080)='mm_page_alloc\x00', r3, 0x0, 0x9}, 0x18) r4 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x5) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e20, @local}, 0x10) 30.117473582s ago: executing program 2 (id=607): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xa, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x9, 0x6, 0x0) mremap(&(0x7f00003c9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001de000/0x2000)=nil) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0xa, 0x2) r1 = syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800714, &(0x7f0000000500), 0xff, 0x485, &(0x7f0000001040)="$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") lsetxattr$system_posix_acl(&(0x7f0000000400)='.\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=r1, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="33c66a91", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000800008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r2 = syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x3014850, &(0x7f00000006c0)={[{@noquota}, {@barrier_val={'barrier', 0x3d, 0x1000}}, {@grpjquota}, {@noauto_da_alloc}, {@dioread_lock}]}, 0x3, 0x4e4, &(0x7f0000002d40)="$eJzs3c9PXFsdAPDvHZgCLc/hqYvnS3w2+gxttDNQbEtcVEyMrppY68YVIgyEMDCEGdpCGkPjH2Bi/BVduXJj4tqYmP4JxqSJ7o0xmkbbunChjrnDHYu8AYaUYSjz+SSn95z763tO4R7m3HMzN4C+dTkiZiJiICKuRkQhW5/LUuzspnS/F88fzacpicbQvb8lkWTrWudKsuWl7LDhiPjaVyK+lXwwbm1re2WuUilvZOVSfXW9VNvavra8OrdUXiqvzUxN3py+NX1jeuLE2nr7S3/+4Xd//uXbv/nsgz/O/vXKt9NqjWbb9rajEzsd7rfb9Hzz/6JlMCI2jhPsDBvI2pPvdUUAAOhI+hn/wxHxyYh4+ZNe1wYAAADohsYXRuNfSUQDAAAAOLdyzWdgk1wxexZgNHK5YnH3Gd6PxsVcpVqrf2axurm2sPus7Fjkc4vLlfJE9qzwWOSTtDzZzL8qX99XnoqItyPi+4WRZrk4X60s9PrmBwAAAPSJS/vG//8o7I7/AQAAgHNmrNcVAAAAALrO+B8AAADOvwPH/8ng6VYEAAAA6Iav3rmTpkbr/dcL97c2V6r3ry2UayvF1c354nx1Y724VK0uNb+zb/Wo81Wq1fXPxdrmw1K9XKuXalvbs6vVzbX6bPO93rPlRuFUmgUAAADs8fYnnvwhiYidz480U+pCti1/9OEz3a0d0E254+2edKsewOkb6HUFgJ7xgC/0rw7G+MA5d8TA/gf7yse8bQAAAJwF4x97rfl/84HwBjOQh/5l/h/6l/l/6F/m/6HPDR29y/BBG357wnUBAAC6ZrSZklwxmwscjVyuWIx4q/lagHyyuFwpT0TEhyLi94X8UFqe7HWlAQAAAAAAAAAAAAAAAAAAAAAAAOAN02gk0QAAAADOtYjcX5LsRf7jhfdH998fuJD8s9BcRsSDn9770cO5en1jMl3/9/+tr/84W3+9tSb1jVO+kwEAAAC0tMbprXE8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJykF88fzbfSacZ99sWIGGsXfzCGm8vhXxUi4uLLJAb3HJdExMAJxN95HBHvtIufpNWKsawW++PnImKkx/EvnUB86GdP0v5nJr3+8vuuv1xcbi7bX3+DWXpdzy4f1P/lWv1fs59r1/+9dfiph1uZd5/+snRg/McR7w62739a8ZN28S903sZvfn17+6BtjZ9FjB/x9yeNX6qvrpdqW9vXllfnlspL5bWpqcmb07emb0xPlBaXK+Xs37YxvvfxX//nsPZfbBt/t/89sP0R8X6H7f/304fPP3JI/Cufav/zf+eQ+OnvxKezvwPp9vFWfmc3v9d7v/jde4e1f+GA9h/684+IKx22/+rd7/ypw10BgFNQ29pematUyhtdyYx07cwyaaa6diaqIXN2M3ezC/3Yh/e4YwIAAE7cqw/9+7ccY4IHAAAAAAAAAAAAAAAAAAAAeC1d/xKyof//ZoHh3jUVAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOBQ/w0AAP//5w/Stg==") chmod(&(0x7f0000000340)='./file1\x00', 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0xe6c, 0x0, 0x1, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x1, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f00000000c0)}, 0x20) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd604dd30800040600fe8000000000000000000000000000aafe8000000000000000000000000000aa"], 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r6, &(0x7f0000001140)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000740)={0x10, 0x12, 0x1, 0x70bd2d, 0x25dfdbfd}, 0x10}], 0x1, &(0x7f0000001080)=[@rights={{0x10}}], 0x10, 0x800}, 0x800) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000b40)=ANY=[@ANYBLOB="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", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000800)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) fcntl$setstatus(r2, 0x4, 0x40000) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) close_range(r7, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r7, 0x40182103, &(0x7f0000000680)={0x0, 0x0, 0xffffffffffffffff, 0x3, 0x80000}) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000300), 0x4) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000940)={'sit0\x00', &(0x7f0000000a00)={'syztnl2\x00', 0x0, 0x20, 0x700, 0x2, 0xffff1b5f, {{0x47, 0x4, 0x3, 0x35, 0x11c, 0x65, 0x0, 0xf, 0x4, 0x0, @rand_addr=0x64010101, @multicast2, {[@timestamp={0x44, 0x1c, 0x5, 0x0, 0x7, [0x1, 0x0, 0x401, 0x1, 0x1, 0x5]}, @ra={0x94, 0x4, 0x1}, @generic={0x82, 0xd, "584195c5f821e437e1b2b2"}, @cipso={0x86, 0x5a, 0x3, [{0x6, 0x9, "a90e5a4ba861db"}, {0x0, 0x12, "d9b24bb53d715e59747cd5e1133fb786"}, {0x0, 0x9, "4934d5427842b8"}, {0x2, 0x7, "1c3a2c184a"}, {0x1, 0x12, "c2505b1e7e6b4a62cf8c790c146e9ecb"}, {0x7, 0x6, "c944bbc1"}, {0x5, 0x11, "a5a67c415e6fdffb352864e5b0b5ec"}]}, @ra={0x94, 0x4, 0x1}, @ra={0x94, 0x4}, @cipso={0x86, 0x68, 0x3, [{0x1, 0xe, "1719bcb210f14c3a5bea968d"}, {0x6, 0xa, 'u\n*\r$,fT'}, {0x6, 0xf, "fae907aa11f1acfa7be6a6495d"}, {0x0, 0xc, "b81be9dd4418a68bb336"}, {0x0, 0x5, "d48443"}, {0x7, 0x2}, {0x6, 0x10, "abd26ebcba7a448b23ae9a8eb160"}, {0x5, 0x9, "c45a96085547a1"}, {0x5, 0xf, "237d838c89de1c9bff98fdd57e"}]}, @rr={0x7, 0xf, 0x9b, [@loopback, @rand_addr=0x64010102, @local]}]}}}}}) r10 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0xfffff001, '\x00', r9, 0xffffffffffffffff, 0x4, 0x5, 0x2, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x11, 0x13, &(0x7f0000000380)=ANY=[@ANYBLOB="185500000d0000000000000000000004186a00000800000000000000ff00000018140000", @ANYRES32=r3, @ANYBLOB="0000000000000000c0a404000400000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000182a0000", @ANYRES32=r5, @ANYBLOB="0000000005000000097f050004000000850000009d000000180000007b06000000000000090000000e84ff7f04000000"], &(0x7f00000002c0)='GPL\x00', 0x1, 0x55, &(0x7f0000000440)=""/85, 0x41100, 0x70, '\x00', 0x0, 0x0, r8, 0x8, &(0x7f00000004c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000000500)={0x0, 0x8, 0x7, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000640)=[r10, 0xffffffffffffffff], 0x0, 0x10, 0xa, @void, @value}, 0x94) 29.257445823s ago: executing program 2 (id=620): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000006c0), 0x2, 0x246, &(0x7f0000000ac0)="$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") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cpuacct.usage_user\x00', 0x275a, 0x0) r2 = creat(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x5) write$eventfd(r1, &(0x7f0000000100), 0x8) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x4, &(0x7f00000001c0)=ANY=[@ANYRESDEC=r2], &(0x7f0000000100)='syzkaller\x00', 0x40001, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, 0x2, r1, 0x8, 0x0, 0xfffffffffffffdbd, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) fallocate(r1, 0x0, 0x0, 0x10fff9) r4 = getegid() getresuid(&(0x7f00000004c0)=0x0, &(0x7f0000000500)=0x0, &(0x7f0000000540)=0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000580)={0x0, 0x0, 0x0}, &(0x7f00000005c0)=0xc) r10 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001940)=ANY=[@ANYBLOB="38000000031401002abd7000fedbdf250900020073727a3100000000080041007369770014003300626f6e643000000000", @ANYRESOCT], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x0) r11 = syz_init_net_socket$x25(0x9, 0x5, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000400), 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1c0000000000000001000000", @ANYRES8=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c0000000000", @ANYRES32=r8, @ANYRES8=r6, @ANYRES32=r4, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRESDEC=r7, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=r5, @ANYRES16=r9, @ANYBLOB="000000001c000000000000000100000001000000496afc8d2cfc93f01bdfa83630db9fccda96c0a8422bcfdcdf189ebbcd5d2ca6b067c8c6e2f3af0ad7e8b3ffbce475bf23cf0d820830e787153fcb11bca559ebb6fb783a8d2ef63bc0a3690ec906dba4926cce21c84fa830494ab57e4a06a285fb107f521dcb63b1a0584e583e2535609e17610a4b66d3eba491360777a4eecfd2e97d4693d362f19e7c485cbff724282a67c7616f08b665541c3e20b5a6701920445242f7cf1d264eb93fdc5f1253fff8d0b79c2763f8fef42bc2fe38", @ANYRES32, @ANYRES32=r10, @ANYRES32, @ANYRESHEX=r7, @ANYRES32, @ANYRES8, @ANYRES32=r11, @ANYRES32, @ANYRES32, @ANYRES8=r11, @ANYRES32, @ANYBLOB="0000000010000000000000000100000001000000"], 0xe8, 0x200400d1}, 0x80) r12 = getegid() fstat(r1, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgroups(0x4, &(0x7f0000000440)=[0x0, r4, r12, r13]) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0xc, r2, 0x8, 0x0, 0x2, 0x3ff}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r15, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r16 = dup(r15) write$P9_RLERRORu(r16, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r16, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r16, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r14, @ANYBLOB=',wfdno=', @ANYRESHEX=r16]) newfstatat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x6000) 29.120560025s ago: executing program 2 (id=623): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x4, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x19, 0x0, 0x0, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffff0}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x4, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x19, 0x0, 0x0, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffff0}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) getsockopt$inet6_mptcp_buf(r1, 0x11c, 0x3, &(0x7f0000000000)=""/149, &(0x7f00000000c0)=0x95) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x3c, 0x0, 0x0, 0x70bd2d, 0x25dfdbfe, {{}, {}, {0x20, 0x17, {0x6, 0xd6dd, @l2={'ib', 0x3a, 'bridge_slave_1\x00'}}}}, ["", "", "", "", "", "", ""]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x4040) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000080)=@getneigh={0x47, 0x1e, 0x100, 0x70bd29, 0x25dfdbfe, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40040d0}, 0x0) 28.79224392s ago: executing program 32 (id=433): r0 = open(&(0x7f00000003c0)='./file0\x00', 0x2, 0x20) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r0, &(0x7f0000000680)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000580)={0xd0, 0x0, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x975}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x4}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x1}}]}, 0xd0}, 0x1, 0x0, 0x0, 0x40}, 0x80) creat(&(0x7f00000000c0)='./file0\x00', 0x198) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r3 = dup(r2) write$P9_RLERRORu(r3, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x100000000000000, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) 28.698047641s ago: executing program 2 (id=635): socket$netlink(0x10, 0x3, 0x0) semget$private(0x0, 0x2, 0x208) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, 0x0) close(r0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="18020000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x800000009) r1 = socket(0x10, 0x3, 0x0) bind$netlink(r1, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) write(r1, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) connect$netlink(r1, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000b4bffc)=0x1, 0x4) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) write(r1, &(0x7f0000000980)="a9", 0x1) (fail_nth: 2) 28.658142401s ago: executing program 33 (id=635): socket$netlink(0x10, 0x3, 0x0) semget$private(0x0, 0x2, 0x208) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, 0x0) close(r0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="18020000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x800000009) r1 = socket(0x10, 0x3, 0x0) bind$netlink(r1, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) write(r1, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) connect$netlink(r1, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000b4bffc)=0x1, 0x4) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) write(r1, &(0x7f0000000980)="a9", 0x1) (fail_nth: 2) 4.916997835s ago: executing program 0 (id=1021): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000380), 0x7b95b611, 0x802) pselect6(0x2000, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x300}, 0x0, &(0x7f0000000100)={0x8}, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000400)=""/220, 0xdc, 0x1, &(0x7f0000000240)=""/66, 0x42}, &(0x7f00000001c0)=0x40) r2 = socket(0x1e, 0x4, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) sendmsg$tipc(r2, &(0x7f0000000200)={&(0x7f00000000c0)=@id={0x1e, 0x3, 0x2, {0x4e24, 0xf5}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x4800) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000000)='x', 0x1}], 0x1) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2240, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB="380100001000330600000000002375a5aef7048aa6800b935ad1000000ac141425000000000000000000000000ac1e000100"/77, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000003200000000000000000000000000000000000000fdffffffffffffff00000000000000007a0c000000000000cd2d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000000000000000000000000000000000000020000000000000000000000480001006d643500"/240], 0x138}}, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000080)=0x1) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@newtaction={0x68, 0x30, 0x871a15abc695fa3d, 0x70bd25, 0x0, {}, [{0x54, 0x1, [@m_ctinfo={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0xfffffffd, 0xfffffffe, 0xffffffffffffffff, 0x0, 0x40}}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x1}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) 4.872123676s ago: executing program 0 (id=1023): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c"], 0x48) openat$nvram(0xffffffffffffff9c, &(0x7f0000000340), 0x10880, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x2, 0x0, @local, 0x2}]}, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000140)={r3, @in={{0x2, 0x4e24, @empty}}, 0x6, 0x1}, &(0x7f0000000000)=0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r0, @ANYRESDEC=r0], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='cq_schedule\x00', r4}, 0x18) socket$packet(0x11, 0x2, 0x300) quotactl$Q_SYNC(0xffffffff80000100, 0x0, 0x0, 0x0) r5 = fsopen(&(0x7f0000000240)='cramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000080000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d0000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r6}, 0x10) syz_pidfd_open(0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) pipe2(&(0x7f00000001c0), 0x4000) syz_io_uring_setup(0x3cdd, &(0x7f0000000200)={0x0, 0x6754, 0x80, 0x1, 0x215}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r9, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x12, r9, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080), 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0xf400a4904506099c, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1}) 4.774755357s ago: executing program 6 (id=1026): r0 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r0, 0x0) write$sndseq(r0, &(0x7f0000000bc0)=[{0x96, 0xb, 0x1, 0x7, @tick=0xbabd, {0xfb, 0x7e}, {0x8, 0x4}, @raw8={"621d6173c5f38e3b2e5c1074"}}, {0x6, 0x0, 0x2, 0xa, @time={0xe}, {0x0, 0x7f}, {0x8, 0x4}, @queue={0x5, {0x4c5, 0xcfc1}}}, {0x7, 0x8, 0x4, 0x1, @time={0x80000001, 0x9}, {0x0, 0x2}, {0x1, 0x4}, @result={0x8, 0x4}}, {0x8, 0x0, 0x2, 0x41, @time={0x2, 0x80000001}, {0x1}, {0xe, 0x9}, @quote={{0x5, 0x1}, 0x7}}, {0x6, 0x2, 0x0, 0x0, @time={0xbd1, 0xdd8b}, {0x7}, {0x1, 0xd6}, @quote={{0x4}, 0xfffd}}, {0x10, 0x6, 0x0, 0x8, @tick=0x3, {0x1}, {0x4, 0xf7}, @connect={{0x8, 0xb}, {0x8, 0xfa}}}, {0x4, 0xb7, 0x3f, 0x9, @tick=0x3, {0xd, 0x2}, {0x30, 0x9}, @time=@time={0x1, 0x1}}, {0xab, 0x7, 0xf7, 0x4, @tick, {0x2, 0x7c}, {0x4, 0xa}, @addr={0x4, 0x9}}], 0xe0) socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r1, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa802, 0x0) close(r4) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x21, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0xb, 0xd}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) recvmmsg(r7, &(0x7f0000004180)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000002700)=""/4107, 0x100b}, {&(0x7f0000001700)=""/4096, 0x1000}], 0x2}, 0x5}], 0x1, 0x40000000, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x0) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r8}, 0x4) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x10, &(0x7f0000000840)=@framed={{}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r8}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r9}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x4, [@var={0x2, 0x43, 0x0, 0x11, 0x4, 0xffffffff}]}, {0x0, [0x0, 0x61]}}, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) r10 = creat(&(0x7f00000000c0)='./file0\x00', 0xc9028ba210c11f8b) ioctl$BLKTRACESETUP(r10, 0xc0481273, &(0x7f0000000000)={'\x00', 0x8, 0x2, 0x80400, 0x2004, 0x800}) prctl$PR_SET_SECUREBITS(0x1c, 0x2c) setuid(0xee00) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000180)='./file1\x00', 0x1218088, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0xa, 0x2c2, &(0x7f00000008c0)="$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") 4.717804588s ago: executing program 6 (id=1027): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_read_part_table(0x60f, &(0x7f0000000740)="$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") creat(&(0x7f0000000100)='./bus\x00', 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000280), &(0x7f00000006c0)='%pI4 \x00'}, 0x20) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x20000, 0x2) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x147842, 0x49) preadv2(r2, &(0x7f0000000040)=[{&(0x7f0000001200)=""/4096, 0xfffffdef}], 0x1, 0x900, 0x0, 0x0) 4.596511919s ago: executing program 6 (id=1030): r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000010080)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000006c0)={{r1}, &(0x7f0000000080), &(0x7f0000000680)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r2}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000010c0)={&(0x7f0000001080)='mm_page_alloc\x00', r3, 0x0, 0x9}, 0x18) r4 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x5) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e20, @local}, 0x10) 4.59602881s ago: executing program 0 (id=1031): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) ioctl$BLKROGET(0xffffffffffffffff, 0x125e, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000010100008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000280)='sched_switch\x00', r1}, 0x10) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'hsr0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=ANY=[@ANYBLOB="440000001000030428b57000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="a100000000000000140012800c0001006d616376746170000400028008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4], 0x44}, 0x1, 0xba01, 0x0, 0x4004}, 0x810) sendmsg$ETHTOOL_MSG_WOL_SET(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000600)={&(0x7f0000000780)={0x30c, 0x0, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@ETHTOOL_A_WOL_MODES={0x148, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x4d, 0x4, "b861fd7d94ead708d1c30e2f174fb3c5b955449422622e46f6eb574310a7bef312c2b07861f1796184f6f72e8171579c28968ffd8794977639a54198ba37a1c2a0edda55940b93fb89"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0xf0, 0x3, 0x0, 0x1, [{0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '(*\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4163}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x14, 0x2, 'nodioread_nolock'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '@[!+-\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '\\\x00'}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '\xff\xff'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'ext4\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '\xff\xff'}]}, {0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '*\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '\xff\xff'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffff}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'kfree\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'GPL\x00'}]}]}]}, @ETHTOOL_A_WOL_SOPASS={0x6b, 0x3, "868a53b512f2126b8469e7bf911cca54e2c1cb8ab73b32849e06e008b905c684e6f48d1433c50c6c510468451d4911b8760a8d87ed41363dddc45bc39da415a3cafeb867fdf3b4bfe5a79cdb53f94a8061411724982d4e4e7af43267ae35f497db13b6f9e3fff5"}, @ETHTOOL_A_WOL_SOPASS={0xe1, 0x3, "b62b270cc95db0c3cecf2bd7a407a5cb37f1060f5803df491862e6732de1b73c66b9afc74c192cf019fa27099f72fdd778191e57416a1de25e112dfea8d86e7f5c1ee9094019ae953124b4d625807e5448d0ea592aa531c60f1ef51c1abfa6744e144432b54502450413e16614d52c73efed9e9dcc86728cb0297f49fb0776e9bfba49af6de44d767b15060c2ab16d9b95f087e758f7c5c2b5ad14760efcdf844fce7de41b752abee3b5209a9cb99a844b710fe90524f9d0ae268ac7aead9efccbc776fc48e50676b8bc039ad376c0e246dfa0b6fe9e25fd26e777d698"}, @ETHTOOL_A_WOL_HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}]}]}, 0x30c}, 0x1, 0x0, 0x0, 0xc080}, 0x4000841) sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x41, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x800000000003}, 0x1100, 0x5dd8, 0x0, 0x3, 0x0, 0x8, 0x6, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)="d800000018008103e00312ba0d8105040a600300ff0f040b067c55a1bc000900b80006990700000015000500fef32702d3001500030001400200000901ac040098007f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04000000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b66bce0b42a9ecbee5de6ccd40dd6e4edef3d93452a92307f00000e970300"/216, 0xd8}], 0x1}, 0x48002) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x8, &(0x7f0000000b80)={[{@sb={'sb', 0x3d, 0x1}}, {@data_ordered}], [{@smackfsfloor={'smackfsfloor', 0x3d, '\x9e\xb3\x120&[*!%\xd5+ \x1c_Ax\x1c\x95\xab\xea0\xc9\xf0A\xdd\xa3U\x85\x9a\x1d\x962N\x9e\x9aqzm\xfe\r\xb9E\xee\x9e\x02\x9d\v'}}, {@fowner_lt}, {@uid_eq}, {@euid_eq}, {@subj_type}, {@dont_hash}]}, 0x4, 0x523, &(0x7f00000018c0)="$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") r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x107c43, 0x112) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f00000003c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xdc}, {0xa, 0x4e20, 0x1, @ipv4={'\x00', '\xff\xff', @local}, 0xf}, 0xffffffffffffffff, 0x3}}, 0x48) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000d00)=ANY=[@ANYBLOB="2400000076000904f6ffffff0000000007020000", @ANYRES32=0x0, @ANYBLOB="07000d80"], 0x24}, 0x1, 0x5502000000000000}, 0x23f58e5b666e3706) r7 = open(&(0x7f0000000000)='./file1\x00', 0x109042, 0x0) fallocate(r7, 0x0, 0x0, 0x7000000) socketpair(0x1, 0xc, 0x1, &(0x7f00000015c0)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = socket$xdp(0x2c, 0x3, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r10}, 0x10) r11 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r11) ptrace$getregset(0x4204, r11, 0x2, &(0x7f0000000740)={0x0, 0x60}) setsockopt$XDP_UMEM_REG(r9, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x232000, 0x1000}, 0x20) r12 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file2\x00', 0x187842, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r12, 0xc028660f, &(0x7f0000000240)={0x3920e, r5, 0x3, 0x1, 0x5}) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r8, 0x8983, &(0x7f00000002c0)={0x7, 'pim6reg\x00', {0xda9}, 0x80}) 3.79631037s ago: executing program 6 (id=1042): socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f4b906", 0x38, 0x3a, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @time_exceed={0x2, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "fd9063", 0x0, 0x33, 0x0, @loopback, @empty, [@dstopts={0x2b}]}}}}}}}, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = inotify_init() inotify_add_watch(r2, &(0x7f00000000c0)='.\x00', 0x5000009) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x8, &(0x7f0000000040), 0x9, 0x539, &(0x7f0000003d80)="$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") (fail_nth: 5) 2.220956201s ago: executing program 1 (id=1053): ioperm(0x5, 0x4, 0x4) io_setup(0x3, &(0x7f00000002c0)=0x0) io_cancel(r0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x9, 0xffffffffffffffff, 0x0, 0x0, 0x1, 0x0, 0x3}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000000000000000000000b1000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r2}, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x88a, &(0x7f0000000d80)={[{@usrquota}, {@usrjquota, 0x22}, {@data_ordered}, {@noload}, {@grpid}, {@grpjquota, 0x22}, {@init_itable}, {@jqfmt_vfsold}, {@noblock_validity}], [{@euid_gt}, {@uid_gt}, {@obj_type={'obj_type', 0x3d, '%{!%\x94##\xe8'}}, {@permit_directio}, {@context={'context', 0x3d, 'user_u'}}, {@uid_lt}, {@func={'func', 0x3d, 'POLICY_CHECK'}}]}, 0xfe, 0x44e, &(0x7f0000000900)="$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") r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c000000000803000000000000000000000000020600024022f200000900010073797a31000000001c000480080001400000000308000140000000030800014000000006050003003a"], 0x4c}, 0x1, 0x0, 0x0, 0x8080}, 0x20000000) 2.133033252s ago: executing program 1 (id=1055): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x1c, 0xc, 0x0, &(0x7f0000000800)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) setregid(0x0, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="3700040000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1, 0xc}, &(0x7f0000001fee)='R\x10rust\xe3c*sgrVex:Di', 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001cc0)={0x11, 0xc, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095", @ANYRES16=r2], 0x0, 0x2, 0x0, 0x0, 0x0, 0x2a, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = socket(0x10, 0x3, 0x0) connect$netlink(r3, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000c500000001f0ffff95"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r4}, 0x10) sendmsg$nl_route(r3, &(0x7f0000000380)={&(0x7f00000001c0), 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=@bridge_getlink={0x34, 0x12, 0x1, 0x0, 0x0, {}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'wg0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x28000090}, 0x0) (fail_nth: 5) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xe, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000900850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100008, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kfree\x00', r6}, 0x10) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000212c1400001e0a05010000000000000000070000000900020073797a31000000000900010073797a300000000000140380300000802c000180250001"], 0x14b0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x3, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r8}, 0x10) bpf$MAP_CREATE(0x700000000000000, &(0x7f0000000440)=ANY=[@ANYBLOB="20000000040000000200000000000000010a0000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32, @ANYBLOB="010000000500"/28], 0x50) lsm_get_self_attr(0x68, &(0x7f00000021c0)={0x0, 0x0, 0x1020, 0x1000, ""/4096}, &(0x7f0000000080)=0xfffffffffffffe7f, 0x0) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x400, @private0, 0x9}, 0x1c) r10 = syz_io_uring_setup(0x70ee, &(0x7f0000000800)={0x0, 0xfffffffc, 0x0, 0x800, 0x2000}, &(0x7f0000000080), &(0x7f0000002180)) io_uring_register$IORING_REGISTER_PROBE(r10, 0x16, &(0x7f00000003c0), 0x3b) setsockopt$SO_ATTACH_FILTER(r9, 0x1, 0x1a, &(0x7f0000000080)={0x0, &(0x7f0000000040)}, 0x10) 2.011905444s ago: executing program 5 (id=1056): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000050b6850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000001c0)='sys_enter\x00', r0}, 0x18) eventfd(0x101) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f00000000c0)='./file2\x00', 0x200845, &(0x7f00000005c0)={[{@utf8}, {@shortname_winnt}, {@iocharset={'iocharset', 0x3d, 'cp775'}}, {@uni_xlateno}, {@shortname_win95}, {@uni_xlateno}, {@shortname_winnt}, {@fat=@gid}, {}]}, 0x0, 0x274, &(0x7f0000000280)="$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") r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000540), 0x2000, 0x0) write$selinux_user(r1, &(0x7f0000000580)={'system_u:object_r:cron_log_t:s0', 0x20, 'system_u\x00'}, 0x29) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000700000045000000a000020095"], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000003c0)='kfree\x00', r2}, 0x18) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "6ae04425ace3f60c", "acba84f0a6731f234db1cc7f3f382ad796bd667cb12ea99509873931d2873103", "0f9dafb4", "ec3fff9afd96e6c0"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) ioctl$int_in(r3, 0x5421, &(0x7f0000000140)=0x1) writev(r3, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) close(r3) 1.749155167s ago: executing program 1 (id=1058): r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001812", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000010c0)={&(0x7f0000001080)='mm_page_alloc\x00', r2, 0x0, 0x9}, 0x18) r3 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x5) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @local}, 0x10) 1.743942777s ago: executing program 3 (id=1059): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='siox_get_data\x00', r0, 0x0, 0x5}, 0x18) prctl$PR_SET_NAME(0xf, &(0x7f0000000880)='+}[@\x00') r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r2 = gettid() prctl$PR_SET_NAME(0xf, &(0x7f0000000340)='%.!\x00') sched_setaffinity(r2, 0x8, &(0x7f0000000140)=0x2) listen(r1, 0x9) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={r3, 0x58, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', r4, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r5}, 0x10) r6 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$int_in(r6, 0x5421, &(0x7f0000000100)=0x100000001) setsockopt$inet_tcp_int(r6, 0x6, 0x1e, &(0x7f0000000180)=0x1, 0x4) connect$inet(r6, &(0x7f0000000280)={0x2, 0x0, @dev}, 0x10) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmmsg(r7, &(0x7f0000002840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20044000) connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x14, r9, 0x1, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x800) 1.732404467s ago: executing program 1 (id=1060): socketpair$nbd(0x1, 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x20) write$cgroup_subtree(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="8fedcb7910009875f37538e486dd6317ce8102032900fefd000e40000200875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x14, 0x1, 0x0, 0x8000, 0x1000, 0xffffffffffffffff, 0xfffffffe, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000001400010000000000000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000500)='mm_compaction_begin\x00', r4}, 0x18) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000010001fff000000000000000000060000", @ANYRES32=0x0, @ANYBLOB="0000000000000000180012800e000100776972656775617264"], 0x40}}, 0x0) socketpair(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x89a1, &(0x7f0000000080)) r7 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r7, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) recvmmsg(r7, &(0x7f0000003ec0)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x0, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80, @void, @value}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r9}, 0x10) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000212c1400001e0a05010000000000000000070000000900020073797a31000000000900010073797a300000000000140380300000802c000180250001"], 0x14b0}}, 0x0) 1.681128338s ago: executing program 0 (id=1061): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000140)='binfmt_misc\x00', 0x1000084, 0x0) mount$bpf(0xffffff8c, &(0x7f0000001080)='./file0\x00', 0x0, 0x1100020, 0x0) 1.615173329s ago: executing program 3 (id=1062): creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000c00), 0x1, 0xb80, &(0x7f00000017c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={0x0}, 0x18) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c10, &(0x7f0000000400), 0xff, 0x23f, &(0x7f0000000540)="$eJzs3T1oLFUYBuB3Zne95t5FrtoI4g+IiAbCtRNsYqMQkBBEBBUiIjZKIsQEu8TKxkJrlVQ2QeyMlpIm2CiCVdQUsRE0WBgstFiZnURisuLPxh1xngdmZ2b3nPnOMPOe3WbYAK11Nclskk6S6SS9JMXpBnfWy9Xj3c2p3cVkMHjsh2LYrt6vnfS7kmQjyQNJdsoiL3STte2nDn7ae+Se11d7d7+7/eTURE/y2OHB/qNH78y/9sHc/WufffHdfJHZ9H93XhevGPFet0hu+jeK/UcU3aZHwF+x8Mr7X1a5vznJXcP891KmvnhvrFy308t9b/9R3ze///zWSY4VuHiDQa/6DtwYAK1TJumnKGeS1NtlOTNT/4b/qnO5fHF55eXp55dXl55reqYCLko/2X/4o0sfXjmT/287df6B/68q/48vbH1dbR91mh4NMBG31asq/9PPrN8b+YfWkX9oL/mH9pJ/aC/5h/aSf2gv+Yf2kn9oL/mH9pJ/aK/T+QcA2mVwqeknkIGmND3/AAAAAAAAAAAAAAAAAAAA521O7S6eLJOq+clbyeFDSbqj6neG/0ecXD98vfxjUTX7TVF3G8vTd4x5gDG91/DT1zd802z9T29vtv76UrLxapJr3e75+684vv/+uRv/5PPes2MW+JuKM/sPPjHZ+mf9stVs/bm95ONq/rk2av4pc8twPXr+6VfXb8z6L/085gEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACYmF8DAAD//xFQbUc=") bpf$MAP_CREATE(0x0, 0x0, 0x50) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) write$sndseq(r2, &(0x7f00000003c0)=[{0x0, 0x0, 0x0, 0x0, @tick=0xb, {0x0, 0xb8}, {0x4, 0x6}, @control={0x9, 0x0, 0xb}}, {0x0, 0x0, 0x0, 0x4, @time={0xff, 0x8}, {0x6, 0x4}, {}, @result={0xd, 0x4}}], 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x0, 0x0, &(0x7f0000000180)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) 1.593763229s ago: executing program 5 (id=1063): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000080008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000340)='kfree\x00', r1}, 0x18) openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) r6 = syz_io_uring_setup(0x7d0b, &(0x7f0000000200)={0x0, 0x83a1, 0x8000, 0x1, 0x2fb}, &(0x7f0000000180), &(0x7f0000000280)) io_uring_register$IORING_UNREGISTER_EVENTFD(r6, 0x5, 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r5) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x16, 0x2, 0xff}]}, 0x10) sendto$inet6(0xffffffffffffffff, &(0x7f00000002c0)="1c0000001200050f0c1000000049b23e9b200a0008002ec000000001", 0x1c, 0x0, 0x0, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001240)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=@newtfilter={0x378, 0x28, 0xd27, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, r7}, [@filter_kind_options=@f_flow={{0x9}, {0x340, 0x2, [@TCA_FLOW_BASECLASS={0x8, 0x3, {0xfff3, 0x4}}, @TCA_FLOW_ADDEND={0x8, 0x5, 0x800}, @TCA_FLOW_KEYS={0x8, 0x1, 0xdd96}, @TCA_FLOW_XOR={0x8, 0x7, 0x1}, @TCA_FLOW_EMATCHES={0x31c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}, @TCA_EMATCH_TREE_LIST={0x288, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0x7ff, 0x8, 0x2b}, {0x0, 0x4, 0x2}}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x1035, 0x3, 0x7ff}, {0x2, 0x8, 0x6, 0x30c}}}, @TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0xa}, {0x1, 0xfffffffe, 0x3, 0x2, 0xd, 0x2, 0x1}}}, @TCF_EM_META={0x90, 0x3, 0x0, 0x0, {{0x5, 0x4, 0x1}, [@TCA_EM_META_LVALUE={0x18, 0x2, [@TCF_META_TYPE_INT, @TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_INT=0x3]}, @TCA_EM_META_LVALUE={0x21, 0x2, [@TCF_META_TYPE_VAR="949e45415c2b661e95", @TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_VAR="8033fd03f19c2316", @TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_INT]}, @TCA_EM_META_RVALUE={0x1c, 0x3, [@TCF_META_TYPE_VAR="13e26df3126c39", @TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_VAR="aa5e6b6249", @TCF_META_TYPE_INT=0x6]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x3, 0x80}, {0x1, 0x5}}}, @TCA_EM_META_LVALUE={0x1f, 0x2, [@TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_VAR="be911d", @TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_INT=0x3]}]}}, @TCF_EM_CONTAINER={0x10, 0x3, 0x0, 0x0, {{0x5, 0x0, 0x8}, '7-v'}}, @TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x2, 0x1, 0x1}, {0x7ff, 0xe, 0x4, 0x0, 0x8}}}, @TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0x9, 0x3, 0x2f23}, {0x2, 0x0, 0xae0, 0x1}}}, @TCF_EM_CONTAINER={0xac, 0x3, 0x0, 0x0, {{0xa61, 0x0, 0x3}, "e6b56f510f752d4d67f523ad8b41e011861feb275787086a548f5cce5732bc3bdd19692b6c5f60f2fca45d9f337f6380e5586e4468538b762d5f9aacd246ee71362344edc459e1ec42be9780ee1992c169e1fef4245c6fb95f33fd45d4a08e8c5d45fc6385405e923ae548a3e87f04e39b10149913a6f5a0e1d21e146861581b945b553af4cebd847ae805994e210bba2b4d5c77e37df544343a863d3322"}}, @TCF_EM_CONTAINER={0xa8, 0x1, 0x0, 0x0, {{0x2, 0x0, 0x4}, "a3599ba3e61cb05941c16e06318f343963d1b76259f986bf676e37783f9d92330f8928313fcad09e51f9574f249bdd9fa279cc861aeb6d45efa538cf93ac7f3e8c2d8dc152ed8d8eefb2d34852a099268bf819c4b8f2485d56cc3d2cf6cc7d7593c2f1bf3ff23e09035aa54b236b5a558bfa0678a60ed73e69b4662ab8061949325e2295a4e891284de731e7b2c1f0ed269e599a53ac180b39"}}, @TCF_EM_META={0x18, 0x3, 0x0, 0x0, {{0x1b78, 0x4, 0x1}, [@TCA_EM_META_LVALUE={0xc, 0x2, [@TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_VAR="e92d5572"]}]}}]}, @TCA_EMATCH_TREE_LIST={0x60, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0xf, 0x3, 0xfc56}, {0xffffffff, 0xff, 0x5, 0x7}}}, @TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x7, 0x1, 0xb}, {0x6, 0x2, 0x3, 0x0, 0x6}}}, @TCF_EM_CONTAINER={0xc, 0x3, 0x0, 0x0, {{0x3}}}, @TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0x2, 0x3, 0x6}, {0x5, 0x8, 0x3, 0x2fba}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x3}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x3}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x800}}]}]}}, @TCA_RATE={0x6, 0x5, {0xb8, 0x1}}]}, 0x378}}, 0x0) 1.54101742s ago: executing program 0 (id=1064): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x2, 0x4) connect$inet(r0, &(0x7f0000000380)={0x2, 0x4e24, @local}, 0x10) shutdown(r0, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000017850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000086"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000500)='page_pool_state_release\x00', r3}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x11, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="aa47bb14f79eca231c937b8c020000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x2, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x43}}]}, 0x0, 0x4, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) pselect6(0x40, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x10000000, 0x975}, &(0x7f0000000000)={0x18, 0x7, 0x6, 0x0, 0x0, 0x400000}, 0x0, 0x0, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_SIOCDELRT(r6, 0x890c, &(0x7f0000000340)={0x0, @sco={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, @l2={0x1f, 0x6, @none, 0x0, 0x2}, @in={0x2, 0x4e24, @multicast1}, 0x6, 0x0, 0x0, 0x0, 0x800, &(0x7f0000000300)='veth1_to_team\x00', 0xa, 0x169c2495, 0xffff}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) mkdir(&(0x7f0000000000)='./control\x00', 0x20) r7 = open(&(0x7f0000022ff6)='./control\x00', 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz0\x00', 0x200002, 0x0) sync_file_range(r7, 0x25, 0x3, 0x5) 1.53628459s ago: executing program 5 (id=1065): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000003200)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f00000004c0)='ext4_mb_discard_preallocations\x00', r1, 0x0, 0x400000}, 0x18) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, 0x0, 0x4000054) syz_mount_image$ext4(&(0x7f0000001a00)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x410, &(0x7f0000001980)={[{@noload}, {@discard}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@lazytime}, {@quota}, {@errors_remount}]}, 0x3, 0x443, &(0x7f0000000940)="$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") 1.477057091s ago: executing program 6 (id=1066): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000001000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008180000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x43, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000080"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) creat(&(0x7f00000000c0)='./file0\x00', 0x198) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r3 = dup(r2) write$P9_RLERRORu(r3, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) lstat(&(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)) 1.452851331s ago: executing program 6 (id=1067): bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) unshare(0x62040200) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) r5 = socket(0x10, 0x803, 0x0) r6 = socket(0x25, 0x3, 0x4) socket$nl_route(0x10, 0x3, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f0000000000), 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="320c655707731e03b31120dc3ce216d89c983116c882d981344724fb1233a22fc36ebad5f0816561374ace2e5aef9490924286ddb638b32e571e00233d0e69167587cb496f68f0e62ea4d6d729ad40910f6ed68eacba93e5b944e82a35ea9185736111ea709d28089b17e4a6c149c9c6be4e4fd70fa9c067a9294db726050b7a10044ce7ce5ffb97e8b1cc14b606c5656d9afa308dc21aef07b9d823a7b9f605c87a89b26eb779892b075830871fca228c50360fc413368e206c3112ec82351a03e730c75a3acf49eecbb14471", @ANYRES64, @ANYRES16=r6, @ANYRESOCT=r4], &(0x7f0000000100)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000, @void, @value}, 0x94) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002040)=@newtfilter={0x12e0, 0x2c, 0xd27, 0x70bd2b, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x129c, 0x2, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x4}, @TCA_MATCHALL_ACT={0x1290, 0x2, [@m_nat={0x17c, 0x8, 0x0, 0x0, {{0x8}, {0xf4, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x3, 0x38e, 0x5, 0x1000, 0x10000}, @multicast1, @broadcast, 0xffffff00, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x6, 0x0, 0xffffffffdffffffb, 0xfff, 0x3}, @empty, @private=0xa010101, 0xffffffff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x8000, 0x2, 0x2, 0xffffffff, 0x6}, @local, @private=0xa010100}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xea3, 0x4, 0x0, 0x3, 0x1}, @remote, @dev={0xac, 0x14, 0x14, 0xb}, 0xffffffff, 0x8}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x3ff, 0xd, 0x7, 0xfffff43d, 0x2}, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xffffffff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x3, 0x6, 0x3, 0x40, 0x8}, @multicast1, @local, 0xff, 0x1}}]}, {0x64, 0x6, "a793ee1dfba6bcad80cf5c41c751569e01c0b489f68958747203a592eef26e6e5bc0254e842c1da30b1808941f608231a1dfad6192b14fc49ce8f34b5ebd21fc0b459d5e8a4d22d35f43e4d597fed2fd00641a14d9a74d09f1cec213a0e69cd8"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_ctinfo={0xe4, 0xc, 0x0, 0x0, {{0xb}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0x24f, 0xff, 0x2, 0x0, 0x7ff}}, @TCA_CTINFO_ACT={0x18, 0x3, {0x204, 0x3ff, 0x8, 0x100, 0x5}}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x81}]}, {0x7f, 0x6, "0a19c3f6bc44488c5bc8c711db609d741e23ef8f5b94caf3b2eb95e44f41e8c5a10e50fd5ac0e9b9e2c0e4573483f648a0132a18693b96e8d94099fd38741bb48d1af909e675eb524bf994670501a296cde08f66ce23f0cef526e326a9e1bd4fc12f6f069573d5a880d38311ce3729f17f4e8d530df53ff6014c85"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x6}}}}, @m_nat={0x102c, 0x17, 0x0, 0x0, {{0x8}, {0x4}, {0x1004, 0x6, "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"}, {0xc}, {0xc}}}]}]}}, @TCA_CHAIN={0x8, 0xb, 0x8}, @TCA_CHAIN={0x8, 0xb, 0x8}]}, 0x12e0}, 0x1, 0x0, 0x0, 0x4080}, 0x0) r8 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_INFO(r8, 0x0, 0x40, &(0x7f0000000000)={'nat\x00', 0x7003, [0x80002, 0x40009, 0x5, 0x1]}, &(0x7f0000000100)=0x54) r9 = syz_open_dev$usbfs(&(0x7f0000002000), 0xd, 0x20041) ioctl$USBDEVFS_REAPURBNDELAY(r9, 0x4004550d, 0x0) 1.372488142s ago: executing program 0 (id=1068): bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) unshare(0x62040200) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) r5 = socket(0x10, 0x803, 0x0) r6 = socket(0x25, 0x3, 0x4) socket$nl_route(0x10, 0x3, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f0000000000), 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="320c655707731e03b31120dc3ce216d89c983116c882d981344724fb1233a22fc36ebad5f0816561374ace2e5aef9490924286ddb638b32e571e00233d0e69167587cb496f68f0e62ea4d6d729ad40910f6ed68eacba93e5b944e82a35ea9185736111ea709d28089b17e4a6c149c9c6be4e4fd70fa9c067a9294db726050b7a10044ce7ce5ffb97e8b1cc14b606c5656d9afa308dc21aef07b9d823a7b9f605c87a89b26eb779892b075830871fca228c50360fc413368e206c3112ec82351a03e730c75a3acf49eecbb14471", @ANYRES64, @ANYRES16=r6, @ANYRESOCT=r4], &(0x7f0000000100)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000, @void, @value}, 0x94) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002040)=@newtfilter={0x12e0, 0x2c, 0xd27, 0x70bd2b, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x129c, 0x2, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x4}, @TCA_MATCHALL_ACT={0x1290, 0x2, [@m_nat={0x17c, 0x8, 0x0, 0x0, {{0x8}, {0xf4, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x3, 0x38e, 0x5, 0x1000, 0x10000}, @multicast1, @broadcast, 0xffffff00, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x6, 0x0, 0xffffffffdffffffb, 0xfff, 0x3}, @empty, @private=0xa010101, 0xffffffff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x8000, 0x2, 0x2, 0xffffffff, 0x6}, @local, @private=0xa010100}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xea3, 0x4, 0x0, 0x3, 0x1}, @remote, @dev={0xac, 0x14, 0x14, 0xb}, 0xffffffff, 0x8}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x3ff, 0xd, 0x7, 0xfffff43d, 0x2}, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xffffffff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x3, 0x6, 0x3, 0x40, 0x8}, @multicast1, @local, 0xff, 0x1}}]}, {0x64, 0x6, "a793ee1dfba6bcad80cf5c41c751569e01c0b489f68958747203a592eef26e6e5bc0254e842c1da30b1808941f608231a1dfad6192b14fc49ce8f34b5ebd21fc0b459d5e8a4d22d35f43e4d597fed2fd00641a14d9a74d09f1cec213a0e69cd8"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_ctinfo={0xe4, 0xc, 0x0, 0x0, {{0xb}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0x24f, 0xff, 0x2, 0x0, 0x7ff}}, @TCA_CTINFO_ACT={0x18, 0x3, {0x204, 0x3ff, 0x8, 0x100, 0x5}}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x81}]}, {0x7f, 0x6, "0a19c3f6bc44488c5bc8c711db609d741e23ef8f5b94caf3b2eb95e44f41e8c5a10e50fd5ac0e9b9e2c0e4573483f648a0132a18693b96e8d94099fd38741bb48d1af909e675eb524bf994670501a296cde08f66ce23f0cef526e326a9e1bd4fc12f6f069573d5a880d38311ce3729f17f4e8d530df53ff6014c85"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x6}}}}, @m_nat={0x102c, 0x17, 0x0, 0x0, {{0x8}, {0x4}, {0x1004, 0x6, "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"}, {0xc}, {0xc}}}]}]}}, @TCA_CHAIN={0x8, 0xb, 0x8}, @TCA_CHAIN={0x8, 0xb, 0x8}]}, 0x12e0}, 0x1, 0x0, 0x0, 0x4080}, 0x0) r8 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_INFO(r8, 0x0, 0x40, &(0x7f0000000000)={'nat\x00', 0x7003, [0x80002, 0x40009, 0x5, 0x1]}, &(0x7f0000000100)=0x54) r9 = syz_open_dev$usbfs(&(0x7f0000002000), 0xd, 0x20041) ioctl$USBDEVFS_REAPURBNDELAY(r9, 0x4004550d, 0x0) 1.351064512s ago: executing program 5 (id=1069): r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000010080)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000006c0)={{r1}, &(0x7f0000000080), &(0x7f0000000680)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r2}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000010c0)={&(0x7f0000001080)='mm_page_alloc\x00', r3, 0x0, 0x9}, 0x18) r4 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x5) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e20, @local}, 0x10) 1.087095456s ago: executing program 3 (id=1070): r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001812", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000010c0)={&(0x7f0000001080)='mm_page_alloc\x00', r2, 0x0, 0x9}, 0x18) r3 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x5) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @local}, 0x10) 829.047959ms ago: executing program 1 (id=1071): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000000000001d8500000007000000850000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) fsopen(0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r2, 0x3) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f0000000180)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) syz_emit_ethernet(0x36, &(0x7f0000000200)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x10}}}}}}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10) r5 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x3380, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_MSG_RING={0x28, 0x40, 0x0, r5, 0x0, 0x0, 0x0, 0x2}) io_uring_enter(r5, 0x627, 0x14, 0x43, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00', r0}, 0x10) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r10 = epoll_create(0x8) epoll_ctl$EPOLL_CTL_ADD(r10, 0x1, r9, &(0x7f0000000040)={0xf6c447fee59251f4}) close_range(r8, r9, 0x0) 694.776721ms ago: executing program 1 (id=1072): creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000c00), 0x1, 0xb80, &(0x7f00000017c0)="$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") prlimit64(0x0, 0xd, &(0x7f0000000300)={0xa, 0x8}, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}, 0x2}}, 0x2e) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000d40)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xe, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='io_uring_register\x00', r2}, 0x18) r3 = io_uring_setup(0x357a, &(0x7f00000000c0)={0x0, 0x2, 0x10, 0x1000000, 0x4}) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r3, 0x18, &(0x7f0000000000), 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={0x0}, 0x18) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c10, &(0x7f0000000400), 0xff, 0x23f, &(0x7f0000000540)="$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") r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x2, 0x4, 0x3, 0x5, 0x1000, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0)={r5, r4}, 0x6) bpf$MAP_CREATE(0x0, 0x0, 0x50) r6 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) write$sndseq(r6, &(0x7f00000003c0), 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x0, 0x0, &(0x7f0000000180)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) r7 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) setxattr$trusted_overlay_upper(&(0x7f00000003c0)='./file0/file0\x00', &(0x7f00000004c0), &(0x7f00000008c0)=ANY=[@ANYBLOB="00fbc904027837b432aaad44d2444e8dfa6d71b20e7b7f937fe9ff26a6cb747934b1a186c476e04f51bcf0ba9a2f226e18ee2a92278309a95c8f1612756aee839693a66eed48da09acd80532edc19f44c00e24aeeaf41fa3bbc64edff896dcb857e29f840296dec8e7695becbd6574017cfdecedeb347b934350bbd713b4ed7e0eb1c3d00342bf2bc2b38584a1020043a83c888a86180dffd6690fb34314a8ff3b1c62957061c03bace18df51de87b36b7b0bc4b36496b0fa4eb453abac4323eccbbf6758ed9fc8400"], 0xc9, 0x0) ioctl$LOOP_CTL_REMOVE(r7, 0x4c81, 0x0) 365.209006ms ago: executing program 3 (id=1073): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x10, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x7734, 0x1, 0x0, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) r3 = syz_open_dev$vcsn(&(0x7f0000000000), 0x34, 0xc0000) write$UHID_CREATE2(r3, &(0x7f0000000b80)={0xb, {'syz1\x00', 'syz0\x00', 'syz0\x00', 0x1000, 0x8, 0x5, 0x4, 0x760c, 0x1, "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"}}, 0x1118) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB=' '], 0x20}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x15523ea56aa22b9a, 0x0, 0x0, 0x0, 0x12345}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) syz_read_part_table(0x5be, &(0x7f00000005c0)="$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") 360.275006ms ago: executing program 5 (id=1074): syz_emit_ethernet(0x86, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0x5, 0x0, 0x0, @broadcast=0x1000000, {0x17, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @loopback, @broadcast, {[@timestamp_addr={0x44, 0xc, 0x3, 0x1, 0x0, [{@private=0xa010101, 0x4e210000}]}, @timestamp_addr={0x44, 0x3c, 0x0, 0x1, 0x0, [{@multicast1}, {}, {@dev}, {@private, 0x8}, {@empty}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@empty, 0xfffffffc}]}]}}}}}}}, 0x0) r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=@newqdisc={0x34, 0x24, 0xd0f, 0x70bd25, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffe0, 0xa}, {0x348244beaaa1c134, 0x5}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x55}, 0x4000) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000003200)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES8=r2, @ANYRES32=r3, @ANYRESDEC=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffee5, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r4}, 0x8) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f00000004c0)='ext4_mb_discard_preallocations\x00', r5, 0x0, 0x400000}, 0x18) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, 0x0, 0x4000054) syz_mount_image$ext4(&(0x7f0000001a00)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x410, &(0x7f0000001980)={[{@noload}, {@discard}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@lazytime}, {@quota}, {@errors_remount}]}, 0x3, 0x443, &(0x7f0000000940)="$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") 300.953726ms ago: executing program 3 (id=1075): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000080008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000340)='kfree\x00', r1}, 0x18) openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) r6 = syz_io_uring_setup(0x7d0b, &(0x7f0000000200)={0x0, 0x83a1, 0x8000, 0x1, 0x2fb}, &(0x7f0000000180), &(0x7f0000000280)) io_uring_register$IORING_UNREGISTER_EVENTFD(r6, 0x5, 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r5) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x16, 0x2, 0xff}]}, 0x10) sendto$inet6(0xffffffffffffffff, &(0x7f00000002c0)="1c0000001200050f0c1000000049b23e9b200a0008002ec000000001", 0x1c, 0x0, 0x0, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001240)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=@newtfilter={0x378, 0x28, 0xd27, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, r7}, [@filter_kind_options=@f_flow={{0x9}, {0x340, 0x2, [@TCA_FLOW_BASECLASS={0x8, 0x3, {0xfff3, 0x4}}, @TCA_FLOW_ADDEND={0x8, 0x5, 0x800}, @TCA_FLOW_KEYS={0x8, 0x1, 0xdd96}, @TCA_FLOW_XOR={0x8, 0x7, 0x1}, @TCA_FLOW_EMATCHES={0x31c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}, @TCA_EMATCH_TREE_LIST={0x288, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0x7ff, 0x8, 0x2b}, {0x0, 0x4, 0x2}}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x1035, 0x3, 0x7ff}, {0x2, 0x8, 0x6, 0x30c}}}, @TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0xa}, {0x1, 0xfffffffe, 0x3, 0x2, 0xd, 0x2, 0x1}}}, @TCF_EM_META={0x90, 0x3, 0x0, 0x0, {{0x5, 0x4, 0x1}, [@TCA_EM_META_LVALUE={0x18, 0x2, [@TCF_META_TYPE_INT, @TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_INT=0x3]}, @TCA_EM_META_LVALUE={0x21, 0x2, [@TCF_META_TYPE_VAR="949e45415c2b661e95", @TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_VAR="8033fd03f19c2316", @TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_INT]}, @TCA_EM_META_RVALUE={0x1c, 0x3, [@TCF_META_TYPE_VAR="13e26df3126c39", @TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_VAR="aa5e6b6249", @TCF_META_TYPE_INT=0x6]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x3, 0x80}, {0x1, 0x5}}}, @TCA_EM_META_LVALUE={0x1f, 0x2, [@TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_VAR="be911d", @TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_INT=0x3]}]}}, @TCF_EM_CONTAINER={0x10, 0x3, 0x0, 0x0, {{0x5, 0x0, 0x8}, '7-v'}}, @TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x2, 0x1, 0x1}, {0x7ff, 0xe, 0x4, 0x0, 0x8}}}, @TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0x9, 0x3, 0x2f23}, {0x2, 0x0, 0xae0, 0x1}}}, @TCF_EM_CONTAINER={0xac, 0x3, 0x0, 0x0, {{0xa61, 0x0, 0x3}, "e6b56f510f752d4d67f523ad8b41e011861feb275787086a548f5cce5732bc3bdd19692b6c5f60f2fca45d9f337f6380e5586e4468538b762d5f9aacd246ee71362344edc459e1ec42be9780ee1992c169e1fef4245c6fb95f33fd45d4a08e8c5d45fc6385405e923ae548a3e87f04e39b10149913a6f5a0e1d21e146861581b945b553af4cebd847ae805994e210bba2b4d5c77e37df544343a863d3322"}}, @TCF_EM_CONTAINER={0xa8, 0x1, 0x0, 0x0, {{0x2, 0x0, 0x4}, "a3599ba3e61cb05941c16e06318f343963d1b76259f986bf676e37783f9d92330f8928313fcad09e51f9574f249bdd9fa279cc861aeb6d45efa538cf93ac7f3e8c2d8dc152ed8d8eefb2d34852a099268bf819c4b8f2485d56cc3d2cf6cc7d7593c2f1bf3ff23e09035aa54b236b5a558bfa0678a60ed73e69b4662ab8061949325e2295a4e891284de731e7b2c1f0ed269e599a53ac180b39"}}, @TCF_EM_META={0x18, 0x3, 0x0, 0x0, {{0x1b78, 0x4, 0x1}, [@TCA_EM_META_LVALUE={0xc, 0x2, [@TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_VAR="e92d5572"]}]}}]}, @TCA_EMATCH_TREE_LIST={0x60, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0xf, 0x3, 0xfc56}, {0xffffffff, 0xff, 0x5, 0x7}}}, @TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x7, 0x1, 0xb}, {0x6, 0x2, 0x3, 0x0, 0x6}}}, @TCF_EM_CONTAINER={0xc, 0x3, 0x0, 0x0, {{0x3}}}, @TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0x2, 0x3, 0x6}, {0x5, 0x8, 0x3, 0x2fba}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x3}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x3}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x800}}]}]}}, @TCA_RATE={0x6, 0x5, {0xb8, 0x1}}]}, 0x378}}, 0x0) 47.88312ms ago: executing program 3 (id=1076): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='siox_get_data\x00', r0, 0x0, 0x5}, 0x18) prctl$PR_SET_NAME(0xf, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r2 = gettid() prctl$PR_SET_NAME(0xf, &(0x7f0000000340)='%.!\x00') sched_setaffinity(r2, 0x8, &(0x7f0000000140)=0x2) listen(r1, 0x9) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={r3, 0x58, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', r4, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r5}, 0x10) r6 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$int_in(r6, 0x5421, &(0x7f0000000100)=0x100000001) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmmsg(r7, &(0x7f0000002840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20044000) connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x14, r9, 0x1, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x800) 0s ago: executing program 5 (id=1077): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000001000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008180000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x43, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000080"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) creat(&(0x7f00000000c0)='./file0\x00', 0x198) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r3 = dup(r2) write$P9_RLERRORu(r3, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) lstat(&(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)) kernel console output (not intermixed with test programs): fa398225fa0 RCX: 00007fa397ffe969 [ 75.906666][ T5066] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000006 [ 75.906768][ T5066] RBP: 00007fa398080ab1 R08: 0000000000000004 R09: 0000000000000000 [ 75.906796][ T5066] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 75.906810][ T5066] R13: 0000000000000000 R14: 00007fa398225fa0 R15: 00007ffe78b6c0d8 [ 75.906828][ T5066] [ 75.906840][ T5066] Mem-Info: [ 76.132529][ T5066] active_anon:16874 inactive_anon:14 isolated_anon:0 [ 76.132529][ T5066] active_file:13422 inactive_file:2263 isolated_file:0 [ 76.132529][ T5066] unevictable:0 dirty:0 writeback:0 [ 76.132529][ T5066] slab_reclaimable:2938 slab_unreclaimable:14458 [ 76.132529][ T5066] mapped:37242 shmem:13618 pagetables:843 [ 76.132529][ T5066] sec_pagetables:0 bounce:0 [ 76.132529][ T5066] kernel_misc_reclaimable:0 [ 76.132529][ T5066] free:1881811 free_pcp:7794 free_cma:0 [ 76.177748][ T5066] Node 0 active_anon:70396kB inactive_anon:56kB active_file:53688kB inactive_file:9052kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:148968kB dirty:0kB writeback:0kB shmem:57488kB writeback_tmp:0kB kernel_stack:3760kB pagetables:3372kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 76.206574][ T5066] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 76.233471][ T5066] lowmem_reserve[]: 0 2884 7863 7863 [ 76.238918][ T5066] Node 0 DMA32 free:2949936kB boost:0kB min:4132kB low:7064kB high:9996kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2953568kB mlocked:0kB bounce:0kB free_pcp:3632kB local_pcp:100kB free_cma:0kB [ 76.267587][ T5066] lowmem_reserve[]: 0 0 4978 4978 [ 76.272809][ T5066] Node 0 Normal free:4554408kB boost:0kB min:7184kB low:12280kB high:17376kB reserved_highatomic:0KB active_anon:72368kB inactive_anon:56kB active_file:54732kB inactive_file:9052kB unevictable:0kB writepending:48kB present:5242880kB managed:5098244kB mlocked:0kB bounce:0kB free_pcp:28940kB local_pcp:5348kB free_cma:0kB [ 76.302935][ T5066] lowmem_reserve[]: 0 0 0 0 [ 76.307530][ T5066] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 76.320315][ T5066] Node 0 DMA32: 4*4kB (M) 2*8kB (M) 1*16kB (M) 4*32kB (M) 2*64kB (M) 2*128kB (M) 3*256kB (M) 3*512kB (M) 4*1024kB (M) 3*2048kB (M) 717*4096kB (M) = 2949936kB [ 76.336338][ T5066] Node 0 Normal: 127*4kB (UM) 60*8kB (U) 102*16kB (UME) 88*32kB (U) 63*64kB (UE) 51*128kB (UME) 36*256kB (UE) 28*512kB (UME) 22*1024kB (U) 22*2048kB (UE) 1085*4096kB (UM) = 4551292kB [ 76.354620][ T5066] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 76.363964][ T5066] 32531 total pagecache pages [ 76.368650][ T5066] 8 pages in swap cache [ 76.372878][ T5066] Free swap = 123936kB [ 76.377033][ T5066] Total swap = 124996kB [ 76.381208][ T5066] 2097051 pages RAM [ 76.385108][ T5066] 0 pages HighMem/MovableOnly [ 76.389832][ T5066] 80258 pages reserved [ 76.395570][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.409034][ T5064] wg2: entered promiscuous mode [ 76.413894][ T5064] wg2: entered allmulticast mode [ 76.430099][ T5064] sd 0:0:1:0: device reset [ 76.492103][ T5074] FAULT_INJECTION: forcing a failure. [ 76.492103][ T5074] name failslab, interval 1, probability 0, space 0, times 0 [ 76.504820][ T5074] CPU: 0 UID: 0 PID: 5074 Comm: syz.3.573 Not tainted 6.15.0-rc4-syzkaller-00052-g4f79eaa2ceac #0 PREEMPT(voluntary) [ 76.504848][ T5074] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 76.504862][ T5074] Call Trace: [ 76.504869][ T5074] [ 76.504885][ T5074] __dump_stack+0x1d/0x30 [ 76.504904][ T5074] dump_stack_lvl+0xe8/0x140 [ 76.504921][ T5074] dump_stack+0x15/0x1b [ 76.504936][ T5074] should_fail_ex+0x265/0x280 [ 76.504964][ T5074] ? tcf_pedit_init+0x448/0x970 [ 76.505006][ T5074] should_failslab+0x8c/0xb0 [ 76.505033][ T5074] __kmalloc_cache_noprof+0x4c/0x320 [ 76.505053][ T5074] tcf_pedit_init+0x448/0x970 [ 76.505140][ T5074] tcf_action_init_1+0x367/0x4a0 [ 76.505243][ T5074] tcf_action_init+0x1be/0x5f0 [ 76.505285][ T5074] tc_ctl_action+0x291/0x830 [ 76.505322][ T5074] ? __pfx_tc_ctl_action+0x10/0x10 [ 76.505379][ T5074] rtnetlink_rcv_msg+0x657/0x6d0 [ 76.505403][ T5074] netlink_rcv_skb+0x120/0x220 [ 76.505430][ T5074] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 76.505476][ T5074] rtnetlink_rcv+0x1c/0x30 [ 76.505504][ T5074] netlink_unicast+0x59e/0x670 [ 76.505531][ T5074] netlink_sendmsg+0x58b/0x6b0 [ 76.505562][ T5074] ? __pfx_netlink_sendmsg+0x10/0x10 [ 76.505670][ T5074] __sock_sendmsg+0x142/0x180 [ 76.505693][ T5074] ____sys_sendmsg+0x31e/0x4e0 [ 76.505712][ T5074] ___sys_sendmsg+0x17b/0x1d0 [ 76.505751][ T5074] __x64_sys_sendmsg+0xd4/0x160 [ 76.505772][ T5074] x64_sys_call+0x2999/0x2fb0 [ 76.505791][ T5074] do_syscall_64+0xd0/0x1a0 [ 76.505810][ T5074] ? clear_bhb_loop+0x25/0x80 [ 76.505829][ T5074] ? clear_bhb_loop+0x25/0x80 [ 76.505907][ T5074] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.505925][ T5074] RIP: 0033:0x7f6026b2e969 [ 76.505938][ T5074] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 76.505982][ T5074] RSP: 002b:00007f6025197038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 76.506069][ T5074] RAX: ffffffffffffffda RBX: 00007f6026d55fa0 RCX: 00007f6026b2e969 [ 76.506079][ T5074] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000000000000005 [ 76.506089][ T5074] RBP: 00007f6025197090 R08: 0000000000000000 R09: 0000000000000000 [ 76.506099][ T5074] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 76.506109][ T5074] R13: 0000000000000000 R14: 00007f6026d55fa0 R15: 00007ffc71b2a8c8 [ 76.506185][ T5074] [ 76.832185][ T5092] FAULT_INJECTION: forcing a failure. [ 76.832185][ T5092] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 76.845351][ T5092] CPU: 1 UID: 0 PID: 5092 Comm: syz.3.580 Not tainted 6.15.0-rc4-syzkaller-00052-g4f79eaa2ceac #0 PREEMPT(voluntary) [ 76.845380][ T5092] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 76.845394][ T5092] Call Trace: [ 76.845400][ T5092] [ 76.845407][ T5092] __dump_stack+0x1d/0x30 [ 76.845424][ T5092] dump_stack_lvl+0xe8/0x140 [ 76.845495][ T5092] dump_stack+0x15/0x1b [ 76.845573][ T5092] should_fail_ex+0x265/0x280 [ 76.845605][ T5092] should_fail+0xb/0x20 [ 76.845635][ T5092] should_fail_usercopy+0x1a/0x20 [ 76.845676][ T5092] _copy_to_user+0x20/0xa0 [ 76.845759][ T5092] simple_read_from_buffer+0xb5/0x130 [ 76.845784][ T5092] proc_fail_nth_read+0x100/0x140 [ 76.845813][ T5092] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 76.845839][ T5092] vfs_read+0x19d/0x6f0 [ 76.845879][ T5092] ? __rcu_read_unlock+0x4f/0x70 [ 76.845895][ T5092] ? __fget_files+0x184/0x1c0 [ 76.846006][ T5092] ksys_read+0xda/0x1a0 [ 76.846029][ T5092] __x64_sys_read+0x40/0x50 [ 76.846049][ T5092] x64_sys_call+0x2d77/0x2fb0 [ 76.846067][ T5092] do_syscall_64+0xd0/0x1a0 [ 76.846103][ T5092] ? clear_bhb_loop+0x25/0x80 [ 76.846128][ T5092] ? clear_bhb_loop+0x25/0x80 [ 76.846153][ T5092] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.846177][ T5092] RIP: 0033:0x7f6026b2d37c [ 76.846193][ T5092] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 76.846247][ T5092] RSP: 002b:00007f6025197030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 76.846262][ T5092] RAX: ffffffffffffffda RBX: 00007f6026d55fa0 RCX: 00007f6026b2d37c [ 76.846285][ T5092] RDX: 000000000000000f RSI: 00007f60251970a0 RDI: 0000000000000007 [ 76.846299][ T5092] RBP: 00007f6025197090 R08: 0000000000000000 R09: 0000000000000000 [ 76.846313][ T5092] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 76.846327][ T5092] R13: 0000000000000000 R14: 00007f6026d55fa0 R15: 00007ffc71b2a8c8 [ 76.846427][ T5092] [ 77.050144][ T29] kauditd_printk_skb: 28 callbacks suppressed [ 77.050158][ T29] audit: type=1326 audit(1746153029.759:1524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5077 comm="syz.1.572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa397ffe969 code=0x7ffc0000 [ 77.138474][ T29] audit: type=1326 audit(1746153029.759:1525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5077 comm="syz.1.572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa397ffe969 code=0x7ffc0000 [ 77.161931][ T29] audit: type=1326 audit(1746153029.759:1526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5077 comm="syz.1.572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa397ffe969 code=0x7ffc0000 [ 77.185134][ T29] audit: type=1326 audit(1746153029.759:1527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5077 comm="syz.1.572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa397ffe969 code=0x7ffc0000 [ 77.208447][ T29] audit: type=1326 audit(1746153029.759:1528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5077 comm="syz.1.572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=48 compat=0 ip=0x7fa397ffe969 code=0x7ffc0000 [ 77.231793][ T29] audit: type=1326 audit(1746153029.759:1529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5077 comm="syz.1.572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa397ffe969 code=0x7ffc0000 [ 77.255128][ T29] audit: type=1326 audit(1746153029.759:1530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5077 comm="syz.1.572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7fa397ffe969 code=0x7ffc0000 [ 77.278551][ T29] audit: type=1326 audit(1746153029.759:1531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5077 comm="syz.1.572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa397ffe969 code=0x7ffc0000 [ 77.301915][ T29] audit: type=1326 audit(1746153029.759:1532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5077 comm="syz.1.572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa397ffe969 code=0x7ffc0000 [ 77.325210][ T29] audit: type=1326 audit(1746153029.759:1533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5077 comm="syz.1.572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa397ffe969 code=0x7ffc0000 [ 77.378885][ T5109] netlink: 72 bytes leftover after parsing attributes in process `syz.3.585'. [ 77.575759][ T5136] loop3: detected capacity change from 0 to 128 [ 77.620416][ T5142] loop3: detected capacity change from 0 to 512 [ 77.627934][ T5142] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 77.669385][ T5142] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.686733][ T5142] ext4 filesystem being mounted at /136/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 77.713192][ T5142] EXT4-fs error (device loop3): ext4_xattr_block_get:593: inode #15: comm syz.3.600: corrupted xattr block 19: overlapping e_value [ 77.731379][ T5142] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 77.768074][ T5160] loop1: detected capacity change from 0 to 2048 [ 77.778913][ T5142] EXT4-fs error (device loop3): ext4_xattr_block_get:593: inode #15: comm syz.3.600: corrupted xattr block 19: overlapping e_value [ 77.814139][ T5142] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 77.829163][ T5142] EXT4-fs error (device loop3): ext4_xattr_block_get:593: inode #15: comm syz.3.600: corrupted xattr block 19: overlapping e_value [ 77.847723][ T5164] loop2: detected capacity change from 0 to 512 [ 77.861372][ T5164] EXT4-fs error (device loop2): ext4_orphan_get:1391: inode #15: comm syz.2.607: casefold flag without casefold feature [ 77.879685][ T5164] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.607: couldn't read orphan inode 15 (err -117) [ 77.880055][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.902016][ T5164] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.275046][ T5175] FAULT_INJECTION: forcing a failure. [ 78.275046][ T5175] name failslab, interval 1, probability 0, space 0, times 0 [ 78.287810][ T5175] CPU: 0 UID: 0 PID: 5175 Comm: syz.0.611 Not tainted 6.15.0-rc4-syzkaller-00052-g4f79eaa2ceac #0 PREEMPT(voluntary) [ 78.287916][ T5175] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 78.287942][ T5175] Call Trace: [ 78.287950][ T5175] [ 78.287958][ T5175] __dump_stack+0x1d/0x30 [ 78.287992][ T5175] dump_stack_lvl+0xe8/0x140 [ 78.288013][ T5175] dump_stack+0x15/0x1b [ 78.288081][ T5175] should_fail_ex+0x265/0x280 [ 78.288108][ T5175] should_failslab+0x8c/0xb0 [ 78.288206][ T5175] kmem_cache_alloc_node_noprof+0x57/0x320 [ 78.288234][ T5175] ? __alloc_skb+0x101/0x320 [ 78.288267][ T5175] __alloc_skb+0x101/0x320 [ 78.288292][ T5175] ? audit_log_start+0x365/0x6c0 [ 78.288401][ T5175] audit_log_start+0x380/0x6c0 [ 78.288503][ T5175] audit_seccomp+0x48/0x100 [ 78.288530][ T5175] ? __seccomp_filter+0x68c/0x10d0 [ 78.288612][ T5175] __seccomp_filter+0x69d/0x10d0 [ 78.288635][ T5175] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 78.288658][ T5175] ? vfs_write+0x75e/0x8d0 [ 78.288677][ T5175] ? __rcu_read_unlock+0x4f/0x70 [ 78.288698][ T5175] ? __fget_files+0x184/0x1c0 [ 78.288790][ T5175] __secure_computing+0x82/0x150 [ 78.288807][ T5175] syscall_trace_enter+0xcf/0x1e0 [ 78.288825][ T5175] do_syscall_64+0xaa/0x1a0 [ 78.288845][ T5175] ? clear_bhb_loop+0x25/0x80 [ 78.288874][ T5175] ? clear_bhb_loop+0x25/0x80 [ 78.288891][ T5175] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 78.288922][ T5175] RIP: 0033:0x7ff3ca98d37c [ 78.288937][ T5175] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 78.288955][ T5175] RSP: 002b:00007ff3c8ff7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 78.288974][ T5175] RAX: ffffffffffffffda RBX: 00007ff3cabb5fa0 RCX: 00007ff3ca98d37c [ 78.289023][ T5175] RDX: 000000000000000f RSI: 00007ff3c8ff70a0 RDI: 0000000000000006 [ 78.289037][ T5175] RBP: 00007ff3c8ff7090 R08: 0000000000000000 R09: 0000000000000000 [ 78.289048][ T5175] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 78.289058][ T5175] R13: 0000000000000000 R14: 00007ff3cabb5fa0 R15: 00007ffda385adc8 [ 78.289073][ T5175] [ 78.659619][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.687093][ T5196] loop2: detected capacity change from 0 to 128 [ 78.694765][ T5197] netlink: 4 bytes leftover after parsing attributes in process `syz.0.621'. [ 78.696729][ T5196] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 78.716221][ T5197] netlink: 12 bytes leftover after parsing attributes in process `syz.0.621'. [ 78.718513][ T5196] ext4 filesystem being mounted at /120/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 78.829652][ T3309] EXT4-fs error (device loop2): ext4_readdir:224: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 1024 [ 78.846270][ T5203] vhci_hcd: invalid port number 236 [ 78.851540][ T5203] vhci_hcd: invalid port number 236 [ 78.879918][ T3309] EXT4-fs error (device loop2): ext4_readdir:224: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 8192 [ 78.901218][ T3309] EXT4-fs error (device loop2): ext4_empty_dir:3107: inode #11: block 1: comm syz-executor: Directory block failed checksum [ 78.914619][ T3309] EXT4-fs error (device loop2): ext4_readdir:224: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 1024 [ 78.930040][ T3309] EXT4-fs error (device loop2): ext4_readdir:224: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 8192 [ 78.962090][ T3309] EXT4-fs error (device loop2): ext4_empty_dir:3107: inode #11: block 1: comm syz-executor: Directory block failed checksum [ 78.976666][ T3309] EXT4-fs error (device loop2): ext4_readdir:224: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 1024 [ 79.005749][ T3309] EXT4-fs error (device loop2): ext4_readdir:224: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 8192 [ 79.020479][ T3309] EXT4-fs error (device loop2): ext4_empty_dir:3107: inode #11: block 1: comm syz-executor: Directory block failed checksum [ 79.034247][ T3309] EXT4-fs error (device loop2): ext4_readdir:224: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 1024 [ 79.152108][ T5222] netlink: 8 bytes leftover after parsing attributes in process `syz.3.630'. [ 79.161047][ T5222] netlink: 8 bytes leftover after parsing attributes in process `syz.3.630'. [ 79.187656][ T3613] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 79.235393][ T4098] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.336572][ T4098] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.377173][ T5227] chnl_net:caif_netlink_parms(): no params data found [ 79.403132][ T4098] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.455596][ T4098] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.466645][ T5227] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.473771][ T5227] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.481014][ T5227] bridge_slave_0: entered allmulticast mode [ 79.487440][ T5227] bridge_slave_0: entered promiscuous mode [ 79.497846][ T5227] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.504973][ T5227] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.513413][ T5227] bridge_slave_1: entered allmulticast mode [ 79.519981][ T5227] bridge_slave_1: entered promiscuous mode [ 79.538717][ T5270] loop1: detected capacity change from 0 to 256 [ 79.548354][ T5227] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.558349][ T5270] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 79.560336][ T5227] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.564897][ T5270] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 79.581560][ T5270] vhci_hcd vhci_hcd.0: Device attached [ 79.596191][ T5271] vhci_hcd: connection closed [ 79.596342][ T4112] vhci_hcd: stop threads [ 79.605597][ T4112] vhci_hcd: release socket [ 79.610035][ T4112] vhci_hcd: disconnect device [ 79.622326][ T5227] team0: Port device team_slave_0 added [ 79.629132][ T5227] team0: Port device team_slave_1 added [ 79.669034][ T5227] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.676005][ T5227] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.701999][ T5227] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.717129][ T5246] chnl_net:caif_netlink_parms(): no params data found [ 79.726040][ T5227] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.733027][ T5227] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.758928][ T5227] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.772343][ T4098] bridge_slave_1: left allmulticast mode [ 79.778002][ T4098] bridge_slave_1: left promiscuous mode [ 79.783778][ T4098] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.791817][ T4098] bridge_slave_0: left allmulticast mode [ 79.797494][ T4098] bridge_slave_0: left promiscuous mode [ 79.803271][ T4098] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.930440][ T4098] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 79.940180][ T4098] bond0 (unregistering): Released all slaves [ 79.960091][ T5294] syz_tun: entered allmulticast mode [ 79.982854][ T5227] hsr_slave_0: entered promiscuous mode [ 79.990460][ T5227] hsr_slave_1: entered promiscuous mode [ 79.996409][ T5227] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 80.004242][ T5227] Cannot create hsr debugfs directory [ 80.017102][ T4098] tipc: Left network mode [ 80.041967][ T5246] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.049199][ T5246] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.056303][ T5246] bridge_slave_0: entered allmulticast mode [ 80.062714][ T5246] bridge_slave_0: entered promiscuous mode [ 80.077313][ T4098] hsr_slave_0: left promiscuous mode [ 80.083282][ T4098] hsr_slave_1: left promiscuous mode [ 80.089433][ T4098] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 80.096840][ T4098] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 80.105203][ T4098] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 80.112615][ T4098] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 80.124922][ T4098] veth1_macvtap: left promiscuous mode [ 80.130426][ T4098] veth0_macvtap: left promiscuous mode [ 80.136004][ T4098] veth1_vlan: left promiscuous mode [ 80.141252][ T4098] veth0_vlan: left promiscuous mode [ 80.202775][ T4098] team0 (unregistering): Port device team_slave_1 removed [ 80.213226][ T4098] team0 (unregistering): Port device team_slave_0 removed [ 80.243180][ T5246] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.250299][ T5246] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.257452][ T5246] bridge_slave_1: entered allmulticast mode [ 80.264701][ T5246] bridge_slave_1: entered promiscuous mode [ 80.278040][ T2969] infiniband syz1: ib_query_port failed (-19) [ 80.280435][ T5303] smc: net device bond0 applied user defined pnetid SYZ0 [ 80.298509][ T5292] syz_tun: left allmulticast mode [ 80.308485][ T5246] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.320641][ T5246] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.332555][ T5306] FAULT_INJECTION: forcing a failure. [ 80.332555][ T5306] name failslab, interval 1, probability 0, space 0, times 0 [ 80.345158][ T5306] CPU: 1 UID: 0 PID: 5306 Comm: syz.1.655 Not tainted 6.15.0-rc4-syzkaller-00052-g4f79eaa2ceac #0 PREEMPT(voluntary) [ 80.345234][ T5306] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 80.345243][ T5306] Call Trace: [ 80.345247][ T5306] [ 80.345252][ T5306] __dump_stack+0x1d/0x30 [ 80.345268][ T5306] dump_stack_lvl+0xe8/0x140 [ 80.345281][ T5306] dump_stack+0x15/0x1b [ 80.345293][ T5306] should_fail_ex+0x265/0x280 [ 80.345373][ T5306] should_failslab+0x8c/0xb0 [ 80.345406][ T5306] kmem_cache_alloc_noprof+0x50/0x310 [ 80.345508][ T5306] ? skb_clone+0x151/0x1f0 [ 80.345573][ T5306] ? __bpf_redirect+0x67f/0x990 [ 80.345605][ T5306] skb_clone+0x151/0x1f0 [ 80.345618][ T5306] bpf_clone_redirect+0x7a/0x200 [ 80.345663][ T5306] bpf_prog_208b094576c80b22+0x5f/0x64 [ 80.345676][ T5306] ? security_inode_alloc+0x37/0x100 [ 80.345690][ T5306] ? should_fail_ex+0x30/0x280 [ 80.345710][ T5306] ? __rcu_read_unlock+0x4f/0x70 [ 80.345725][ T5306] ? avc_has_perm_noaudit+0x1b1/0x200 [ 80.345762][ T5306] ? avc_has_perm+0xd3/0x150 [ 80.345810][ T5306] ? __rcu_read_unlock+0x4f/0x70 [ 80.345833][ T5306] ? is_bpf_text_address+0x141/0x160 [ 80.345854][ T5306] ? kernel_text_address+0x94/0xb0 [ 80.345871][ T5306] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 80.345931][ T5306] ? __kernel_text_address+0xd/0x40 [ 80.345951][ T5306] ? unwind_get_return_address+0x16/0x40 [ 80.345969][ T5306] ? arch_stack_walk+0xfc/0x150 [ 80.345984][ T5306] ? filter_irq_stacks+0x1d/0x70 [ 80.346004][ T5306] ? stack_depot_save_flags+0xa3f/0xb10 [ 80.346106][ T5306] ? bpf_test_timer_continue+0xc0/0x260 [ 80.346177][ T5306] bpf_test_run+0x1e0/0x490 [ 80.346273][ T5306] ? __list_add_valid_or_report+0x38/0xe0 [ 80.346364][ T5306] ? bpf_test_run+0xf6/0x490 [ 80.346415][ T5306] bpf_prog_test_run_skb+0x834/0xbd0 [ 80.346441][ T5306] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 80.346534][ T5306] bpf_prog_test_run+0x207/0x390 [ 80.346559][ T5306] __sys_bpf+0x3dc/0x790 [ 80.346586][ T5306] __x64_sys_bpf+0x41/0x50 [ 80.346672][ T5306] x64_sys_call+0x2478/0x2fb0 [ 80.346688][ T5306] do_syscall_64+0xd0/0x1a0 [ 80.346705][ T5306] ? clear_bhb_loop+0x25/0x80 [ 80.346721][ T5306] ? clear_bhb_loop+0x25/0x80 [ 80.346805][ T5306] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 80.346823][ T5306] RIP: 0033:0x7fa397ffe969 [ 80.346835][ T5306] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 80.346850][ T5306] RSP: 002b:00007fa396667038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 80.346898][ T5306] RAX: ffffffffffffffda RBX: 00007fa398225fa0 RCX: 00007fa397ffe969 [ 80.346908][ T5306] RDX: 000000000000002c RSI: 0000200000000080 RDI: 000000000000000a [ 80.346949][ T5306] RBP: 00007fa396667090 R08: 0000000000000000 R09: 0000000000000000 [ 80.346959][ T5306] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 80.346969][ T5306] R13: 0000000000000000 R14: 00007fa398225fa0 R15: 00007ffe78b6c0d8 [ 80.346984][ T5306] [ 80.666381][ T5246] team0: Port device team_slave_0 added [ 80.673094][ T5246] team0: Port device team_slave_1 added [ 80.699794][ T5246] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.706881][ T5246] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.732974][ T5246] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.760277][ T5246] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.767324][ T5246] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.793319][ T5246] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.807299][ T5328] netlink: 4 bytes leftover after parsing attributes in process `syz.1.664'. [ 80.837648][ T5227] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 80.865486][ T5328] netlink: 12 bytes leftover after parsing attributes in process `syz.1.664'. [ 80.876955][ T5227] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 80.885476][ T5332] xt_CT: No such helper "snmp_trap" [ 80.906519][ T5246] hsr_slave_0: entered promiscuous mode [ 80.913028][ T5246] hsr_slave_1: entered promiscuous mode [ 80.919113][ T5246] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 80.926706][ T5246] Cannot create hsr debugfs directory [ 80.949340][ T5227] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 80.963893][ T5227] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 81.036050][ T4098] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.089968][ T5227] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.099989][ T5246] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 81.109951][ T5246] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 81.118833][ T5246] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 81.130774][ T4098] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.141801][ T5246] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 81.156705][ T5227] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.168630][ T4079] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.175761][ T4079] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.189895][ T4061] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.197048][ T4061] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.209890][ T4098] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.271841][ T4098] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.287419][ T5246] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.311295][ T5246] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.327706][ T5227] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.337700][ T4061] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.344799][ T4061] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.361505][ T4058] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.368593][ T4058] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.394665][ T5246] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 81.408356][ T4098] bridge_slave_1: left allmulticast mode [ 81.414046][ T4098] bridge_slave_1: left promiscuous mode [ 81.419762][ T4098] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.427548][ T4098] bridge_slave_0: left allmulticast mode [ 81.433323][ T4098] bridge_slave_0: left promiscuous mode [ 81.439023][ T4098] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.511004][ T4098] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 81.520874][ T4098] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 81.530389][ T4098] bond0 (unregistering): Released all slaves [ 81.579473][ T5246] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.596882][ T4098] hsr_slave_0: left promiscuous mode [ 81.602758][ T4098] hsr_slave_1: left promiscuous mode [ 81.608349][ T4098] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 81.615894][ T4098] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 81.623704][ T4098] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 81.631232][ T4098] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 81.641319][ T4098] veth1_macvtap: left promiscuous mode [ 81.646796][ T4098] veth0_macvtap: left promiscuous mode [ 81.652350][ T4098] veth1_vlan: left promiscuous mode [ 81.657567][ T4098] veth0_vlan: left promiscuous mode [ 81.715714][ T4098] team0 (unregistering): Port device team_slave_1 removed [ 81.724953][ T4098] team0 (unregistering): Port device team_slave_0 removed [ 81.765957][ T5227] veth0_vlan: entered promiscuous mode [ 81.773460][ T5227] veth1_vlan: entered promiscuous mode [ 81.787760][ T5227] veth0_macvtap: entered promiscuous mode [ 81.801515][ T5227] veth1_macvtap: entered promiscuous mode [ 81.813618][ T5227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.824251][ T5227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.834119][ T5227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.844618][ T5227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.854448][ T5227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.864974][ T5227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.875751][ T5227] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.885256][ T5227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.895765][ T5227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.905648][ T5227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.916175][ T5227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.925999][ T5227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.936415][ T5227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.947491][ T5227] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.955711][ T5227] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.964520][ T5227] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.973247][ T5227] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.982062][ T5227] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.020716][ T5398] loop3: detected capacity change from 0 to 256 [ 82.029721][ T5398] FAULT_INJECTION: forcing a failure. [ 82.029721][ T5398] name failslab, interval 1, probability 0, space 0, times 0 [ 82.031676][ T5246] veth0_vlan: entered promiscuous mode [ 82.042338][ T5398] CPU: 0 UID: 0 PID: 5398 Comm: syz.3.678 Not tainted 6.15.0-rc4-syzkaller-00052-g4f79eaa2ceac #0 PREEMPT(voluntary) [ 82.042502][ T5398] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 82.042516][ T5398] Call Trace: [ 82.042522][ T5398] [ 82.042529][ T5398] __dump_stack+0x1d/0x30 [ 82.042552][ T5398] dump_stack_lvl+0xe8/0x140 [ 82.042617][ T5398] dump_stack+0x15/0x1b [ 82.042651][ T5398] should_fail_ex+0x265/0x280 [ 82.042758][ T5398] should_failslab+0x8c/0xb0 [ 82.042789][ T5398] kmem_cache_alloc_noprof+0x50/0x310 [ 82.042826][ T5398] ? fat_parse_long+0x5d/0x430 [ 82.042935][ T5398] fat_parse_long+0x5d/0x430 [ 82.042964][ T5398] fat_search_long+0x1cc/0x9c0 [ 82.042992][ T5398] ? finish_task_switch+0xad/0x2b0 [ 82.043048][ T5398] vfat_lookup+0xd5/0x2d0 [ 82.043140][ T5398] ? __pfx_vfat_lookup+0x10/0x10 [ 82.043160][ T5398] path_openat+0xcf0/0x2170 [ 82.043194][ T5398] do_filp_open+0x109/0x230 [ 82.043226][ T5398] do_sys_openat2+0xa6/0x110 [ 82.043276][ T5398] __x64_sys_openat+0xf2/0x120 [ 82.043299][ T5398] x64_sys_call+0x1af/0x2fb0 [ 82.043322][ T5398] do_syscall_64+0xd0/0x1a0 [ 82.043344][ T5398] ? clear_bhb_loop+0x25/0x80 [ 82.043367][ T5398] ? clear_bhb_loop+0x25/0x80 [ 82.043446][ T5398] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.043468][ T5398] RIP: 0033:0x7f6026b2e969 [ 82.043484][ T5398] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 82.043564][ T5398] RSP: 002b:00007f6025197038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 82.043584][ T5398] RAX: ffffffffffffffda RBX: 00007f6026d55fa0 RCX: 00007f6026b2e969 [ 82.043598][ T5398] RDX: 0000000000000042 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 82.043611][ T5398] RBP: 00007f6025197090 R08: 0000000000000000 R09: 0000000000000000 [ 82.043624][ T5398] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 82.043640][ T5398] R13: 0000000000000000 R14: 00007f6026d55fa0 R15: 00007ffc71b2a8c8 [ 82.043659][ T5398] [ 82.259331][ T5246] veth1_vlan: entered promiscuous mode [ 82.274877][ T5246] veth0_macvtap: entered promiscuous mode [ 82.282697][ T5246] veth1_macvtap: entered promiscuous mode [ 82.289152][ T29] kauditd_printk_skb: 160 callbacks suppressed [ 82.289163][ T29] audit: type=1326 audit(1746153034.999:1690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5401 comm="syz.0.680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3ca98e969 code=0x7ffc0000 [ 82.318708][ T29] audit: type=1326 audit(1746153034.999:1691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5401 comm="syz.0.680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3ca98e969 code=0x7ffc0000 [ 82.347845][ T5246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.358377][ T5246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.368251][ T5246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.369813][ T29] audit: type=1326 audit(1746153035.049:1692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5401 comm="syz.0.680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff3ca98e969 code=0x7ffc0000 [ 82.378793][ T5246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.402037][ T29] audit: type=1326 audit(1746153035.049:1693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5401 comm="syz.0.680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3ca98e969 code=0x7ffc0000 [ 82.402058][ T29] audit: type=1326 audit(1746153035.049:1694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5401 comm="syz.0.680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3ca98e969 code=0x7ffc0000 [ 82.411912][ T5246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.435126][ T29] audit: type=1326 audit(1746153035.049:1695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5401 comm="syz.0.680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=280 compat=0 ip=0x7ff3ca98e969 code=0x7ffc0000 [ 82.458379][ T5246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.468801][ T29] audit: type=1326 audit(1746153035.049:1696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5401 comm="syz.0.680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3ca98e969 code=0x7ffc0000 [ 82.492122][ T5246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.501874][ T29] audit: type=1326 audit(1746153035.049:1697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5401 comm="syz.0.680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3ca98e969 code=0x7ffc0000 [ 82.525359][ T5404] loop3: detected capacity change from 0 to 512 [ 82.535583][ T5246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.537318][ T5246] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.578020][ T5407] netlink: 4 bytes leftover after parsing attributes in process `syz.5.633'. [ 82.592574][ T5246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.603136][ T5246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.612960][ T5246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.623531][ T5246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.633348][ T5246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.643844][ T5246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.653704][ T5246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.664233][ T5246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.674715][ T5246] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.679989][ T5407] loop5: detected capacity change from 0 to 512 [ 82.690549][ T5407] EXT4-fs: quotafile must be on filesystem root [ 82.698266][ T5407] netlink: 696 bytes leftover after parsing attributes in process `syz.5.633'. [ 82.699200][ T5246] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.716016][ T5246] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.724786][ T5246] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.733535][ T5246] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.743298][ T5404] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.756148][ T5404] ext4 filesystem being mounted at /155/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 82.797792][ T5404] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.804743][ T5415] netlink: 4 bytes leftover after parsing attributes in process `syz.0.684'. [ 82.814168][ T29] audit: type=1400 audit(1746153035.489:1698): avc: denied { create } for pid=5403 comm="syz.3.681" name="file2" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 82.835762][ T29] audit: type=1400 audit(1746153035.489:1699): avc: denied { ioctl } for pid=5403 comm="syz.3.681" path="/155/bus/file2" dev="loop3" ino=16 ioctlcmd=0x660f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 82.865591][ T5415] netlink: 12 bytes leftover after parsing attributes in process `syz.0.684'. [ 83.076286][ T5463] netlink: 'syz.5.701': attribute type 1 has an invalid length. [ 83.286189][ T5483] netlink: 'syz.0.702': attribute type 4 has an invalid length. [ 83.298443][ T5483] netlink: 'syz.0.702': attribute type 4 has an invalid length. [ 84.132167][ T5493] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 84.165799][ T5493] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 84.209863][ T5498] __nla_validate_parse: 5 callbacks suppressed [ 84.209875][ T5498] netlink: 8 bytes leftover after parsing attributes in process `syz.1.712'. [ 84.224849][ T5498] netlink: 8 bytes leftover after parsing attributes in process `syz.1.712'. [ 84.452153][ T5511] loop6: detected capacity change from 0 to 512 [ 84.495338][ T5511] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 84.658764][ T5511] EXT4-fs (loop6): 1 truncate cleaned up [ 84.665168][ T5525] FAULT_INJECTION: forcing a failure. [ 84.665168][ T5525] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 84.678453][ T5525] CPU: 1 UID: 0 PID: 5525 Comm: syz.5.725 Not tainted 6.15.0-rc4-syzkaller-00052-g4f79eaa2ceac #0 PREEMPT(voluntary) [ 84.678559][ T5525] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 84.678573][ T5525] Call Trace: [ 84.678581][ T5525] [ 84.678589][ T5525] __dump_stack+0x1d/0x30 [ 84.678614][ T5525] dump_stack_lvl+0xe8/0x140 [ 84.678632][ T5525] dump_stack+0x15/0x1b [ 84.678647][ T5525] should_fail_ex+0x265/0x280 [ 84.678739][ T5525] should_fail_alloc_page+0xf2/0x100 [ 84.678772][ T5525] __alloc_frozen_pages_noprof+0xff/0x360 [ 84.678803][ T5525] alloc_pages_mpol+0xb3/0x250 [ 84.678846][ T5525] vma_alloc_folio_noprof+0x1aa/0x300 [ 84.678870][ T5525] handle_mm_fault+0x1056/0x2ae0 [ 84.678893][ T5511] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.678905][ T5525] ? mas_walk+0xf2/0x120 [ 84.678935][ T5525] do_user_addr_fault+0x636/0x1090 [ 84.679055][ T5525] ? fpregs_assert_state_consistent+0x84/0xa0 [ 84.679094][ T5525] exc_page_fault+0x54/0xc0 [ 84.679213][ T5525] asm_exc_page_fault+0x26/0x30 [ 84.679237][ T5525] RIP: 0033:0x7fa9cf640cc3 [ 84.679256][ T5525] Code: 1f 84 00 00 00 00 00 3d 00 01 00 00 75 29 45 31 f6 48 83 c4 18 44 89 f0 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 40 00 49 8b 0f <44> 88 34 01 49 83 47 10 01 eb 92 66 90 8d 90 ff fe ff ff 83 fa 1c [ 84.679348][ T5525] RSP: 002b:00007fa9cdde64a0 EFLAGS: 00010206 [ 84.679366][ T5525] RAX: 000000000000e000 RBX: 00007fa9cdde6540 RCX: 00007fa9c59c7000 [ 84.679381][ T5525] RDX: 00007fa9cdde66e0 RSI: 0000000000000003 RDI: 00007fa9cdde65e0 [ 84.679396][ T5525] RBP: 00000000000000a3 R08: 000000000000000b R09: 00000000000007ba [ 84.679420][ T5525] R10: 00000000000007d0 R11: 00007fa9cdde6540 R12: 0000000000000001 [ 84.679435][ T5525] R13: 00007fa9cf81bfc0 R14: 0000000000000088 R15: 00007fa9cdde65e0 [ 84.679457][ T5525] [ 84.679468][ T5525] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 84.791484][ T5531] mmap: syz.0.726 (5531): VmData 29077504 exceed data ulimit 2. Update limits or use boot option ignore_rlimit_data. [ 84.836177][ T5525] loop5: detected capacity change from 0 to 164 [ 84.890474][ T5246] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.900177][ T5525] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 84.910620][ T5525] netlink: 64859 bytes leftover after parsing attributes in process `syz.5.725'. [ 84.923604][ T5525] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 84.933307][ T5530] netlink: 140 bytes leftover after parsing attributes in process `syz.1.728'. [ 84.944845][ T5525] Symlink component flag not implemented [ 84.950644][ T5525] Symlink component flag not implemented [ 84.956479][ T5525] Symlink component flag not implemented (7) [ 84.962576][ T5525] Symlink component flag not implemented (116) [ 84.972049][ T5525] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 84.982085][ T5525] rock: directory entry would overflow storage [ 84.988326][ T5525] rock: sig=0x4f50, size=4, remaining=3 [ 84.994088][ T5525] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 85.019702][ T5543] FAULT_INJECTION: forcing a failure. [ 85.019702][ T5543] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 85.033033][ T5543] CPU: 1 UID: 0 PID: 5543 Comm: syz.5.733 Not tainted 6.15.0-rc4-syzkaller-00052-g4f79eaa2ceac #0 PREEMPT(voluntary) [ 85.033069][ T5543] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 85.033084][ T5543] Call Trace: [ 85.033092][ T5543] [ 85.033100][ T5543] __dump_stack+0x1d/0x30 [ 85.033168][ T5543] dump_stack_lvl+0xe8/0x140 [ 85.033191][ T5543] dump_stack+0x15/0x1b [ 85.033210][ T5543] should_fail_ex+0x265/0x280 [ 85.033248][ T5543] should_fail_alloc_page+0xf2/0x100 [ 85.033308][ T5543] __alloc_frozen_pages_noprof+0xff/0x360 [ 85.033341][ T5543] alloc_pages_mpol+0xb3/0x250 [ 85.033368][ T5543] vma_alloc_folio_noprof+0x1aa/0x300 [ 85.033397][ T5543] handle_mm_fault+0x1056/0x2ae0 [ 85.033482][ T5543] ? __rcu_read_lock+0x37/0x50 [ 85.033516][ T5543] __get_user_pages+0xde2/0x1d20 [ 85.033562][ T5543] __gup_longterm_locked+0x30f/0x1010 [ 85.033609][ T5543] ? ___pte_offset_map+0xc3/0x140 [ 85.033636][ T5543] gup_fast_fallback+0x1134/0x1500 [ 85.033686][ T5543] pin_user_pages_fast+0x5f/0x90 [ 85.033724][ T5543] io_pin_pages+0xb5/0x170 [ 85.033751][ T5543] io_sqe_buffer_register+0x184/0x1220 [ 85.033834][ T5543] ? io_sqe_buffers_register+0xc2/0x530 [ 85.033865][ T5543] io_sqe_buffers_register+0x2a5/0x530 [ 85.033899][ T5543] __se_sys_io_uring_register+0xa9f/0xeb0 [ 85.033932][ T5543] ? fput+0x8f/0xc0 [ 85.033951][ T5543] ? ksys_write+0x16e/0x1a0 [ 85.034119][ T5543] __x64_sys_io_uring_register+0x55/0x70 [ 85.034148][ T5543] x64_sys_call+0xc91/0x2fb0 [ 85.034172][ T5543] do_syscall_64+0xd0/0x1a0 [ 85.034196][ T5543] ? clear_bhb_loop+0x25/0x80 [ 85.034262][ T5543] ? clear_bhb_loop+0x25/0x80 [ 85.034286][ T5543] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.034381][ T5543] RIP: 0033:0x7fa9cf77e969 [ 85.034403][ T5543] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 85.034426][ T5543] RSP: 002b:00007fa9cdde7038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 85.034446][ T5543] RAX: ffffffffffffffda RBX: 00007fa9cf9a5fa0 RCX: 00007fa9cf77e969 [ 85.034460][ T5543] RDX: 00002000000002c0 RSI: 0000000000000000 RDI: 0000000000000006 [ 85.034474][ T5543] RBP: 00007fa9cdde7090 R08: 0000000000000000 R09: 0000000000000000 [ 85.034487][ T5543] R10: 100000000000011a R11: 0000000000000246 R12: 0000000000000002 [ 85.034552][ T5543] R13: 0000000000000000 R14: 00007fa9cf9a5fa0 R15: 00007ffd89f896e8 [ 85.034573][ T5543] [ 85.320980][ T5552] netlink: 4 bytes leftover after parsing attributes in process `syz.5.736'. [ 85.333415][ T5552] netlink: 12 bytes leftover after parsing attributes in process `syz.5.736'. [ 85.479274][ T5575] FAULT_INJECTION: forcing a failure. [ 85.479274][ T5575] name failslab, interval 1, probability 0, space 0, times 0 [ 85.491958][ T5575] CPU: 0 UID: 0 PID: 5575 Comm: syz.0.740 Not tainted 6.15.0-rc4-syzkaller-00052-g4f79eaa2ceac #0 PREEMPT(voluntary) [ 85.491987][ T5575] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 85.492065][ T5575] Call Trace: [ 85.492071][ T5575] [ 85.492086][ T5575] __dump_stack+0x1d/0x30 [ 85.492107][ T5575] dump_stack_lvl+0xe8/0x140 [ 85.492148][ T5575] dump_stack+0x15/0x1b [ 85.492166][ T5575] should_fail_ex+0x265/0x280 [ 85.492219][ T5575] should_failslab+0x8c/0xb0 [ 85.492251][ T5575] kmem_cache_alloc_noprof+0x50/0x310 [ 85.492286][ T5575] ? security_inode_alloc+0x37/0x100 [ 85.492310][ T5575] security_inode_alloc+0x37/0x100 [ 85.492355][ T5575] inode_init_always_gfp+0x4b7/0x500 [ 85.492381][ T5575] ? __pfx_proc_alloc_inode+0x10/0x10 [ 85.492485][ T5575] alloc_inode+0x58/0x170 [ 85.492510][ T5575] new_inode+0x1d/0xe0 [ 85.492537][ T5575] proc_get_inode+0x21/0x370 [ 85.492589][ T5575] proc_lookup_de+0x19e/0x220 [ 85.492618][ T5575] proc_lookup+0x7e/0x90 [ 85.492683][ T5575] proc_root_lookup+0x37/0x50 [ 85.492711][ T5575] __lookup_slow+0x190/0x250 [ 85.492727][ T5575] lookup_slow+0x3c/0x60 [ 85.492741][ T5575] link_path_walk+0x71d/0x8b0 [ 85.492786][ T5575] path_openat+0x1de/0x2170 [ 85.492808][ T5575] ? _parse_integer_limit+0x170/0x190 [ 85.492846][ T5575] do_filp_open+0x109/0x230 [ 85.492876][ T5575] do_sys_openat2+0xa6/0x110 [ 85.492916][ T5575] __x64_sys_openat+0xf2/0x120 [ 85.492937][ T5575] x64_sys_call+0x1af/0x2fb0 [ 85.492959][ T5575] do_syscall_64+0xd0/0x1a0 [ 85.492977][ T5575] ? clear_bhb_loop+0x25/0x80 [ 85.492994][ T5575] ? clear_bhb_loop+0x25/0x80 [ 85.493072][ T5575] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.493089][ T5575] RIP: 0033:0x7ff3ca98e969 [ 85.493101][ T5575] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 85.493116][ T5575] RSP: 002b:00007ff3c8fd6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 85.493186][ T5575] RAX: ffffffffffffffda RBX: 00007ff3cabb6080 RCX: 00007ff3ca98e969 [ 85.493196][ T5575] RDX: 0000000000000000 RSI: 0000200000000100 RDI: ffffffffffffff9c [ 85.493207][ T5575] RBP: 00007ff3c8fd6090 R08: 0000000000000000 R09: 0000000000000000 [ 85.493218][ T5575] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 85.493252][ T5575] R13: 0000000000000000 R14: 00007ff3cabb6080 R15: 00007ffda385adc8 [ 85.493267][ T5575] [ 85.748842][ T5577] loop1: detected capacity change from 0 to 512 [ 85.761338][ T5577] EXT4-fs (loop1): 1 orphan inode deleted [ 85.767571][ T5577] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 85.778526][ T4058] EXT4-fs error (device loop1): ext4_release_dquot:6971: comm kworker/u8:11: Failed to release dquot type 1 [ 85.780603][ T5577] ext4 filesystem being mounted at /162/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 85.837480][ T5589] netlink: 4 bytes leftover after parsing attributes in process `syz.0.750'. [ 85.852300][ T5589] netlink: 12 bytes leftover after parsing attributes in process `syz.0.750'. [ 85.871675][ T5586] SELinux: Context system_u:object_r:net_conf_t:s0 is not valid (left unmapped). [ 85.883722][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.899344][ T5586] xt_hashlimit: max too large, truncated to 1048576 [ 85.910815][ T5594] FAULT_INJECTION: forcing a failure. [ 85.910815][ T5594] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 85.924073][ T5594] CPU: 1 UID: 0 PID: 5594 Comm: syz.1.751 Not tainted 6.15.0-rc4-syzkaller-00052-g4f79eaa2ceac #0 PREEMPT(voluntary) [ 85.924104][ T5594] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 85.924118][ T5594] Call Trace: [ 85.924125][ T5594] [ 85.924133][ T5594] __dump_stack+0x1d/0x30 [ 85.924217][ T5594] dump_stack_lvl+0xe8/0x140 [ 85.924239][ T5594] dump_stack+0x15/0x1b [ 85.924326][ T5594] should_fail_ex+0x265/0x280 [ 85.924358][ T5594] should_fail+0xb/0x20 [ 85.924390][ T5594] should_fail_usercopy+0x1a/0x20 [ 85.924432][ T5594] strncpy_from_user+0x25/0x230 [ 85.924452][ T5594] ? kmem_cache_alloc_noprof+0x186/0x310 [ 85.924510][ T5594] ? getname_flags+0x80/0x3b0 [ 85.924535][ T5594] getname_flags+0xae/0x3b0 [ 85.924628][ T5594] getname_uflags+0x21/0x30 [ 85.924662][ T5594] __x64_sys_execveat+0x5d/0x90 [ 85.924682][ T5594] x64_sys_call+0x2dae/0x2fb0 [ 85.924699][ T5594] do_syscall_64+0xd0/0x1a0 [ 85.924716][ T5594] ? clear_bhb_loop+0x25/0x80 [ 85.924750][ T5594] ? clear_bhb_loop+0x25/0x80 [ 85.924767][ T5594] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.924784][ T5594] RIP: 0033:0x7fa397ffe969 [ 85.924795][ T5594] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 85.924848][ T5594] RSP: 002b:00007fa396667038 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 85.924862][ T5594] RAX: ffffffffffffffda RBX: 00007fa398225fa0 RCX: 00007fa397ffe969 [ 85.924872][ T5594] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000005 [ 85.924882][ T5594] RBP: 00007fa396667090 R08: 0000000000001000 R09: 0000000000000000 [ 85.924953][ T5594] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 85.924962][ T5594] R13: 0000000000000000 R14: 00007fa398225fa0 R15: 00007ffe78b6c0d8 [ 85.924977][ T5594] [ 86.170496][ T5604] process 'syz.0.757' launched '/dev/fd/8' with NULL argv: empty string added [ 86.212988][ T5618] loop6: detected capacity change from 0 to 512 [ 86.241294][ T5618] EXT4-fs (loop6): 1 orphan inode deleted [ 86.247754][ T5618] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 86.261996][ T4079] EXT4-fs error (device loop6): ext4_release_dquot:6971: comm kworker/u8:32: Failed to release dquot type 1 [ 86.273925][ T5618] ext4 filesystem being mounted at /25/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 86.302514][ T5246] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.335121][ T5638] loop3: detected capacity change from 0 to 512 [ 86.397795][ T5649] FAULT_INJECTION: forcing a failure. [ 86.397795][ T5649] name failslab, interval 1, probability 0, space 0, times 0 [ 86.410511][ T5649] CPU: 1 UID: 0 PID: 5649 Comm: syz.0.773 Not tainted 6.15.0-rc4-syzkaller-00052-g4f79eaa2ceac #0 PREEMPT(voluntary) [ 86.410541][ T5649] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 86.410685][ T5649] Call Trace: [ 86.410690][ T5649] [ 86.410695][ T5649] __dump_stack+0x1d/0x30 [ 86.410715][ T5649] dump_stack_lvl+0xe8/0x140 [ 86.410736][ T5649] dump_stack+0x15/0x1b [ 86.410749][ T5649] should_fail_ex+0x265/0x280 [ 86.410782][ T5649] should_failslab+0x8c/0xb0 [ 86.410864][ T5649] kmem_cache_alloc_node_noprof+0x57/0x320 [ 86.410916][ T5649] ? __alloc_skb+0x101/0x320 [ 86.411019][ T5649] ? avc_has_perm+0xd3/0x150 [ 86.411046][ T5649] __alloc_skb+0x101/0x320 [ 86.411108][ T5649] sock_wmalloc+0x7e/0xc0 [ 86.411134][ T5649] pppol2tp_sendmsg+0xfb/0x440 [ 86.411221][ T5649] ? __pfx_pppol2tp_sendmsg+0x10/0x10 [ 86.411247][ T5649] __sock_sendmsg+0x142/0x180 [ 86.411273][ T5649] sock_write_iter+0x165/0x1b0 [ 86.411296][ T5649] do_iter_readv_writev+0x41e/0x4c0 [ 86.411399][ T5649] vfs_writev+0x2c9/0x870 [ 86.411479][ T5649] do_writev+0xe7/0x210 [ 86.411565][ T5649] __x64_sys_writev+0x45/0x50 [ 86.411619][ T5649] x64_sys_call+0x2006/0x2fb0 [ 86.411699][ T5649] do_syscall_64+0xd0/0x1a0 [ 86.411762][ T5649] ? clear_bhb_loop+0x25/0x80 [ 86.411777][ T5649] ? clear_bhb_loop+0x25/0x80 [ 86.411793][ T5649] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.411808][ T5649] RIP: 0033:0x7ff3ca98e969 [ 86.411819][ T5649] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 86.411860][ T5649] RSP: 002b:00007ff3c8ff7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 86.411873][ T5649] RAX: ffffffffffffffda RBX: 00007ff3cabb5fa0 RCX: 00007ff3ca98e969 [ 86.411943][ T5649] RDX: 0000000000000001 RSI: 0000200000000180 RDI: 0000000000000003 [ 86.411956][ T5649] RBP: 00007ff3c8ff7090 R08: 0000000000000000 R09: 0000000000000000 [ 86.411969][ T5649] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 86.411978][ T5649] R13: 0000000000000000 R14: 00007ff3cabb5fa0 R15: 00007ffda385adc8 [ 86.411993][ T5649] [ 86.670274][ T5654] loop6: detected capacity change from 0 to 1024 [ 86.677112][ T5654] EXT4-fs: Ignoring removed i_version option [ 86.693485][ T5657] loop5: detected capacity change from 0 to 512 [ 86.704183][ T5654] EXT4-fs (loop6): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 86.721970][ T5657] EXT4-fs (loop5): 1 orphan inode deleted [ 86.729082][ T5657] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 86.742038][ T4098] EXT4-fs error (device loop5): ext4_release_dquot:6971: comm kworker/u8:51: Failed to release dquot type 1 [ 86.757268][ T5654] EXT4-fs error (device loop6): ext4_acquire_dquot:6935: comm syz.6.775: Failed to acquire dquot type 0 [ 86.770539][ T5654] EXT4-fs error (device loop6): mb_free_blocks:1948: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 86.780028][ T5670] netlink: 60 bytes leftover after parsing attributes in process `syz.0.782'. [ 86.785554][ T5657] ext4 filesystem being mounted at /20/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 86.806183][ T5654] EXT4-fs error (device loop6): ext4_do_update_inode:5211: inode #13: comm syz.6.775: corrupted inode contents [ 86.819528][ T5654] EXT4-fs error (device loop6): ext4_dirty_inode:6103: inode #13: comm syz.6.775: mark_inode_dirty error [ 86.838807][ T5654] EXT4-fs error (device loop6): ext4_do_update_inode:5211: inode #13: comm syz.6.775: corrupted inode contents [ 86.850832][ T5654] EXT4-fs error (device loop6): __ext4_ext_dirty:207: inode #13: comm syz.6.775: mark_inode_dirty error [ 86.862940][ T5654] EXT4-fs error (device loop6): ext4_do_update_inode:5211: inode #13: comm syz.6.775: corrupted inode contents [ 86.874942][ T5654] EXT4-fs error (device loop6) in ext4_orphan_del:305: Corrupt filesystem [ 86.876145][ T5227] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.885212][ T5654] EXT4-fs error (device loop6): ext4_do_update_inode:5211: inode #13: comm syz.6.775: corrupted inode contents [ 86.904685][ T5654] EXT4-fs error (device loop6): ext4_truncate:4255: inode #13: comm syz.6.775: mark_inode_dirty error [ 86.915867][ T5654] EXT4-fs error (device loop6) in ext4_process_orphan:347: Corrupt filesystem [ 86.926260][ T5654] EXT4-fs (loop6): 1 truncate cleaned up [ 86.932522][ T5654] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 86.974875][ T5246] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.006445][ T5681] loop5: detected capacity change from 0 to 512 [ 87.014545][ T5681] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 87.042505][ T5692] binfmt_misc: register: failed to install interpreter file ./file2 [ 87.054092][ T5692] binfmt_misc: register: failed to install interpreter file ./file2 [ 87.062387][ T5681] EXT4-fs (loop5): 1 truncate cleaned up [ 87.068443][ T5681] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 87.113430][ T5698] loop6: detected capacity change from 0 to 1024 [ 87.125150][ T5698] EXT4-fs (loop6): Can't support bigalloc feature without extents feature [ 87.125150][ T5698] [ 87.135949][ T5698] EXT4-fs (loop6): couldn't mount as ext3 due to feature incompatibilities [ 87.155603][ T5705] SELinux: ebitmap: truncated map [ 87.161436][ T5705] SELinux: failed to load policy [ 87.191246][ T5707] IPv6: Can't replace route, no match found [ 87.192363][ T5709] SELinux: policydb version 0 does not match my version range 15-34 [ 87.226490][ T5709] SELinux: failed to load policy [ 87.237968][ T5709] FAULT_INJECTION: forcing a failure. [ 87.237968][ T5709] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 87.251170][ T5709] CPU: 0 UID: 0 PID: 5709 Comm: syz.6.798 Not tainted 6.15.0-rc4-syzkaller-00052-g4f79eaa2ceac #0 PREEMPT(voluntary) [ 87.251232][ T5709] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 87.251245][ T5709] Call Trace: [ 87.251250][ T5709] [ 87.251256][ T5709] __dump_stack+0x1d/0x30 [ 87.251276][ T5709] dump_stack_lvl+0xe8/0x140 [ 87.251299][ T5709] dump_stack+0x15/0x1b [ 87.251363][ T5709] should_fail_ex+0x265/0x280 [ 87.251395][ T5709] should_fail+0xb/0x20 [ 87.251427][ T5709] should_fail_usercopy+0x1a/0x20 [ 87.251450][ T5709] _copy_to_user+0x20/0xa0 [ 87.251552][ T5709] simple_read_from_buffer+0xb5/0x130 [ 87.251581][ T5709] proc_fail_nth_read+0x100/0x140 [ 87.251675][ T5709] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 87.251701][ T5709] vfs_read+0x19d/0x6f0 [ 87.251783][ T5709] ? __rcu_read_unlock+0x4f/0x70 [ 87.251805][ T5709] ? __fget_files+0x184/0x1c0 [ 87.251873][ T5709] ksys_read+0xda/0x1a0 [ 87.251898][ T5709] __x64_sys_read+0x40/0x50 [ 87.251923][ T5709] x64_sys_call+0x2d77/0x2fb0 [ 87.251964][ T5709] do_syscall_64+0xd0/0x1a0 [ 87.251984][ T5709] ? clear_bhb_loop+0x25/0x80 [ 87.252055][ T5709] ? clear_bhb_loop+0x25/0x80 [ 87.252129][ T5709] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.252146][ T5709] RIP: 0033:0x7f66989fd37c [ 87.252216][ T5709] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 87.252234][ T5709] RSP: 002b:00007f6697067030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 87.252249][ T5709] RAX: ffffffffffffffda RBX: 00007f6698c25fa0 RCX: 00007f66989fd37c [ 87.252259][ T5709] RDX: 000000000000000f RSI: 00007f66970670a0 RDI: 0000000000000006 [ 87.252268][ T5709] RBP: 00007f6697067090 R08: 0000000000000000 R09: 0000000000000000 [ 87.252277][ T5709] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 87.252287][ T5709] R13: 0000000000000000 R14: 00007f6698c25fa0 R15: 00007ffd8bf2ea28 [ 87.252345][ T5709] [ 87.535378][ T29] kauditd_printk_skb: 408 callbacks suppressed [ 87.535393][ T29] audit: type=1400 audit(1746153040.239:2103): avc: denied { read write } for pid=5722 comm="syz.1.800" name="uhid" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 87.566175][ T5723] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(13) [ 87.572775][ T5723] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 87.580408][ T5723] vhci_hcd vhci_hcd.0: Device attached [ 87.583559][ T29] audit: type=1400 audit(1746153040.239:2104): avc: denied { open } for pid=5722 comm="syz.1.800" path="/dev/uhid" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 87.613329][ T5723] loop1: detected capacity change from 0 to 512 [ 87.623762][ T5722] delete_channel: no stack [ 87.624001][ T5726] vhci_hcd: connection closed [ 87.628262][ T29] audit: type=1400 audit(1746153040.319:2105): avc: denied { ioctl } for pid=5722 comm="syz.1.800" path="socket:[13739]" dev="sockfs" ino=13739 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 87.659131][ T4098] vhci_hcd: stop threads [ 87.663434][ T4098] vhci_hcd: release socket [ 87.667856][ T4098] vhci_hcd: disconnect device [ 87.687439][ T29] audit: type=1326 audit(1746153040.389:2106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5733 comm="syz.3.806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6026b2e969 code=0x7ffc0000 [ 87.718555][ T29] audit: type=1326 audit(1746153040.419:2107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5733 comm="syz.3.806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6026b2e969 code=0x7ffc0000 [ 87.742017][ T29] audit: type=1326 audit(1746153040.419:2108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5733 comm="syz.3.806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6026b2e969 code=0x7ffc0000 [ 87.765387][ T29] audit: type=1326 audit(1746153040.419:2109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5733 comm="syz.3.806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6026b2e969 code=0x7ffc0000 [ 87.788709][ T29] audit: type=1326 audit(1746153040.419:2110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5733 comm="syz.3.806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6026b2e969 code=0x7ffc0000 [ 87.812005][ T29] audit: type=1326 audit(1746153040.419:2111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5733 comm="syz.3.806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6026b2e969 code=0x7ffc0000 [ 87.835323][ T29] audit: type=1326 audit(1746153040.419:2112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5733 comm="syz.3.806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6026b2e969 code=0x7ffc0000 [ 87.902820][ T5747] syz.6.820 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 87.928059][ T5227] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.971805][ T5755] netlink: 4 bytes leftover after parsing attributes in process `syz.6.814'. [ 87.982729][ T5753] FAULT_INJECTION: forcing a failure. [ 87.982729][ T5753] name failslab, interval 1, probability 0, space 0, times 0 [ 87.995489][ T5753] CPU: 0 UID: 0 PID: 5753 Comm: syz.5.813 Not tainted 6.15.0-rc4-syzkaller-00052-g4f79eaa2ceac #0 PREEMPT(voluntary) [ 87.995597][ T5753] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 87.995674][ T5753] Call Trace: [ 87.995680][ T5753] [ 87.995687][ T5753] __dump_stack+0x1d/0x30 [ 87.995713][ T5753] dump_stack_lvl+0xe8/0x140 [ 87.995755][ T5753] dump_stack+0x15/0x1b [ 87.995781][ T5753] should_fail_ex+0x265/0x280 [ 87.995888][ T5753] should_failslab+0x8c/0xb0 [ 87.995913][ T5753] kmem_cache_alloc_noprof+0x50/0x310 [ 87.995946][ T5753] ? dst_alloc+0xbd/0x100 [ 87.995973][ T5753] dst_alloc+0xbd/0x100 [ 87.995999][ T5753] ip_route_output_key_hash_rcu+0xebb/0x13d0 [ 87.996031][ T5753] ? udp_send_skb+0x7be/0xa40 [ 87.996060][ T5753] ip_route_output_flow+0x7b/0x130 [ 87.996142][ T5753] udp_sendmsg+0x118b/0x13a0 [ 87.996172][ T5753] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 87.996192][ T5753] ? avc_has_perm+0xd3/0x150 [ 87.996294][ T5753] ? __pfx_udp_sendmsg+0x10/0x10 [ 87.996322][ T5753] inet_sendmsg+0xac/0xd0 [ 87.996346][ T5753] __sock_sendmsg+0x102/0x180 [ 87.996427][ T5753] ____sys_sendmsg+0x345/0x4e0 [ 87.996445][ T5753] ___sys_sendmsg+0x17b/0x1d0 [ 87.996473][ T5753] __sys_sendmmsg+0x178/0x300 [ 87.996500][ T5753] __x64_sys_sendmmsg+0x57/0x70 [ 87.996516][ T5753] x64_sys_call+0x2f2f/0x2fb0 [ 87.996534][ T5753] do_syscall_64+0xd0/0x1a0 [ 87.996569][ T5753] ? clear_bhb_loop+0x25/0x80 [ 87.996588][ T5753] ? clear_bhb_loop+0x25/0x80 [ 87.996662][ T5753] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.996681][ T5753] RIP: 0033:0x7fa9cf77e969 [ 87.996700][ T5753] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 87.996719][ T5753] RSP: 002b:00007fa9cdde7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 87.996766][ T5753] RAX: ffffffffffffffda RBX: 00007fa9cf9a5fa0 RCX: 00007fa9cf77e969 [ 87.996813][ T5753] RDX: 0000000000000003 RSI: 0000200000004540 RDI: 0000000000000005 [ 87.996825][ T5753] RBP: 00007fa9cdde7090 R08: 0000000000000000 R09: 0000000000000000 [ 87.996837][ T5753] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 87.996849][ T5753] R13: 0000000000000000 R14: 00007fa9cf9a5fa0 R15: 00007ffd89f896e8 [ 87.996868][ T5753] [ 88.229757][ T5757] loop3: detected capacity change from 0 to 512 [ 88.239907][ T5757] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 88.249070][ T5757] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 88.281466][ T5757] EXT4-fs (loop3): warning: checktime reached, running e2fsck is recommended [ 88.290602][ T5757] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 88.311582][ T5757] System zones: 0-2, 18-18, 34-34 [ 88.319752][ T5757] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:1132: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 88.334973][ T5757] EXT4-fs (loop3): 1 truncate cleaned up [ 88.353308][ T5757] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 88.369402][ T5741] team0 (unregistering): Port device team_slave_0 removed [ 88.392720][ T5741] team0 (unregistering): Port device team_slave_1 removed [ 88.419433][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.436385][ T5779] FAULT_INJECTION: forcing a failure. [ 88.436385][ T5779] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 88.449528][ T5779] CPU: 1 UID: 0 PID: 5779 Comm: syz.6.825 Not tainted 6.15.0-rc4-syzkaller-00052-g4f79eaa2ceac #0 PREEMPT(voluntary) [ 88.449550][ T5779] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 88.449596][ T5779] Call Trace: [ 88.449602][ T5779] [ 88.449609][ T5779] __dump_stack+0x1d/0x30 [ 88.449692][ T5779] dump_stack_lvl+0xe8/0x140 [ 88.449708][ T5779] dump_stack+0x15/0x1b [ 88.449721][ T5779] should_fail_ex+0x265/0x280 [ 88.449796][ T5779] should_fail+0xb/0x20 [ 88.449902][ T5779] should_fail_usercopy+0x1a/0x20 [ 88.449928][ T5779] strncpy_from_user+0x25/0x230 [ 88.449950][ T5779] ? __fget_files+0x184/0x1c0 [ 88.450039][ T5779] __se_sys_add_key+0x86/0x350 [ 88.450074][ T5779] __x64_sys_add_key+0x67/0x80 [ 88.450097][ T5779] x64_sys_call+0x1d0d/0x2fb0 [ 88.450115][ T5779] do_syscall_64+0xd0/0x1a0 [ 88.450176][ T5779] ? clear_bhb_loop+0x25/0x80 [ 88.450219][ T5779] ? clear_bhb_loop+0x25/0x80 [ 88.450236][ T5779] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.450255][ T5779] RIP: 0033:0x7f66989fe969 [ 88.450270][ T5779] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 88.450293][ T5779] RSP: 002b:00007f6697067038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 88.450310][ T5779] RAX: ffffffffffffffda RBX: 00007f6698c25fa0 RCX: 00007f66989fe969 [ 88.450321][ T5779] RDX: 0000200000000100 RSI: 0000000000000000 RDI: 0000200000000280 [ 88.450331][ T5779] RBP: 00007f6697067090 R08: ffffffffffffffff R09: 0000000000000000 [ 88.450341][ T5779] R10: 0000000000000018 R11: 0000000000000246 R12: 0000000000000001 [ 88.450354][ T5779] R13: 0000000000000000 R14: 00007f6698c25fa0 R15: 00007ffd8bf2ea28 [ 88.450422][ T5779] [ 88.637487][ T5783] xt_hashlimit: max too large, truncated to 1048576 [ 88.822439][ T5792] loop6: detected capacity change from 0 to 512 [ 88.881869][ T5792] vhci_hcd: invalid port number 96 [ 88.887026][ T5792] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 89.080825][ T5804] vhci_hcd: invalid port number 15 [ 89.086015][ T5804] vhci_hcd: invalid port number 15 [ 89.146559][ T5807] SELinux: policydb magic number 0x705f6d6d does not match expected magic number 0xf97cff8c [ 89.305413][ T5807] SELinux: failed to load policy [ 89.411404][ T5823] xt_hashlimit: max too large, truncated to 1048576 [ 89.427794][ T5822] loop3: detected capacity change from 0 to 256 [ 89.538244][ T5828] dccp_invalid_packet: pskb_may_pull failed [ 89.690027][ T5844] FAULT_INJECTION: forcing a failure. [ 89.690027][ T5844] name failslab, interval 1, probability 0, space 0, times 0 [ 89.702745][ T5844] CPU: 0 UID: 0 PID: 5844 Comm: syz.0.847 Not tainted 6.15.0-rc4-syzkaller-00052-g4f79eaa2ceac #0 PREEMPT(voluntary) [ 89.702850][ T5844] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 89.702860][ T5844] Call Trace: [ 89.702864][ T5844] [ 89.702869][ T5844] __dump_stack+0x1d/0x30 [ 89.702889][ T5844] dump_stack_lvl+0xe8/0x140 [ 89.702910][ T5844] dump_stack+0x15/0x1b [ 89.702954][ T5844] should_fail_ex+0x265/0x280 [ 89.702981][ T5844] should_failslab+0x8c/0xb0 [ 89.703065][ T5844] __kvmalloc_node_noprof+0x126/0x4d0 [ 89.703120][ T5844] ? xt_alloc_entry_offsets+0x48/0x50 [ 89.703145][ T5844] xt_alloc_entry_offsets+0x48/0x50 [ 89.703188][ T5844] translate_table+0xa9/0x1070 [ 89.703215][ T5844] ? __memcg_slab_post_alloc_hook+0x464/0x5a0 [ 89.703276][ T5844] ? should_fail_ex+0xdb/0x280 [ 89.703301][ T5844] ? _copy_from_user+0x89/0xb0 [ 89.703320][ T5844] do_ip6t_set_ctl+0x678/0x840 [ 89.703372][ T5844] ? kstrtoull+0x111/0x140 [ 89.703440][ T5844] ? __rcu_read_unlock+0x4f/0x70 [ 89.703466][ T5844] nf_setsockopt+0x196/0x1b0 [ 89.703492][ T5844] ipv6_setsockopt+0x11a/0x130 [ 89.703513][ T5844] tcp_setsockopt+0x95/0xb0 [ 89.703544][ T5844] sock_common_setsockopt+0x66/0x80 [ 89.703612][ T5844] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 89.703634][ T5844] __sys_setsockopt+0x181/0x200 [ 89.703666][ T5844] __x64_sys_setsockopt+0x64/0x80 [ 89.703726][ T5844] x64_sys_call+0x2bd5/0x2fb0 [ 89.703744][ T5844] do_syscall_64+0xd0/0x1a0 [ 89.703761][ T5844] ? clear_bhb_loop+0x25/0x80 [ 89.703829][ T5844] ? clear_bhb_loop+0x25/0x80 [ 89.703884][ T5844] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 89.703906][ T5844] RIP: 0033:0x7ff3ca98e969 [ 89.703971][ T5844] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 89.703986][ T5844] RSP: 002b:00007ff3c8ff7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 89.704050][ T5844] RAX: ffffffffffffffda RBX: 00007ff3cabb5fa0 RCX: 00007ff3ca98e969 [ 89.704140][ T5844] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000006 [ 89.704150][ T5844] RBP: 00007ff3c8ff7090 R08: 0000000000000368 R09: 0000000000000000 [ 89.704159][ T5844] R10: 00002000000003c0 R11: 0000000000000246 R12: 0000000000000001 [ 89.704168][ T5844] R13: 0000000000000000 R14: 00007ff3cabb5fa0 R15: 00007ffda385adc8 [ 89.704183][ T5844] [ 89.971627][ T5851] netlink: 'syz.3.849': attribute type 11 has an invalid length. [ 89.979437][ T5851] __nla_validate_parse: 2 callbacks suppressed [ 89.979449][ T5851] netlink: 8 bytes leftover after parsing attributes in process `syz.3.849'. [ 90.150547][ T5858] loop5: detected capacity change from 0 to 164 [ 90.165503][ T5854] mmap: syz.0.850 (5854) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 90.179692][ T5858] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 90.190452][ T5858] netlink: 64859 bytes leftover after parsing attributes in process `syz.5.852'. [ 90.229339][ T5858] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 90.246421][ T5858] Symlink component flag not implemented [ 90.252162][ T5858] Symlink component flag not implemented [ 90.272927][ T5858] Symlink component flag not implemented (7) [ 90.278976][ T5858] Symlink component flag not implemented (116) [ 90.301759][ T5862] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 90.316093][ T5862] rock: directory entry would overflow storage [ 90.322353][ T5862] rock: sig=0x4f50, size=4, remaining=3 [ 90.327946][ T5862] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 90.337552][ T5864] loop1: detected capacity change from 0 to 128 [ 90.344534][ T5864] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 90.364568][ T5864] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 90.376930][ T5864] ext2 filesystem being mounted at /172/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 90.394982][ T5864] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.854: bg 0: block 496: padding at end of block bitmap is not set [ 90.430342][ T3311] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 90.513833][ T5881] netlink: 4 bytes leftover after parsing attributes in process `syz.1.860'. [ 90.529641][ T3382] hid-generic 0000:0004:0000.0001: unknown main item tag 0x0 [ 90.537147][ T3382] hid-generic 0000:0004:0000.0001: unknown main item tag 0x0 [ 90.544572][ T3382] hid-generic 0000:0004:0000.0001: unknown main item tag 0x0 [ 90.568654][ T3382] hid-generic 0000:0004:0000.0001: unknown main item tag 0x0 [ 90.576138][ T3382] hid-generic 0000:0004:0000.0001: unknown main item tag 0x0 [ 90.583574][ T3382] hid-generic 0000:0004:0000.0001: unknown main item tag 0x0 [ 90.591041][ T3382] hid-generic 0000:0004:0000.0001: unknown main item tag 0x0 [ 90.598637][ T3382] hid-generic 0000:0004:0000.0001: unknown main item tag 0x0 [ 90.606061][ T3382] hid-generic 0000:0004:0000.0001: unknown main item tag 0x0 [ 90.613480][ T3382] hid-generic 0000:0004:0000.0001: unknown main item tag 0x0 [ 90.620913][ T3382] hid-generic 0000:0004:0000.0001: unknown main item tag 0x0 [ 90.628290][ T3382] hid-generic 0000:0004:0000.0001: unknown main item tag 0x0 [ 90.635750][ T3382] hid-generic 0000:0004:0000.0001: unknown main item tag 0x0 [ 90.647847][ T3382] hid-generic 0000:0004:0000.0001: unknown main item tag 0x0 [ 90.655315][ T3382] hid-generic 0000:0004:0000.0001: unknown main item tag 0x0 [ 90.658184][ T5888] loop1: detected capacity change from 0 to 512 [ 90.662841][ T3382] hid-generic 0000:0004:0000.0001: unknown main item tag 0x0 [ 90.662866][ T3382] hid-generic 0000:0004:0000.0001: unknown main item tag 0x0 [ 90.683897][ T3382] hid-generic 0000:0004:0000.0001: unknown main item tag 0x0 [ 90.691790][ T3382] hid-generic 0000:0004:0000.0001: unknown main item tag 0x0 [ 90.699227][ T3382] hid-generic 0000:0004:0000.0001: unknown main item tag 0x0 [ 90.730365][ T3382] hid-generic 0000:0004:0000.0001: hidraw0: HID v0.02 Device [syz0] on syz1 [ 90.730414][ T5888] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 90.769628][ T5896] syzkaller1: entered promiscuous mode [ 90.775182][ T5896] syzkaller1: entered allmulticast mode [ 90.784172][ T5888] ext4 filesystem being mounted at /176/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 90.800118][ T5896] bond1: entered promiscuous mode [ 90.805190][ T5896] bond1: entered allmulticast mode [ 90.812109][ T5896] 8021q: adding VLAN 0 to HW filter on device bond1 [ 90.832443][ T5896] bond1 (unregistering): Released all slaves [ 90.840339][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.201047][ T5929] netlink: 60 bytes leftover after parsing attributes in process `syz.1.873'. [ 91.211466][ T5931] netlink: 4 bytes leftover after parsing attributes in process `syz.3.876'. [ 91.220365][ T5924] netlink: 60 bytes leftover after parsing attributes in process `syz.1.873'. [ 91.229761][ T5914] FAULT_INJECTION: forcing a failure. [ 91.229761][ T5914] name failslab, interval 1, probability 0, space 0, times 0 [ 91.233137][ T5853] syz.0.850 (5853) used greatest stack depth: 5952 bytes left [ 91.242476][ T5914] CPU: 1 UID: 0 PID: 5914 Comm: syz.5.868 Not tainted 6.15.0-rc4-syzkaller-00052-g4f79eaa2ceac #0 PREEMPT(voluntary) [ 91.242547][ T5914] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 91.242563][ T5914] Call Trace: [ 91.242570][ T5914] [ 91.242580][ T5914] __dump_stack+0x1d/0x30 [ 91.242608][ T5914] dump_stack_lvl+0xe8/0x140 [ 91.242633][ T5914] dump_stack+0x15/0x1b [ 91.242734][ T5914] should_fail_ex+0x265/0x280 [ 91.242786][ T5914] should_failslab+0x8c/0xb0 [ 91.242819][ T5914] __kvmalloc_node_noprof+0x126/0x4d0 [ 91.242873][ T5914] ? ip_set_alloc+0x1f/0x30 [ 91.242905][ T5914] ip_set_alloc+0x1f/0x30 [ 91.242933][ T5914] hash_ipport_create+0x54f/0xa20 [ 91.243030][ T5914] ? __pfx_hash_ipport_create+0x10/0x10 [ 91.243125][ T5914] ip_set_create+0x3c9/0x960 [ 91.243173][ T5914] nfnetlink_rcv_msg+0x4c3/0x590 [ 91.243198][ T5914] ? fixup_exception+0x771/0xce0 [ 91.243265][ T5914] netlink_rcv_skb+0x120/0x220 [ 91.243299][ T5914] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 91.243386][ T5914] nfnetlink_rcv+0x16b/0x1690 [ 91.243412][ T5914] ? __kfree_skb+0x109/0x150 [ 91.243481][ T5914] ? nlmon_xmit+0x4f/0x60 [ 91.243502][ T5914] ? consume_skb+0x49/0x150 [ 91.243536][ T5914] ? nlmon_xmit+0x4f/0x60 [ 91.243579][ T5914] ? dev_hard_start_xmit+0x39e/0x3d0 [ 91.243621][ T5914] ? __dev_queue_xmit+0x11c0/0x1fb0 [ 91.243658][ T5914] ? __dev_queue_xmit+0x182/0x1fb0 [ 91.243777][ T5914] ? ref_tracker_free+0x37d/0x3e0 [ 91.243821][ T5914] ? __netlink_deliver_tap+0x4dc/0x500 [ 91.243890][ T5914] netlink_unicast+0x59e/0x670 [ 91.243926][ T5914] netlink_sendmsg+0x58b/0x6b0 [ 91.243978][ T5914] ? __pfx_netlink_sendmsg+0x10/0x10 [ 91.244057][ T5914] __sock_sendmsg+0x142/0x180 [ 91.244087][ T5914] ____sys_sendmsg+0x31e/0x4e0 [ 91.244113][ T5914] ___sys_sendmsg+0x17b/0x1d0 [ 91.244151][ T5914] __x64_sys_sendmsg+0xd4/0x160 [ 91.244249][ T5914] x64_sys_call+0x2999/0x2fb0 [ 91.244277][ T5914] do_syscall_64+0xd0/0x1a0 [ 91.244302][ T5914] ? clear_bhb_loop+0x25/0x80 [ 91.244326][ T5914] ? clear_bhb_loop+0x25/0x80 [ 91.244352][ T5914] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.244442][ T5914] RIP: 0033:0x7fa9cf77e969 [ 91.244458][ T5914] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 91.244479][ T5914] RSP: 002b:00007fa9cdde7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 91.244501][ T5914] RAX: ffffffffffffffda RBX: 00007fa9cf9a5fa0 RCX: 00007fa9cf77e969 [ 91.244564][ T5914] RDX: 0000000000000002 RSI: 0000200000000240 RDI: 0000000000000003 [ 91.244578][ T5914] RBP: 00007fa9cdde7090 R08: 0000000000000000 R09: 0000000000000000 [ 91.244592][ T5914] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 91.244606][ T5914] R13: 0000000000000000 R14: 00007fa9cf9a5fa0 R15: 00007ffd89f896e8 [ 91.244628][ T5914] [ 91.253496][ T5931] netlink: 12 bytes leftover after parsing attributes in process `syz.3.876'. [ 91.417403][ T5941] infiniband syz!: set active [ 91.547030][ T5941] infiniband syz!: added team_slave_0 [ 91.568650][ T5941] RDS/IB: syz!: added [ 91.574112][ T5941] smc: adding ib device syz! with port count 1 [ 91.580357][ T5941] smc: ib device syz! port 1 has pnetid [ 92.706943][ T5974] loop1: detected capacity change from 0 to 128 [ 93.052430][ T5974] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 93.088508][ T5974] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 93.700484][ T5974] ext2 filesystem being mounted at /184/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 93.722832][ T5974] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.889: bg 0: block 496: padding at end of block bitmap is not set [ 93.902980][ T5982] netlink: 60 bytes leftover after parsing attributes in process `syz.5.891'. [ 93.913388][ T5979] netlink: 60 bytes leftover after parsing attributes in process `syz.5.891'. [ 94.038894][ T5987] netlink: 4 bytes leftover after parsing attributes in process `syz.5.896'. [ 94.133667][ T5990] loop6: detected capacity change from 0 to 256 [ 94.206602][ T5992] loop5: detected capacity change from 0 to 1024 [ 94.217598][ T5992] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 94.260269][ T29] kauditd_printk_skb: 117 callbacks suppressed [ 94.260283][ T29] audit: type=1400 audit(1746153046.969:2230): avc: denied { getopt } for pid=5994 comm="syz.5.899" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 94.776814][ T3311] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 94.798443][ T29] audit: type=1400 audit(1746153047.499:2231): avc: denied { ioctl } for pid=5996 comm="syz.6.900" path="/50/file0" dev="tmpfs" ino=282 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 94.869851][ T29] audit: type=1326 audit(1746153047.569:2232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6001 comm="syz.1.893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa397ffe969 code=0x7ffc0000 [ 94.893298][ T29] audit: type=1326 audit(1746153047.569:2233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6001 comm="syz.1.893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa397ffe969 code=0x7ffc0000 [ 94.916725][ T29] audit: type=1326 audit(1746153047.569:2234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6001 comm="syz.1.893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7fa397ffe969 code=0x7ffc0000 [ 94.940051][ T29] audit: type=1326 audit(1746153047.569:2235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6001 comm="syz.1.893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa397ffe969 code=0x7ffc0000 [ 94.964032][ T29] audit: type=1326 audit(1746153047.569:2236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6001 comm="syz.1.893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa397ffe969 code=0x7ffc0000 [ 94.987669][ T29] audit: type=1326 audit(1746153047.569:2237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6001 comm="syz.1.893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa397ffe969 code=0x7ffc0000 [ 95.025864][ T6004] GPL: port 1(erspan0) entered blocking state [ 95.032008][ T6004] GPL: port 1(erspan0) entered disabled state [ 95.038328][ T6004] erspan0: entered allmulticast mode [ 95.046620][ T6004] erspan0: entered promiscuous mode [ 95.443645][ T6018] FAULT_INJECTION: forcing a failure. [ 95.443645][ T6018] name failslab, interval 1, probability 0, space 0, times 0 [ 95.456377][ T6018] CPU: 0 UID: 0 PID: 6018 Comm: syz.3.907 Not tainted 6.15.0-rc4-syzkaller-00052-g4f79eaa2ceac #0 PREEMPT(voluntary) [ 95.456446][ T6018] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 95.456462][ T6018] Call Trace: [ 95.456467][ T6018] [ 95.456473][ T6018] __dump_stack+0x1d/0x30 [ 95.456491][ T6018] dump_stack_lvl+0xe8/0x140 [ 95.456506][ T6018] dump_stack+0x15/0x1b [ 95.456519][ T6018] should_fail_ex+0x265/0x280 [ 95.456574][ T6018] should_failslab+0x8c/0xb0 [ 95.456602][ T6018] kmem_cache_alloc_noprof+0x50/0x310 [ 95.456634][ T6018] ? __proc_create+0x265/0x500 [ 95.456674][ T6018] ? rb_insert_color+0x299/0x2b0 [ 95.456690][ T6018] __proc_create+0x265/0x500 [ 95.456783][ T6018] ? proc_register+0x26b/0x350 [ 95.456819][ T6018] _proc_mkdir+0x5e/0x100 [ 95.456911][ T6018] netfilter_net_init+0x1e3/0x240 [ 95.456948][ T6018] ops_init+0x227/0x2e0 [ 95.457033][ T6018] ? __schedule+0x6a2/0xb20 [ 95.457064][ T6018] ? __cond_resched+0x4e/0x90 [ 95.457099][ T6018] setup_net+0x13b/0x5f0 [ 95.457122][ T6018] copy_net_ns+0x565/0x720 [ 95.457194][ T6018] create_new_namespaces+0x20e/0x410 [ 95.457244][ T6018] unshare_nsproxy_namespaces+0xe8/0x120 [ 95.457281][ T6018] ksys_unshare+0x3d0/0x6d0 [ 95.457308][ T6018] ? ksys_write+0x16e/0x1a0 [ 95.457365][ T6018] __x64_sys_unshare+0x1f/0x30 [ 95.457448][ T6018] x64_sys_call+0x2d4b/0x2fb0 [ 95.457471][ T6018] do_syscall_64+0xd0/0x1a0 [ 95.457533][ T6018] ? clear_bhb_loop+0x25/0x80 [ 95.457553][ T6018] ? clear_bhb_loop+0x25/0x80 [ 95.457573][ T6018] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.457597][ T6018] RIP: 0033:0x7f6026b2e969 [ 95.457642][ T6018] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 95.457665][ T6018] RSP: 002b:00007f6025197038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 95.457685][ T6018] RAX: ffffffffffffffda RBX: 00007f6026d55fa0 RCX: 00007f6026b2e969 [ 95.457697][ T6018] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000062040200 [ 95.457708][ T6018] RBP: 00007f6025197090 R08: 0000000000000000 R09: 0000000000000000 [ 95.457720][ T6018] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 95.457801][ T6018] R13: 0000000000000001 R14: 00007f6026d55fa0 R15: 00007ffc71b2a8c8 [ 95.457819][ T6018] [ 95.457826][ T6018] cannot create netfilter proc entry [ 95.882223][ T6024] FAULT_INJECTION: forcing a failure. [ 95.882223][ T6024] name failslab, interval 1, probability 0, space 0, times 0 [ 95.900166][ T6024] CPU: 0 UID: 0 PID: 6024 Comm: syz.6.908 Not tainted 6.15.0-rc4-syzkaller-00052-g4f79eaa2ceac #0 PREEMPT(voluntary) [ 95.900266][ T6024] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 95.900276][ T6024] Call Trace: [ 95.900281][ T6024] [ 95.900286][ T6024] __dump_stack+0x1d/0x30 [ 95.900307][ T6024] dump_stack_lvl+0xe8/0x140 [ 95.900328][ T6024] dump_stack+0x15/0x1b [ 95.900380][ T6024] should_fail_ex+0x265/0x280 [ 95.900406][ T6024] should_failslab+0x8c/0xb0 [ 95.900437][ T6024] kmem_cache_alloc_noprof+0x50/0x310 [ 95.900524][ T6024] ? alloc_empty_file+0x76/0x200 [ 95.900585][ T6024] alloc_empty_file+0x76/0x200 [ 95.900611][ T6024] alloc_file_pseudo+0xc6/0x160 [ 95.900641][ T6024] hugetlb_file_setup+0x298/0x3d0 [ 95.900713][ T6024] ksys_mmap_pgoff+0x157/0x310 [ 95.900742][ T6024] x64_sys_call+0x1602/0x2fb0 [ 95.900765][ T6024] do_syscall_64+0xd0/0x1a0 [ 95.900859][ T6024] ? clear_bhb_loop+0x25/0x80 [ 95.900877][ T6024] ? clear_bhb_loop+0x25/0x80 [ 95.900894][ T6024] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.900931][ T6024] RIP: 0033:0x7f66989fe969 [ 95.900943][ T6024] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 95.900961][ T6024] RSP: 002b:00007f6697067038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 95.901037][ T6024] RAX: ffffffffffffffda RBX: 00007f6698c25fa0 RCX: 00007f66989fe969 [ 95.901049][ T6024] RDX: 0000000000000002 RSI: 0000000000ff5000 RDI: 0000200000000000 [ 95.901059][ T6024] RBP: 00007f6697067090 R08: ffffffffffffffff R09: 0000000000000000 [ 95.901068][ T6024] R10: 000000000004c831 R11: 0000000000000246 R12: 0000000000000001 [ 95.901077][ T6024] R13: 0000000000000000 R14: 00007f6698c25fa0 R15: 00007ffd8bf2ea28 [ 95.901127][ T6024] [ 96.167106][ T29] audit: type=1326 audit(1746153047.599:2238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5996 comm="syz.6.900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66989fe969 code=0x7ffc0000 [ 96.190603][ T29] audit: type=1326 audit(1746153047.599:2239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5996 comm="syz.6.900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=121 compat=0 ip=0x7f66989fe969 code=0x7ffc0000 [ 96.235881][ T6029] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(3) [ 96.242495][ T6029] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 96.250498][ T6029] vhci_hcd vhci_hcd.0: Device attached [ 96.262309][ T6029] loop6: detected capacity change from 0 to 128 [ 96.313572][ T6033] loop3: detected capacity change from 0 to 512 [ 96.326713][ T6033] EXT4-fs: Ignoring removed orlov option [ 96.335728][ T6033] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 96.350453][ T6033] EXT4-fs (loop3): 1 orphan inode deleted [ 96.356197][ T6033] EXT4-fs (loop3): 1 truncate cleaned up [ 96.364361][ T6033] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 96.392221][ T6030] vhci_hcd: connection closed [ 96.392449][ T4112] vhci_hcd: stop threads [ 96.401544][ T4112] vhci_hcd: release socket [ 96.406032][ T4112] vhci_hcd: disconnect device [ 96.438421][ T2969] vhci_hcd: vhci_device speed not set [ 96.453881][ T6033] EXT4-fs error (device loop3): ext4_inlinedir_to_tree:1339: inode #12: block 7: comm syz.3.911: path /193/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=20, inode=13, rec_len=16, size=60 fake=0 [ 96.529202][ T6033] EXT4-fs (loop3): Remounting filesystem read-only [ 96.661254][ T6037] netlink: 'syz.5.912': attribute type 13 has an invalid length. [ 96.738900][ T6048] netlink: 'syz.0.915': attribute type 10 has an invalid length. [ 96.746808][ T6048] __nla_validate_parse: 1 callbacks suppressed [ 96.746819][ T6048] netlink: 55 bytes leftover after parsing attributes in process `syz.0.915'. [ 96.794697][ T6049] netlink: 56 bytes leftover after parsing attributes in process `syz.0.915'. [ 96.821215][ T6041] loop5: detected capacity change from 0 to 2048 [ 96.846163][ T6037] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 96.897425][ T6041] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 97.078591][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.098640][ T6069] netlink: 4 bytes leftover after parsing attributes in process `syz.6.923'. [ 97.113882][ T6069] netlink: 12 bytes leftover after parsing attributes in process `syz.6.923'. [ 97.176748][ T6081] netlink: 4 bytes leftover after parsing attributes in process `syz.0.928'. [ 97.193986][ T6081] bond0: (slave bond_slave_0): Releasing backup interface [ 97.269851][ T5227] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.322106][ T6081] SELinux: failed to load policy [ 97.732004][ T6092] IPVS: length: 139 != 1776 [ 98.117741][ T6105] netlink: 4 bytes leftover after parsing attributes in process `syz.3.938'. [ 98.173433][ T6105] netlink: 12 bytes leftover after parsing attributes in process `syz.3.938'. [ 98.442014][ T6125] bridge0: port 3(vlan2) entered blocking state [ 98.448314][ T6125] bridge0: port 3(vlan2) entered disabled state [ 98.456163][ T6125] vlan2: entered allmulticast mode [ 98.461335][ T6125] bridge0: entered allmulticast mode [ 98.470767][ T6125] vlan2: left allmulticast mode [ 98.475717][ T6125] bridge0: left allmulticast mode [ 98.487077][ T6126] FAULT_INJECTION: forcing a failure. [ 98.487077][ T6126] name failslab, interval 1, probability 0, space 0, times 0 [ 98.499744][ T6126] CPU: 0 UID: 0 PID: 6126 Comm: syz.5.931 Not tainted 6.15.0-rc4-syzkaller-00052-g4f79eaa2ceac #0 PREEMPT(voluntary) [ 98.499766][ T6126] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 98.499836][ T6126] Call Trace: [ 98.499911][ T6126] [ 98.499916][ T6126] __dump_stack+0x1d/0x30 [ 98.499937][ T6126] dump_stack_lvl+0xe8/0x140 [ 98.499957][ T6126] dump_stack+0x15/0x1b [ 98.499995][ T6126] should_fail_ex+0x265/0x280 [ 98.500022][ T6126] should_failslab+0x8c/0xb0 [ 98.500083][ T6126] __kmalloc_noprof+0xa5/0x3e0 [ 98.500181][ T6126] ? bpf_prepare_filter+0x476/0xbd0 [ 98.500266][ T6126] bpf_prepare_filter+0x476/0xbd0 [ 98.500296][ T6126] ? __get_filter+0x1a9/0x230 [ 98.500330][ T6126] __get_filter+0x1d0/0x230 [ 98.500403][ T6126] sk_reuseport_attach_filter+0x20/0x140 [ 98.500456][ T6126] sk_setsockopt+0x1705/0x1eb0 [ 98.500490][ T6126] sock_setsockopt+0x40/0x50 [ 98.500514][ T6126] __sys_setsockopt+0x13a/0x200 [ 98.500581][ T6126] __x64_sys_setsockopt+0x64/0x80 [ 98.500641][ T6126] x64_sys_call+0x2bd5/0x2fb0 [ 98.500659][ T6126] do_syscall_64+0xd0/0x1a0 [ 98.500711][ T6126] ? clear_bhb_loop+0x25/0x80 [ 98.500728][ T6126] ? clear_bhb_loop+0x25/0x80 [ 98.500746][ T6126] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.500768][ T6126] RIP: 0033:0x7fa9cf77e969 [ 98.500782][ T6126] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 98.500879][ T6126] RSP: 002b:00007fa9cdde7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 98.500896][ T6126] RAX: ffffffffffffffda RBX: 00007fa9cf9a5fa0 RCX: 00007fa9cf77e969 [ 98.500910][ T6126] RDX: 0000000000000033 RSI: 0000000000000001 RDI: 0000000000000008 [ 98.500922][ T6126] RBP: 00007fa9cdde7090 R08: 0000000000000010 R09: 0000000000000000 [ 98.500935][ T6126] R10: 0000200000000640 R11: 0000000000000246 R12: 0000000000000002 [ 98.500963][ T6126] R13: 0000000000000000 R14: 00007fa9cf9a5fa0 R15: 00007ffd89f896e8 [ 98.500983][ T6126] [ 98.624745][ T6128] netlink: 4 bytes leftover after parsing attributes in process `syz.1.946'. [ 98.871240][ T6140] netlink: 8 bytes leftover after parsing attributes in process `syz.5.949'. [ 98.880791][ T6140] netlink: 8 bytes leftover after parsing attributes in process `syz.5.949'. [ 98.973376][ T6144] loop5: detected capacity change from 0 to 164 [ 98.981121][ T6144] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 98.994069][ T6144] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 99.003172][ T6144] Symlink component flag not implemented [ 99.008832][ T6144] Symlink component flag not implemented [ 99.017380][ T6144] Symlink component flag not implemented (7) [ 99.023436][ T6144] Symlink component flag not implemented (116) [ 99.250245][ T6169] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 99.315466][ T29] kauditd_printk_skb: 268 callbacks suppressed [ 99.315483][ T29] audit: type=1326 audit(1746153820.036:2508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6178 comm="syz.5.968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9cf77e969 code=0x7ffc0000 [ 99.345205][ T29] audit: type=1326 audit(1746153820.036:2509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6178 comm="syz.5.968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9cf77e969 code=0x7ffc0000 [ 99.434144][ T29] audit: type=1326 audit(1746153820.068:2510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6178 comm="syz.5.968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa9cf77e969 code=0x7ffc0000 [ 99.457682][ T29] audit: type=1326 audit(1746153820.068:2511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6178 comm="syz.5.968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9cf77e969 code=0x7ffc0000 [ 99.481008][ T29] audit: type=1326 audit(1746153820.068:2512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6178 comm="syz.5.968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa9cf77e969 code=0x7ffc0000 [ 99.504333][ T29] audit: type=1326 audit(1746153820.068:2513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6178 comm="syz.5.968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9cf77e969 code=0x7ffc0000 [ 99.527715][ T29] audit: type=1326 audit(1746153820.068:2514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6178 comm="syz.5.968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=280 compat=0 ip=0x7fa9cf77e969 code=0x7ffc0000 [ 99.551034][ T29] audit: type=1326 audit(1746153820.068:2515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6178 comm="syz.5.968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9cf77e969 code=0x7ffc0000 [ 99.574371][ T29] audit: type=1400 audit(1746153820.152:2516): avc: denied { write } for pid=6170 comm="syz.3.964" name="001" dev="devtmpfs" ino=153 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 99.627698][ T29] audit: type=1326 audit(1746153820.351:2517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6186 comm="syz.6.970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66989fe969 code=0x7ffc0000 [ 100.360438][ T6193] Cannot find set identified by id 0 to match [ 100.397135][ T6197] FAULT_INJECTION: forcing a failure. [ 100.397135][ T6197] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 100.410242][ T6197] CPU: 0 UID: 0 PID: 6197 Comm: syz.1.976 Not tainted 6.15.0-rc4-syzkaller-00052-g4f79eaa2ceac #0 PREEMPT(voluntary) [ 100.410336][ T6197] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 100.410346][ T6197] Call Trace: [ 100.410351][ T6197] [ 100.410357][ T6197] __dump_stack+0x1d/0x30 [ 100.410381][ T6197] dump_stack_lvl+0xe8/0x140 [ 100.410402][ T6197] dump_stack+0x15/0x1b [ 100.410420][ T6197] should_fail_ex+0x265/0x280 [ 100.410454][ T6197] should_fail+0xb/0x20 [ 100.410478][ T6197] should_fail_usercopy+0x1a/0x20 [ 100.410512][ T6197] _copy_to_user+0x20/0xa0 [ 100.410529][ T6197] bpf_test_finish+0x106/0x4f0 [ 100.410557][ T6197] bpf_prog_test_run_xdp+0x578/0x8f0 [ 100.410730][ T6197] ? __rcu_read_unlock+0x4f/0x70 [ 100.410750][ T6197] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 100.410786][ T6197] bpf_prog_test_run+0x207/0x390 [ 100.410848][ T6197] __sys_bpf+0x3dc/0x790 [ 100.410920][ T6197] __x64_sys_bpf+0x41/0x50 [ 100.410941][ T6197] x64_sys_call+0x2478/0x2fb0 [ 100.411067][ T6197] do_syscall_64+0xd0/0x1a0 [ 100.411085][ T6197] ? clear_bhb_loop+0x25/0x80 [ 100.411103][ T6197] ? clear_bhb_loop+0x25/0x80 [ 100.411126][ T6197] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.411165][ T6197] RIP: 0033:0x7fa397ffe969 [ 100.411241][ T6197] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 100.411256][ T6197] RSP: 002b:00007fa396667038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 100.411272][ T6197] RAX: ffffffffffffffda RBX: 00007fa398225fa0 RCX: 00007fa397ffe969 [ 100.411363][ T6197] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 100.411375][ T6197] RBP: 00007fa396667090 R08: 0000000000000000 R09: 0000000000000000 [ 100.411385][ T6197] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 100.411395][ T6197] R13: 0000000000000000 R14: 00007fa398225fa0 R15: 00007ffe78b6c0d8 [ 100.411411][ T6197] [ 100.639911][ T6204] Cannot find set identified by id 0 to match [ 100.646208][ T6204] FAULT_INJECTION: forcing a failure. [ 100.646208][ T6204] name failslab, interval 1, probability 0, space 0, times 0 [ 100.659010][ T6204] CPU: 0 UID: 0 PID: 6204 Comm: syz.5.978 Not tainted 6.15.0-rc4-syzkaller-00052-g4f79eaa2ceac #0 PREEMPT(voluntary) [ 100.659048][ T6204] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 100.659124][ T6204] Call Trace: [ 100.659130][ T6204] [ 100.659138][ T6204] __dump_stack+0x1d/0x30 [ 100.659157][ T6204] dump_stack_lvl+0xe8/0x140 [ 100.659224][ T6204] dump_stack+0x15/0x1b [ 100.659241][ T6204] should_fail_ex+0x265/0x280 [ 100.659300][ T6204] should_failslab+0x8c/0xb0 [ 100.659331][ T6204] __kvmalloc_node_noprof+0x126/0x4d0 [ 100.659360][ T6204] ? __nf_hook_entries_try_shrink+0x260/0x450 [ 100.659391][ T6204] __nf_hook_entries_try_shrink+0x260/0x450 [ 100.659425][ T6204] __nf_unregister_net_hook+0x2d1/0x3b0 [ 100.659526][ T6204] nf_unregister_net_hooks+0xab/0xe0 [ 100.659589][ T6204] nf_ct_netns_do_put+0x1c6/0x260 [ 100.659620][ T6204] nf_ct_netns_put+0xea/0x1f0 [ 100.659649][ T6204] netmap_tg_destroy+0x2f/0x40 [ 100.659673][ T6204] ? __pfx_netmap_tg_destroy+0x10/0x10 [ 100.659763][ T6204] cleanup_entry+0x159/0x1b0 [ 100.659787][ T6204] translate_table+0xf3a/0xf90 [ 100.659854][ T6204] do_ipt_set_ctl+0x66f/0x820 [ 100.659891][ T6204] ? _raw_spin_unlock_bh+0x36/0x40 [ 100.659920][ T6204] ? tcp_release_cb+0xf1/0x370 [ 100.659979][ T6204] nf_setsockopt+0x196/0x1b0 [ 100.660006][ T6204] ip_setsockopt+0x102/0x110 [ 100.660032][ T6204] tcp_setsockopt+0x95/0xb0 [ 100.660065][ T6204] sock_common_setsockopt+0x66/0x80 [ 100.660170][ T6204] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 100.660192][ T6204] __sys_setsockopt+0x181/0x200 [ 100.660224][ T6204] __x64_sys_setsockopt+0x64/0x80 [ 100.660309][ T6204] x64_sys_call+0x2bd5/0x2fb0 [ 100.660331][ T6204] do_syscall_64+0xd0/0x1a0 [ 100.660371][ T6204] ? clear_bhb_loop+0x25/0x80 [ 100.660389][ T6204] ? clear_bhb_loop+0x25/0x80 [ 100.660406][ T6204] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.660441][ T6204] RIP: 0033:0x7fa9cf77e969 [ 100.660452][ T6204] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 100.660470][ T6204] RSP: 002b:00007fa9cdde7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 100.660487][ T6204] RAX: ffffffffffffffda RBX: 00007fa9cf9a5fa0 RCX: 00007fa9cf77e969 [ 100.660497][ T6204] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000006 [ 100.660507][ T6204] RBP: 00007fa9cdde7090 R08: 00000000000004d0 R09: 0000000000000000 [ 100.660551][ T6204] R10: 00002000000004c0 R11: 0000000000000246 R12: 0000000000000002 [ 100.660563][ T6204] R13: 0000000000000000 R14: 00007fa9cf9a5fa0 R15: 00007ffd89f896e8 [ 100.660662][ T6204] [ 101.179230][ T6240] FAULT_INJECTION: forcing a failure. [ 101.179230][ T6240] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 101.192434][ T6240] CPU: 0 UID: 0 PID: 6240 Comm: syz.5.994 Not tainted 6.15.0-rc4-syzkaller-00052-g4f79eaa2ceac #0 PREEMPT(voluntary) [ 101.192498][ T6240] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 101.192509][ T6240] Call Trace: [ 101.192513][ T6240] [ 101.192532][ T6240] __dump_stack+0x1d/0x30 [ 101.192554][ T6240] dump_stack_lvl+0xe8/0x140 [ 101.192575][ T6240] dump_stack+0x15/0x1b [ 101.192593][ T6240] should_fail_ex+0x265/0x280 [ 101.192628][ T6240] should_fail+0xb/0x20 [ 101.192714][ T6240] should_fail_usercopy+0x1a/0x20 [ 101.192733][ T6240] _copy_from_user+0x1c/0xb0 [ 101.192757][ T6240] kstrtouint_from_user+0x69/0xf0 [ 101.192789][ T6240] ? avc_policy_seqno+0x15/0x30 [ 101.192902][ T6240] proc_fail_nth_write+0x50/0x160 [ 101.193055][ T6240] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 101.193082][ T6240] vfs_write+0x266/0x8d0 [ 101.193106][ T6240] ? vfs_read+0x47f/0x6f0 [ 101.193125][ T6240] ? __rcu_read_unlock+0x4f/0x70 [ 101.193174][ T6240] ? __fget_files+0x184/0x1c0 [ 101.193275][ T6240] ksys_write+0xda/0x1a0 [ 101.193303][ T6240] __x64_sys_write+0x40/0x50 [ 101.193329][ T6240] x64_sys_call+0x2cdd/0x2fb0 [ 101.193366][ T6240] do_syscall_64+0xd0/0x1a0 [ 101.193416][ T6240] ? clear_bhb_loop+0x25/0x80 [ 101.193434][ T6240] ? clear_bhb_loop+0x25/0x80 [ 101.193451][ T6240] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.193564][ T6240] RIP: 0033:0x7fa9cf77d41f [ 101.193579][ T6240] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 101.193598][ T6240] RSP: 002b:00007fa9cdde7030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 101.193615][ T6240] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fa9cf77d41f [ 101.193640][ T6240] RDX: 0000000000000001 RSI: 00007fa9cdde70a0 RDI: 0000000000000004 [ 101.193716][ T6240] RBP: 00007fa9cdde7090 R08: 0000000000000000 R09: 0000000000000000 [ 101.193748][ T6240] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 101.193814][ T6240] R13: 0000000000000000 R14: 00007fa9cf9a5fa0 R15: 00007ffd89f896e8 [ 101.193831][ T6240] [ 101.196718][ T6242] binfmt_misc: register: failed to install interpreter file ./file2 [ 101.218672][ T6244] FAULT_INJECTION: forcing a failure. [ 101.218672][ T6244] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 101.425754][ T6244] CPU: 1 UID: 0 PID: 6244 Comm: syz.5.996 Not tainted 6.15.0-rc4-syzkaller-00052-g4f79eaa2ceac #0 PREEMPT(voluntary) [ 101.425786][ T6244] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 101.425855][ T6244] Call Trace: [ 101.425907][ T6244] [ 101.425913][ T6244] __dump_stack+0x1d/0x30 [ 101.425930][ T6244] dump_stack_lvl+0xe8/0x140 [ 101.425966][ T6244] dump_stack+0x15/0x1b [ 101.425991][ T6244] should_fail_ex+0x265/0x280 [ 101.426017][ T6244] should_fail+0xb/0x20 [ 101.426089][ T6244] should_fail_usercopy+0x1a/0x20 [ 101.426102][ T6244] _copy_to_user+0x20/0xa0 [ 101.426157][ T6244] snd_seq_ioctl+0x223/0x2e0 [ 101.426181][ T6244] ? __pfx_snd_seq_ioctl+0x10/0x10 [ 101.426276][ T6244] __se_sys_ioctl+0xcb/0x140 [ 101.426309][ T6244] __x64_sys_ioctl+0x43/0x50 [ 101.426325][ T6244] x64_sys_call+0x19a8/0x2fb0 [ 101.426410][ T6244] do_syscall_64+0xd0/0x1a0 [ 101.426436][ T6244] ? clear_bhb_loop+0x25/0x80 [ 101.426452][ T6244] ? clear_bhb_loop+0x25/0x80 [ 101.426531][ T6244] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.426547][ T6244] RIP: 0033:0x7fa9cf77e969 [ 101.426559][ T6244] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 101.426595][ T6244] RSP: 002b:00007fa9cdde7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 101.426610][ T6244] RAX: ffffffffffffffda RBX: 00007fa9cf9a5fa0 RCX: 00007fa9cf77e969 [ 101.426620][ T6244] RDX: 0000200000000180 RSI: 000000004058534c RDI: 0000000000000005 [ 101.426631][ T6244] RBP: 00007fa9cdde7090 R08: 0000000000000000 R09: 0000000000000000 [ 101.426654][ T6244] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 101.426697][ T6244] R13: 0000000000000000 R14: 00007fa9cf9a5fa0 R15: 00007ffd89f896e8 [ 101.426714][ T6244] [ 101.977477][ T6276] loop1: detected capacity change from 0 to 512 [ 102.021551][ T6276] EXT4-fs error (device loop1): ext4_quota_enable:7122: comm syz.1.1007: Bad quota inum: 1, type: 2 [ 102.047229][ T6276] EXT4-fs warning (device loop1): ext4_enable_quotas:7170: Failed to enable quota tracking (type=2, err=-117, ino=1). Please run e2fsck to fix. [ 102.131702][ T6276] EXT4-fs (loop1): mount failed [ 102.755687][ T6298] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 102.881870][ T6306] loop5: detected capacity change from 0 to 512 [ 102.898798][ T6306] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 102.909924][ T6306] EXT4-fs error (device loop5): __ext4_fill_super:5502: inode #2: comm syz.5.1019: iget: special inode unallocated [ 102.922500][ T6306] EXT4-fs (loop5): get root inode failed [ 102.928221][ T6306] EXT4-fs (loop5): mount failed [ 102.940728][ T6308] netlink: 292 bytes leftover after parsing attributes in process `syz.0.1020'. [ 102.987071][ T6313] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1021'. [ 103.039592][ T6315] lo: entered promiscuous mode [ 103.044393][ T6315] lo: entered allmulticast mode [ 103.173609][ T6325] blktrace: Concurrent blktraces are not allowed on loop12 [ 103.321621][ T6335] hsr0: entered promiscuous mode [ 103.369179][ T6340] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 103.369336][ T6337] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 103.385782][ T6340] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1033'. [ 103.387748][ T6339] IPv6: Can't replace route, no match found [ 103.394794][ T6340] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1033'. [ 103.545877][ T6351] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1037'. [ 103.576024][ T6351] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 103.590096][ T6351] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 103.600849][ T6354] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1037'. [ 104.186627][ T29] kauditd_printk_skb: 422 callbacks suppressed [ 104.186642][ T29] audit: type=1400 audit(1746153825.150:2938): avc: denied { ioctl } for pid=6363 comm="syz.3.1041" path="/dev/raw-gadget" dev="devtmpfs" ino=142 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 104.220676][ T6364] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1041'. [ 104.442072][ T29] audit: type=1400 audit(1746153825.181:2939): avc: denied { getopt } for pid=6363 comm="syz.3.1041" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 104.509240][ T6368] FAULT_INJECTION: forcing a failure. [ 104.509240][ T6368] name failslab, interval 1, probability 0, space 0, times 0 [ 104.521887][ T6368] CPU: 0 UID: 0 PID: 6368 Comm: syz.5.1043 Not tainted 6.15.0-rc4-syzkaller-00052-g4f79eaa2ceac #0 PREEMPT(voluntary) [ 104.521916][ T6368] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 104.521938][ T6368] Call Trace: [ 104.521945][ T6368] [ 104.521952][ T6368] __dump_stack+0x1d/0x30 [ 104.521972][ T6368] dump_stack_lvl+0xe8/0x140 [ 104.521999][ T6368] dump_stack+0x15/0x1b [ 104.522017][ T6368] should_fail_ex+0x265/0x280 [ 104.522051][ T6368] ? audit_log_d_path+0x8d/0x150 [ 104.522101][ T6368] should_failslab+0x8c/0xb0 [ 104.522128][ T6368] __kmalloc_cache_noprof+0x4c/0x320 [ 104.522213][ T6368] audit_log_d_path+0x8d/0x150 [ 104.522324][ T6368] audit_log_d_path_exe+0x42/0x70 [ 104.522431][ T6368] audit_log_task+0x1e9/0x250 [ 104.522460][ T6368] audit_seccomp+0x61/0x100 [ 104.522599][ T6368] ? __seccomp_filter+0x68c/0x10d0 [ 104.522622][ T6368] __seccomp_filter+0x69d/0x10d0 [ 104.522645][ T6368] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 104.522665][ T6368] ? vfs_write+0x75e/0x8d0 [ 104.522684][ T6368] ? __rcu_read_unlock+0x4f/0x70 [ 104.522757][ T6368] ? __fget_files+0x184/0x1c0 [ 104.522787][ T6368] __secure_computing+0x82/0x150 [ 104.522808][ T6368] syscall_trace_enter+0xcf/0x1e0 [ 104.522829][ T6368] do_syscall_64+0xaa/0x1a0 [ 104.522902][ T6368] ? clear_bhb_loop+0x25/0x80 [ 104.522919][ T6368] ? clear_bhb_loop+0x25/0x80 [ 104.523008][ T6368] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.523063][ T6368] RIP: 0033:0x7fa9cf77e969 [ 104.523075][ T6368] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 104.523091][ T6368] RSP: 002b:00007fa9cdde7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000115 [ 104.523110][ T6368] RAX: ffffffffffffffda RBX: 00007fa9cf9a5fa0 RCX: 00007fa9cf77e969 [ 104.523124][ T6368] RDX: 0000000000000003 RSI: 0000000000000025 RDI: 0000000000000005 [ 104.523184][ T6368] RBP: 00007fa9cdde7090 R08: 0000000000000000 R09: 0000000000000000 [ 104.523193][ T6368] R10: 0000000000000005 R11: 0000000000000246 R12: 0000000000000001 [ 104.523204][ T6368] R13: 0000000000000000 R14: 00007fa9cf9a5fa0 R15: 00007ffd89f896e8 [ 104.523224][ T6368] [ 104.743540][ T29] audit: type=1326 audit(1746153825.475:2940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6367 comm="syz.5.1043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9cf77e969 code=0x7ffc0000 [ 104.766984][ T29] audit: type=1326 audit(1746153825.486:2941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6367 comm="syz.5.1043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa9cf77e969 code=0x7ffc0000 [ 104.790390][ T29] audit: type=1326 audit(1746153825.486:2942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6367 comm="syz.5.1043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9cf77e969 code=0x7ffc0000 [ 104.813845][ T29] audit: type=1326 audit(1746153825.486:2943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6367 comm="syz.5.1043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa9cf77e969 code=0x7ffc0000 [ 104.837268][ T29] audit: type=1326 audit(1746153825.486:2944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6367 comm="syz.5.1043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9cf77e969 code=0x7ffc0000 [ 104.860779][ T29] audit: type=1326 audit(1746153825.486:2945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6367 comm="syz.5.1043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7fa9cf77e969 code=0x7ffc0000 [ 104.884204][ T29] audit: type=1326 audit(1746153825.486:2946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6367 comm="syz.5.1043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9cf77e969 code=0x7ffc0000 [ 104.907699][ T29] audit: type=1326 audit(1746153825.486:2947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6367 comm="syz.5.1043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7fa9cf77e969 code=0x7ffc0000 [ 104.989897][ T6371] loop5: detected capacity change from 0 to 512 [ 104.999368][ T6371] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.086629][ T6371] ext4 filesystem being mounted at /86/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 105.122776][ T6375] netlink: 'syz.3.1045': attribute type 13 has an invalid length. [ 105.188099][ T5227] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.251668][ T6375] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 105.475153][ T6388] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1051'. [ 105.510262][ T6386] loop3: detected capacity change from 0 to 526 [ 105.535822][ T6388] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1051'. [ 105.545822][ T6386] EXT4-fs (loop3): failed to parse options in superblock:  [ 105.558669][ T6386] EXT4-fs (loop3): Unsupported encryption level 27 [ 105.675850][ T6393] loop1: detected capacity change from 0 to 512 [ 105.682472][ T6393] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 105.806723][ T6397] FAULT_INJECTION: forcing a failure. [ 105.806723][ T6397] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 105.819926][ T6397] CPU: 0 UID: 0 PID: 6397 Comm: syz.1.1055 Not tainted 6.15.0-rc4-syzkaller-00052-g4f79eaa2ceac #0 PREEMPT(voluntary) [ 105.819955][ T6397] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 105.819997][ T6397] Call Trace: [ 105.820002][ T6397] [ 105.820010][ T6397] __dump_stack+0x1d/0x30 [ 105.820032][ T6397] dump_stack_lvl+0xe8/0x140 [ 105.820054][ T6397] dump_stack+0x15/0x1b [ 105.820071][ T6397] should_fail_ex+0x265/0x280 [ 105.820123][ T6397] should_fail+0xb/0x20 [ 105.820153][ T6397] should_fail_usercopy+0x1a/0x20 [ 105.820173][ T6397] _copy_from_iter+0xcf/0xdd0 [ 105.820192][ T6397] ? __build_skb_around+0x1a0/0x200 [ 105.820319][ T6397] ? __alloc_skb+0x223/0x320 [ 105.820355][ T6397] netlink_sendmsg+0x471/0x6b0 [ 105.820441][ T6397] ? __pfx_netlink_sendmsg+0x10/0x10 [ 105.820475][ T6397] __sock_sendmsg+0x142/0x180 [ 105.820500][ T6397] ____sys_sendmsg+0x31e/0x4e0 [ 105.820520][ T6397] ___sys_sendmsg+0x17b/0x1d0 [ 105.820613][ T6397] __x64_sys_sendmsg+0xd4/0x160 [ 105.820632][ T6397] x64_sys_call+0x2999/0x2fb0 [ 105.820649][ T6397] do_syscall_64+0xd0/0x1a0 [ 105.820733][ T6397] ? clear_bhb_loop+0x25/0x80 [ 105.820750][ T6397] ? clear_bhb_loop+0x25/0x80 [ 105.820767][ T6397] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.820826][ T6397] RIP: 0033:0x7fa397ffe969 [ 105.820898][ T6397] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 105.820916][ T6397] RSP: 002b:00007fa396667038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 105.820936][ T6397] RAX: ffffffffffffffda RBX: 00007fa398225fa0 RCX: 00007fa397ffe969 [ 105.820949][ T6397] RDX: 0000000000000000 RSI: 0000200000000380 RDI: 0000000000000007 [ 105.821010][ T6397] RBP: 00007fa396667090 R08: 0000000000000000 R09: 0000000000000000 [ 105.821019][ T6397] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 105.821028][ T6397] R13: 0000000000000000 R14: 00007fa398225fa0 R15: 00007ffe78b6c0d8 [ 105.821146][ T6397] [ 106.197973][ T6403] loop5: detected capacity change from 0 to 128 [ 106.245366][ T6403] FAT-fs (loop5): IO charset cp775 not found [ 106.267179][ T6409] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1060'. [ 106.361892][ T6415] loop3: detected capacity change from 0 to 4096 [ 106.404859][ T6415] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.432458][ T6422] loop5: detected capacity change from 0 to 512 [ 106.440119][ T6422] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 106.450692][ T6415] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.475299][ T6422] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 106.497480][ T6422] EXT4-fs (loop5): Remounting filesystem read-only [ 106.504198][ T6422] EXT4-fs (loop5): 1 truncate cleaned up [ 106.510845][ T6415] loop3: detected capacity change from 0 to 128 [ 106.518914][ T6422] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.563834][ T5227] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.577874][ T6415] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 106.793676][ T6415] ext4 filesystem being mounted at /217/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 106.868204][ T3313] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 107.575148][ T6439] loop1: detected capacity change from 0 to 4096 [ 107.589227][ T6439] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.603876][ T6439] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.710469][ T6451] loop5: detected capacity change from 0 to 512 [ 107.718259][ T6450] __nla_validate_parse: 3 callbacks suppressed [ 107.718274][ T6450] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1075'. [ 107.737066][ T6451] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 107.758048][ T6451] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 107.782515][ T6453] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1075'. [ 107.805438][ T6451] EXT4-fs (loop5): Remounting filesystem read-only [ 107.820028][ T6451] EXT4-fs (loop5): 1 truncate cleaned up [ 107.841774][ T6451] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.944116][ T5227] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.561280][ T3500] ================================================================== [ 108.569398][ T3500] BUG: KCSAN: data-race in delete_from_page_cache_batch / nr_blockdev_pages [ 108.578087][ T3500] [ 108.580402][ T3500] read-write to 0xffff888100630bb0 of 8 bytes by task 6439 on cpu 0: [ 108.588458][ T3500] delete_from_page_cache_batch+0x4f1/0x6f0 [ 108.594366][ T3500] truncate_inode_pages_range+0x1b8/0x690 [ 108.600090][ T3500] truncate_inode_pages+0x24/0x30 [ 108.605122][ T3500] blkdev_flush_mapping+0xa4/0x1a0 [ 108.610235][ T3500] bdev_release+0x2bf/0x3d0 [ 108.614740][ T3500] blkdev_release+0x15/0x20 [ 108.619244][ T3500] __fput+0x298/0x650 [ 108.623218][ T3500] ____fput+0x1c/0x30 [ 108.627195][ T3500] task_work_run+0x12e/0x1a0 [ 108.631788][ T3500] resume_user_mode_work+0x6a/0x70 [ 108.636903][ T3500] syscall_exit_to_user_mode+0x77/0xb0 [ 108.642378][ T3500] do_syscall_64+0xdd/0x1a0 [ 108.646883][ T3500] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.652785][ T3500] [ 108.655099][ T3500] read to 0xffff888100630bb0 of 8 bytes by task 3500 on cpu 1: [ 108.662636][ T3500] nr_blockdev_pages+0x7e/0xd0 [ 108.667400][ T3500] si_meminfo+0x87/0xd0 [ 108.671560][ T3500] update_defense_level+0x47/0x5c0 [ 108.676666][ T3500] defense_work_handler+0x1f/0x80 [ 108.681685][ T3500] process_scheduled_works+0x4cb/0x9d0 [ 108.687149][ T3500] worker_thread+0x582/0x770 [ 108.691749][ T3500] kthread+0x486/0x510 [ 108.695812][ T3500] ret_from_fork+0x4b/0x60 [ 108.700233][ T3500] ret_from_fork_asm+0x1a/0x30 [ 108.704993][ T3500] [ 108.707315][ T3500] value changed: 0x0000000000000001 -> 0x0000000000000000 [ 108.714418][ T3500] [ 108.716735][ T3500] Reported by Kernel Concurrency Sanitizer on: [ 108.722896][ T3500] CPU: 1 UID: 0 PID: 3500 Comm: kworker/1:4 Not tainted 6.15.0-rc4-syzkaller-00052-g4f79eaa2ceac #0 PREEMPT(voluntary) [ 108.735387][ T3500] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 108.745436][ T3500] Workqueue: events_long defense_work_handler [ 108.751509][ T3500] ================================================================== [ 108.778956][ T6439] loop1: detected capacity change from 0 to 128 [ 108.789422][ T6439] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 108.816259][ T6439] ext4 filesystem being mounted at /210/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 108.838192][ T3311] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.