last executing test programs: 2m56.716896143s ago: executing program 3 (id=44): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001868000000000000000000080000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000001800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x20, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="1502000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r3], 0x3c}, 0x1, 0xba01, 0x0, 0x20000000}, 0x0) 2m56.567368565s ago: executing program 3 (id=49): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f0000000080)=0x9, 0x4) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) recvmmsg(r0, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 2m56.537963515s ago: executing program 3 (id=51): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000006280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000740)=@newtaction={0x48, 0x30, 0x1, 0x6000000, 0x0, {0x0, 0x0, 0x6a00}, [{0x34, 0x1, [@m_mirred={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) 2m56.436496227s ago: executing program 3 (id=54): r0 = socket(0x10, 0xa, 0x1) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x404c080) (async) getrandom(0x0, 0x0, 0x0) (async) r1 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000162000/0x3000)=nil, 0x3000, 0x3000001, 0x11012, r1, 0xbf87c000) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') pread64(r2, &(0x7f0000001240)=""/102400, 0x19000, 0x1000000000) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x18, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r3}, 0x10) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) (async) mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2901090, 0x0) (async) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') (async) mount(0x0, &(0x7f0000000d40)='./file0/../file0/../file0\x00', &(0x7f00000002c0)='sysfs\x00', 0x0, 0x0) pivot_root(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f00000001c0)='./file0/../file0/../file0\x00') (async) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) write(r0, &(0x7f0000000000)="2000000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) 2m56.337635128s ago: executing program 3 (id=56): syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='nodots,allow_utime=000000000034,usefree,check=strict,dots,\x00'/70, @ANYRES32=0x0, @ANYRES64=0x0], 0x1, 0x1e9, &(0x7f00000002c0)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000), 0x4) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000200)='./file0\x00', 0x800, &(0x7f0000000240)=ANY=[], 0x1, 0x36e, &(0x7f0000000c00)="$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") r1 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000080)={0x0, 0x5}, 0x8) pwritev(r1, &(0x7f0000001100)=[{&(0x7f0000000880)="ea94e87d", 0x4}, {0x0}], 0x2, 0xffffffff, 0x100) 2m55.848150045s ago: executing program 3 (id=66): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) listen(r0, 0x63) r1 = socket$tipc(0x1e, 0x5, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="660a00000700000061114c0000000000850000004200000095"], &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r3}, 0x10) close(r1) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r5, 0x0, 0x4}, 0x18) accept4(r0, 0x0, 0x0, 0x400000000000000) 2m55.847710985s ago: executing program 32 (id=66): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) listen(r0, 0x63) r1 = socket$tipc(0x1e, 0x5, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="660a00000700000061114c0000000000850000004200000095"], &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r3}, 0x10) close(r1) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r5, 0x0, 0x4}, 0x18) accept4(r0, 0x0, 0x0, 0x400000000000000) 2m31.437374415s ago: executing program 5 (id=411): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x4, &(0x7f0000000680)=[{0x1000, 0xb, 0x0, 0xfffffffe}, {0x6, 0x3, 0xff, 0x3}, {0x5, 0x7, 0xd, 0xd}, {0x8, 0x61, 0x40}]}) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rt_sigaction(0x26, &(0x7f0000000580)={&(0x7f0000000280)="2e362e0ff8c0650f1a6433008f89b801ecf3450f1efb66470f69698fc4a3156a7d00acc4e295003cc40f380b178f2978c71ac402ed3b7b2b", 0x0, &(0x7f0000000300)="c4a32148f100653e65450f964ea5660ff95600c4c181f885718c0000660f63d4c40135f132f247acc4227d1d7d00c4e3f962665b0e66d800", {[0x10]}}, &(0x7f0000000640)={&(0x7f00000005c0)="642643dae90fc7fd43d9fbf34d0f38f67fe9d31164660fc6eee8c4a1b059b157e7bb9dc421245e4721c481fd2ec62e41dcf3", 0x0, &(0x7f0000000600)="8fe818970900f3aac4814965212ef2afc4c235b87e046441daa00010000081d11c000000c4026d2c23c483f10a262e8f6878c35caadafe"}, 0x8, &(0x7f00000006c0)) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x50, r1, 0x8, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x2c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x7}, {0x5}, {0x5, 0x3, 0x1}, {0x5}, {0x5, 0x3, 0x5}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000000}, 0x240400d4) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0x14) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000180)=0xe) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfe000000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r4, 0x0, 0x5}, 0x18) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', 0x444, &(0x7f00000008c0)=ANY=[@ANYBLOB="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", @ANYRESHEX, @ANYRES8], 0xfe, 0x68f, &(0x7f0000000c00)="$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") open_tree(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)={0x6c, r6, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @loopback}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @remote}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}]}, 0x6c}}, 0x0) 2m30.945208292s ago: executing program 5 (id=415): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000000000000001000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000280)='netlink_extack\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x0, 0x0, 0x0) eventfd2(0x25da40, 0x0) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(r1, &(0x7f0000000740)={0x0, 0xa00, &(0x7f0000000400)={&(0x7f00000002c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="09052cbd7000fbdbdf25030000003000018014000400fe8000000000000000000000000000aa060005004e230000060001"], 0x44}, 0x1, 0x0, 0x0, 0x4000001}, 0x80c0) 2m30.817010364s ago: executing program 5 (id=417): bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6000, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000400)="2e0000003a000511d25a80698c63940d0124fc602f6e35400c782c6fc41ec00037153e37a366000025581d00d160", 0x2e}], 0x1, 0x0, 0x0, 0x39c}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x48080, 0x6d) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r1, 0x40081271, &(0x7f0000001080)) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) socket$tipc(0x1e, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000818110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) acct(&(0x7f0000000140)='./file0\x00') 2m30.816173694s ago: executing program 5 (id=418): mkdir(&(0x7f0000000180)='./file0\x00', 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x21404e, &(0x7f00000000c0)={[{@grpjquota}, {@init_itable_val={'init_itable', 0x3d, 0x5}}, {@user_xattr}, {@usrjquota}]}, 0x1, 0x517, &(0x7f0000000140)="$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") mount$tmpfs(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000080), 0x1200002, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29}, './file0\x00'}) (fail_nth: 4) 2m30.676417526s ago: executing program 5 (id=422): r0 = socket$inet6(0xa, 0x6, 0x0) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x800000000003}, 0x1100, 0x5dd8, 0x0, 0x5, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=ANY=[@ANYBLOB="54000000020601030000000000007c1d000000000900020073797a30000000000500010006000000050005000000000005000400000000000c00078005001500020000000d000300686173683a6d616300000000afcd8dc8d6704321fb703625ce9ff91aa55b1a64427c4d3c6874213c6ce9a6f97c8964b336f9c47b3145f93abbfb30f04bba2108217ae80b46d1294b2ea2ba701a17cffea59532238703b4ed"], 0x54}}, 0x4000000) close_range(r0, 0xffffffffffffffff, 0x0) 2m30.36602248s ago: executing program 5 (id=431): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x8, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f00000004c0)='kfree\x00', r1}, 0x10) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)='\x00', 0xfffffffffffffffd) 2m30.36328023s ago: executing program 33 (id=431): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x8, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f00000004c0)='kfree\x00', r1}, 0x10) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)='\x00', 0xfffffffffffffffd) 1m56.427010756s ago: executing program 6 (id=1080): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="050000000400000099000000"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) unshare(0x24060400) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001700)=ANY=[@ANYBLOB="160000000000000061b1000002"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r2, 0xffffffffffffffff}, 0x0, &(0x7f0000000040)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x15, &(0x7f0000000200)={r3, 0x0, &(0x7f0000001780)=""/4096}, 0x20) 1m56.400991547s ago: executing program 6 (id=1081): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0}, 0x18) syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x88, &(0x7f0000000080)={[{@nogrpid}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@errors_remount}, {@nodiscard}, {@quota}]}, 0x3, 0x438, &(0x7f0000000580)="$eJzs289rHFUcAPDv7GZT01+Jpf5oWjVaxeCPpElr7cGLouBBQdBDPcYkLbHbRpoItgSNIvUoBe/iUfAv8KQXUU8Fr3oXoUgurZ5WZncm2d1sfnaTrd3PByb5vpm3vPfNzNt9My8bQNcaSn8kEfsj4veI6K8VGysM1X7dXlqY/GdpYTKJSuXtv5NqvVtLC5N51fx1+/JCT0Th8ySOtmh37srVCxPl8vTlrDw6f/GD0bkrV5+fuThxfvr89KXxM2dOnRx78fT4C23JM83r1uDHs8eOvP7u9Tcnz15/75fvkjz/pjzaZGi9g09VKm1urrMO1MVJTwc7wpYUa8M0StXx3x/FWDl5/fHaZx3tHLCjKpVK5cG1Dy9WgHtYEp3uAdAZ+Qd9ev+bb7s09bgr3Hy5dgOU5n0722pHeqKQ1Sk13d+201BEnF389+t0i515DgEA0OCHdP7zXKv5XyHqnwsdzNZQBiLi/og4FBGnI+JwRDwQUa37UEQ8vMX2mxdJVs9/Dm4rr81K538vZWtbjfO/fPYXA8WsdKCafyk5N1OePpH1bDhKe9Ly2Dpt/Pjqb1+2PJA1kc//0i1tP58LZpX+6tnT+LKpifmJO8m53s1PIwZ7WuWfLK8EJBFxJCIGt9nGzDPfHlvr2NCG+a+jDetMlW8inq6d/8Voyj+XrL8+OXpflKdPjOZXxWq/3rj21lrt31H+bZCe/70tr//l/AeS+vXaua23ce2PL9a8p9k4/9bXf2/yTsO+jybm5y+PRfQmb9Q6Xb9/vKne+Er9NP/h463H/6FY+UscjYj0In4kIh6NiMeyvj8eEU9ExPHVqd3ozYKfX3ny/WpQ2k7+OyvNf2pL538l6I3mPa2D4oWfvm9odGAr+afn/1Q1Gs72bOb9bzP92t7VDAAAAP8/hYjYH0lhZDkuFEZGav/Dfzj2Fsqzc/PPnpv98NJU7TsCA1Eq5E+6+uueh45lt/V5ebypfDJ7bvxVsa9aHpmcLU91OnnocvvWGP+pP4ud7h2w43xfC7qX8Q/dy/iH7mX8Q/dqMf77OtEPYPe1+vz/pAP9AHZf0/i37AddxP0/dC/jH7qX8Q9daa4vNv6SvECwKojCXdENwQ4FnX5nAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAaI//AgAA//9Lr+a0") rename(&(0x7f0000000000)='./file2\x00', &(0x7f0000000040)='./file1\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x9a) ioctl$EXT4_IOC_MOVE_EXT(r1, 0x40305829, &(0x7f0000000b40)={0x17c04, 0xffffffffffffffff, 0x82, 0x500000001, 0x8000000000000001, 0x8}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x4011, &(0x7f0000000700)={[{@nobh}, {@norecovery}, {@nobh}]}, 0x9, 0x661, &(0x7f0000000080)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f00000000c0)=0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(0x0, r5) sendmsg$NFC_CMD_DEV_UP(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001c80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010000000000000000000200000008000100", @ANYRES32=r4], 0x1c}}, 0x0) write$nci(r3, &(0x7f0000000180)=ANY=[@ANYBLOB="6103050c040206ed036a3e5e01"], 0xd) memfd_create(&(0x7f00000001c0)='\x00\xc76\xbe\x91\x8d\x182)!\x9a%\xd9\x19\x17\xb0\xed|\xb3\xc2\x017h\xe9kL\xa2\xd28\xd6\x06\a\x0e\xfc\xfe\x12\x8f&\x13\xae%@T\xa3\xb0>\\\xec\xa9\xf9Q@6A\x10\x8cn|\x00\x00\x00\x00\x00\x00\x00\x00\xeb0\xdd\xe8\x87\x05=\xfb\x8b$\xdcQ\xee\xc5\x1f\x8bQ\xf7fo\"i\xa1hk\x1d\xf5z\xc1\x7f\xa4\\]\xc4\xbe3\xf9\xa8\t?:\xd8\xda\x84\xeepI[\x1c\x00\x00\x00\x00\xf9v\x00\x00\x00\x00\x00T\xb6\xbe\x0f~\xc0\x92\xe9O{\xa8\x81(\x01\x14\xfc\x83\xf9\xfb\x05\x94Tr@Lq]\xf9\x15zj\x87\xc4\x8e\xe8/\xb9-&R\x8e\xb2\xb3bBx\x1e1\x18\x8f2\xf7]#\xed,\xc7\x03\x00\x00\x00\xa3\xee\xcb\xaf\xb3\xe3\'}\x18\xe8O\xa8#K\xb6\xe4R$\xaa\x00U\x92\xd2\x99\xb80xffffffffffffffff}, 0x0, &(0x7f0000000040)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x15, &(0x7f0000000200)={r3, 0x0, &(0x7f0000001780)=""/4096}, 0x20) 1m56.17508651s ago: executing program 6 (id=1086): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x1, 0x0, 0x7ffc1ffb}]}) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="1801000000001f00000000000000ea1f850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xec, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0xfffffffffffffffc}, 0x18) r1 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r1, &(0x7f0000000700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000740)=0x14) syncfs(0xffffffffffffffff) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="9feb010018000000000000002c0000002c000000050000000600000000000e01000000020000000c0000000000001103000000010000000a000000000000120100000000612e6100"], &(0x7f0000000540)=""/76, 0x49, 0x4c, 0x0, 0x4, 0x0, @void, @value}, 0x28) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000680)={'ip_vti0\x00', &(0x7f0000000600)={'syztnl1\x00', 0x0, 0x700, 0x8000, 0xf, 0x7, {{0x10, 0x4, 0x3, 0x7, 0x40, 0x64, 0x0, 0x7, 0x2f, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@ssrr={0x89, 0x2b, 0xa3, [@local, @multicast2, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}, @local, @dev={0xac, 0x14, 0x14, 0x26}, @broadcast, @rand_addr=0x64010100, @rand_addr=0x64010101, @loopback]}]}}}}}) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000006c0)={0xffffff00, 0x0}, 0x8) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xb, 0x2, &(0x7f00000009c0)=ANY=[@ANYRES8=r2], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', r4, @fallback=0x38, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x48, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x649e452c, 0xe}, 0x0, 0x0, 0x800000, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000480)='./file2\x00', 0x2000000, &(0x7f0000000280)=ANY=[], 0x8, 0x2f8, &(0x7f0000000ac0)="$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") syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800, &(0x7f0000000700), 0xff, 0x4a2, &(0x7f0000000740)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r6}, 0x18) socket(0x29, 0x2, 0x0) socket$kcm(0x10, 0x7, 0x0) r7 = socket(0x2, 0x4, 0x3ffff) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r9}, 0x18) openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) write(r7, &(0x7f0000000500)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000500), 0x400, 0x0) r10 = syz_open_dev$sg(&(0x7f0000000180), 0x180000000000, 0x80002) r11 = syz_clone(0x80040100, &(0x7f0000000240)="5deb95cdd597e4e6dadb0af71b55e037d80b80ee46d97f5625", 0x19, &(0x7f0000000380), &(0x7f00000003c0), &(0x7f0000000a00)="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") ioctl$BLKTRACESETUP(r10, 0xc0481273, &(0x7f0000000400)={'\x00', 0x0, 0x3ff, 0x0, 0x6, 0x3, r11}) close_range(r2, 0xffffffffffffffff, 0x200000000000000) 1m55.910723504s ago: executing program 6 (id=1093): r0 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x68, 0x0, 0x0, 0x0, 0x0, 0x8, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x6, 0x1}, 0x10000, 0x0, 0x5, 0x7, 0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1a) r1 = gettid() r2 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x3180, 0x2, 0x40024e}, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000280), 0x10) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000580)={{{@in=@initdev, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@remote}}, &(0x7f0000000300)=0xe8) mount$9p_fd(0x0, 0x0, &(0x7f0000000240), 0x4008, &(0x7f00000007c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@version_u}, {@posixacl}, {@directio}, {@noextend}, {@access_user}, {@uname={'uname', 0x3d, 'GPL\x00'}}], [{@audit}, {@fowner_gt={'fowner>', r6}}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@dont_measure}]}}) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_MSG_RING={0x28, 0x6, 0x0, r2, 0x0, 0x0, 0x0, 0x2}) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r7 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) readv(r7, &(0x7f0000002980)=[{&(0x7f0000000700)=""/163, 0xa3}], 0x2) 1m55.855974225s ago: executing program 6 (id=1097): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000340)='./file0\x00', 0x0, &(0x7f00000001c0)={[{@usrjquota}, {@nolazytime}, {@stripe}, {@minixdf}, {@sysvgroups}, {@stripe={'stripe', 0x3d, 0x7}}, {@grpjquota}, {@journal_dev={'journal_dev', 0x3d, 0xdcc}}]}, 0x3, 0x464, &(0x7f0000000880)="$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") r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) ioctl$TUNSETLINK(r2, 0x400454cd, 0x308) ioctl$TUNSETSNDBUF(r2, 0x400454d4, &(0x7f00000000c0)=0xb) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x8, 0x0}, 0x5, r3}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) socket$inet_sctp(0x2, 0x1, 0x84) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) 1m55.818886205s ago: executing program 34 (id=1097): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000340)='./file0\x00', 0x0, &(0x7f00000001c0)={[{@usrjquota}, {@nolazytime}, {@stripe}, {@minixdf}, {@sysvgroups}, {@stripe={'stripe', 0x3d, 0x7}}, {@grpjquota}, {@journal_dev={'journal_dev', 0x3d, 0xdcc}}]}, 0x3, 0x464, &(0x7f0000000880)="$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") r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) ioctl$TUNSETLINK(r2, 0x400454cd, 0x308) ioctl$TUNSETSNDBUF(r2, 0x400454d4, &(0x7f00000000c0)=0xb) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x8, 0x0}, 0x5, r3}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) socket$inet_sctp(0x2, 0x1, 0x84) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) 5.476228443s ago: executing program 1 (id=3248): open(0x0, 0x14927e, 0x86) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000202300800000000025ad9835850000007b000000"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_mount_image$vfat(&(0x7f0000000340), &(0x7f0000000000)='./file1\x00', 0x280809a, &(0x7f0000000f40)=ANY=[], 0x1, 0x2b2, &(0x7f00000006c0)="$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") r0 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x130) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x51) write$9p(r0, &(0x7f0000001400), 0x0) sendfile(r0, r1, 0x0, 0xe065) 5.423400934s ago: executing program 1 (id=3252): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0)={0x0, r2}, 0x8) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x2, 0x1, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x10, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r5 = socket(0x200000100000011, 0x803, 0x0) setsockopt$packet_tx_ring(r5, 0x107, 0xd, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(0x0, r5) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000200)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000020000a3c000000120a09080000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a"], 0x64}, 0x1, 0x0, 0x0, 0x5}, 0x4044040) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad413ec50000000f00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0100000000000000000001000000040001801c0002800c00018008000100030000000c000180080001"], 0x34}}, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000740)=ANY=[@ANYBLOB="54010000100001000000000000000000ac1414aa000000000000000000000000e00000010000000000000000000000004e2200001ffd0007000020000c000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffff000000000000000000000000000000206c000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000100000000000008cb0200000000000006000000000000000000000000000400000000000000000004000000000000000800000000000000000000000000000000000000000000000600000000000000000000000000000000000000020000001b000000000000001c00040000004e244e230000e0000002000000000000000000000000480003006465666c61746500"/260], 0x154}, 0x1, 0x0, 0x0, 0x4055}, 0x4800) 4.400847098s ago: executing program 1 (id=3266): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000005, 0x3032, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000a00)=ANY=[@ANYBLOB="0a000000c0000000b30000007f"], 0x50) r1 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r1, &(0x7f0000000680)={&(0x7f0000000140)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000080)="d41851ef", 0x4}], 0x1}, 0x8001) r2 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r2, &(0x7f0000000680)={&(0x7f0000000140)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000180)='W', 0x1}], 0x1}, 0x0) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="5c00000014006b03000000d86e6c1d0002847ea622fb564500004e23e3f58e76110165f450e71b0075e3002500028d459e37000f0000000000bf9367b47e51f60a64c9f4d4938037e786a6d0bdd700"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r3, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002ec0)=[{&(0x7f0000000cc0)=""/4096, 0x1000}, {&(0x7f0000001ec0)=""/4096, 0x1000}], 0x2}, 0x10000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000a10000000000000000000010851000000600000018180000", @ANYRES32=r0, @ANYBLOB="0000000000000000660000000000000018000000f8ffffff00000000000000009500000000000000360a00000000000018010000202078250000000000202020db1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xa, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) 3.461959021s ago: executing program 1 (id=3280): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c000006000000000000f183850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r2 = syz_genetlink_get_family_id$fou(&(0x7f00000003c0), 0xffffffffffffffff) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x20400, 0x0) sendmsg$FOU_CMD_DEL(r3, &(0x7f0000000500)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)={0x30, r2, 0x0, 0x71bd2a, 0x25dfdbfd, {}, [@FOU_ATTR_PEER_V6={0x14, 0x9, @private0={0xfc, 0x0, '\x00', 0x1}}, @FOU_ATTR_AF={0x5, 0x2, 0xa}]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x41) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000006020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000ecff850000000400000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000680)='kfree\x00', r4, 0x0, 0x7}, 0x18) syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000000)='./bus\x00', 0x120c018, &(0x7f0000000680)={[{@check_relaxed}, {@unhide}, {@nojoliet}, {@overriderock}, {@uid}, {@dmode={'dmode', 0x3d, 0x1000}}, {@session={'session', 0x3d, 0x6}}, {@map_normal}]}, 0xff, 0x539, &(0x7f0000001540)="$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") 2.967464228s ago: executing program 7 (id=3285): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2, 0x0, 0xfffffffffffffffd}, 0x18) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3, 0x0, 0x7}, 0x18) r4 = socket(0x10, 0x80002, 0x4) socket$nl_route(0x10, 0x3, 0x0) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRESDEC=0x0, @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) recvmsg$unix(r4, &(0x7f0000000600)={&(0x7f00000001c0), 0x6e, &(0x7f0000000980)=[{&(0x7f0000000280)=""/139, 0x8b}, {&(0x7f0000000d00)=""/139, 0x8b}, {&(0x7f0000000400)=""/61, 0x3d}, {&(0x7f00000004c0)=""/161, 0xa1}, {&(0x7f0000002d40)=""/4096, 0x1000}, {&(0x7f0000000680)=""/238, 0xee}, {&(0x7f0000000580)=""/21, 0x15}, {&(0x7f0000000b00)=""/199, 0xc7}, {&(0x7f0000000c00)=""/218, 0xda}, {&(0x7f0000000e00)=""/193, 0xffffffffffffffe5}], 0xa, &(0x7f00000005c0)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}, 0x40000040) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_emit_ethernet(0x83, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030086dd601b8b97004d88c19edace00000000000000002100000002ff02000000000000000000000000000104004e20004d13"], 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e000000000000"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="1900000004"], 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r6], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) write$binfmt_aout(r7, &(0x7f00000001c0)=ANY=[], 0xff2e) ioctl$TCSETS(r7, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"}) r8 = syz_open_pts(r7, 0x0) r9 = dup3(r8, r7, 0x0) read(r9, &(0x7f00000000c0)=""/226, 0xe2) read$watch_queue(r9, &(0x7f0000001d40)=""/4095, 0xfff) inotify_init1(0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1900000004000000040000000280000000000000", @ANYRES32=0x1, @ANYBLOB="00000020000000000000e0db07851a62fbb2e11c", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000200"/28], 0x50) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000680)=ANY=[]) 2.676024782s ago: executing program 2 (id=3292): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4080000400000006110540000000000a6000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x0, 0x10, &(0x7f0000000080), 0xffffffffffffffb2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r1 = socket(0x10, 0x803, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000600)=r0, 0x4) sendmsg$nl_generic(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c0000005200010000000000000000000a00000008000100", @ANYRES64=r1], 0x1c}}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x800000000000}, 0x3100, 0x5dd8, 0x0, 0x5, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) futex(&(0x7f000000cffc)=0x1, 0x6, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0x6, 0x0, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xa) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) syz_io_uring_setup(0x1da9, &(0x7f0000005b80)={0x0, 0xe874, 0x40, 0x2000000, 0x2d4}, &(0x7f0000000100), &(0x7f0000000080)) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100202, 0x0, 0xfffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) r5 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$USBDEVFS_SUBMITURB(r6, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x300, 0x0, &(0x7f0000000080)={0x80, 0xf, 0x0, 0x0, 0x7995}, 0x10007, 0x0, 0x0, 0x48000000, 0x0, 0x40000000, 0x0}) 2.542887734s ago: executing program 7 (id=3293): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000780)=ANY=[@ANYRES32, @ANYRES8=r0], 0x50}, 0x1, 0x0, 0x0, 0x90}, 0x4000040) syz_io_uring_setup(0x10e, &(0x7f00000001c0)={0x0, 0x0, 0x400, 0x0, 0x222}, &(0x7f0000000240), &(0x7f0000000280)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200080, &(0x7f0000000040)={[{@jqfmt_vfsv1}]}, 0xfe, 0x56c, &(0x7f0000000ec0)="$eJzs3c9rFFccAPDvbBKjxtYIIm0PJeChFuvGJP1hoQd7LK1UaO92SdYg2biS3YhJheqhXnopUiilQukf0HuP0n+gf4XQClIktIdepsw6azbJ7ibG1WzdzwdG35s3mzdvZr6P9/btsgEMrInsn0LEqxHxbRJxuKVsOPLCiUfHrT28PpttSaTpZ38lkeT7mscn+f9jeeaViPjt64iTha311lZWF0qVSnkpz0/WF69M1lZWT11aLM2X58uXp2dmzrwzM/3+e+9uffHo7tr65vl/fvj07kdnvjm+9v0v94/cTuJsHMrLWtvxFG60ZiZiIr8mI3F204FTPaisnyR7fQLsylAe5yOR9QGHYyiPeuDF91VEpMCASsQ/DKjmOKA5t+86D05fvFnegw8bE6DRre1PHr03Evsbc6ODa8mGmVF2JcZ7UH9Wx69/3rmdbdG79yEAtnXjZkScHh7e0P+9HC393+6d3sExm+vQ/8Hzczcb/7w12mb8V3g8/ok245+xNrG7G9vHf+F+D6rpKBv/fdB2/Pt40Wp8KM+91BjzjSQXL1XKWd+WdZMnYmQ0y3dbzzmzdi/tVNY6/su2rP7mWDA/j/vDm9a75kr10tO0udWDmxGvDbdr//r4N2lz/7PrcX6HdRwr33m9U9n27X+20p8j3mh7/9fnOkn39cnJxvMw2Xwqtvr71rHfO9W/1+3P7v/B7u0fT1rXa2tPXsdP+/8tdyqbSPJF0yd8/vclnzfS+/J910r1+tJUxL7kk637p9df28w3j8/af+J4+/jv9vwfiIgvdtj+W0dvdTy0H+7/3BPd/w6JNOlYdO/jL3/sVP/O+r+3G6kT+Z6d9H9dznRD4mmuHQAAAAAAAPSbQkQciqRQfJwuFIrFR5/vOBoHC5VqrX7yYnX58lw0vis7HiOF5kr3WMvnIabyz8M289Ob8jMRcSQivhs60MgXZ6uVub1uPAAAAAAAAAAAAAAAAAAAAPSJsQ7f/8/8MbTXZwc8c37yGwbXtvHfi196AvpSl/h/8X7xF9jA+B8Gl/iHwSX+YXCJfxhc4h8Gl/iHwSX+AQAAAAAAAAAAAAAAAAAAAAAAAAAAoKfOnzuXbenaw+uzWX7u6sryQvXqqblybaG4uDxbnK0uXSnOV6vzlXJxthrj2/y9SrV6ZWo6lq9N1stJfbK2snphsbp8uX7h0mJpvnyhPPJ8mgUAAAAAAAAAAAAAAAAAAAD/K7WV1YVSpVJekpDYVWK4P06jN4k0TdM+OI1+SOx1zwQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6/4LAAD//6lkOFk=") symlink(&(0x7f0000000c00)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f0000000c80)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00') r1 = open(&(0x7f00000000c0)='.\x00', 0x10000, 0x0) getdents(r1, &(0x7f0000001fc0)=""/184, 0xb8) 2.203466439s ago: executing program 7 (id=3296): r0 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH(r0, 0x3, &(0x7f00000005c0)='`pk\xb9q\x84\xa1\x8f\xab\xb5\x00\x00\t\xd5g\xe5+\xab\x9f\xaaP\x96\x10/\xe1\x85#\xb0\xc2\xffnH\xad\xdeli\xc7q\x12\xb2\xe6\x143\x94\xcb\x1c\xe8S6f\x17\'\x12=\xd2\xca\bP\xd4}\xbc!\"\x93\xff\"\xd6\x87\xa2\x85t2\xb6R\t\xe3@#\xd6\xa0\x1a\xfb\xc8m\x95}l:\xa4\xcb\xc4\x18k\xf06\xbeTU', &(0x7f0000000200)='./file1\x00', 0xffffffffffffff9c) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="1800"/14, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000000040)) setregid(0xffffffffffffffff, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x40000) readv(r3, &(0x7f0000000080)=[{&(0x7f0000000380)=""/79, 0x4f}], 0x1) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f0000000000)={&(0x7f0000000a00)=""/4096, 0x10000, 0x3800, 0x1000, 0x1}, 0x20) 1.774171285s ago: executing program 2 (id=3306): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c000006000000000000f183850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r2 = syz_genetlink_get_family_id$fou(&(0x7f00000003c0), 0xffffffffffffffff) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x20400, 0x0) sendmsg$FOU_CMD_DEL(r3, &(0x7f0000000500)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)={0x30, r2, 0x0, 0x71bd2a, 0x25dfdbfd, {}, [@FOU_ATTR_PEER_V6={0x14, 0x9, @private0={0xfc, 0x0, '\x00', 0x1}}, @FOU_ATTR_AF={0x5, 0x2, 0xa}]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x41) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000006020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000ecff850000000400000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000000)='./bus\x00', 0x120c018, &(0x7f0000000680)={[{@check_relaxed}, {@unhide}, {@nojoliet}, {@overriderock}, {@uid}, {@dmode={'dmode', 0x3d, 0x1000}}, {@session={'session', 0x3d, 0x6}}, {@map_normal}]}, 0xff, 0x539, &(0x7f0000001540)="$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") 1.741622705s ago: executing program 2 (id=3308): r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000400)='syz1\x00', 0x200002, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0xb, 0x50, r0, 0x3a375000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r2, &(0x7f0000000000)={0x2a, 0x3}, 0xc) r3 = socket$packet(0x11, 0x3, 0x300) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000080)={[{@nogrpid}, {@resuid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@errors_continue}, {@errors_continue}, {@nodelalloc}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") r4 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r4) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r5, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000000140), 0x4) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r7 = accept(r4, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}}, 0x1) socket$nl_xfrm(0x10, 0x3, 0x6) r8 = io_uring_setup(0x437b, &(0x7f00000002c0)={0x0, 0x698c, 0x40, 0x2, 0xfffffffe}) close_range(r8, 0xffffffffffffffff, 0x200000000000000) io_uring_enter(r8, 0x2799, 0xaaa7, 0x20, &(0x7f00000002c0)={[0x4]}, 0x8) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000705d7baa0b606e165aea48e088a5bb3aa04f3bed04c7c5162992c694b3430c8d474ff63fc4267e16bd07de6e7e136cedb0588e5d69de15e81b4321ef09db9bc4cf75f659c4015550990a63ba260bbb0e9f30198047fcde9253d5a953381921877afcc5615adf8f395ec8b2eaa13731e56222766074726118f968fcce730aea6fcf9b599dce074258c066d263f1bbec"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f00000001c0)='kfree\x00', r9}, 0x10) setsockopt$packet_tx_ring(r3, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x808000, 0x4, 0x20300, 0xfc}, 0x1c) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000100)=@req3={0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x861}, 0x1c) 1.565992828s ago: executing program 4 (id=3311): openat(0xffffffffffffff9c, 0x0, 0xc41, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x68, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x800000, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$igmp(0x2, 0x3, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001380)={0x11, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0xf2cccc7fae7881b8, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sys_enter\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$inet6(0xa, 0x80002, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x20, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x73cea2d47785b264, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r3}, 0x18) io_uring_setup(0x1de0, &(0x7f00000000c0)={0x0, 0x45d6}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sys_enter\x00', r4}, 0x10) socket$can_raw(0x1d, 0x3, 0x1) socket$can_raw(0x1d, 0x3, 0x1) socket$can_raw(0x1d, 0x3, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240000000", @ANYRES16=r5], 0xc4}}, 0x0) 1.493720899s ago: executing program 4 (id=3313): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$getregset(0x4205, r0, 0x202, &(0x7f0000000240)={&(0x7f0000000180)=""/120, 0xffffffffffffff28}) (fail_nth: 2) 1.216287583s ago: executing program 7 (id=3314): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB], 0x90}}, 0x0) r0 = socket$kcm(0x10, 0x400000002, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4000) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newtfilter={0x34, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x0, 0xf}, {}, {0x7, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x24000014}, 0x20084084) sendmsg$inet(r0, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000140)="600000002e000d190a762d7f089e", 0xfca2}, {&(0x7f0000000280)="68cabf2dfb58fc0a1d6b689866f05d490d010088a8ffff0200258f2e4409b8f9e6aaeb88bea123dc2c6726e89b1ae2f6e8bcb5ee52dcd7298d39093c510293bca0b646a3ce904f6e6b788b3204c233e60ddc", 0x52}], 0x2}, 0x0) 599.665461ms ago: executing program 2 (id=3316): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc90}, [@printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000480)=0xffffffffffffffff, 0x4) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000f80)={{0x14}, [@NFT_MSG_NEWSETELEM={0x63c, 0xc, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x5d8, 0x3, 0x0, 0x1, [{0x524, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0x80, 0xb, 0x0, 0x1, [{0x4c, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_SOCKET_KEY={0x8}, @NFTA_SOCKET_LEVEL={0x8, 0x3, 0xf2}, @NFTA_SOCKET_LEVEL={0x8, 0x3, 0x46}, @NFTA_SOCKET_KEY={0x8}, @NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x9}, @NFTA_SOCKET_KEY={0x8}]}}}, {0x10, 0x1, 0x0, 0x1, @socket={{0xb}, @void}}, {0x10, 0x1, 0x0, 0x1, @dynset={{0xb}, @void}}, {0x10, 0x1, 0x0, 0x1, @range={{0xa}, @void}}]}, @NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_KEY={0x278, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VALUE={0xf8, 0x1, "b5fa3ba901d1b76f62568465f961415d18f27ca2da68384e39d628c96e723fc9e5856492b0adfe6ab540a26f9839f678033dbbc4ae1c7f6fd1f87c43aaeb2d33abd9dc460da43c3e4d380ff4ca0edb2f908748da8e8d56ddad4ba563bfee3ad561aab523188ca0bf0fff5f6f505228e809255a3f748a8a8e808207d1c9b967b202b96299e6ed5f3a0c7881c6fc18282c68e75edc80bd1b09b71a2c56165e37471c0673899225c7f0c553ebc6a24707de1d7ed9b862b7b501e885d2b4ed6397c749411934dcfe962ddd1edc278ccf8f1dd5dd3fab6287acbb023b7691836a163fdfd628466d9562d2e10317d0e8691e8193e02146"}, @NFTA_DATA_VERDICT={0x48, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VERDICT={0x58, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x6c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x100000000}, @NFTA_SET_ELEM_DATA={0x120, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x58, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0xc3, 0x1, "7a275810439187d87d48f8d4bbc66b939deae94bd57c792244d6cf1a24914dabc4627a9fed4563e9e055cdeeb996248120da7b67a68b14866d4cf1ff4a38ef12ba3b185e7dd256451fb85143c51ac473bccd5b6a2d6befcee262b1f46cea1ad77c5d226fb9d32ff2f5ab16f05230cce42418ab1deb1a039e799183a2ddca9fb8487caabd90296ea22fa82691196d2033daf6bf345ca6fd3a3420d45b8d8a900c1b450b2f012f13037b2119bea92f3886834da2a86404eb392ca2d929adf47c"}]}, @NFTA_SET_ELEM_DATA={0xf8, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x95, 0x1, "0b3c2029a311fa6e3d5ff49e79ee1ebf422874fde0a16cf5f6b61e952039c838d9f7b20e564f2778792025204daa8b4893c27ed54c6c53c506827cec7fd1d9e8fe93b6d1a4aab9f302ff7d9ddc2694ec33fe14ef5ed98246526ed2a963304ab322264e2554d68b8c886544645e74f7ff4b58b65aa4ec48e9c313bb035b62779fa997d3ffc5c24c4c67b3b948ebef619f73"}, @NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VALUE={0x19, 0x1, "51b0c7aac4c0f4d9917c7d83175f2edcfaf51845f5"}]}]}, {0xb0, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0x40, 0x6, 0x1, 0x0, "53afe44a18ad0fc2dda1bf321e1dce8353047ee65750e1fda6a412e72aebf2364c3e617d6fe6aa3551bc9327fea1862c3ddf457b6ee9b41d7ded12e1"}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_EXPR={0x34, 0x7, 0x0, 0x1, @xfrm={{0x9}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_XFRM_SPNUM={0x8, 0x4, 0x1, 0x0, 0x6}, @NFTA_XFRM_DIR={0x5, 0x3, 0x1}, @NFTA_XFRM_SPNUM={0x8, 0x4, 0x1, 0x0, 0x2}]}}}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x6f}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x6}]}]}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x6a0}, 0x1, 0x0, 0x0, 0x8000}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r0}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="4400000010004b04000023dc5ad93c5c2b7b0000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006272696467650000140002800500160003"], 0x44}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0xe, 0xc, &(0x7f0000000880)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) io_uring_setup(0x6ddf, &(0x7f00000002c0)={0x0, 0x9ab6, 0x4620, 0x1, 0x198}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) 598.940541ms ago: executing program 4 (id=3317): open(0x0, 0x14927e, 0x86) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000202300800000000025ad9835850000007b000000"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_mount_image$vfat(&(0x7f0000000340), &(0x7f0000000000)='./file1\x00', 0x280809a, &(0x7f0000000f40)=ANY=[], 0x1, 0x2b2, &(0x7f00000006c0)="$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") r0 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x130) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x51) write$9p(r0, &(0x7f0000001400)="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", 0x180) sendfile(r0, r1, 0x0, 0xe065) 586.937242ms ago: executing program 7 (id=3318): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c000006000000000000f183850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r2 = syz_genetlink_get_family_id$fou(&(0x7f00000003c0), 0xffffffffffffffff) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x20400, 0x0) sendmsg$FOU_CMD_DEL(r3, &(0x7f0000000500)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)={0x30, r2, 0x0, 0x71bd2a, 0x25dfdbfd, {}, [@FOU_ATTR_PEER_V6={0x14, 0x9, @private0={0xfc, 0x0, '\x00', 0x1}}, @FOU_ATTR_AF={0x5, 0x2, 0xa}]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x41) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000006020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000ecff850000000400000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000000)='./bus\x00', 0x120c018, &(0x7f0000000680)={[{@check_relaxed}, {@unhide}, {@nojoliet}, {@overriderock}, {@uid}, {@dmode={'dmode', 0x3d, 0x1000}}, {@session={'session', 0x3d, 0x6}}, {@map_normal}]}, 0xff, 0x539, &(0x7f0000001540)="$eJzs3V1v01YYwPHHpV2rTELTmBCqChzKJhWpBMeBoIgrzzlJDzh2ZDuovUIVbaeKFCbKpLU3gxu2SduH4HYfYt9o2kdgsp2UvuSF0Zeg6v+L4JzYJz7PSaPzyG18LAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQCyvZtslS3wTtJfVYF4tCpsfnnZffWSD3DpQDOlXxEr/ycyMXMk3Xfnmw+7L6X/zMpc/m5OZtJiR3S8vf/Xg0uRE7/VDAj4T2zu7z1Y7nfWX4w7kFF2dHryvoQMTh6bpNrQycaiqlYp9Z6keq7rxdbwSJ7qpvEi7SRipBe+WsqrVstLFlbAdNGqur7ONpWr1/m3HtivqYbGl3SgOgzsPi7G3ZHzfBI2sTbo7bXM//SA+MolKtNtUamOzs14eNYC0UeljGjmjGjm245RKjlOq3Kveu2/bk0c22IfIkRbj/9BivE5w9gaOZ6Kb/8UXI4G0ZVlU34cnNYkklOaA/V29/P/dHT203/35v5flr3zYPStZ/r+WP7s2KP8PiOXsHtuyI7vyTFalIx1Zl5djj+hsHw3REoiRWEIx0hQ326K6W5RUpSIVseWJLEldYlFSFyO+aIllRWJJRGefKE8i0eJKIqFEomRBPLklSkpSlaqURYmWoqxIKG0JpCE1cbOjbMhm9r6XRVmDYtxrVBo4jELvc7cuzpDRkv9xfCc6fwPH8b6X/wEAAAAAwLllZb99T8//p+RqVqsbX9vjDgsAAAAAAJyg7C//c2kxldauisX5PwAAAAAA542VXWNniUhBrue1DbGyy6X4JQAAAAAAAOdE9vf/a2mRrYFyXay95VI4/wcAAAAA4Jz4bfAa+++n8z2taevvfyWKpqw3reVvrS033ehuXcj3Xjh8xKQ+a13sHiQrKnkxOenpOWsmb7S3COY/3WJj1Fr/Vr8AXv+fAC5Nyh9yI29zYy0v13p78l4KdeProhf6D0riuhcnEr2c/PR882fJhv970LxoycZmZ7349EVnLYvlTXqUN1vdBRSPrKM4JJZX2XoL2TUXfUc8lV2I0e23kPdr7x//RP7yiUNdTsvgPt/KfN5ovrvibeHg+GfSPkvFQaPvRlE65sjfys28zc2Fm3nRJwpnVBTO/igGvBfHjqI8KoryMaMAgHHZGJGFrKOJ/xNmuU/L7jIwu1tiSb8ZfSFvszCbTayTs31mdHvUjG4fM7v9deQeSINybNrvn4ey6rv0Be+O9Pu+W8a+Y6Vv4YVXWz/K5e2d3dubW6tT8sP6c8cpV+y7tn3PkalsGN2C3AMA6GP0PXZGtrDujjir/nrvKwVFeSovpCNrsphdbZB946DvUQv7voawOOKstZClyfwOL4tDzuq+yK5y6B3XGdr2YAzl0/9BAABwhuZH5OGPyf+LI867D+by4WfHhX13awMAAKdDR6+tQvKrFUWm9aRUrZbcZEmrKPQeqcjUGlqZINGRt+QGDa1aUZiEXuinlcempmMVt1utMEpUPYxUK4zNcnbnd9W99Xusm26QGC9u+dqNtfLCIHG9RNVM7KlW+3vfxEs6yl4ct7Rn6sZzExMGKg7bkaeLSsVa72toajpITN2k1UC1ItN0oxX1OPTbTa1qOvYi00rC/IC9vkxQD6NmdtjiuN9sAAA+E9s7u89WO531l6dYGfcYAQDAQWRpAAAAAAAAAAAAAAAAAAAAAAA+f2dx/R+Vc17pLQX9ucRD5QQqI6eOX059cgJwqv4LAAD//3xATuE=") 556.356422ms ago: executing program 4 (id=3319): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = add_key$keyring(&(0x7f0000000300), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200), &(0x7f00000001c0)={'syz', 0x2}, &(0x7f0000000540)="8d", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000380)='asymmetric\x00', &(0x7f0000000500)=@keyring={'key_or_keyring:', r1}) (fail_nth: 2) 548.747202ms ago: executing program 7 (id=3320): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r0}, &(0x7f0000000000), &(0x7f00000005c0)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000100)='kmem_cache_free\x00', r2, 0x0, 0x2}, 0x18) r3 = socket(0x1e, 0x4, 0x0) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) recvfrom$inet(r4, 0x0, 0x0, 0x1, &(0x7f0000000000)={0x2, 0x4e24, @multicast1}, 0x10) 497.713003ms ago: executing program 4 (id=3321): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000001c000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = memfd_create(&(0x7f0000000bc0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00x0, 0x700, 0x700, 0x8, 0x8, {{0x13, 0x4, 0x0, 0x9, 0x4c, 0x67, 0x0, 0x0, 0x29, 0x0, @loopback, @remote, {[@rr={0x7, 0x17, 0x66, [@multicast2, @broadcast, @empty, @broadcast, @empty]}, @noop, @generic={0x89, 0x6, "de02f681"}, @end, @ra={0x94, 0x4}, @end, @lsrr={0x83, 0x13, 0xfd, [@private=0xa010102, @dev={0xac, 0x14, 0x14, 0x41}, @multicast2, @local]}]}}}}}) ioctl$sock_inet6_SIOCDELRT(r8, 0x890c, &(0x7f0000000540)={@remote, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private0, 0x0, 0x800, 0x935e, 0x100, 0x0, 0x500000, r9}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r5}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendto(r10, &(0x7f00000000c0)="74cdca58a178211d6c529725b27432dd5469167a3bba812b831c39533ed9b617c4de78bdfa41cad9a1cb5b801384fc20c9dbc234900f2e9816bb4f78941e97a626b9aa6f6b94df6d62bad3e98e3b78453a0b91492146163d288442bf7174c233d0321a6b61151cdfd6948b550ddc209971eb33d5e409614898682235ce5fc982d494e0cc16662b289e5fe2ef464ac6960ed53352d94a138f4ab9a11599051336", 0xa0, 0x24004051, 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x2000) 70.043269ms ago: executing program 0 (id=3328): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB], 0x90}}, 0x0) r0 = socket$kcm(0x10, 0x400000002, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4000) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newtfilter={0x34, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x0, 0xf}, {}, {0x7, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x24000014}, 0x20084084) sendmsg$inet(r0, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000140)="600000002e000d190a762d7f089e", 0xfca2}, {&(0x7f0000000280)="68cabf2dfb58fc0a1d6b689866f05d490d010088a8ffff0200258f2e4409b8f9e6aaeb88bea123dc2c6726e89b1ae2f6e8bcb5ee52dcd7298d39093c510293bca0b646a3ce904f6e6b788b3204c233e60ddc", 0x52}], 0x2}, 0x0) 66.136389ms ago: executing program 0 (id=3329): open(0x0, 0x14927e, 0x86) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000202300800000000025ad9835850000007b000000"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_mount_image$vfat(&(0x7f0000000340), &(0x7f0000000000)='./file1\x00', 0x280809a, &(0x7f0000000f40)=ANY=[], 0x1, 0x2b2, &(0x7f00000006c0)="$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") r0 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x130) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x51) write$9p(r0, &(0x7f0000001400)="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", 0x1c0) sendfile(r0, r1, 0x0, 0xe065) 34.85654ms ago: executing program 0 (id=3330): openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) (async) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) mmap(&(0x7f0000ff0000/0xd000)=nil, 0xd000, 0x480001a, 0x28011, r0, 0xe7ce3000) (async) mmap(&(0x7f0000ff0000/0xd000)=nil, 0xd000, 0x480001a, 0x28011, r0, 0xe7ce3000) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x6, 0x1, 0x400, 0x80, 0x10, 0x1, 0x3a90988b, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x5, 0x0, @void, @value, @void, @value}, 0x50) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x6, 0x1, 0x400, 0x80, 0x10, 0x1, 0x3a90988b, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x5, 0x0, @void, @value, @void, @value}, 0x50) syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) perf_event_open(&(0x7f0000000380)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x8) pselect6(0x40, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0x381, 0x0, 0x0, 0x9e25}, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x11, &(0x7f0000000580)=ANY=[@ANYBLOB="9042ffffffffffff185200000500000000000000000000001856000001000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000008200000004620101fdffffff18260000", @ANYRES32=r1, @ANYBLOB="000000001eb9444762b50211d0d16c956e45f37cc0d6175c010f385bc48223e390bbdd40000000541d531b6c0d602b6f83ceff01dc6590cd32d4f3d888992714404b4506c37082982513c83d63977ccd9e139700"/99], &(0x7f0000000040)='syzkaller\x00', 0xffffefff, 0x0, 0x0, 0x0, 0x63, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x68, 0x0, 0x0, 0x0, 0x0, 0x1000040, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}, 0x2804, 0x0, 0x0, 0x0, 0x400, 0x10001, 0x625a, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x68, 0x0, 0x0, 0x0, 0x0, 0x1000040, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}, 0x2804, 0x0, 0x0, 0x0, 0x400, 0x10001, 0x625a, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = inotify_init() sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000680)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="010000000000fbcddf250c006e000800050009000000260b2c4f85fc9bdc9f153701dc984d151583c6b6ce68f2818ea238f6c241c8edb1da82c246783adaa0b406a6e7dd60cb03bbcca2b6"], 0x1c}}, 0x0) r4 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r4, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local}, 0xc) setsockopt$inet_msfilter(r4, 0x0, 0x29, &(0x7f0000000280)=ANY=[@ANYBLOB="e0000002ac1414aa0000000003"], 0x1c) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x4, 0x2, 0x0, @empty, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x10001}}}}}, 0x0) (async) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x4, 0x2, 0x0, @empty, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x10001}}}}}, 0x0) inotify_add_watch(r3, &(0x7f0000000280)='.\x00', 0x25000001) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x65, 0x7fff0000}]}) close_range(r5, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000400)={@multicast, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x16, 0x0, 0x0, 0x0, 0x88, 0x0, @empty, @broadcast}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x3, 0x7, {0x5, 0x4, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x4, 0x0, @loopback, @dev}}}}}}, 0x0) ioperm(0x4, 0x2, 0x7ff) unshare(0x400) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) (async) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000400)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff0000080000000000007b8af0ff00058845b03a8a92585f5b77000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000000000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70400000800000085000000950000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000400)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff0000080000000000007b8af0ff00058845b03a8a92585f5b77000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000000000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70400000800000085000000950000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6312, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r8, 0x0, 0x200000000200}, 0x18) symlink(&(0x7f0000001780)='./file0/../file0\x00', &(0x7f00000017c0)='./file0\x00') (async) symlink(&(0x7f0000001780)='./file0/../file0\x00', &(0x7f00000017c0)='./file0\x00') creat(&(0x7f0000000000)='./file0\x00', 0x108) sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=@dellink={0x34, 0x11, 0x1, 0x0, 0x2000, {0x0, 0x0, 0x0, 0x0, 0x0, 0xc008}, [@IFLA_IFNAME={0x14, 0x3, 'macsec0\x00'}]}, 0x34}}, 0x0) (async) sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=@dellink={0x34, 0x11, 0x1, 0x0, 0x2000, {0x0, 0x0, 0x0, 0x0, 0x0, 0xc008}, [@IFLA_IFNAME={0x14, 0x3, 'macsec0\x00'}]}, 0x34}}, 0x0) 0s ago: executing program 1 (id=3331): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r3}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8914, 0x0) kernel console output (not intermixed with test programs): 297][T11790] Unable to read rock-ridge attributes [ 177.125386][T11800] loop7: detected capacity change from 0 to 1024 [ 177.133126][T11790] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 177.141019][T11800] EXT4-fs: Ignoring removed nobh option [ 177.141153][T11800] EXT4-fs: Ignoring removed nobh option [ 177.184739][T11800] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 177.184955][T11800] EXT4-fs error (device loop7): ext4_get_journal_inode:5798: comm syz.7.2716: inode #4294967295: comm syz.7.2716: iget: illegal inode # [ 177.185092][T11800] EXT4-fs (loop7): no journal found [ 177.185107][T11800] EXT4-fs (loop7): can't get journal size [ 177.287753][T11800] EXT4-fs (loop7): failed to initialize system zone (-22) [ 177.300650][T11800] EXT4-fs (loop7): mount failed [ 177.410716][ T37] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 177.532136][T11823] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2724'. [ 177.615397][T11773] syz.4.2705 (11773) used greatest stack depth: 4968 bytes left [ 177.624080][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 177.673997][T11828] pim6reg1: entered promiscuous mode [ 177.679427][T11828] pim6reg1: entered allmulticast mode [ 177.735148][T11833] loop1: detected capacity change from 0 to 256 [ 177.765028][T11835] pim6reg1: entered promiscuous mode [ 177.770451][T11835] pim6reg1: entered allmulticast mode [ 177.794660][T11836] loop2: detected capacity change from 0 to 164 [ 177.802763][T11836] Unable to read rock-ridge attributes [ 178.006454][T11858] netlink: 60 bytes leftover after parsing attributes in process `syz.7.2738'. [ 178.148070][T11868] pim6reg1: entered promiscuous mode [ 178.153546][T11868] pim6reg1: entered allmulticast mode [ 178.419978][T11882] loop4: detected capacity change from 0 to 164 [ 178.448083][T11882] Unable to read rock-ridge attributes [ 178.455205][T11875] loop0: detected capacity change from 0 to 256 [ 178.477497][T11882] tipc: Enabling of bearer rejected, failed to enable media [ 178.586677][T11895] loop2: detected capacity change from 0 to 256 [ 178.661180][T11897] loop0: detected capacity change from 0 to 256 [ 178.733764][T11901] 9pnet_fd: Insufficient options for proto=fd [ 178.950177][T11909] program syz.2.2767 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 179.127528][ T3379] hid-generic 0000:0004:0000.001D: unknown main item tag 0x0 [ 179.135056][ T3379] hid-generic 0000:0004:0000.001D: unknown main item tag 0x0 [ 179.142576][ T3379] hid-generic 0000:0004:0000.001D: unknown main item tag 0x0 [ 179.162893][ T3379] hid-generic 0000:0004:0000.001D: hidraw0: HID v0.00 Device [syz0] on syz1 [ 179.186690][T11929] loop4: detected capacity change from 0 to 256 [ 179.286115][T11936] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2769'. [ 179.319533][T11935] loop1: detected capacity change from 0 to 1024 [ 179.328658][T11927] loop7: detected capacity change from 0 to 256 [ 179.350915][T11935] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 179.445645][T11952] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2773'. [ 179.482164][T11954] hub 9-0:1.0: USB hub found [ 179.506106][T11954] hub 9-0:1.0: 8 ports detected [ 179.643979][T11965] program syz.2.2775 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 179.709986][ T3308] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 179.733494][T11969] loop4: detected capacity change from 0 to 256 [ 179.804340][T11972] loop1: detected capacity change from 0 to 8192 [ 179.813850][T11972] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 180.028229][T11984] netlink: 100 bytes leftover after parsing attributes in process `syz.7.2783'. [ 180.117646][T11985] loop2: detected capacity change from 0 to 256 [ 180.424051][T11992] hub 9-0:1.0: USB hub found [ 180.428746][T11992] hub 9-0:1.0: 8 ports detected [ 180.457907][T11995] loop4: detected capacity change from 0 to 1024 [ 180.467525][T11996] loop0: detected capacity change from 0 to 1024 [ 180.475528][T11996] EXT4-fs: Ignoring removed nobh option [ 180.481246][T11996] EXT4-fs: Ignoring removed nobh option [ 180.487620][T11995] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 180.488507][T11996] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 180.510579][T11996] EXT4-fs error (device loop0): ext4_get_journal_inode:5798: comm syz.0.2791: inode #4294967295: comm syz.0.2791: iget: illegal inode # [ 180.526464][T11996] EXT4-fs (loop0): no journal found [ 180.531773][T11996] EXT4-fs (loop0): can't get journal size [ 180.539954][T11996] EXT4-fs (loop0): failed to initialize system zone (-22) [ 180.556344][T11996] EXT4-fs (loop0): mount failed [ 180.588815][T12002] loop2: detected capacity change from 0 to 1024 [ 180.616073][T12002] EXT4-fs: Ignoring removed nobh option [ 180.621895][T12002] EXT4-fs: Ignoring removed nobh option [ 180.636854][T12002] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 180.646832][T12002] EXT4-fs error (device loop2): ext4_get_journal_inode:5798: comm syz.2.2792: inode #4294967295: comm syz.2.2792: iget: illegal inode # [ 180.730467][ T1459] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 180.743281][T12002] EXT4-fs (loop2): no journal found [ 180.748736][T12002] EXT4-fs (loop2): can't get journal size [ 180.755618][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 180.771166][T12002] EXT4-fs (loop2): failed to initialize system zone (-22) [ 180.793951][T12002] EXT4-fs (loop2): mount failed [ 180.827463][T12022] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2798'. [ 180.849302][T12018] loop1: detected capacity change from 0 to 1024 [ 180.859371][T12018] EXT4-fs error (device loop1): ext4_acquire_dquot:6935: comm syz.1.2797: Failed to acquire dquot type 0 [ 180.872183][T12018] EXT4-fs error (device loop1): mb_free_blocks:1948: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 180.887062][T12026] program syz.7.2794 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 180.897908][T12018] EXT4-fs error (device loop1): ext4_do_update_inode:5211: inode #13: comm syz.1.2797: corrupted inode contents [ 180.914868][T12018] EXT4-fs error (device loop1): ext4_dirty_inode:6103: inode #13: comm syz.1.2797: mark_inode_dirty error [ 180.926548][T12018] EXT4-fs error (device loop1): ext4_do_update_inode:5211: inode #13: comm syz.1.2797: corrupted inode contents [ 180.956445][T12018] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #13: comm syz.1.2797: mark_inode_dirty error [ 180.984420][T12018] EXT4-fs error (device loop1): ext4_do_update_inode:5211: inode #13: comm syz.1.2797: corrupted inode contents [ 181.022081][T12018] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem [ 181.033540][T12018] EXT4-fs error (device loop1): ext4_do_update_inode:5211: inode #13: comm syz.1.2797: corrupted inode contents [ 181.056978][T12018] EXT4-fs error (device loop1): ext4_truncate:4255: inode #13: comm syz.1.2797: mark_inode_dirty error [ 181.084404][T12018] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem [ 181.100593][T12018] EXT4-fs (loop1): 1 truncate cleaned up [ 181.107188][T12018] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 181.128999][T12018] EXT4-fs error (device loop1): ext4_acquire_dquot:6935: comm syz.1.2797: Failed to acquire dquot type 0 [ 181.178728][ T3308] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 181.329093][T12048] 9pnet_fd: Insufficient options for proto=fd [ 181.389551][T12029] chnl_net:caif_netlink_parms(): no params data found [ 181.428680][T12063] hub 9-0:1.0: USB hub found [ 181.433533][T12063] hub 9-0:1.0: 8 ports detected [ 181.445926][T12029] bridge0: port 1(bridge_slave_0) entered blocking state [ 181.453144][T12029] bridge0: port 1(bridge_slave_0) entered disabled state [ 181.460949][T12029] bridge_slave_0: entered allmulticast mode [ 181.467660][T12029] bridge_slave_0: entered promiscuous mode [ 181.485988][T12029] bridge0: port 2(bridge_slave_1) entered blocking state [ 181.493258][T12029] bridge0: port 2(bridge_slave_1) entered disabled state [ 181.503631][T12029] bridge_slave_1: entered allmulticast mode [ 181.510381][T12029] bridge_slave_1: entered promiscuous mode [ 181.532928][T12068] loop0: detected capacity change from 0 to 256 [ 181.534208][T12029] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 181.561759][T12029] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 181.592145][T12029] team0: Port device team_slave_0 added [ 181.599986][T12029] team0: Port device team_slave_1 added [ 181.606976][T12070] program syz.2.2809 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 181.633779][T12029] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 181.640797][T12029] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 181.666835][T12029] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 181.678287][T12029] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 181.685296][T12029] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 181.711390][T12029] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 181.770557][T12029] hsr_slave_0: entered promiscuous mode [ 181.788153][T12029] hsr_slave_1: entered promiscuous mode [ 181.794351][T12029] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 181.802020][T12029] Cannot create hsr debugfs directory [ 181.851843][ T3877] $H (unregistering): Released all slaves [ 181.862719][ T3877] bond0 (unregistering): Released all slaves [ 181.879104][T12074] pim6reg1: entered promiscuous mode [ 181.884483][T12074] pim6reg1: entered allmulticast mode [ 181.935872][ T3877] tipc: Left network mode [ 181.972922][T12079] loop0: detected capacity change from 0 to 1024 [ 181.982344][T12079] EXT4-fs: Ignoring removed nobh option [ 181.987971][T12079] EXT4-fs: Ignoring removed nobh option [ 181.997068][T12079] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 182.008419][T12079] EXT4-fs error (device loop0): ext4_get_journal_inode:5798: comm syz.0.2813: inode #4294967295: comm syz.0.2813: iget: illegal inode # [ 182.014378][T12081] hub 9-0:1.0: USB hub found [ 182.024262][T12079] EXT4-fs (loop0): no journal found [ 182.027224][T12081] hub 9-0:1.0: 8 ports detected [ 182.032276][T12079] EXT4-fs (loop0): can't get journal size [ 182.033248][ T3877] hsr_slave_0: left promiscuous mode [ 182.050690][T12079] EXT4-fs (loop0): failed to initialize system zone (-22) [ 182.057855][T12079] EXT4-fs (loop0): mount failed [ 182.073815][ T3877] hsr_slave_1: left promiscuous mode [ 182.089713][T12089] 9pnet_fd: Insufficient options for proto=fd [ 182.135940][ T2337] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 182.165505][ T29] kauditd_printk_skb: 158 callbacks suppressed [ 182.165522][ T29] audit: type=1326 audit(1746524757.233:8569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12090 comm="syz.1.2817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b4d57e969 code=0x7ffc0000 [ 182.197969][T12094] loop1: detected capacity change from 0 to 164 [ 182.205127][ T29] audit: type=1326 audit(1746524757.273:8570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12090 comm="syz.1.2817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1b4d57e969 code=0x7ffc0000 [ 182.228922][ T29] audit: type=1326 audit(1746524757.273:8571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12090 comm="syz.1.2817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b4d57e969 code=0x7ffc0000 [ 182.249465][T12094] Unable to read rock-ridge attributes [ 182.252481][ T29] audit: type=1326 audit(1746524757.273:8572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12090 comm="syz.1.2817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b4d57e969 code=0x7ffc0000 [ 182.281547][ T29] audit: type=1326 audit(1746524757.273:8573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12090 comm="syz.1.2817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1b4d57e969 code=0x7ffc0000 [ 182.305198][ T29] audit: type=1326 audit(1746524757.273:8574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12090 comm="syz.1.2817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b4d57e969 code=0x7ffc0000 [ 182.328862][ T29] audit: type=1326 audit(1746524757.273:8575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12090 comm="syz.1.2817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b4d57e969 code=0x7ffc0000 [ 182.352568][ T29] audit: type=1326 audit(1746524757.273:8576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12090 comm="syz.1.2817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f1b4d57e969 code=0x7ffc0000 [ 182.376142][ T29] audit: type=1326 audit(1746524757.273:8577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12090 comm="syz.1.2817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f1b4d57e9a3 code=0x7ffc0000 [ 182.399478][ T29] audit: type=1326 audit(1746524757.273:8578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12090 comm="syz.1.2817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f1b4d57d41f code=0x7ffc0000 [ 182.481822][T12099] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2819'. [ 182.606819][ T3877] IPVS: stop unused estimator thread 0... [ 182.799705][T12115] loop2: detected capacity change from 0 to 1024 [ 182.880395][T12121] netlink: 'syz.0.2826': attribute type 13 has an invalid length. [ 182.882749][T12115] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 182.915329][T12120] loop1: detected capacity change from 0 to 1024 [ 182.942683][T12120] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 182.956022][T12029] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 183.113960][T12130] netlink: 100 bytes leftover after parsing attributes in process `syz.7.2823'. [ 183.156108][T12029] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 183.175905][T12029] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 183.211580][T12029] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 183.342616][T12029] 8021q: adding VLAN 0 to HW filter on device bond0 [ 183.357506][T11341] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 183.361650][T12029] 8021q: adding VLAN 0 to HW filter on device team0 [ 183.376546][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 183.383699][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 183.404666][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 183.411786][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 183.423860][T12029] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 183.423887][T12029] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 183.481623][T12029] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 183.602102][T12029] veth0_vlan: entered promiscuous mode [ 183.604813][T12029] veth1_vlan: entered promiscuous mode [ 183.683446][T12029] veth0_macvtap: entered promiscuous mode [ 183.702674][T12029] veth1_macvtap: entered promiscuous mode [ 183.718411][T12029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 183.728994][T12029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.738882][T12029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 183.749376][T12029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.760031][ T3308] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 183.761476][T12029] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 183.793130][T12029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 183.803700][T12029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.813582][T12029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 183.824135][T12029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.834977][T12029] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 183.843570][T12029] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.852615][T12029] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.861528][T12029] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.870250][T12029] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.982533][T12173] loop1: detected capacity change from 0 to 1024 [ 183.989266][T12173] EXT4-fs: Ignoring removed nobh option [ 183.995058][T12173] EXT4-fs: Ignoring removed nobh option [ 184.003769][T12173] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 184.027051][T12173] EXT4-fs error (device loop1): ext4_get_journal_inode:5798: comm syz.1.2835: inode #4294967295: comm syz.1.2835: iget: illegal inode # [ 184.042816][T12173] EXT4-fs (loop1): no journal found [ 184.048076][T12173] EXT4-fs (loop1): can't get journal size [ 184.056054][T12173] EXT4-fs (loop1): failed to initialize system zone (-22) [ 184.063507][T12173] EXT4-fs (loop1): mount failed [ 184.081400][T12171] loop7: detected capacity change from 0 to 164 [ 184.097077][T12171] Unable to read rock-ridge attributes [ 184.126733][T12183] loop0: detected capacity change from 0 to 256 [ 184.133950][ T12] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 184.350358][T12192] loop0: detected capacity change from 0 to 1024 [ 184.363103][T12192] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 184.578865][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 184.680164][T12198] FAULT_INJECTION: forcing a failure. [ 184.680164][T12198] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 184.693392][T12198] CPU: 0 UID: 0 PID: 12198 Comm: syz.0.2842 Not tainted 6.15.0-rc5-syzkaller-00022-g01f95500a162 #0 PREEMPT(voluntary) [ 184.693452][T12198] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 184.693467][T12198] Call Trace: [ 184.693474][T12198] [ 184.693555][T12198] __dump_stack+0x1d/0x30 [ 184.693575][T12198] dump_stack_lvl+0xe8/0x140 [ 184.693596][T12198] dump_stack+0x15/0x1b [ 184.693617][T12198] should_fail_ex+0x265/0x280 [ 184.693657][T12198] should_fail+0xb/0x20 [ 184.693712][T12198] should_fail_usercopy+0x1a/0x20 [ 184.693750][T12198] _copy_from_user+0x1c/0xb0 [ 184.693770][T12198] kstrtouint_from_user+0x69/0xf0 [ 184.693803][T12198] ? avc_policy_seqno+0x15/0x30 [ 184.693844][T12198] proc_fail_nth_write+0x50/0x160 [ 184.693911][T12198] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 184.693939][T12198] vfs_write+0x266/0x8d0 [ 184.694015][T12198] ? vfs_read+0x47f/0x6f0 [ 184.694056][T12198] ? __rcu_read_unlock+0x4f/0x70 [ 184.694153][T12198] ? __fget_files+0x184/0x1c0 [ 184.694182][T12198] ksys_write+0xda/0x1a0 [ 184.694228][T12198] __x64_sys_write+0x40/0x50 [ 184.694260][T12198] x64_sys_call+0x2cdd/0x2fb0 [ 184.694286][T12198] do_syscall_64+0xd0/0x1a0 [ 184.694312][T12198] ? clear_bhb_loop+0x25/0x80 [ 184.694407][T12198] ? clear_bhb_loop+0x25/0x80 [ 184.694434][T12198] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 184.694460][T12198] RIP: 0033:0x7fb47e00d41f [ 184.694476][T12198] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 184.694494][T12198] RSP: 002b:00007fb47c656030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 184.694515][T12198] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fb47e00d41f [ 184.694527][T12198] RDX: 0000000000000001 RSI: 00007fb47c6560a0 RDI: 0000000000000004 [ 184.694538][T12198] RBP: 00007fb47c656090 R08: 0000000000000000 R09: 0000000000000000 [ 184.694548][T12198] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 184.694563][T12198] R13: 0000000000000001 R14: 00007fb47e236080 R15: 00007ffffa1a8388 [ 184.694586][T12198] [ 184.981452][T12208] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2847'. [ 185.152893][T12230] hub 9-0:1.0: USB hub found [ 185.157669][T12230] hub 9-0:1.0: 8 ports detected [ 185.168328][T12232] SELinux: Context !Լ:mYTE̡ P} is not valid (left unmapped). [ 185.189377][T12234] loop4: detected capacity change from 0 to 1024 [ 185.196331][T12234] EXT4-fs: Ignoring removed nobh option [ 185.199874][T12232] loop1: detected capacity change from 0 to 512 [ 185.202035][T12234] EXT4-fs: Ignoring removed nobh option [ 185.210257][T12232] EXT4-fs: Ignoring removed oldalloc option [ 185.214692][T12234] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 185.219875][T12232] EXT4-fs: Ignoring removed bh option [ 185.231634][T12234] EXT4-fs error (device loop4): ext4_get_journal_inode:5798: comm syz.4.2857: inode #4294967295: comm syz.4.2857: iget: illegal inode # [ 185.249144][T12234] EXT4-fs (loop4): no journal found [ 185.254480][T12234] EXT4-fs (loop4): can't get journal size [ 185.262278][T12232] EXT4-fs (loop1): orphan cleanup on readonly fs [ 185.269214][T12232] EXT4-fs error (device loop1): ext4_acquire_dquot:6935: comm syz.1.2856: Failed to acquire dquot type 1 [ 185.272017][T12234] EXT4-fs (loop4): failed to initialize system zone (-22) [ 185.281762][T12232] EXT4-fs (loop1): 1 truncate cleaned up [ 185.287837][T12234] EXT4-fs (loop4): mount failed [ 185.295197][T12232] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 185.311332][T12232] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 185.337417][T12232] loop1: detected capacity change from 0 to 512 [ 185.345437][T12232] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 185.367090][T12232] EXT4-fs (loop1): 1 truncate cleaned up [ 185.373312][T12232] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 185.386036][ T51] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 185.387120][T12232] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 185.931872][T12246] loop7: detected capacity change from 0 to 256 [ 185.957901][T12251] 9pnet: Could not find request transport: rdma00000000000000000000004 [ 185.998650][T12254] loop2: detected capacity change from 0 to 1024 [ 186.022971][T12257] pim6reg1: entered promiscuous mode [ 186.024391][T12254] EXT4-fs error (device loop2): ext4_acquire_dquot:6935: comm syz.2.2862: Failed to acquire dquot type 0 [ 186.028321][T12257] pim6reg1: entered allmulticast mode [ 186.066433][T12254] EXT4-fs error (device loop2): mb_free_blocks:1948: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 186.084133][T12254] EXT4-fs error (device loop2): ext4_do_update_inode:5211: inode #13: comm syz.2.2862: corrupted inode contents [ 186.101987][T12259] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2864'. [ 186.112870][T12254] EXT4-fs error (device loop2): ext4_dirty_inode:6103: inode #13: comm syz.2.2862: mark_inode_dirty error [ 186.125642][T12254] EXT4-fs error (device loop2): ext4_do_update_inode:5211: inode #13: comm syz.2.2862: corrupted inode contents [ 186.138224][T12254] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #13: comm syz.2.2862: mark_inode_dirty error [ 186.149778][T12254] EXT4-fs error (device loop2): ext4_do_update_inode:5211: inode #13: comm syz.2.2862: corrupted inode contents [ 186.162874][T12254] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem [ 186.172082][T12254] EXT4-fs error (device loop2): ext4_do_update_inode:5211: inode #13: comm syz.2.2862: corrupted inode contents [ 186.184578][T12254] EXT4-fs error (device loop2): ext4_truncate:4255: inode #13: comm syz.2.2862: mark_inode_dirty error [ 186.196934][T12254] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem [ 186.206267][T12254] EXT4-fs (loop2): 1 truncate cleaned up [ 186.214722][T12254] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 186.230205][T12261] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2866'. [ 186.245860][T12254] EXT4-fs error (device loop2): ext4_acquire_dquot:6935: comm syz.2.2862: Failed to acquire dquot type 0 [ 186.281890][T12274] hub 9-0:1.0: USB hub found [ 186.286600][T12274] hub 9-0:1.0: 8 ports detected [ 186.331394][T11341] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 186.373691][T12278] hub 9-0:1.0: USB hub found [ 186.378480][T12278] hub 9-0:1.0: 8 ports detected [ 186.496429][T12294] loop7: detected capacity change from 0 to 1024 [ 186.506149][T12294] EXT4-fs: Ignoring removed nobh option [ 186.511941][T12294] EXT4-fs: Ignoring removed nobh option [ 186.521420][T12294] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 186.531368][T12294] EXT4-fs error (device loop7): ext4_get_journal_inode:5798: comm syz.7.2877: inode #4294967295: comm syz.7.2877: iget: illegal inode # [ 186.532270][T12284] loop0: detected capacity change from 0 to 8192 [ 186.546308][T12294] EXT4-fs (loop7): no journal found [ 186.553978][T12284] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 186.557115][T12294] EXT4-fs (loop7): can't get journal size [ 186.574524][T12298] pim6reg1: entered promiscuous mode [ 186.579881][T12298] pim6reg1: entered allmulticast mode [ 186.600701][T12294] EXT4-fs (loop7): failed to initialize system zone (-22) [ 186.608336][T12294] EXT4-fs (loop7): mount failed [ 186.625623][T12305] loop4: detected capacity change from 0 to 256 [ 186.690087][ T1459] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 186.718356][T12310] 9pnet_fd: Insufficient options for proto=fd [ 186.933682][T12331] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2891'. [ 186.960281][T12333] hub 9-0:1.0: USB hub found [ 186.965001][T12333] hub 9-0:1.0: 8 ports detected [ 186.988551][T12336] loop4: detected capacity change from 0 to 256 [ 187.069928][T12340] FAULT_INJECTION: forcing a failure. [ 187.069928][T12340] name failslab, interval 1, probability 0, space 0, times 0 [ 187.082746][T12340] CPU: 0 UID: 0 PID: 12340 Comm: syz.0.2895 Not tainted 6.15.0-rc5-syzkaller-00022-g01f95500a162 #0 PREEMPT(voluntary) [ 187.082776][T12340] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 187.082789][T12340] Call Trace: [ 187.082796][T12340] [ 187.082806][T12340] __dump_stack+0x1d/0x30 [ 187.082832][T12340] dump_stack_lvl+0xe8/0x140 [ 187.082907][T12340] dump_stack+0x15/0x1b [ 187.082983][T12340] should_fail_ex+0x265/0x280 [ 187.083091][T12340] ? basic_init+0x32/0xc0 [ 187.083118][T12340] should_failslab+0x8c/0xb0 [ 187.083202][T12340] __kmalloc_cache_noprof+0x4c/0x320 [ 187.083224][T12340] basic_init+0x32/0xc0 [ 187.083256][T12340] tcf_proto_create+0x12d/0x1a0 [ 187.083282][T12340] tc_new_tfilter+0x95c/0x10a0 [ 187.083374][T12340] ? ns_capable+0x7d/0xb0 [ 187.083441][T12340] ? __pfx_tc_new_tfilter+0x10/0x10 [ 187.083480][T12340] rtnetlink_rcv_msg+0x5fb/0x6d0 [ 187.083544][T12340] ? avc_has_perm_noaudit+0x1b1/0x200 [ 187.083586][T12340] netlink_rcv_skb+0x120/0x220 [ 187.083620][T12340] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 187.083723][T12340] rtnetlink_rcv+0x1c/0x30 [ 187.083742][T12340] netlink_unicast+0x59e/0x670 [ 187.083778][T12340] netlink_sendmsg+0x58b/0x6b0 [ 187.083821][T12340] ? __pfx_netlink_sendmsg+0x10/0x10 [ 187.083871][T12340] __sock_sendmsg+0x142/0x180 [ 187.083948][T12340] ____sys_sendmsg+0x31e/0x4e0 [ 187.083969][T12340] ___sys_sendmsg+0x17b/0x1d0 [ 187.084001][T12340] __x64_sys_sendmsg+0xd4/0x160 [ 187.084089][T12340] x64_sys_call+0x2999/0x2fb0 [ 187.084176][T12340] do_syscall_64+0xd0/0x1a0 [ 187.084197][T12340] ? clear_bhb_loop+0x25/0x80 [ 187.084248][T12340] ? clear_bhb_loop+0x25/0x80 [ 187.084269][T12340] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 187.084289][T12340] RIP: 0033:0x7fb47e00e969 [ 187.084303][T12340] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 187.084324][T12340] RSP: 002b:00007fb47c677038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 187.084346][T12340] RAX: ffffffffffffffda RBX: 00007fb47e235fa0 RCX: 00007fb47e00e969 [ 187.084400][T12340] RDX: 0000000000000000 RSI: 0000200000006040 RDI: 0000000000000004 [ 187.084415][T12340] RBP: 00007fb47c677090 R08: 0000000000000000 R09: 0000000000000000 [ 187.084431][T12340] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 187.084446][T12340] R13: 0000000000000000 R14: 00007fb47e235fa0 R15: 00007ffffa1a8388 [ 187.084469][T12340] [ 187.362928][T12349] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2898'. [ 187.365059][T12342] 9pnet_fd: Insufficient options for proto=fd [ 187.379803][T12345] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2897'. [ 187.455645][T12354] loop1: detected capacity change from 0 to 512 [ 187.478159][T12354] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 187.481624][T12360] netlink: 32 bytes leftover after parsing attributes in process `syz.7.2904'. [ 187.498934][T12360] netlink: 'syz.7.2904': attribute type 6 has an invalid length. [ 187.513304][T12354] EXT4-fs (loop1): 1 truncate cleaned up [ 187.535438][T12354] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 187.571991][T12360] syz_tun: entered allmulticast mode [ 187.592320][T12360] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2904'. [ 187.592604][T12356] loop4: detected capacity change from 0 to 256 [ 187.624576][T12360] syz_tun (unregistering): left allmulticast mode [ 187.634011][T12354] xt_hashlimit: max too large, truncated to 1048576 [ 187.653594][T12364] loop7: detected capacity change from 0 to 512 [ 187.752025][T12372] hub 9-0:1.0: USB hub found [ 187.756804][T12372] hub 9-0:1.0: 8 ports detected [ 187.874739][T12364] EXT4-fs error (device loop7): ext4_quota_enable:7122: comm syz.7.2904: Bad quota inum: 1, type: 2 [ 187.899902][T12364] EXT4-fs warning (device loop7): ext4_enable_quotas:7170: Failed to enable quota tracking (type=2, err=-117, ino=1). Please run e2fsck to fix. [ 187.919035][T12364] EXT4-fs (loop7): mount failed [ 187.959559][T12386] 9pnet_fd: Insufficient options for proto=fd [ 187.994599][T12388] loop4: detected capacity change from 0 to 1024 [ 188.005231][T12388] __quota_error: 73 callbacks suppressed [ 188.005247][T12388] Quota error (device loop4): do_check_range: Getting block 64 out of range 1-5 [ 188.020401][T12388] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 188.029865][T12388] EXT4-fs error (device loop4): ext4_acquire_dquot:6935: comm syz.4.2914: Failed to acquire dquot type 0 [ 188.045459][T12388] EXT4-fs error (device loop4): mb_free_blocks:1948: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 188.061261][T12388] EXT4-fs error (device loop4): ext4_do_update_inode:5211: inode #13: comm syz.4.2914: corrupted inode contents [ 188.077105][T12388] EXT4-fs error (device loop4): ext4_dirty_inode:6103: inode #13: comm syz.4.2914: mark_inode_dirty error [ 188.088904][T12388] EXT4-fs error (device loop4): ext4_do_update_inode:5211: inode #13: comm syz.4.2914: corrupted inode contents [ 188.116776][T12388] EXT4-fs error (device loop4): __ext4_ext_dirty:207: inode #13: comm syz.4.2914: mark_inode_dirty error [ 188.129768][T12388] EXT4-fs error (device loop4): ext4_do_update_inode:5211: inode #13: comm syz.4.2914: corrupted inode contents [ 188.194258][ T29] audit: type=1326 audit(1746524763.233:8646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12390 comm="syz.0.2915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb47e00e969 code=0x7ffc0000 [ 188.205357][T12391] loop0: detected capacity change from 0 to 164 [ 188.217944][ T29] audit: type=1326 audit(1746524763.233:8647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12390 comm="syz.0.2915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb47e00e969 code=0x7ffc0000 [ 188.218022][ T29] audit: type=1326 audit(1746524763.233:8648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12390 comm="syz.0.2915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb47e00e969 code=0x7ffc0000 [ 188.218054][ T29] audit: type=1326 audit(1746524763.233:8649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12390 comm="syz.0.2915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb47e00e969 code=0x7ffc0000 [ 188.218156][ T29] audit: type=1326 audit(1746524763.243:8650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12390 comm="syz.0.2915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb47e00e969 code=0x7ffc0000 [ 188.218191][ T29] audit: type=1326 audit(1746524763.243:8651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12390 comm="syz.0.2915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fb47e00e969 code=0x7ffc0000 [ 188.218224][ T29] audit: type=1326 audit(1746524763.243:8652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12390 comm="syz.0.2915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fb47e00e9a3 code=0x7ffc0000 [ 188.218303][ T29] audit: type=1326 audit(1746524763.243:8653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12390 comm="syz.0.2915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fb47e00d41f code=0x7ffc0000 [ 188.220564][T12354] Cannot find add_set index 3 as target [ 188.225564][T12388] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem [ 188.426222][T12391] Unable to read rock-ridge attributes [ 188.458935][T12388] EXT4-fs error (device loop4): ext4_do_update_inode:5211: inode #13: comm syz.4.2914: corrupted inode contents [ 188.473418][T12391] tipc: Enabling of bearer rejected, already enabled [ 188.490896][T12388] EXT4-fs error (device loop4): ext4_truncate:4255: inode #13: comm syz.4.2914: mark_inode_dirty error [ 188.517119][T12388] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem [ 188.550266][T12388] EXT4-fs (loop4): 1 truncate cleaned up [ 188.577176][T12388] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 188.596914][T12397] pim6reg1: entered promiscuous mode [ 188.602322][T12397] pim6reg1: entered allmulticast mode [ 188.618985][T12388] EXT4-fs error (device loop4): ext4_acquire_dquot:6935: comm syz.4.2914: Failed to acquire dquot type 0 [ 188.655000][T12399] hub 9-0:1.0: USB hub found [ 188.659825][T12399] hub 9-0:1.0: 8 ports detected [ 188.693802][T12029] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 188.717870][ T3308] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 188.728405][T12403] loop7: detected capacity change from 0 to 256 [ 188.804261][T12405] program syz.2.2920 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 188.969302][T12409] loop4: detected capacity change from 0 to 256 [ 189.097175][T12406] loop0: detected capacity change from 0 to 256 [ 189.179612][T12420] loop1: detected capacity change from 0 to 1024 [ 189.207067][T12420] EXT4-fs error (device loop1): ext4_acquire_dquot:6935: comm syz.1.2926: Failed to acquire dquot type 0 [ 189.232424][T12420] EXT4-fs error (device loop1): mb_free_blocks:1948: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 189.254318][T12420] EXT4-fs error (device loop1): ext4_do_update_inode:5211: inode #13: comm syz.1.2926: corrupted inode contents [ 189.286433][T12420] EXT4-fs error (device loop1): ext4_dirty_inode:6103: inode #13: comm syz.1.2926: mark_inode_dirty error [ 189.304733][T12422] loop7: detected capacity change from 0 to 164 [ 189.313674][T12420] EXT4-fs error (device loop1): ext4_do_update_inode:5211: inode #13: comm syz.1.2926: corrupted inode contents [ 189.329572][T12422] Unable to read rock-ridge attributes [ 189.346647][T12420] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #13: comm syz.1.2926: mark_inode_dirty error [ 189.366700][T12420] EXT4-fs error (device loop1): ext4_do_update_inode:5211: inode #13: comm syz.1.2926: corrupted inode contents [ 189.391484][T12431] hub 9-0:1.0: USB hub found [ 189.391570][T12431] hub 9-0:1.0: 8 ports detected [ 189.391943][T12420] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem [ 189.392165][T12420] EXT4-fs error (device loop1): ext4_do_update_inode:5211: inode #13: comm syz.1.2926: corrupted inode contents [ 189.392370][T12420] EXT4-fs error (device loop1): ext4_truncate:4255: inode #13: comm syz.1.2926: mark_inode_dirty error [ 189.392554][T12420] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem [ 189.394401][T12420] EXT4-fs (loop1): 1 truncate cleaned up [ 189.394939][T12420] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 189.397571][T12433] loop4: detected capacity change from 0 to 1024 [ 189.403561][T12422] tipc: Enabling of bearer rejected, failed to enable media [ 189.419324][T12433] EXT4-fs error (device loop4): ext4_acquire_dquot:6935: comm syz.4.2932: Failed to acquire dquot type 0 [ 189.419886][T12433] EXT4-fs error (device loop4): mb_free_blocks:1948: group 0, [ 189.444782][T12420] EXT4-fs error (device loop1): ext4_acquire_dquot:6935: comm syz.1.2926: Failed to acquire dquot type 0 [ 189.451330][T12433] inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 189.451550][T12433] EXT4-fs error (device loop4): ext4_do_update_inode:5211: inode #13: comm syz.4.2932: corrupted inode contents [ 189.584586][T12433] EXT4-fs error (device loop4): ext4_dirty_inode:6103: inode #13: comm syz.4.2932: mark_inode_dirty error [ 189.596837][ T3308] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 189.600652][T12433] EXT4-fs error (device loop4): ext4_do_update_inode:5211: inode #13: comm syz.4.2932: corrupted inode contents [ 189.619269][T12439] loop7: detected capacity change from 0 to 256 [ 189.626503][T12433] EXT4-fs error (device loop4): __ext4_ext_dirty:207: inode #13: comm syz.4.2932: mark_inode_dirty error [ 189.639026][T12433] EXT4-fs error (device loop4): ext4_do_update_inode:5211: inode #13: comm syz.4.2932: corrupted inode contents [ 189.657708][T12433] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem [ 189.666880][T12433] EXT4-fs error (device loop4): ext4_do_update_inode:5211: inode #13: comm syz.4.2932: corrupted inode contents [ 189.679648][T12433] EXT4-fs error (device loop4): ext4_truncate:4255: inode #13: comm syz.4.2932: mark_inode_dirty error [ 189.692099][T12433] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem [ 189.701937][T12433] EXT4-fs (loop4): 1 truncate cleaned up [ 189.708314][T12433] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 189.738430][T12433] EXT4-fs error (device loop4): ext4_acquire_dquot:6935: comm syz.4.2932: Failed to acquire dquot type 0 [ 189.778292][T12437] loop0: detected capacity change from 0 to 256 [ 189.822507][T12446] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2937'. [ 189.924219][T12452] pim6reg1: entered promiscuous mode [ 189.929708][T12452] pim6reg1: entered allmulticast mode [ 189.976249][T12457] netlink: 36 bytes leftover after parsing attributes in process `syz.7.2942'. [ 189.999852][T12459] program syz.4.2939 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 190.019984][ T3356] hid-generic 0000:0000:20000000.001E: unknown main item tag 0x0 [ 190.027815][ T3356] hid-generic 0000:0000:20000000.001E: unknown main item tag 0x0 [ 190.035637][ T3356] hid-generic 0000:0000:20000000.001E: unknown main item tag 0x0 [ 190.043402][ T3356] hid-generic 0000:0000:20000000.001E: unknown main item tag 0x0 [ 190.051189][ T3356] hid-generic 0000:0000:20000000.001E: unknown main item tag 0x0 [ 190.059154][ T3356] hid-generic 0000:0000:20000000.001E: unknown main item tag 0x0 [ 190.067000][ T3356] hid-generic 0000:0000:20000000.001E: unknown main item tag 0x0 [ 190.074790][ T3356] hid-generic 0000:0000:20000000.001E: unknown main item tag 0x0 [ 190.082628][ T3356] hid-generic 0000:0000:20000000.001E: unknown main item tag 0x0 [ 190.090383][ T3356] hid-generic 0000:0000:20000000.001E: unknown main item tag 0x0 [ 190.098186][ T3356] hid-generic 0000:0000:20000000.001E: unknown main item tag 0x0 [ 190.106163][ T3356] hid-generic 0000:0000:20000000.001E: unknown main item tag 0x0 [ 190.106187][ T3356] hid-generic 0000:0000:20000000.001E: unknown main item tag 0x0 [ 190.106208][ T3356] hid-generic 0000:0000:20000000.001E: unknown main item tag 0x0 [ 190.106236][ T3356] hid-generic 0000:0000:20000000.001E: unknown main item tag 0x0 [ 190.106298][ T3356] hid-generic 0000:0000:20000000.001E: unknown main item tag 0x0 [ 190.106384][ T3356] hid-generic 0000:0000:20000000.001E: unknown main item tag 0x0 [ 190.106413][ T3356] hid-generic 0000:0000:20000000.001E: unknown main item tag 0x0 [ 190.106442][ T3356] hid-generic 0000:0000:20000000.001E: unknown main item tag 0x0 [ 190.106471][ T3356] hid-generic 0000:0000:20000000.001E: unknown main item tag 0x0 [ 190.106586][ T3356] hid-generic 0000:0000:20000000.001E: unknown main item tag 0x0 [ 190.106645][ T3356] hid-generic 0000:0000:20000000.001E: unknown main item tag 0x0 [ 190.106671][ T3356] hid-generic 0000:0000:20000000.001E: unknown main item tag 0x0 [ 190.106695][ T3356] hid-generic 0000:0000:20000000.001E: unknown main item tag 0x0 [ 190.106724][ T3356] hid-generic 0000:0000:20000000.001E: unknown main item tag 0x0 [ 190.106752][ T3356] hid-generic 0000:0000:20000000.001E: unknown main item tag 0x0 [ 190.106834][ T3356] hid-generic 0000:0000:20000000.001E: unknown main item tag 0x0 [ 190.106862][ T3356] hid-generic 0000:0000:20000000.001E: unknown main item tag 0x0 [ 190.106889][ T3356] hid-generic 0000:0000:20000000.001E: unknown main item tag 0x0 [ 190.106911][ T3356] hid-generic 0000:0000:20000000.001E: unknown main item tag 0x0 [ 190.106940][ T3356] hid-generic 0000:0000:20000000.001E: unknown main item tag 0x0 [ 190.107027][ T3356] hid-generic 0000:0000:20000000.001E: unknown main item tag 0x0 [ 190.107048][ T3356] hid-generic 0000:0000:20000000.001E: unknown main item tag 0x0 [ 190.107068][ T3356] hid-generic 0000:0000:20000000.001E: unknown main item tag 0x0 [ 190.107090][ T3356] hid-generic 0000:0000:20000000.001E: unknown main item tag 0x0 [ 190.107117][ T3356] hid-generic 0000:0000:20000000.001E: unknown main item tag 0x0 [ 190.107145][ T3356] hid-generic 0000:0000:20000000.001E: unknown main item tag 0x0 [ 190.107234][ T3356] hid-generic 0000:0000:20000000.001E: unknown main item tag 0x0 [ 190.107256][ T3356] hid-generic 0000:0000:20000000.001E: unknown main item tag 0x0 [ 190.107282][ T3356] hid-generic 0000:0000:20000000.001E: unknown main item tag 0x0 [ 190.107309][ T3356] hid-generic 0000:0000:20000000.001E: unknown main item tag 0x0 [ 190.107335][ T3356] hid-generic 0000:0000:20000000.001E: unknown main item tag 0x0 [ 190.107430][ T3356] hid-generic 0000:0000:20000000.001E: unknown main item tag 0x0 [ 190.150489][T12464] hub 9-0:1.0: USB hub found [ 190.199877][ T3356] hid-generic 0000:0000:20000000.001E: hidraw0: HID v0.01 Device [syz0] on syz1 [ 190.207694][T12464] hub 9-0:1.0: 8 ports detected [ 190.261437][T12468] loop7: detected capacity change from 0 to 1024 [ 190.386969][T12468] EXT4-fs: Ignoring removed nobh option [ 190.392660][T12468] EXT4-fs: Ignoring removed nobh option [ 190.412602][T12472] loop0: detected capacity change from 0 to 1024 [ 190.420707][T12468] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 190.433085][T12466] loop4: detected capacity change from 0 to 164 [ 190.435931][T12472] EXT4-fs error (device loop0): ext4_acquire_dquot:6935: comm syz.0.2948: Failed to acquire dquot type 0 [ 190.450045][T12468] EXT4-fs error (device loop7): ext4_get_journal_inode:5798: comm syz.7.2946: inode #4294967295: comm syz.7.2946: iget: illegal inode # [ 190.465534][T12468] EXT4-fs (loop7): no journal found [ 190.469672][T12466] Unable to read rock-ridge attributes [ 190.470910][T12468] EXT4-fs (loop7): can't get journal size [ 190.472576][T12472] EXT4-fs error (device loop0): mb_free_blocks:1948: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 190.498126][T12472] EXT4-fs error (device loop0): ext4_do_update_inode:5211: inode #13: comm syz.0.2948: corrupted inode contents [ 190.510125][T12468] EXT4-fs (loop7): failed to initialize system zone (-22) [ 190.517392][T12468] EXT4-fs (loop7): mount failed [ 190.526609][T12472] EXT4-fs error (device loop0): ext4_dirty_inode:6103: inode #13: comm syz.0.2948: mark_inode_dirty error [ 190.542208][T12466] tipc: Started in network mode [ 190.543701][T12472] EXT4-fs error (device loop0): ext4_do_update_inode:5211: inode #13: comm syz.0.2948: corrupted inode contents [ 190.548130][T12466] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 190.571418][T12466] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 190.580039][T12472] EXT4-fs error (device loop0): __ext4_ext_dirty:207: inode #13: comm syz.0.2948: mark_inode_dirty error [ 190.580206][T12472] EXT4-fs error (device loop0): ext4_do_update_inode:5211: inode #13: comm syz.0.2948: corrupted inode contents [ 190.580384][T12472] EXT4-fs error (device loop0) in ext4_orphan_del:305: Corrupt filesystem [ 190.580521][T12472] EXT4-fs error (device loop0): ext4_do_update_inode:5211: inode #13: comm syz.0.2948: corrupted inode contents [ 190.580745][T12472] EXT4-fs error (device loop0): ext4_truncate:4255: inode #13: comm syz.0.2948: mark_inode_dirty error [ 190.581018][T12472] EXT4-fs error (device loop0) in ext4_process_orphan:347: Corrupt filesystem [ 190.611448][T12466] tipc: Enabled bearer , priority 10 [ 190.617484][T12472] EXT4-fs (loop0): 1 truncate cleaned up [ 190.770487][T12490] loop7: detected capacity change from 0 to 256 [ 190.783075][T12492] loop4: detected capacity change from 0 to 1024 [ 190.814756][T12494] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2955'. [ 190.879523][T12507] loop4: detected capacity change from 0 to 256 [ 190.974348][T12513] loop7: detected capacity change from 0 to 1024 [ 190.987960][T12513] EXT4-fs error (device loop7): ext4_acquire_dquot:6935: comm syz.7.2962: Failed to acquire dquot type 0 [ 191.004549][T12511] loop0: detected capacity change from 0 to 164 [ 191.012439][T12513] EXT4-fs error (device loop7): mb_free_blocks:1948: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 191.012499][T12513] EXT4-fs error (device loop7): ext4_do_update_inode:5211: inode #13: comm syz.7.2962: corrupted inode contents [ 191.012858][T12513] EXT4-fs error (device loop7): ext4_dirty_inode:6103: inode #13: comm syz.7.2962: mark_inode_dirty error [ 191.013041][T12513] EXT4-fs error (device loop7): ext4_do_update_inode:5211: inode #13: comm syz.7.2962: corrupted inode contents [ 191.013193][T12513] EXT4-fs error (device loop7): __ext4_ext_dirty:207: inode #13: comm syz.7.2962: mark_inode_dirty error [ 191.013401][T12513] EXT4-fs error (device loop7): ext4_do_update_inode:5211: inode #13: comm syz.7.2962: corrupted inode contents [ 191.013576][T12513] EXT4-fs error (device loop7) in ext4_orphan_del:305: Corrupt filesystem [ 191.013819][T12513] EXT4-fs error (device loop7): ext4_do_update_inode:5211: inode #13: comm syz.7.2962: corrupted inode contents [ 191.013985][T12513] EXT4-fs error (device loop7): ext4_truncate:4255: inode #13: comm syz.7.2962: mark_inode_dirty error [ 191.014216][T12513] EXT4-fs error (device loop7) in ext4_process_orphan:347: Corrupt filesystem [ 191.014769][T12513] EXT4-fs (loop7): 1 truncate cleaned up [ 191.058352][T12511] Unable to read rock-ridge attributes [ 191.162263][T12511] tipc: Enabling of bearer rejected, already enabled [ 191.306796][T12524] loop4: detected capacity change from 0 to 256 [ 191.331402][T12531] netlink: 36 bytes leftover after parsing attributes in process `syz.7.2969'. [ 191.635536][T12549] loop7: detected capacity change from 0 to 164 [ 191.658339][T12549] Unable to read rock-ridge attributes [ 191.689307][T12549] tipc: Enabling of bearer rejected, failed to enable media [ 191.715220][T12550] netlink: 100 bytes leftover after parsing attributes in process `syz.4.2972'. [ 191.869307][T12555] loop2: detected capacity change from 0 to 1024 [ 191.959338][ T3382] tipc: Node number set to 1 [ 192.062930][T12565] loop7: detected capacity change from 0 to 512 [ 192.093588][T12565] EXT4-fs error (device loop7): ext4_orphan_get:1391: inode #15: comm syz.7.2981: casefold flag without casefold feature [ 192.118493][T12565] EXT4-fs error (device loop7): ext4_orphan_get:1396: comm syz.7.2981: couldn't read orphan inode 15 (err -117) [ 192.147464][T12565] FAULT_INJECTION: forcing a failure. [ 192.147464][T12565] name failslab, interval 1, probability 0, space 0, times 0 [ 192.160223][T12565] CPU: 0 UID: 0 PID: 12565 Comm: syz.7.2981 Not tainted 6.15.0-rc5-syzkaller-00022-g01f95500a162 #0 PREEMPT(voluntary) [ 192.160267][T12565] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 192.160291][T12565] Call Trace: [ 192.160298][T12565] [ 192.160307][T12565] __dump_stack+0x1d/0x30 [ 192.160333][T12565] dump_stack_lvl+0xe8/0x140 [ 192.160357][T12565] dump_stack+0x15/0x1b [ 192.160373][T12565] should_fail_ex+0x265/0x280 [ 192.160430][T12565] should_failslab+0x8c/0xb0 [ 192.160490][T12565] kmem_cache_alloc_noprof+0x50/0x310 [ 192.160531][T12565] ? getname_flags+0x80/0x3b0 [ 192.160600][T12565] ? fput+0x8f/0xc0 [ 192.160626][T12565] getname_flags+0x80/0x3b0 [ 192.160722][T12565] __x64_sys_mkdirat+0x40/0x60 [ 192.160747][T12565] x64_sys_call+0x2be0/0x2fb0 [ 192.160774][T12565] do_syscall_64+0xd0/0x1a0 [ 192.160864][T12565] ? clear_bhb_loop+0x25/0x80 [ 192.160886][T12565] ? clear_bhb_loop+0x25/0x80 [ 192.160909][T12565] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 192.160929][T12565] RIP: 0033:0x7f928c0de969 [ 192.160944][T12565] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 192.161037][T12565] RSP: 002b:00007f928a747038 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 192.161097][T12565] RAX: ffffffffffffffda RBX: 00007f928c305fa0 RCX: 00007f928c0de969 [ 192.161170][T12565] RDX: 00000000000001c0 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 192.161184][T12565] RBP: 00007f928a747090 R08: 0000000000000000 R09: 0000000000000000 [ 192.161205][T12565] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 192.161220][T12565] R13: 0000000000000000 R14: 00007f928c305fa0 R15: 00007ffc16176d38 [ 192.161243][T12565] [ 192.471876][T12577] loop4: detected capacity change from 0 to 1024 [ 192.483036][T12577] EXT4-fs mount: 11 callbacks suppressed [ 192.483055][T12577] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 192.501247][T12577] ext4 filesystem being mounted at /36/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 192.522336][T12577] netlink: 'syz.4.2986': attribute type 1 has an invalid length. [ 192.547337][T12577] 8021q: adding VLAN 0 to HW filter on device bond1 [ 192.571995][T12577] bond1: (slave gretap1): making interface the new active one [ 192.580372][T12577] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 192.597637][T12577] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2986'. [ 192.723263][T12597] mmap: syz.0.2993 (12597): VmData 167489536 exceed data ulimit 8. Update limits or use boot option ignore_rlimit_data. [ 192.918678][T12603] loop2: detected capacity change from 0 to 164 [ 192.937365][T12603] Unable to read rock-ridge attributes [ 193.011420][ T29] kauditd_printk_skb: 215 callbacks suppressed [ 193.011479][ T29] audit: type=1326 audit(1746524768.073:8855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12602 comm="syz.2.2995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f440f62e969 code=0x7ffc0000 [ 193.045477][T12603] tipc: Started in network mode [ 193.052572][T12603] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 193.065532][T12603] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 193.083634][T12603] tipc: Enabled bearer , priority 10 [ 193.100182][ T29] audit: type=1326 audit(1746524768.113:8856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12602 comm="syz.2.2995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f440f62e969 code=0x7ffc0000 [ 193.125328][ T29] audit: type=1326 audit(1746524768.193:8857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12602 comm="syz.2.2995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f440f62e969 code=0x7ffc0000 [ 193.148987][ T29] audit: type=1326 audit(1746524768.193:8858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12602 comm="syz.2.2995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f440f62e969 code=0x7ffc0000 [ 193.304203][T12029] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.526107][T12634] loop2: detected capacity change from 0 to 1024 [ 193.526460][T12634] EXT4-fs: Ignoring removed nobh option [ 193.526526][T12634] EXT4-fs: Ignoring removed nobh option [ 193.536895][T12634] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 193.537002][T12634] EXT4-fs error (device loop2): ext4_get_journal_inode:5798: comm syz.2.3008: inode #4294967295: comm syz.2.3008: iget: illegal inode # [ 193.537147][T12634] EXT4-fs (loop2): no journal found [ 193.537161][T12634] EXT4-fs (loop2): can't get journal size [ 193.550129][T12634] EXT4-fs (loop2): failed to initialize system zone (-22) [ 193.570872][T12615] loop1: detected capacity change from 0 to 256 [ 193.622167][T12634] EXT4-fs (loop2): mount failed [ 193.718068][T12640] loop7: detected capacity change from 0 to 512 [ 193.728589][T12640] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 193.740198][T12629] loop0: detected capacity change from 0 to 256 [ 193.747233][ T31] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 193.749720][T12640] EXT4-fs (loop7): 1 truncate cleaned up [ 193.763887][T12640] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 193.779612][T12640] EXT4-fs error (device loop7): mb_free_blocks:1948: group 0, inode 16: block 33:freeing already freed block (bit 32); block bitmap corrupt. [ 193.794465][T12640] EXT4-fs (loop7): Remounting filesystem read-only [ 193.950358][ T29] audit: type=1326 audit(1746524769.013:8859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12656 comm="syz.1.3014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b4d57e969 code=0x7ffc0000 [ 193.974900][T12657] loop1: detected capacity change from 0 to 512 [ 193.981208][ T29] audit: type=1326 audit(1746524769.013:8860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12656 comm="syz.1.3014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b4d57e969 code=0x7ffc0000 [ 193.981267][ T29] audit: type=1326 audit(1746524769.013:8861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12656 comm="syz.1.3014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f1b4d57e969 code=0x7ffc0000 [ 193.981296][ T29] audit: type=1326 audit(1746524769.023:8862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12656 comm="syz.1.3014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f1b4d57e9a3 code=0x7ffc0000 [ 193.981364][ T29] audit: type=1326 audit(1746524769.023:8863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12656 comm="syz.1.3014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f1b4d57d41f code=0x7ffc0000 [ 193.981397][ T29] audit: type=1326 audit(1746524769.023:8864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12656 comm="syz.1.3014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f1b4d57e9f7 code=0x7ffc0000 [ 194.020384][T12657] EXT4-fs (loop1): failed to initialize system zone (-117) [ 194.106667][T12657] EXT4-fs (loop1): mount failed [ 194.200562][ T3379] tipc: Node number set to 1 [ 194.301730][T12667] loop1: detected capacity change from 0 to 1024 [ 194.312751][T12667] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 194.370899][ T7221] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.423844][T12674] pim6reg1: entered promiscuous mode [ 194.429222][T12674] pim6reg1: entered allmulticast mode [ 194.548640][ T3308] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.587363][T12679] loop1: detected capacity change from 0 to 1024 [ 194.623232][T12679] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 194.747327][T12681] loop7: detected capacity change from 0 to 256 [ 194.755912][T12691] pim6reg1: entered promiscuous mode [ 194.761519][T12691] pim6reg1: entered allmulticast mode [ 194.886886][T12692] program syz.2.3024 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 194.945747][ T3308] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.984719][ T3379] hid-generic 0000:0004:0000.001F: unknown main item tag 0x0 [ 194.992204][ T3379] hid-generic 0000:0004:0000.001F: unknown main item tag 0x0 [ 194.999707][ T3379] hid-generic 0000:0004:0000.001F: unknown main item tag 0x0 [ 195.009267][ T3379] hid-generic 0000:0004:0000.001F: hidraw0: HID v0.00 Device [syz0] on syz1 [ 195.075303][T12711] vhci_hcd: default hub control req: 800f v0000 i0000 l31125 [ 195.121879][ T37] geneve0: left allmulticast mode [ 195.126951][ T37] geneve0: left promiscuous mode [ 195.132234][ T37] bridge0: port 1(geneve0) entered disabled state [ 195.172397][T12712] loop1: detected capacity change from 0 to 512 [ 195.179391][T12712] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 195.201525][T12712] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 195.214188][T12712] ext4 filesystem being mounted at /564/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 195.237623][T12721] loop7: detected capacity change from 0 to 1024 [ 195.252800][T12721] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 195.266690][ T37]  (unregistering): Released all slaves [ 195.323999][ T37] tipc: Disabling bearer [ 195.329299][ T37] tipc: Left network mode [ 195.415835][T12695] chnl_net:caif_netlink_parms(): no params data found [ 195.452583][ T37] hsr_slave_0: left promiscuous mode [ 195.464938][ T37] hsr_slave_1: left promiscuous mode [ 195.533787][ T7221] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.542989][ T2337] smc: removing ib device syz! [ 195.551240][ T12] smc: removing ib device syz2 [ 195.709858][T12695] bridge0: port 1(bridge_slave_0) entered blocking state [ 195.713842][T12740] loop2: detected capacity change from 0 to 1024 [ 195.716977][T12695] bridge0: port 1(bridge_slave_0) entered disabled state [ 195.734935][T12740] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 195.753618][T12695] bridge_slave_0: entered allmulticast mode [ 195.787986][T12695] bridge_slave_0: entered promiscuous mode [ 195.832685][ T10] hid-generic 0000:0004:0000.0020: unknown main item tag 0x0 [ 195.840300][ T10] hid-generic 0000:0004:0000.0020: unknown main item tag 0x0 [ 195.847798][ T10] hid-generic 0000:0004:0000.0020: unknown main item tag 0x0 [ 195.872618][T12695] bridge0: port 2(bridge_slave_1) entered blocking state [ 195.879848][T12695] bridge0: port 2(bridge_slave_1) entered disabled state [ 195.933957][T12695] bridge_slave_1: entered allmulticast mode [ 195.943999][ T10] hid-generic 0000:0004:0000.0020: hidraw0: HID v0.00 Device [syz0] on syz1 [ 195.955693][ T3308] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.963358][T12695] bridge_slave_1: entered promiscuous mode [ 196.046421][T12695] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 196.060858][T12754] pim6reg1: entered promiscuous mode [ 196.066210][T12754] pim6reg1: entered allmulticast mode [ 196.092121][T12695] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 196.122649][T11341] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.133846][T12695] team0: Port device team_slave_0 added [ 196.140460][T12695] team0: Port device team_slave_1 added [ 196.157405][ T37] IPVS: stop unused estimator thread 0... [ 196.169383][T12695] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 196.176545][T12695] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 196.202521][T12695] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 196.212977][T12763] loop4: detected capacity change from 0 to 256 [ 196.261466][T12695] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 196.268459][T12695] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 196.294471][T12695] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 196.357468][T12768] loop1: detected capacity change from 0 to 512 [ 196.368534][T12768] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 196.411564][T12768] EXT4-fs (loop1): 1 truncate cleaned up [ 196.429677][T12768] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 196.446938][T12695] hsr_slave_0: entered promiscuous mode [ 196.457761][T12768] EXT4-fs error (device loop1): mb_free_blocks:1948: group 0, inode 16: block 33:freeing already freed block (bit 32); block bitmap corrupt. [ 196.469457][T12695] hsr_slave_1: entered promiscuous mode [ 196.488866][T12768] EXT4-fs (loop1): Remounting filesystem read-only [ 196.554874][T12784] loop7: detected capacity change from 0 to 1024 [ 196.570204][T12784] EXT4-fs: Ignoring removed nobh option [ 196.575868][T12784] EXT4-fs: Ignoring removed nobh option [ 196.576004][ T3877] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 196.594884][T12784] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 196.605969][T12787] vhci_hcd: default hub control req: 800f v0000 i0000 l31125 [ 196.623135][T12784] EXT4-fs error (device loop7): ext4_get_journal_inode:5798: comm syz.7.3050: inode #4294967295: comm syz.7.3050: iget: illegal inode # [ 196.655661][T12784] EXT4-fs (loop7): no journal found [ 196.661129][T12784] EXT4-fs (loop7): can't get journal size [ 196.664291][T12789] loop4: detected capacity change from 0 to 512 [ 196.668606][T12784] EXT4-fs (loop7): failed to initialize system zone (-22) [ 196.682855][T12784] EXT4-fs (loop7): mount failed [ 196.690739][T12789] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 196.721997][T12789] EXT4-fs (loop4): 1 truncate cleaned up [ 196.728174][T12789] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 196.745541][T12789] EXT4-fs error (device loop4): mb_free_blocks:1948: group 0, inode 16: block 33:freeing already freed block (bit 32); block bitmap corrupt. [ 196.764212][T12789] EXT4-fs (loop4): Remounting filesystem read-only [ 197.155965][T12695] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 197.198464][ T3308] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.200232][T12695] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 197.216031][T12029] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.217120][T12695] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 197.250481][T12803] loop4: detected capacity change from 0 to 1024 [ 197.258106][T12695] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 197.272714][T12803] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 197.289638][T12805] loop1: detected capacity change from 0 to 1024 [ 197.309516][T12805] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 197.332950][T12695] 8021q: adding VLAN 0 to HW filter on device bond0 [ 197.365780][T12695] 8021q: adding VLAN 0 to HW filter on device team0 [ 197.395591][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 197.402808][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 197.464330][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 197.471454][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 197.616788][T12695] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 197.654981][T12029] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.706092][T12834] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3059'. [ 197.774678][ T3308] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.811623][T12695] veth0_vlan: entered promiscuous mode [ 197.831477][T12695] veth1_vlan: entered promiscuous mode [ 197.848482][T12695] veth0_macvtap: entered promiscuous mode [ 197.857707][T12695] veth1_macvtap: entered promiscuous mode [ 197.870394][T12695] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 197.880909][T12695] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.889750][T12849] loop2: detected capacity change from 0 to 512 [ 197.890788][T12695] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 197.897910][T12849] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 197.907464][T12695] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.921918][T12849] EXT4-fs (loop2): 1 truncate cleaned up [ 197.927150][T12695] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 197.934577][T12849] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 197.943196][T12695] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.948348][T12695] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 197.963631][T12849] EXT4-fs error (device loop2): mb_free_blocks:1948: group 0, [ 197.967974][T12695] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 197.972783][T12849] inode 16: [ 197.980290][T12695] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.980310][T12695] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 197.980324][T12695] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.980336][T12695] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 197.990942][T12849] block 33: [ 197.994066][T12695] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.003933][T12849] freeing already freed block (bit 32); block bitmap corrupt. [ 198.025790][ T29] kauditd_printk_skb: 130 callbacks suppressed [ 198.025817][ T29] audit: type=1326 audit(1746524773.093:8995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12845 comm="syz.1.3061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7f1b4d57e969 code=0x7ffc0000 [ 198.035909][T12695] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 198.095054][T12849] EXT4-fs (loop2): Remounting filesystem read-only [ 198.096996][ T29] audit: type=1326 audit(1746524773.163:8996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12843 comm="syz.1.3061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f1b4d51ab39 code=0x7ffc0000 [ 198.103999][T12695] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.125034][ T29] audit: type=1326 audit(1746524773.163:8997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12843 comm="syz.1.3061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b4d57e969 code=0x7ffc0000 [ 198.133705][T12695] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.157376][ T29] audit: type=1326 audit(1746524773.163:8998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12843 comm="syz.1.3061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b4d57e969 code=0x7ffc0000 [ 198.189950][T12695] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.198680][T12695] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.234500][ T29] audit: type=1400 audit(1746524773.303:8999): avc: denied { bind } for pid=12857 comm="syz.1.3064" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 198.274362][T11341] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.464487][T12881] vhci_hcd: default hub control req: 800f v0000 i0000 l31125 [ 198.496385][T12872] loop0: detected capacity change from 0 to 256 [ 198.555466][ T29] audit: type=1400 audit(1746524773.623:9000): avc: denied { bind } for pid=12883 comm="syz.7.3074" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 198.596190][ T29] audit: type=1400 audit(1746524773.653:9001): avc: denied { write } for pid=12883 comm="syz.7.3074" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 198.625946][T12886] loop1: detected capacity change from 0 to 512 [ 198.633255][T12886] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 198.655648][T12886] EXT4-fs (loop1): 1 truncate cleaned up [ 198.662240][T12886] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 198.677523][T12886] EXT4-fs error (device loop1): mb_free_blocks:1948: group 0, inode 16: block 33:freeing already freed block (bit 32); block bitmap corrupt. [ 198.693533][T12886] EXT4-fs (loop1): Remounting filesystem read-only [ 198.700490][T12889] loop0: detected capacity change from 0 to 1024 [ 198.713057][T12889] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 198.763010][ T12] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 198.904777][T12695] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.159342][ T29] audit: type=1326 audit(1746524774.223:9002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12913 comm="syz.4.3084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6a7fbe969 code=0x7ffc0000 [ 199.182946][ T29] audit: type=1326 audit(1746524774.223:9003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12913 comm="syz.4.3084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6a7fbe969 code=0x7ffc0000 [ 199.209714][ T29] audit: type=1326 audit(1746524774.253:9004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12913 comm="syz.4.3084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7fb6a7fbe969 code=0x7ffc0000 [ 199.377110][T12884] atomic_op ffff88811840b928 conn xmit_atomic 0000000000000000 [ 199.396346][T12924] program syz.0.3086 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 199.436690][T12926] loop7: detected capacity change from 0 to 1024 [ 199.445727][T12928] loop4: detected capacity change from 0 to 256 [ 199.457257][T12926] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 199.524581][ T3308] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.595845][T12938] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3091'. [ 199.773765][T12952] loop2: detected capacity change from 0 to 1024 [ 199.780804][T12952] EXT4-fs: Ignoring removed nobh option [ 199.786413][T12952] EXT4-fs: Ignoring removed nobh option [ 199.792537][T12952] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 199.802574][T12952] EXT4-fs error (device loop2): ext4_get_journal_inode:5798: comm syz.2.3097: inode #4294967295: comm syz.2.3097: iget: illegal inode # [ 199.818008][T12952] EXT4-fs (loop2): no journal found [ 199.823328][T12952] EXT4-fs (loop2): can't get journal size [ 199.840733][T12952] EXT4-fs (loop2): failed to initialize system zone (-22) [ 199.850730][T12952] EXT4-fs (loop2): mount failed [ 199.851615][T12955] vhci_hcd: default hub control req: 800f v0000 i0000 l31125 [ 199.864975][ T7221] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.881052][T12957] loop0: detected capacity change from 0 to 164 [ 199.947947][ T2337] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 200.039903][T12974] program syz.0.3101 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 200.146943][T12979] loop0: detected capacity change from 0 to 256 [ 200.256702][T12982] pim6reg1: entered promiscuous mode [ 200.262147][T12982] pim6reg1: entered allmulticast mode [ 200.529306][T12986] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3107'. [ 200.692588][T12993] loop2: detected capacity change from 0 to 8192 [ 200.700183][T12993] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 200.947416][T12999] loop7: detected capacity change from 0 to 164 [ 200.997855][T12999] Unable to read rock-ridge attributes [ 201.106070][T12999] tipc: Enabling of bearer rejected, failed to enable media [ 201.178241][T13008] loop2: detected capacity change from 0 to 1024 [ 201.211983][T13012] program syz.1.3114 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 201.223890][T13008] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 201.325761][T13016] loop1: detected capacity change from 0 to 256 [ 201.408343][T13019] loop1: detected capacity change from 0 to 1024 [ 201.459359][T11341] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.471659][T13023] FAULT_INJECTION: forcing a failure. [ 201.471659][T13023] name failslab, interval 1, probability 0, space 0, times 0 [ 201.484456][T13023] CPU: 0 UID: 0 PID: 13023 Comm: syz.4.3120 Not tainted 6.15.0-rc5-syzkaller-00022-g01f95500a162 #0 PREEMPT(voluntary) [ 201.484514][T13023] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 201.484559][T13023] Call Trace: [ 201.484566][T13023] [ 201.484576][T13023] __dump_stack+0x1d/0x30 [ 201.484662][T13023] dump_stack_lvl+0xe8/0x140 [ 201.484686][T13023] dump_stack+0x15/0x1b [ 201.484705][T13023] should_fail_ex+0x265/0x280 [ 201.484778][T13023] ? sctp_add_bind_addr+0x71/0x1e0 [ 201.484810][T13023] should_failslab+0x8c/0xb0 [ 201.484898][T13023] __kmalloc_cache_noprof+0x4c/0x320 [ 201.484925][T13023] sctp_add_bind_addr+0x71/0x1e0 [ 201.484956][T13023] sctp_copy_local_addr_list+0x199/0x220 [ 201.485038][T13023] sctp_copy_one_addr+0x7f/0x280 [ 201.485063][T13023] sctp_bind_addr_copy+0x79/0x290 [ 201.485144][T13023] sctp_assoc_set_bind_addr_from_ep+0xce/0xe0 [ 201.485174][T13023] sctp_connect_new_asoc+0x1c3/0x3a0 [ 201.485278][T13023] sctp_sendmsg+0xf10/0x18d0 [ 201.485313][T13023] ? selinux_socket_sendmsg+0x141/0x1b0 [ 201.485359][T13023] ? __pfx_sctp_sendmsg+0x10/0x10 [ 201.485458][T13023] inet_sendmsg+0xc2/0xd0 [ 201.485502][T13023] __sock_sendmsg+0x102/0x180 [ 201.485534][T13023] __sys_sendto+0x268/0x330 [ 201.485606][T13023] __x64_sys_sendto+0x76/0x90 [ 201.485640][T13023] x64_sys_call+0x2eb6/0x2fb0 [ 201.485684][T13019] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 201.485719][T13023] do_syscall_64+0xd0/0x1a0 [ 201.485747][T13023] ? clear_bhb_loop+0x25/0x80 [ 201.485774][T13023] ? clear_bhb_loop+0x25/0x80 [ 201.485855][T13023] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 201.485884][T13023] RIP: 0033:0x7fb6a7fbe969 [ 201.485904][T13023] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 201.485949][T13023] RSP: 002b:00007fb6a6627038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 201.485976][T13023] RAX: ffffffffffffffda RBX: 00007fb6a81e5fa0 RCX: 00007fb6a7fbe969 [ 201.485994][T13023] RDX: 00000000000000ec RSI: 0000200000000780 RDI: 0000000000000006 [ 201.486009][T13023] RBP: 00007fb6a6627090 R08: 0000200000000140 R09: 000000000000001c [ 201.486025][T13023] R10: 000000000000c0d4 R11: 0000000000000246 R12: 0000000000000001 [ 201.486041][T13023] R13: 0000000000000000 R14: 00007fb6a81e5fa0 R15: 00007ffc60139a28 [ 201.486066][T13023] [ 201.533294][T13026] loop4: detected capacity change from 0 to 1024 [ 201.733388][T13026] EXT4-fs: Ignoring removed nobh option [ 201.733728][ T3308] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.738963][T13026] EXT4-fs: Ignoring removed nobh option [ 201.739605][T13026] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 201.753960][T13028] vhci_hcd: default hub control req: 800f v0000 i0000 l31125 [ 201.765962][T13026] EXT4-fs error (device loop4): ext4_get_journal_inode:5798: comm syz.4.3121: inode #4294967295: comm syz.4.3121: iget: illegal inode # [ 201.785413][T13026] EXT4-fs (loop4): no journal found [ 201.790679][T13026] EXT4-fs (loop4): can't get journal size [ 201.797585][T13026] EXT4-fs (loop4): failed to initialize system zone (-22) [ 201.807967][T13026] EXT4-fs (loop4): mount failed [ 201.872083][ T3877] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 201.896743][T13034] loop1: detected capacity change from 0 to 256 [ 202.077016][T13047] atomic_op ffff88810f012128 conn xmit_atomic 0000000000000000 [ 202.113864][T13052] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3127'. [ 202.168131][T13055] loop0: detected capacity change from 0 to 512 [ 202.175194][T13055] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 202.186612][T13055] EXT4-fs (loop0): 1 truncate cleaned up [ 202.192853][T13055] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 202.207389][T13055] EXT4-fs error (device loop0): mb_free_blocks:1948: group 0, inode 16: block 33:freeing already freed block (bit 32); block bitmap corrupt. [ 202.222183][T13055] EXT4-fs (loop0): Remounting filesystem read-only [ 202.392590][T12695] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 202.407945][T13064] vhci_hcd: invalid port number 236 [ 202.418373][T13064] loop4: detected capacity change from 0 to 512 [ 202.425819][T13064] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 202.432088][T13066] loop7: detected capacity change from 0 to 1024 [ 202.435068][T13064] EXT4-fs (loop4): invalid journal inode [ 202.448649][T13064] EXT4-fs (loop4): can't get journal size [ 202.467239][T13064] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a056c119, mo2=0002] [ 202.476003][T13064] System zones: 1-12, 13-13 [ 202.482496][T13064] EXT4-fs error (device loop4): ext4_iget_extra_inode:4693: inode #15: comm +}[@: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 202.500292][T13064] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm +}[@: couldn't read orphan inode 15 (err -117) [ 202.513479][T13064] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 202.554895][T13066] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 202.582530][T12029] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 202.594220][ T7221] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 203.009599][T13083] loop4: detected capacity change from 0 to 256 [ 203.112743][T13108] FAULT_INJECTION: forcing a failure. [ 203.112743][T13108] name failslab, interval 1, probability 0, space 0, times 0 [ 203.125526][T13108] CPU: 1 UID: 0 PID: 13108 Comm: syz.7.3138 Not tainted 6.15.0-rc5-syzkaller-00022-g01f95500a162 #0 PREEMPT(voluntary) [ 203.125562][T13108] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 203.125645][T13108] Call Trace: [ 203.125653][T13108] [ 203.125661][T13108] __dump_stack+0x1d/0x30 [ 203.125702][T13108] dump_stack_lvl+0xe8/0x140 [ 203.125727][T13108] dump_stack+0x15/0x1b [ 203.125744][T13108] should_fail_ex+0x265/0x280 [ 203.125846][T13108] ? tcp_sendmsg_fastopen+0x172/0x520 [ 203.125873][T13108] should_failslab+0x8c/0xb0 [ 203.125903][T13108] __kmalloc_cache_noprof+0x4c/0x320 [ 203.125927][T13108] ? xa_load+0xb1/0xe0 [ 203.126013][T13108] tcp_sendmsg_fastopen+0x172/0x520 [ 203.126040][T13108] tcp_sendmsg_locked+0x26a5/0x28b0 [ 203.126063][T13108] ? should_fail_ex+0x30/0x280 [ 203.126173][T13108] ? avc_has_perm_noaudit+0x1b1/0x200 [ 203.126218][T13108] ? __rcu_read_unlock+0x4f/0x70 [ 203.126244][T13108] ? avc_has_perm_noaudit+0x1b1/0x200 [ 203.126318][T13108] ? avc_has_perm+0xd3/0x150 [ 203.126361][T13108] ? _raw_spin_unlock_bh+0x36/0x40 [ 203.126402][T13108] ? __pfx_tcp_sendmsg+0x10/0x10 [ 203.126439][T13108] tcp_sendmsg+0x2f/0x50 [ 203.126467][T13108] inet_sendmsg+0x76/0xd0 [ 203.126503][T13108] __sock_sendmsg+0x102/0x180 [ 203.126538][T13108] ____sys_sendmsg+0x31e/0x4e0 [ 203.126565][T13108] ___sys_sendmsg+0x17b/0x1d0 [ 203.126598][T13108] __x64_sys_sendmsg+0xd4/0x160 [ 203.126621][T13108] x64_sys_call+0x2999/0x2fb0 [ 203.126674][T13108] do_syscall_64+0xd0/0x1a0 [ 203.126731][T13108] ? clear_bhb_loop+0x25/0x80 [ 203.126806][T13108] ? clear_bhb_loop+0x25/0x80 [ 203.126826][T13108] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 203.126858][T13108] RIP: 0033:0x7f928c0de969 [ 203.126876][T13108] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 203.126898][T13108] RSP: 002b:00007f928a747038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 203.126916][T13108] RAX: ffffffffffffffda RBX: 00007f928c305fa0 RCX: 00007f928c0de969 [ 203.126928][T13108] RDX: 0000000030004081 RSI: 0000200000000080 RDI: 0000000000000003 [ 203.126940][T13108] RBP: 00007f928a747090 R08: 0000000000000000 R09: 0000000000000000 [ 203.126959][T13108] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 203.127032][T13108] R13: 0000000000000000 R14: 00007f928c305fa0 R15: 00007ffc16176d38 [ 203.127057][T13108] [ 203.443346][T13115] loop7: detected capacity change from 0 to 512 [ 203.451629][T13115] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 203.461906][T13117] loop4: detected capacity change from 0 to 1024 [ 203.469956][T13117] EXT4-fs: Ignoring removed nobh option [ 203.470661][ T29] kauditd_printk_skb: 111 callbacks suppressed [ 203.470679][ T29] audit: type=1326 audit(1746524778.533:9116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13116 comm="syz.0.3143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8074eae969 code=0x7ffc0000 [ 203.475826][T13117] EXT4-fs: Ignoring removed nobh option [ 203.481766][ T29] audit: type=1326 audit(1746524778.533:9117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13116 comm="syz.0.3143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8074eae969 code=0x7ffc0000 [ 203.510423][T13117] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 203.511226][ T29] audit: type=1326 audit(1746524778.533:9118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13116 comm="syz.0.3143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f8074eae969 code=0x7ffc0000 [ 203.538619][T13122] loop2: detected capacity change from 0 to 512 [ 203.575228][T13117] EXT4-fs error (device loop4): ext4_get_journal_inode:5798: comm syz.4.3142: inode #4294967295: comm syz.4.3142: iget: illegal inode # [ 203.590354][ T29] audit: type=1326 audit(1746524778.633:9119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13116 comm="syz.0.3143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8074eae969 code=0x7ffc0000 [ 203.591933][T13117] EXT4-fs (loop4): no journal found [ 203.613935][ T29] audit: type=1326 audit(1746524778.633:9120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13116 comm="syz.0.3143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8074eae969 code=0x7ffc0000 [ 203.619102][T13117] EXT4-fs (loop4): can't get journal size [ 203.642616][ T29] audit: type=1326 audit(1746524778.633:9121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13113 comm="syz.1.3140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b4d57e969 code=0x7ffc0000 [ 203.666001][T13115] EXT4-fs (loop7): 1 truncate cleaned up [ 203.671863][ T29] audit: type=1326 audit(1746524778.633:9122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13113 comm="syz.1.3140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b4d57e969 code=0x7ffc0000 [ 203.678368][T13115] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 203.700927][ T29] audit: type=1326 audit(1746524778.633:9123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13113 comm="syz.1.3140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f1b4d57e969 code=0x7ffc0000 [ 203.722300][T13115] EXT4-fs error (device loop7): mb_free_blocks:1948: group 0, [ 203.736958][ T29] audit: type=1326 audit(1746524778.643:9124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13125 comm="syz.1.3140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f1b4d5b1225 code=0x7ffc0000 [ 203.737042][ T29] audit: type=1326 audit(1746524778.643:9125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13124 comm="syz.0.3143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f8074ee1225 code=0x7ffc0000 [ 203.744688][T13115] inode 16: block 33:freeing already freed block (bit 32); block bitmap corrupt. [ 203.752424][T13122] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 203.770913][T13115] EXT4-fs (loop7): Remounting filesystem read-only [ 203.812312][T13117] EXT4-fs (loop4): failed to initialize system zone (-22) [ 203.831833][T13117] EXT4-fs (loop4): mount failed [ 203.859539][T13122] EXT4-fs (loop2): 1 truncate cleaned up [ 203.867896][T13122] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 203.897351][T13121] EXT4-fs error (device loop2): mb_free_blocks:1948: group 0, inode 16: block 33:freeing already freed block (bit 32); block bitmap corrupt. [ 203.913468][T13121] EXT4-fs (loop2): Remounting filesystem read-only [ 203.920093][T11919] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 203.939331][T13134] loop0: detected capacity change from 0 to 8192 [ 203.946980][T13134] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 204.296128][ T7221] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 204.306076][T11341] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 204.312593][T13146] smc: net device bond0 applied user defined pnetid SYZ0 [ 204.345421][T13146] smc: net device bond0 erased user defined pnetid SYZ0 [ 204.362946][T13150] netlink: 44 bytes leftover after parsing attributes in process `syz.7.3150'. [ 204.374562][T13154] loop0: detected capacity change from 0 to 164 [ 204.411738][T13152] loop2: detected capacity change from 0 to 164 [ 204.438811][T13152] Unable to read rock-ridge attributes [ 204.473941][T13163] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3156'. [ 204.483185][T13152] tipc: Enabling of bearer rejected, already enabled [ 204.513479][T13165] loop2: detected capacity change from 0 to 1024 [ 204.534250][T13165] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 204.777312][T13175] loop0: detected capacity change from 0 to 164 [ 204.802237][T13175] Unable to read rock-ridge attributes [ 204.810792][T11341] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 204.865858][T13175] tipc: Started in network mode [ 204.871616][T13175] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 204.882466][T13175] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 204.892114][T13175] tipc: Enabled bearer , priority 10 [ 204.922844][T13182] loop0: detected capacity change from 0 to 512 [ 204.935754][T13182] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 204.960505][T13185] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3162'. [ 204.972543][T13182] EXT4-fs (loop0): 1 truncate cleaned up [ 204.979519][T13182] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 204.994935][T13182] EXT4-fs error (device loop0): mb_free_blocks:1948: group 0, inode 16: block 33:freeing already freed block (bit 32); block bitmap corrupt. [ 205.013326][T13182] EXT4-fs (loop0): Remounting filesystem read-only [ 205.091026][ T3877] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 205.222378][T13196] loop2: detected capacity change from 0 to 164 [ 205.552723][T13210] loop4: detected capacity change from 0 to 256 [ 205.732110][T13214] loop4: detected capacity change from 0 to 164 [ 205.739793][T13214] Unable to read rock-ridge attributes [ 205.756290][T13213] tipc: Enabling of bearer rejected, already enabled [ 205.794942][T12695] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 205.812129][T13220] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3174'. [ 205.836554][T13222] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3176'. [ 205.917920][T13228] loop4: detected capacity change from 0 to 164 [ 205.982981][T13234] pim6reg1: entered promiscuous mode [ 205.988359][T13234] pim6reg1: entered allmulticast mode [ 206.010669][ T3467] tipc: Node number set to 1 [ 206.096952][T13243] loop4: detected capacity change from 0 to 164 [ 206.116838][T13243] Unable to read rock-ridge attributes [ 206.139777][T13247] loop7: detected capacity change from 0 to 1024 [ 206.146679][T13247] EXT4-fs: Ignoring removed nobh option [ 206.147390][T13243] tipc: Enabling of bearer rejected, already enabled [ 206.152362][T13247] EXT4-fs: Ignoring removed nobh option [ 206.171508][T13247] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 206.183468][T13247] EXT4-fs error (device loop7): ext4_get_journal_inode:5798: comm syz.7.3187: inode #4294967295: comm syz.7.3187: iget: illegal inode # [ 206.198037][T13247] EXT4-fs (loop7): no journal found [ 206.203488][T13247] EXT4-fs (loop7): can't get journal size [ 206.210464][T13247] EXT4-fs (loop7): failed to initialize system zone (-22) [ 206.218167][T13247] EXT4-fs (loop7): mount failed [ 206.230047][T13250] loop4: detected capacity change from 0 to 1024 [ 206.263537][T13250] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 206.288907][T13260] netlink: 44 bytes leftover after parsing attributes in process `syz.7.3190'. [ 206.411951][T13265] loop7: detected capacity change from 0 to 164 [ 206.475120][T13268] FAULT_INJECTION: forcing a failure. [ 206.475120][T13268] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 206.488270][T13268] CPU: 1 UID: 0 PID: 13268 Comm: syz.7.3193 Not tainted 6.15.0-rc5-syzkaller-00022-g01f95500a162 #0 PREEMPT(voluntary) [ 206.488307][T13268] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 206.488324][T13268] Call Trace: [ 206.488333][T13268] [ 206.488343][T13268] __dump_stack+0x1d/0x30 [ 206.488369][T13268] dump_stack_lvl+0xe8/0x140 [ 206.488440][T13268] dump_stack+0x15/0x1b [ 206.488461][T13268] should_fail_ex+0x265/0x280 [ 206.488563][T13268] should_fail+0xb/0x20 [ 206.488598][T13268] should_fail_usercopy+0x1a/0x20 [ 206.488648][T13268] _copy_to_user+0x20/0xa0 [ 206.488675][T13268] simple_read_from_buffer+0xb5/0x130 [ 206.488707][T13268] proc_fail_nth_read+0x100/0x140 [ 206.488812][T13268] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 206.488836][T13268] vfs_read+0x19d/0x6f0 [ 206.488861][T13268] ? __rcu_read_unlock+0x4f/0x70 [ 206.488957][T13268] ? __fget_files+0x184/0x1c0 [ 206.488996][T13268] ksys_read+0xda/0x1a0 [ 206.489020][T13268] __x64_sys_read+0x40/0x50 [ 206.489093][T13268] x64_sys_call+0x2d77/0x2fb0 [ 206.489113][T13268] do_syscall_64+0xd0/0x1a0 [ 206.489135][T13268] ? clear_bhb_loop+0x25/0x80 [ 206.489169][T13268] ? clear_bhb_loop+0x25/0x80 [ 206.489196][T13268] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 206.489302][T13268] RIP: 0033:0x7f928c0dd37c [ 206.489318][T13268] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 206.489336][T13268] RSP: 002b:00007f928a747030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 206.489354][T13268] RAX: ffffffffffffffda RBX: 00007f928c305fa0 RCX: 00007f928c0dd37c [ 206.489370][T13268] RDX: 000000000000000f RSI: 00007f928a7470a0 RDI: 0000000000000007 [ 206.489385][T13268] RBP: 00007f928a747090 R08: 0000000000000000 R09: 0000000000000000 [ 206.489430][T13268] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 206.489519][T13268] R13: 0000000000000000 R14: 00007f928c305fa0 R15: 00007ffc16176d38 [ 206.489578][T13268] [ 206.754359][T12029] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 206.783015][T13281] loop4: detected capacity change from 0 to 164 [ 206.793613][T13272] loop7: detected capacity change from 0 to 164 [ 206.809163][T13272] Unable to read rock-ridge attributes [ 206.847903][T13272] tipc: Enabling of bearer rejected, failed to enable media [ 206.874148][T13285] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3201'. [ 206.931063][T13300] SELinux: security_context_str_to_sid (E) failed with errno=-22 [ 207.051944][T13314] FAULT_INJECTION: forcing a failure. [ 207.051944][T13314] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 207.052052][T13314] CPU: 0 UID: 0 PID: 13314 Comm: syz.0.3211 Not tainted 6.15.0-rc5-syzkaller-00022-g01f95500a162 #0 PREEMPT(voluntary) [ 207.052078][T13314] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 207.052090][T13314] Call Trace: [ 207.052096][T13314] [ 207.052105][T13314] __dump_stack+0x1d/0x30 [ 207.052154][T13314] dump_stack_lvl+0xe8/0x140 [ 207.052180][T13314] dump_stack+0x15/0x1b [ 207.052200][T13314] should_fail_ex+0x265/0x280 [ 207.052239][T13314] should_fail+0xb/0x20 [ 207.052345][T13314] should_fail_usercopy+0x1a/0x20 [ 207.052369][T13314] _copy_from_iter+0xcf/0xdd0 [ 207.052394][T13314] ? __build_skb_around+0x1a0/0x200 [ 207.052433][T13314] ? __alloc_skb+0x223/0x320 [ 207.052493][T13314] pfkey_sendmsg+0x126/0x900 [ 207.052579][T13314] ? avc_has_perm+0xd3/0x150 [ 207.052660][T13314] ? selinux_socket_sendmsg+0x175/0x1b0 [ 207.052692][T13314] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 207.052754][T13314] __sock_sendmsg+0x142/0x180 [ 207.052786][T13314] ____sys_sendmsg+0x31e/0x4e0 [ 207.052813][T13314] ___sys_sendmsg+0x17b/0x1d0 [ 207.052877][T13314] __x64_sys_sendmsg+0xd4/0x160 [ 207.052977][T13314] x64_sys_call+0x2999/0x2fb0 [ 207.053003][T13314] do_syscall_64+0xd0/0x1a0 [ 207.053030][T13314] ? clear_bhb_loop+0x25/0x80 [ 207.053127][T13314] ? clear_bhb_loop+0x25/0x80 [ 207.053156][T13314] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 207.053179][T13314] RIP: 0033:0x7f8074eae969 [ 207.053194][T13314] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 207.053262][T13314] RSP: 002b:00007f8073517038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 207.053287][T13314] RAX: ffffffffffffffda RBX: 00007f80750d5fa0 RCX: 00007f8074eae969 [ 207.053304][T13314] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000000000000005 [ 207.053321][T13314] RBP: 00007f8073517090 R08: 0000000000000000 R09: 0000000000000000 [ 207.053367][T13314] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 207.053382][T13314] R13: 0000000000000000 R14: 00007f80750d5fa0 R15: 00007fffd1fa8d98 [ 207.053404][T13314] [ 207.071293][T13289] loop4: detected capacity change from 0 to 256 [ 207.172289][T13326] loop0: detected capacity change from 0 to 164 [ 207.373863][T13330] loop0: detected capacity change from 0 to 512 [ 207.381013][T13330] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 207.408017][T13330] EXT4-fs (loop0): 1 truncate cleaned up [ 207.416690][T13330] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 207.426113][T13332] pim6reg1: entered promiscuous mode [ 207.434632][T13332] pim6reg1: entered allmulticast mode [ 207.524556][T13340] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3222'. [ 207.549135][T12695] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 207.585062][T13349] loop0: detected capacity change from 0 to 1024 [ 207.592990][T13349] EXT4-fs: Ignoring removed orlov option [ 207.602286][T13349] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 207.627431][T13349] EXT4-fs error (device loop0): ext4_iget_extra_inode:4693: inode #15: comm +}[@: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 207.650565][T13355] 9pnet_fd: Insufficient options for proto=fd [ 207.658139][T12695] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 207.683013][T13359] loop0: detected capacity change from 0 to 1024 [ 207.704220][T13359] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 207.780396][T13357] loop4: detected capacity change from 0 to 256 [ 207.961576][T13372] pim6reg1: entered promiscuous mode [ 207.967098][T13372] pim6reg1: entered allmulticast mode [ 207.988338][T12695] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 208.063296][T13381] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3238'. [ 208.126511][T13389] loop4: detected capacity change from 0 to 164 [ 208.143119][T13389] Unable to read rock-ridge attributes [ 208.206256][T13389] tipc: Enabling of bearer rejected, already enabled [ 208.232386][T13404] loop1: detected capacity change from 0 to 256 [ 208.330344][T13412] loop4: detected capacity change from 0 to 164 [ 208.347849][T13412] Unable to read rock-ridge attributes [ 208.395084][T13412] tipc: Enabling of bearer rejected, already enabled [ 208.406773][T13419] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3256'. [ 208.440463][T13419] loop2: detected capacity change from 0 to 128 [ 208.447744][T13419] vfat: Unknown parameter 'uqIl8n폎_̆r rejected, already enabled [ 209.549425][T13478] __nla_validate_parse: 8 callbacks suppressed [ 209.549447][T13478] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3275'. [ 209.710904][T13486] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3278'. [ 209.720020][T13486] netlink: 43 bytes leftover after parsing attributes in process `syz.0.3278'. [ 209.729083][T13486] netlink: 'syz.0.3278': attribute type 5 has an invalid length. [ 209.736876][T13486] netlink: 43 bytes leftover after parsing attributes in process `syz.0.3278'. [ 209.767637][T13486] loop0: detected capacity change from 0 to 1024 [ 209.897965][T13486] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 210.225665][T13497] loop1: detected capacity change from 0 to 164 [ 210.474632][T13502] pim6reg1: entered promiscuous mode [ 210.480070][T13502] pim6reg1: entered allmulticast mode [ 210.570090][T13491] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 210.612520][T13491] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 210.625045][T13491] EXT4-fs (loop0): This should not happen!! Data will be lost [ 210.625045][T13491] [ 210.634817][T13491] EXT4-fs (loop0): Total free blocks count 0 [ 210.640849][T13491] EXT4-fs (loop0): Free/Dirty block details [ 210.646833][T13491] EXT4-fs (loop0): free_blocks=68451041280 [ 210.652678][T13491] EXT4-fs (loop0): dirty_blocks=8096 [ 210.657972][T13491] EXT4-fs (loop0): Block reservation details [ 210.664002][T13491] EXT4-fs (loop0): i_reserved_data_blocks=506 [ 210.681756][ T3308] syz_tun (unregistering): left allmulticast mode [ 210.713484][ T2337] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 2048 with error 28 [ 210.802508][T13523] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3287'. [ 210.811491][T13523] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3287'. [ 210.904557][T13532] program syz.7.3285 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 210.992780][T13503] chnl_net:caif_netlink_parms(): no params data found [ 211.045304][T13536] loop0: detected capacity change from 0 to 8192 [ 211.063680][T13536] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 211.084677][ T3877] vlan2: left promiscuous mode [ 211.089546][ T3877] bridge_slave_0: left promiscuous mode [ 211.095426][ T3877] bridge0: port 1(vlan2) entered disabled state [ 211.113621][T13545] loop7: detected capacity change from 0 to 1024 [ 211.143934][T13545] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 211.164373][ T3877] $H (unregistering): (slave dummy0): Releasing backup interface [ 211.179488][ T3877] dummy0: left promiscuous mode [ 211.184908][ T3877] $H (unregistering): Released all slaves [ 211.196273][T13550] vhci_hcd: default hub control req: 800f v0000 i0000 l31125 [ 211.233956][ T3877] tipc: Disabling bearer [ 211.239322][ T3877] tipc: Disabling bearer [ 211.245519][ T3877] tipc: Left network mode [ 211.250299][T13503] bridge0: port 1(bridge_slave_0) entered blocking state [ 211.257706][T13503] bridge0: port 1(bridge_slave_0) entered disabled state [ 211.278720][T13503] bridge_slave_0: entered allmulticast mode [ 211.286995][T13554] loop0: detected capacity change from 0 to 512 [ 211.293978][T13503] bridge_slave_0: entered promiscuous mode [ 211.300468][T13554] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 211.314598][ T3877] hsr_slave_0: left promiscuous mode [ 211.321025][ T3877] hsr_slave_1: left promiscuous mode [ 211.341204][T13554] EXT4-fs (loop0): 1 truncate cleaned up [ 211.347685][T13554] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 211.406099][T12695] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 211.431008][T13503] bridge0: port 2(bridge_slave_1) entered blocking state [ 211.438133][T13503] bridge0: port 2(bridge_slave_1) entered disabled state [ 211.446646][T13503] bridge_slave_1: entered allmulticast mode [ 211.453767][T13503] bridge_slave_1: entered promiscuous mode [ 211.478635][T13503] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 211.495701][ T7221] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 211.496625][T13503] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 211.532161][T13503] team0: Port device team_slave_0 added [ 211.539456][T13503] team0: Port device team_slave_1 added [ 211.567064][T13503] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 211.574246][T13503] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 211.600216][T13503] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 211.612097][T13503] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 211.619190][T13503] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 211.645258][T13503] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 211.677851][T13503] hsr_slave_0: entered promiscuous mode [ 211.684107][T13503] hsr_slave_1: entered promiscuous mode [ 211.689987][T13503] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 211.697609][T13503] Cannot create hsr debugfs directory [ 211.809219][T13581] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3303'. [ 211.834271][T13579] loop4: detected capacity change from 0 to 164 [ 211.848875][T13579] Unable to read rock-ridge attributes [ 211.872755][T13579] tipc: Enabling of bearer rejected, already enabled [ 211.934572][T13588] loop2: detected capacity change from 0 to 164 [ 211.974208][T13596] loop2: detected capacity change from 0 to 512 [ 211.987775][T13596] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 211.995159][T13598] loop0: detected capacity change from 0 to 1024 [ 212.006193][T13598] EXT4-fs: Ignoring removed nobh option [ 212.011906][T13598] EXT4-fs: Ignoring removed nobh option [ 212.017852][T13598] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 212.027977][T13598] EXT4-fs error (device loop0): ext4_get_journal_inode:5798: comm syz.0.3309: inode #4294967295: comm syz.0.3309: iget: illegal inode # [ 212.030395][T13596] EXT4-fs (loop2): 1 truncate cleaned up [ 212.042596][T13598] EXT4-fs (loop0): no journal found [ 212.053085][T13598] EXT4-fs (loop0): can't get journal size [ 212.060369][T13598] EXT4-fs (loop0): failed to initialize system zone (-22) [ 212.068815][T13598] EXT4-fs (loop0): mount failed [ 212.092597][T13503] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 212.102015][T13503] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 212.111306][T13503] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 212.120190][T13503] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 212.182637][T13503] 8021q: adding VLAN 0 to HW filter on device bond0 [ 212.197133][T13503] 8021q: adding VLAN 0 to HW filter on device team0 [ 212.209889][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 212.217079][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 212.224257][T13612] FAULT_INJECTION: forcing a failure. [ 212.224257][T13612] name failslab, interval 1, probability 0, space 0, times 0 [ 212.231012][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 212.236957][T13612] CPU: 1 UID: 0 PID: 13612 Comm: syz.4.3313 Not tainted 6.15.0-rc5-syzkaller-00022-g01f95500a162 #0 PREEMPT(voluntary) [ 212.237033][T13612] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 212.237051][T13612] Call Trace: [ 212.237059][T13612] [ 212.237069][T13612] __dump_stack+0x1d/0x30 [ 212.237097][T13612] dump_stack_lvl+0xe8/0x140 [ 212.237123][T13612] dump_stack+0x15/0x1b [ 212.237153][T13612] should_fail_ex+0x265/0x280 [ 212.237195][T13612] should_failslab+0x8c/0xb0 [ 212.237264][T13612] __kmalloc_node_noprof+0xa9/0x410 [ 212.237291][T13612] ? __vmalloc_node_range_noprof+0x3c5/0xdf0 [ 212.237325][T13612] __vmalloc_node_range_noprof+0x3c5/0xdf0 [ 212.237442][T13612] ? _parse_integer_limit+0x170/0x190 [ 212.237472][T13612] ? xstateregs_set+0xfb/0x1c0 [ 212.237508][T13612] vmalloc_noprof+0x5e/0x70 [ 212.237536][T13612] ? xstateregs_set+0xfb/0x1c0 [ 212.237621][T13612] xstateregs_set+0xfb/0x1c0 [ 212.237655][T13612] ? __pfx_xstateregs_set+0x10/0x10 [ 212.237713][T13612] ptrace_regset+0x229/0x260 [ 212.237746][T13612] ptrace_request+0xe82/0x15b0 [ 212.237773][T13612] ? __rcu_read_unlock+0x4f/0x70 [ 212.237801][T13612] ? get_pid_task+0x96/0xd0 [ 212.237927][T13612] ? _raw_spin_unlock_irqrestore+0x2b/0x60 [ 212.237973][T13612] ? wait_task_inactive+0xe2/0x1f0 [ 212.238090][T13612] arch_ptrace+0x289/0x3f0 [ 212.238211][T13612] __se_sys_ptrace+0xf3/0x2b0 [ 212.238241][T13612] __x64_sys_ptrace+0x55/0x70 [ 212.238270][T13612] x64_sys_call+0x1d6a/0x2fb0 [ 212.238297][T13612] do_syscall_64+0xd0/0x1a0 [ 212.238423][T13612] ? clear_bhb_loop+0x25/0x80 [ 212.238451][T13612] ? clear_bhb_loop+0x25/0x80 [ 212.238480][T13612] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.238507][T13612] RIP: 0033:0x7fb6a7fbe969 [ 212.238561][T13612] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 212.238585][T13612] RSP: 002b:00007fb6a6627038 EFLAGS: 00000246 ORIG_RAX: 0000000000000065 [ 212.238609][T13612] RAX: ffffffffffffffda RBX: 00007fb6a81e5fa0 RCX: 00007fb6a7fbe969 [ 212.238625][T13612] RDX: 0000000000000202 RSI: 0000000000000101 RDI: 0000000000004205 [ 212.238641][T13612] RBP: 00007fb6a6627090 R08: 0000000000000000 R09: 0000000000000000 [ 212.238714][T13612] R10: 0000200000000240 R11: 0000000000000246 R12: 0000000000000001 [ 212.238730][T13612] R13: 0000000000000000 R14: 00007fb6a81e5fa0 R15: 00007ffc60139a28 [ 212.238754][T13612] [ 212.238764][T13612] syz.4.3313: vmalloc error: size 4096, failed to allocated page array size 8, mode:0xcc2(GFP_KERNEL|__GFP_HIGHMEM), nodemask=(null) [ 212.243936][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 212.256513][T13612] ,cpuset=/ [ 212.345683][T13503] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 212.346239][T13612] ,mems_allowed=0 [ 212.459375][T13503] veth0_vlan: entered promiscuous mode [ 212.466627][T13612] [ 212.466641][T13612] CPU: 1 UID: 0 PID: 13612 Comm: syz.4.3313 Not tainted 6.15.0-rc5-syzkaller-00022-g01f95500a162 #0 PREEMPT(voluntary) [ 212.466760][T13612] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 212.466826][T13612] Call Trace: [ 212.466834][T13612] [ 212.466844][T13612] __dump_stack+0x1d/0x30 [ 212.466871][T13612] dump_stack_lvl+0xe8/0x140 [ 212.466896][T13612] dump_stack+0x15/0x1b [ 212.466919][T13612] warn_alloc+0x12b/0x1a0 [ 212.466956][T13612] ? should_failslab+0x8c/0xb0 [ 212.467086][T13612] __vmalloc_node_range_noprof+0x455/0xdf0 [ 212.467130][T13612] ? _parse_integer_limit+0x170/0x190 [ 212.467169][T13612] ? xstateregs_set+0xfb/0x1c0 [ 212.467204][T13612] vmalloc_noprof+0x5e/0x70 [ 212.467239][T13612] ? xstateregs_set+0xfb/0x1c0 [ 212.467333][T13612] xstateregs_set+0xfb/0x1c0 [ 212.467367][T13612] ? __pfx_xstateregs_set+0x10/0x10 [ 212.467403][T13612] ptrace_regset+0x229/0x260 [ 212.467435][T13612] ptrace_request+0xe82/0x15b0 [ 212.467528][T13612] ? __rcu_read_unlock+0x4f/0x70 [ 212.467627][T13612] ? get_pid_task+0x96/0xd0 [ 212.467657][T13612] ? _raw_spin_unlock_irqrestore+0x2b/0x60 [ 212.467695][T13612] ? wait_task_inactive+0xe2/0x1f0 [ 212.467751][T13612] arch_ptrace+0x289/0x3f0 [ 212.467792][T13612] __se_sys_ptrace+0xf3/0x2b0 [ 212.467823][T13612] __x64_sys_ptrace+0x55/0x70 [ 212.467851][T13612] x64_sys_call+0x1d6a/0x2fb0 [ 212.467972][T13612] do_syscall_64+0xd0/0x1a0 [ 212.467999][T13612] ? clear_bhb_loop+0x25/0x80 [ 212.468028][T13612] ? clear_bhb_loop+0x25/0x80 [ 212.468126][T13612] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.468199][T13612] RIP: 0033:0x7fb6a7fbe969 [ 212.468218][T13612] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 212.468242][T13612] RSP: 002b:00007fb6a6627038 EFLAGS: 00000246 ORIG_RAX: 0000000000000065 [ 212.468315][T13612] RAX: ffffffffffffffda RBX: 00007fb6a81e5fa0 RCX: 00007fb6a7fbe969 [ 212.468403][T13612] RDX: 0000000000000202 RSI: 0000000000000101 RDI: 0000000000004205 [ 212.468419][T13612] RBP: 00007fb6a6627090 R08: 0000000000000000 R09: 0000000000000000 [ 212.468436][T13612] R10: 0000200000000240 R11: 0000000000000246 R12: 0000000000000001 [ 212.468452][T13612] R13: 0000000000000000 R14: 00007fb6a81e5fa0 R15: 00007ffc60139a28 [ 212.468476][T13612] [ 212.468485][T13612] Mem-Info: [ 212.483066][T13625] netlink: 44 bytes leftover after parsing attributes in process `syz.7.3314'. [ 212.486052][T13612] active_anon:21695 inactive_anon:1 isolated_anon:0 [ 212.486052][T13612] active_file:15303 inactive_file:2493 isolated_file:0 [ 212.486052][T13612] unevictable:1 dirty:549 writeback:0 [ 212.486052][T13612] slab_reclaimable:3384 slab_unreclaimable:14989 [ 212.486052][T13612] mapped:28814 shmem:17268 pagetables:1259 [ 212.486052][T13612] sec_pagetables:0 bounce:0 [ 212.486052][T13612] kernel_misc_reclaimable:0 [ 212.486052][T13612] free:1861314 free_pcp:5590 free_cma:0 [ 212.504395][T13503] veth1_vlan: entered promiscuous mode [ 212.506779][T13612] Node 0 active_anon:86780kB inactive_anon:4kB active_file:61212kB inactive_file:9972kB unevictable:4kB isolated(anon):0kB isolated(file):0kB mapped:115256kB dirty:2196kB writeback:0kB shmem:69072kB writeback_tmp:0kB kernel_stack:3280kB pagetables:5036kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 212.524920][T13503] veth0_macvtap: entered promiscuous mode [ 212.525965][T13612] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 212.883634][T13612] lowmem_reserve[]: 0 2884 7863 7863 [ 212.889010][T13612] Node 0 DMA32 free:2950036kB boost:0kB min:4132kB low:7064kB high:9996kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2953568kB mlocked:0kB bounce:0kB free_pcp:3532kB local_pcp:0kB free_cma:0kB [ 212.917399][T13612] lowmem_reserve[]: 0 0 4978 4978 [ 212.922532][T13612] Node 0 Normal free:4488140kB boost:0kB min:7184kB low:12280kB high:17376kB reserved_highatomic:0KB active_anon:86792kB inactive_anon:4kB active_file:61424kB inactive_file:9976kB unevictable:0kB writepending:2488kB present:5242880kB managed:5098244kB mlocked:0kB bounce:0kB free_pcp:12888kB local_pcp:12416kB free_cma:0kB [ 212.952795][T13612] lowmem_reserve[]: 0 0 0 0 [ 212.957411][T13612] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 212.970319][T13612] Node 0 DMA32: 5*4kB (M) 2*8kB (M) 3*16kB (M) 4*32kB (M) 3*64kB (M) 2*128kB (M) 3*256kB (M) 3*512kB (M) 4*1024kB (M) 3*2048kB (M) 717*4096kB (M) = 2950036kB [ 212.986514][T13612] Node 0 Normal: 395*4kB (UME) 199*8kB (UME) 160*16kB (UME) 178*32kB (UME) 71*64kB (UME) 33*128kB (UME) 91*256kB (UM) 130*512kB (UME) 159*1024kB (UME) 74*2048kB (UM) 998*4096kB (UM) = 4512228kB [ 213.005814][T13612] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 213.015176][T13612] 35127 total pagecache pages [ 213.019917][T13612] 4 pages in swap cache [ 213.024138][T13612] Free swap = 124980kB [ 213.028313][T13612] Total swap = 124996kB [ 213.032507][T13612] 2097051 pages RAM [ 213.036360][T13612] 0 pages HighMem/MovableOnly [ 213.041147][T13612] 80258 pages reserved [ 213.066552][T13503] veth1_macvtap: entered promiscuous mode [ 213.077422][T13627] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3315'. [ 213.101240][T13629] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3316'. [ 213.119483][T13631] loop4: detected capacity change from 0 to 256 [ 213.130062][T13633] loop7: detected capacity change from 0 to 164 [ 213.193208][T13503] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 213.203859][T13503] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.213737][T13503] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 213.224203][T13503] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.234080][T13503] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 213.244546][T13503] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.254434][T13503] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 213.264996][T13503] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.275677][T13503] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 213.287157][T13503] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 213.297780][T13503] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.307820][T13503] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 213.318354][T13503] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.328338][T13503] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 213.338941][T13503] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.348867][T13503] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 213.359540][T13503] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.372764][T13503] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 213.381268][T13503] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.390095][T13503] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.398860][T13503] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.407641][T13503] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.500760][T13658] loop0: detected capacity change from 0 to 512 [ 213.508889][T13658] EXT4-fs error (device loop0): ext4_orphan_get:1391: inode #15: comm syz.0.3327: iget: bad extended attribute block 1 [ 213.522884][T13658] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.3327: couldn't read orphan inode 15 (err -117) [ 213.580474][T13660] loop1: detected capacity change from 0 to 256 [ 213.641071][T13664] loop0: detected capacity change from 0 to 256 [ 213.741450][T13668] ================================================================== [ 213.749585][T13668] BUG: KCSAN: data-race in igmp_rcv / igmp_rcv [ 213.755870][T13668] [ 213.758200][T13668] write to 0xffff8881187eea50 of 8 bytes by task 13667 on cpu 0: [ 213.765921][T13668] igmp_rcv+0x1279/0x14f0 [ 213.770325][T13668] ip_protocol_deliver_rcu+0x420/0x780 [ 213.775800][T13668] ip_local_deliver_finish+0x184/0x220 [ 213.781271][T13668] ip_local_deliver+0xe8/0x1c0 [ 213.786093][T13668] ip_rcv_finish+0x188/0x1a0 [ 213.790704][T13668] ip_rcv+0x62/0x140 [ 213.794621][T13668] __netif_receive_skb+0xff/0x270 [ 213.799687][T13668] netif_receive_skb+0x4b/0x2e0 [ 213.804562][T13668] tun_rx_batched+0xfc/0x430 [ 213.809164][T13668] tun_get_user+0x1e07/0x24d0 [ 213.813847][T13668] tun_chr_write_iter+0x15e/0x210 [ 213.818895][T13668] vfs_write+0x49d/0x8d0 [ 213.823170][T13668] ksys_write+0xda/0x1a0 [ 213.827419][T13668] __x64_sys_write+0x40/0x50 [ 213.832013][T13668] x64_sys_call+0x2cdd/0x2fb0 [ 213.836695][T13668] do_syscall_64+0xd0/0x1a0 [ 213.841206][T13668] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 213.847118][T13668] [ 213.849451][T13668] write to 0xffff8881187eea50 of 8 bytes by task 13668 on cpu 1: [ 213.857178][T13668] igmp_rcv+0x1279/0x14f0 [ 213.861533][T13668] ip_protocol_deliver_rcu+0x420/0x780 [ 213.867030][T13668] ip_local_deliver_finish+0x184/0x220 [ 213.872517][T13668] ip_local_deliver+0xe8/0x1c0 [ 213.877292][T13668] ip_rcv_finish+0x188/0x1a0 [ 213.881932][T13668] ip_rcv+0x62/0x140 [ 213.885850][T13668] __netif_receive_skb+0xff/0x270 [ 213.890913][T13668] netif_receive_skb+0x4b/0x2e0 [ 213.895786][T13668] tun_rx_batched+0xfc/0x430 [ 213.900385][T13668] tun_get_user+0x1e07/0x24d0 [ 213.905068][T13668] tun_chr_write_iter+0x15e/0x210 [ 213.910099][T13668] vfs_write+0x49d/0x8d0 [ 213.914357][T13668] ksys_write+0xda/0x1a0 [ 213.918707][T13668] __x64_sys_write+0x40/0x50 [ 213.923344][T13668] x64_sys_call+0x2cdd/0x2fb0 [ 213.928059][T13668] do_syscall_64+0xd0/0x1a0 [ 213.932568][T13668] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 213.938469][T13668] [ 213.940803][T13668] value changed: 0x0000000000000000 -> 0x0000000000000001 [ 213.947924][T13668] [ 213.950324][T13668] Reported by Kernel Concurrency Sanitizer on: [ 213.956489][T13668] CPU: 1 UID: 0 PID: 13668 Comm: syz.0.3330 Not tainted 6.15.0-rc5-syzkaller-00022-g01f95500a162 #0 PREEMPT(voluntary) [ 213.968999][T13668] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 213.979071][T13668] ==================================================================