last executing test programs: 27.832193408s ago: executing program 1 (id=835): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1e000000000000000100000007"], 0x50) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r1, 0x400, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='leases_conflict\x00', r2}, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) lsm_set_self_attr(0x65, 0x0, 0x21, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r5, 0xffffffffffffffff}, 0x4) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000a40)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x18) symlink(0x0, &(0x7f00000017c0)='./file0\x00') 27.740106649s ago: executing program 1 (id=837): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0xbbc8fd257cee80) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, 0x0, 0x0) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000240)=@reiserfs_2={0x8, 0x40000, {0xb}}, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0xc0026000, 0x0, 0x0, 0x0, 0x0, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) 26.344583398s ago: executing program 1 (id=860): r0 = perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x40006, 0x4770, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_config_ext={0x3, 0xffffffffffffffff}, 0xc58, 0x80af, 0x2, 0x6, 0x7, 0xffffffff, 0x1, 0x0, 0x0, 0x0, 0xb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000005, 0x13, r0, 0x0) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000980)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) (async) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r3, &(0x7f0000000180)=ANY=[@ANYBLOB="7f454c4600040000ff7f00000000000003003e"], 0xe6) (async) close(r3) (async) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) unshare(0x64000600) 26.020818902s ago: executing program 1 (id=868): bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000080)={[{@noblock_validity}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x6}}, {@sysvgroups}, {@bh}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x141842, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000500)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x4, 0x8001, 0x0, 0x0, 0x19, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5c9d000ff8ee09e737ff0edf110ff4117639c2eb4b78c66ee677df701905b9aafab4afaaf755a3f6a004", "cba3d625780820d1cbf7db71038259ca171ce1a311ef97e4298d1e14ef01060000e9009600fdff00000000000000000000000000000000000400", "d300e6d6ae9ef30bea2a004000", [0x0, 0x2]}) creat(&(0x7f0000000080)='./file0\x00', 0x7) 25.529415879s ago: executing program 1 (id=876): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000340)={0x0, 0xdfff, 0xfffd, 0xffff, 0x0, "faffffffffffffff"}) ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x5412, &(0x7f00000006c0)=0x5f) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x5, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}, 0x1100, 0x8001, 0x400, 0x5, 0x0, 0xfffffffb, 0xfffb, 0x0, 0x8001, 0x0, 0x5}, 0x0, 0x1, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f0000000180)='./file2\x00', 0x420c, &(0x7f0000003240)=ANY=[], 0x6, 0x360, &(0x7f0000000b00)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x105042, 0x147) mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x100000b, 0x13, r2, 0x0) r3 = accept$phonet_pipe(r2, &(0x7f00000000c0), &(0x7f0000000100)=0x10) setsockopt$SO_TIMESTAMP(r3, 0x1, 0x1d, &(0x7f00000001c0)=0x6, 0x4) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000280)={'syztnl0\x00', &(0x7f0000000200)={'syztnl2\x00', 0x0, 0x29, 0x3, 0xc9, 0x1, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @loopback, 0x7800, 0x8, 0xf, 0x2e}}) sendmmsg$inet(r0, &(0x7f0000004540)=[{{&(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0x10, 0x0}, 0xee0000b0}, {{0x0, 0x0, &(0x7f00000012c0)=[{0x0}], 0x1}}], 0x2, 0x0) 25.044931645s ago: executing program 1 (id=885): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x3014850, &(0x7f00000006c0)={[{@noquota}, {@barrier_val={'barrier', 0x3d, 0x1000}}, {@grpid}, {@noauto_da_alloc}, {@dioread_lock}]}, 0x3, 0x4c5, &(0x7f0000001cc0)="$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") (async) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) write$cgroup_int(r0, 0x0, 0x0) (async) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) readv(r1, &(0x7f0000000100)=[{0x0}, {&(0x7f0000004c00)=""/4096, 0x1000}], 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0xc, &(0x7f0000000000)=ANY=[@ANYRESOCT=r0], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x51, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffc01, @void, @value}, 0x94) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001c80)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x62, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) (async) lsetxattr$security_selinux(&(0x7f00000001c0)='.\x00', &(0x7f0000000240), &(0x7f0000000280)='system_u:object_r:fsadm_exec_t:s0\x00', 0x1001, 0x0) 25.011398846s ago: executing program 32 (id=885): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x3014850, &(0x7f00000006c0)={[{@noquota}, {@barrier_val={'barrier', 0x3d, 0x1000}}, {@grpid}, {@noauto_da_alloc}, {@dioread_lock}]}, 0x3, 0x4c5, &(0x7f0000001cc0)="$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") (async) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) write$cgroup_int(r0, 0x0, 0x0) (async) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) readv(r1, &(0x7f0000000100)=[{0x0}, {&(0x7f0000004c00)=""/4096, 0x1000}], 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0xc, &(0x7f0000000000)=ANY=[@ANYRESOCT=r0], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x51, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffc01, @void, @value}, 0x94) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001c80)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x62, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) (async) lsetxattr$security_selinux(&(0x7f00000001c0)='.\x00', &(0x7f0000000240), &(0x7f0000000280)='system_u:object_r:fsadm_exec_t:s0\x00', 0x1001, 0x0) 4.287492843s ago: executing program 2 (id=1181): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004000000"], 0x48) r2 = dup(r1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='kfree\x00', r3}, 0x18) r4 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, r4, 0xfffffffffffffffe, r4, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d00000085"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) lseek(r2, 0x2, 0x0) syz_io_uring_setup(0x10e, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x222}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_SHUTDOWN={0x22, 0x13}) pause() bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r8, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x80, 0x7}) fcntl$lock(r8, 0x24, &(0x7f00000000c0)={0x2, 0x0, 0x402, 0x200000000000}) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x42, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r9}, 0x10) r10 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r3, 0x113, 0x2, &(0x7f00000003c0), &(0x7f00000004c0)=0x4) r11 = dup(r10) syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0x4008032, 0xffffffffffffffff, 0x0) ioctl$PTP_EXTTS_REQUEST2(r11, 0x43403d05, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000500), 0x1, 0x0) 3.74953092s ago: executing program 3 (id=1189): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x5, 0x0, 0xffffffffffffffff, 0x4000000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, &(0x7f0000000800), &(0x7f0000000840)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r2}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000010900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000025940000000c0a01030000000000000000070000080900020073797a31000000000900010073797a30000000006800038064000080080003400000000258000b802c0001800a0001006c696d69740000001c0002800c00014000000000000000030c0002400000000000000010140001800c0001"], 0x118}}, 0x0) r4 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = dup(r6) fsetxattr$security_selinux(r7, &(0x7f0000000000), &(0x7f0000000040)='system_u:object_r:mouse_device_t:s0\x00', 0x20, 0x0) 3.578431192s ago: executing program 3 (id=1198): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000900000000000000213f0000c50000000e800000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='mmap_lock_acquire_returned\x00', r2}, 0x10) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r3}, 0x8) write$cgroup_int(r4, &(0x7f00000001c0), 0xfffffdef) bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000600)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2673004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r6 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x8000000003, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x3, 0x800000000003}, 0x115d2, 0xff, 0x10000005, 0x3, 0x3, 0x8, 0xfffe, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r7 = syz_open_dev$usbfs(&(0x7f0000000340), 0x206, 0x8401) ioctl$USBDEVFS_ALLOW_SUSPEND(r7, 0x5522) ioctl$USBDEVFS_BULK(r7, 0x5523, 0x0) ioctl$USBDEVFS_FORBID_SUSPEND(r7, 0x5521) mmap(&(0x7f0000ff2000/0xe000)=nil, 0xe000, 0x8, 0x50, r6, 0xde7d1000) open_tree(0xffffffffffffff9c, 0x0, 0x89901) perf_event_open(&(0x7f00000004c0)={0x8, 0x80, 0x0, 0xf, 0x0, 0x0, 0x82, 0x200000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000080), 0x9}, 0x18204, 0x0, 0x3, 0x0, 0x0, 0x5338c7af, 0x0, 0x0, 0x1, 0x0, 0x2}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 3.401258575s ago: executing program 2 (id=1202): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kfree\x00'}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000700)={0x0, &(0x7f0000000640)}) socket(0x1d, 0x2, 0x6) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000340)={0x0, 0xffffffffffffffff, 0xc6, 0x8, @scatter={0x2, 0x0, &(0x7f0000000240)=[{&(0x7f0000000100)=""/40, 0x28}, {&(0x7f0000000140)=""/36, 0x24}]}, &(0x7f0000000480)="8f34b89a29b0c8812ed0ee2c21eb0230f414e591174dc7e654244e20b21dead2e8ae7629f85ffc9bdc068cf93acceb0259c6a1b06b54783c4c70e1c52fa3518168b991e475d4d101bafe6a84ca71f56955b593583747c089e67e71668e515cb843d516c7f771e569595d550f25f2e7097ffd38ed059013b310530cd24a27ca2db77f96b7d2dc7b05d0219a84cbc03814e35a34df1783baa1a8c9b5e69071be86627ea9b3c668b4c51d831f21f54a4afaef1b11772fab414e4f62d2e7122270d7736893efd07f", &(0x7f0000000740)=""/4096, 0x5, 0x11, 0x1, &(0x7f0000000300)}) r0 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x3, 0x3, 0x3}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) close(r0) 3.339286965s ago: executing program 2 (id=1204): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) unshare(0x20000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d00000085"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r2, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000040)=ANY=[], 0x0, 0x2c8, &(0x7f0000000700)="$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") sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd29, 0x5, {0x0, 0x0, 0x0, r4, {0x6, 0xf}, {}, {0x7}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x5, 0xc}]}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x0) 2.94473752s ago: executing program 2 (id=1210): r0 = syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x40, &(0x7f0000000000), 0xa, 0xbdf, &(0x7f0000000c00)="$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") ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0x8004587d, &(0x7f0000000080)={@desc={0x1, 0x0, @desc2}}) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) setgroups(0x4, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0]) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000004a80)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000002780)="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", 0x1000}, {&(0x7f00000004c0)="6df603562003033e531eff59dd018a8c8fad1a2c962f0d7af1f7817abdcf04cbd1429e8feacbccd87def01a4524d965cf75036ba725ff1a35feb444dda0e22aacd9e25419ea17b783e74250812b339f9371642423b3fc572b8d81a5c0ed64230cd9bcbdb9c6299a29c147a570597d18955645d553dbeda2ac3bdd8ccf0c3ac02f94f597e38bba6c140279a6c0c5ee986a3a0a0f2883a77c9d0b0a252bf49098a195504b67a21966042cb644985eeffa9ad355445cb48810f30a217f81a53416919c76d839ec2707c10afb14592d9ee981484b027666a15c7214d3dc937265e034bb07a06303f46f5", 0xe8}], 0x2, &(0x7f0000000ac0)=ANY=[@ANYBLOB="753f5c6b007f000000f30000c88a00000219252d1cc68c80b25475454723380ea483590df23ec5697a6e7ebffb2358801186f392d7e6dc72eca2085d46369745b06611a0bfc309fab72558dec698e99331e6640ffe903b1de8c206a61b74be8e70860b0ce8e0d4853537742c0483fea0364aa955b50812637e7e04bda49e6cc7", @ANYRESDEC=r3, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r5, @ANYBLOB='\x00\x00\x00\x00'], 0x38, 0x44001}}, {{&(0x7f00000006c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000840)=[{&(0x7f0000000740)="415b92ef050798de652939cb08a8630eb441bdfb3d165e8cbba37a1c7d9ce8a4226cc6ae23e7a44820e0eede7301d33521d3a965fdf82da665936f74e2d9cd31c77867f5bb187148c232690e5025f51d41d90fd6ceed987179824df6a3ef12e0978d6b4d5aa6797fff514fce9a93b1108b400621300d107092a23c26000fa5e863551c8705f200c03af70c610be5c1406d11d51f5ebfa90923b4b9df47a466937affd994727330181bc27672a7dac1d79c773ead1c7613dd05a52ca11c716f51eb9434c6533698a2dd568f27e0f9ba10d307e4e4fac3782654be8fc8b5b8bb4727e9089f9ad1131845ccc45b1e", 0xed}], 0x1, &(0x7f0000000900)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [r5]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x58, 0x4040044}}, {{&(0x7f0000001800)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000001a80)=[{&(0x7f0000000980)="fcffb276ba1348022aefc1f7e5b534903dc015d5ffa7423b4a037248c4400a3330050090f09198c5531063b538", 0x2d}, {&(0x7f0000001880)="f0d7706179db19cfd2680501cebcbb9fe17515d8cd4cef855e64fcb084f30d2d5d64db438f70b26e96099208ba755577fd38591e2d8d65ffb86284fe64a53a65c441bd4ddc45ddfe01a1925cb2b82f381addfbf059dddbaf9667fc9a03788c39585328638f8a48", 0x67}, {&(0x7f0000000b80)}, {&(0x7f0000001900)="0a47b75a9c85afed9bc74b5dce4665e5f56e79297a3a339f2a44bd71f6e5d00f979b45670edb3e82dadba9213985de1889a9300d895b67ae4c7239d5a3663b1a9d9c6e5cb1", 0x45}, {&(0x7f0000001980)="df9fd7b2c0da139a5c905074d19495d0e2e47996237cb793b8015a8a811313dbd83dfe0ea295a4dbc9a40b9d96173ede3eb6666de86ff2e8d9af7cbe6f25273a98410fcdde88a6fd90ceaeffb9bafd7aad1516bddeb1d434d0e1af49a914eace82e2fe3235dd76d5deee6e9bd087ec08a2b9677623a941abdef783bc7cb4fdbe89d947d00530f490e4231167070f748ce0d1fb25cee8783999d99ae846941d49a89977b3ae43e63918830e93cf1696a27486058b9a0d3ea6efca8b55de4fe843c1f3a8da73fe3af9ad599597fd940b7473dae2bef9ba05", 0xd7}], 0x5, &(0x7f0000001c00)=[@rights={{0x20, 0x1, 0x1, [r0, r1, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [r2, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r3}}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xb0, 0x4000}}, {{0x0, 0x0, &(0x7f0000001d00)=[{&(0x7f0000001d40)="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", 0x144}], 0x1, &(0x7f0000004800)=ANY=[@ANYBLOB="1c000000000000000100000001000000", @ANYRES32=r1, @ANYRES32, @ANYRES32, @ANYBLOB="0000000024000000000000000100000806000000", @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r2, @ANYRES32=r5, @ANYRES32, @ANYBLOB="00000000280000009f1e84b640cec67cc2b52a00"/32, @ANYRES32=r1, @ANYRES32, @ANYRES32=r1, @ANYRES32=r4, @ANYRES32, @ANYRES32, @ANYBLOB="1000000000000000010000000100000028000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r1, @ANYRES32=r1, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRESHEX=r3, @ANYBLOB='\x00\x00'], 0xc8, 0x8000}}, {{&(0x7f0000001f80)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000002000)=[{&(0x7f0000003780)="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", 0xffe}], 0x1, 0x0, 0x0, 0xc000}}, {{0x0, 0x0, &(0x7f0000002300)=[{&(0x7f0000002040)="a1966dd5b516cce0f62fb787a22f2725269dfc7397e8dd137c4e8c712311e2f0b508", 0x22}, {&(0x7f0000002080)="86790ff08dc89b0c0b819519be2c2fa18d4b7928654635c6e2b5ddc99be1a9722f860e30226819e5d3134277edfcbec1c30e66ba6b334dcb138d52a7b2b7400e333f456b568158b45844b1ee7815d2eb63aa48ccb36781b103218ef6b33479dfc51f04aea5bdeaefffe998dfd3bac1aca6772a070af3b46a78c420a51a56fcd50bf309fa0b", 0x85}, {&(0x7f0000002140)="d7fb7a00d5d5b1521608a35de593fa8c8b1637de18441a9e6775cd3a5e3748a1c374453a6fab3bbe5ca7b7687ea093824d2cc28b44fd7e7d6cb9fb33766a78de5e90634adacee6918cd7c587529f5be08115ddc88977aed2ad20012ae84414bb0aa94ed68983beaedc354ce92c93c35bc1c34314eb9814c77508d59e607e3bfa6b48d234efffac19be6f35658b388d9984b0be7d44253c4c639595a79b15166e264ef0b7ac90cd70", 0xa8}, {&(0x7f0000002200)="8abda6e78029825dd34b62f30318fb1bc1e2fc2bee4d6813a89ae46249be0935a2", 0x21}, {&(0x7f0000002240)="5df15b7f9fd9b65c1892ecce403fb100e3f4924a16b9345095e3149c9035f8b6ba92a68e4487af48839ca04280bec5633900e5b92036d32ef1253bd764688637488ce85d4be77f0d1addfb1a845dd9a0ffc785dfbc4a92cf3cb017c400ec900e2a40601eaf50cbf41da585b83b1465885cbc3f2a1928bc6671790dcb194534c0a1f16ff7822ad32aa19a6712d88ea3331c35afdfd7d8933a", 0x98}], 0x5}}, {{&(0x7f0000002380)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000026c0)=[{&(0x7f0000002400)="cf15420137d795c108efb2e82e80817292155cffa723c5319708c6ce48a46beb671bd42b5067b52973fa7ea9780ef56109b05760e8ba9b49ef87248246e43cfdf35041444917a84ea9fad0befadbe12b77694d54203dd13e1e1bd0466ae8c3cefac36bfb3ea3de86743dcb0958ea630c1434877478e398d15be5f763a77f1cf244bef94fde", 0x85}, {&(0x7f00000024c0)="1e7b4045700b91025badb30b9076c7528c6cd776e261316ba72ee5c13a908c3dd6d560b96a70c425c7ceecdf8ba321567b93f0c371945cb4c669bdd6800e13d83ff26912779a95d08dc32fc8d00020dde54570259272658208d69f38dc979d6b70cd58dc2640aa3dc4f76b8830bf336c8df71cf231a1a08874677d16f1d52e68e86e97e7960c4eb0ee4db6d6848404574d4ded30669b3a7da60980d4de06b3287b71d7ac60d47b3072b9bb2f0bd27c93f2fd712d7b262ff68cf2f46c1cf363ea1f790ae230221988e61fe305a00adaeb629493e4", 0xd4}, {&(0x7f00000025c0)="b7cad8e7894e8c86a3720d1a7d602858f83385fcf895c2549c04b9630755bc7ff8b4b0499de39e3189880876c5d3c47c3d7c0264e0cf070c2ba869de34498907acc33eaadffadededafb265139c0a16a660d085f7d1e2cec0cddb08cbdd1fd5c93660680ecc27f366b6c34c8415955a9f845fb62749112b4a21dc7a1b295133bd8504b899202d0e6dafd1b189e17b7ae3de6715cd7806980fab6574c65f7033cc5c222d10b88f8441229d789eb2fe1b9648861f78b4032354c1739398b043c9106ec02b23e3241c42e71760a54a2dfa90596eb3d4075cf75ababa645014efb3c8e08005d", 0xe4}], 0x3, 0x0, 0x0, 0x40}}, {{&(0x7f0000004780)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000004900), 0x0, &(0x7f0000004a00)=[@cred={{0x1c, 0x1, 0x2, {r3}}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x60, 0x10}}], 0x8, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000060000007c6e00000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x26, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000280)='/sys/power/pm_freeze_timeout', 0x149882, 0x0) write$cgroup_int(r8, &(0x7f0000000040)=0x1f00, 0x12) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) unshare(0x62040200) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) io_setup(0x7fff, &(0x7f0000000600)) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x100000) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3800000012002927000000000000008b050021"], 0x38}}, 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 2.556646186s ago: executing program 3 (id=1218): r0 = add_key$keyring(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffa) add_key$keyring(&(0x7f0000000000), &(0x7f0000000280)={'syz', 0x2}, 0x0, 0x0, r0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000140)={0x28, 0x0, 0x0, @host}, 0x10) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) syz_read_part_table(0x5c3, &(0x7f00000005c0)="$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") capset(0x0, 0x0) setrlimit(0x40000000000008, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r7, &(0x7f0000000780)=[{{&(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aaffffffff0000000010000000000000000000000007"], 0x30}}], 0x1, 0x4008804) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x7, 0x2) pread64(r4, &(0x7f0000000080)=""/196, 0xc4, 0x3) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000540)={{r1}, &(0x7f00000004c0), &(0x7f0000000500)='%-5lx \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000600)='sys_enter\x00', r8}, 0x10) ppoll(&(0x7f0000000040), 0x0, 0x0, 0x0, 0x0) 2.410797968s ago: executing program 0 (id=1222): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYRES64], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r0}, &(0x7f0000000380), &(0x7f00000003c0)=r1}, 0x20) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'sit0\x00', 0x0}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000400000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sys_enter\x00', r4}, 0x10) rt_tgsigqueueinfo(0x0, 0x0, 0x6, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x10, 0x1}}]}}, @TCA_RATE={0x6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x48801}, 0x0) 2.379255158s ago: executing program 0 (id=1223): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1, 0x0, 0x100}, 0x18) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000240)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r3 = socket$inet6(0xa, 0x3, 0xff) setsockopt$inet6_int(r3, 0x29, 0x16, &(0x7f0000fcb000), 0x4) close_range(r2, 0xffffffffffffffff, 0x0) 2.330636769s ago: executing program 0 (id=1225): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x300f000, 0x0, 0x0, 0x0, 0x0, 0x48b8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) lseek(0xffffffffffffffff, 0xae7d, 0x0) r4 = getpid() prlimit64(0x0, 0xc, &(0x7f0000000140)={0xb, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = syz_pidfd_open(r4, 0x0) setns(r8, 0x24020000) syz_clone(0xf5982500, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r9}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x3, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="bfef4b5d66724e6f7d90f449ff3d41f7baa8f565ff50eefa43036ec545e1dd7c5a4b6c7801dfded9e6d10d0c17b3fcbf6e50269bd569bb0f3ff4a2b661f481e8831acdc03ce79564cae53117fdfc26f8f331e97ae623195f8fdfc029fb120557535cbc7b82be82d7f2bbb1140315f2aec3a7f6ed3a81962e45713be4f28daf4935678b50328515769e05d10acd17bb4a8209f01e44ef2adb04907522bb92f7f4731baa5f536d9f647d3c350d724c2846546a6c950000", @ANYRESHEX=r9, @ANYRESOCT=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r10, 0x0, 0x100}, 0x18) setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x39, &(0x7f0000000440)=ANY=[@ANYBLOB="290002b60000000026fc206dcfb346fdd563518d506ffe8cb3eb70f53e85e6c8f305537f7ba295f643e7fbfbc97d5e8398db9f3fd08fa27a1700bc20d54f4bc64b79fdb7e46e14320272162166619b000000000000f7cc42d3e9ff4d6104067491faaaa59fefe0c2d5e666c221b7d216cd48cfd9f694ed98dda5332eaf65f323d315ec13cd2621661b8f6c52725b294acc93af06e7dbd1efb55cb8ff9c6372ecf1b41f6828c34dbadbee8392240ed4dffd04e7613230b4e7565e50f43b179b0777b20780640cfe31045f19db978f8430f9b19881e4a1b7160111626b830a2c0bb1db8eb92ece13757b089d0e22"], 0x8) socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'geneve1\x00'}) 1.891260675s ago: executing program 2 (id=1226): fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, 0x0, 0x0, 0xffffffffffffffff) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000001140)='\xf1\x95\xb3>-\x8c\xd4\r\x01\xfa\xe2{eED\x0e\xaaPV\x11\xff\xb6j\xd4~6\x82^\x9b b', 0x0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000080)='kfree\x00', 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000a80)='U&~=\xd8G\x93\x14\xc9o\xaf\x8b\xd4-\xc5\x12\x8d\xc8\xf1\'\xcf\x92V\xceKg\x8b\xc3\x9e\xd6H\xad0`\xaf\x06\x00xOq\xb6H\x11', 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x70, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x18) unshare(0x68040200) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) listen(0xffffffffffffffff, 0xebca) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$IP6T_SO_GET_INFO(r1, 0x29, 0x40, &(0x7f00000000c0)={'nat\x00', 0x0, [0x6, 0x4000105, 0x0, 0x7, 0x109]}, &(0x7f0000000400)=0x54) 1.608737338s ago: executing program 3 (id=1228): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000900000000000000213f0000c50000000e800000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='mmap_lock_acquire_returned\x00', r2}, 0x10) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r3}, 0x8) write$cgroup_int(r4, &(0x7f00000001c0), 0xfffffdef) bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000600)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2673004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r6 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x8000000003, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x3, 0x800000000003}, 0x115d2, 0xff, 0x10000005, 0x3, 0x3, 0x8, 0xfffe, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r7 = syz_open_dev$usbfs(&(0x7f0000000340), 0x206, 0x8401) ioctl$USBDEVFS_BULK(r7, 0x5523, 0x0) ioctl$USBDEVFS_FORBID_SUSPEND(r7, 0x5521) mmap(&(0x7f0000ff2000/0xe000)=nil, 0xe000, 0x8, 0x50, r6, 0xde7d1000) open_tree(0xffffffffffffff9c, 0x0, 0x89901) perf_event_open(&(0x7f00000004c0)={0x8, 0x80, 0x0, 0xf, 0x0, 0x0, 0x82, 0x200000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000080), 0x9}, 0x18204, 0x0, 0x3, 0x0, 0x0, 0x5338c7af, 0x0, 0x0, 0x1, 0x0, 0x2}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 1.584556869s ago: executing program 5 (id=1229): r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x0, @host}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000900850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kfree\x00', r2, 0x0, 0x3}, 0x18) close(r0) 1.49657068s ago: executing program 2 (id=1231): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000020b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r2, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, &(0x7f0000000140)=ANY=[], 0x8) setsockopt$inet6_IPV6_DSTOPTS(r2, 0x29, 0x3b, &(0x7f0000000080)=ANY=[], 0x8) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r3, 0x0, 0x41, &(0x7f0000000080)=ANY=[], 0x68) recvmmsg(r2, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=""/94, 0x5e}, 0x10000}], 0x1, 0x2, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='sys_enter\x00', r1}, 0x10) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x101840, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNSETQUEUE(r4, 0x400454d9, &(0x7f00000000c0)={'macsec0\x00', 0x400}) ioctl$TUNSETQUEUE(r4, 0x400454d9, &(0x7f00000006c0)={'bridge_slave_0\x00', 0x600}) readlinkat(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x18) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x62, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffd, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x9) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000500)='/proc/key-users\x00', 0x0, 0x0) read$hiddev(r6, &(0x7f00000014c0)=""/4093, 0xffd) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) utime(0x0, &(0x7f0000000340)={0x16, 0x2}) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000000)={'dummy0\x00', &(0x7f0000001c40)=@ethtool_link_settings={0x4c, 0x68, 0x2, 0x6, 0x8, 0x1, 0x9, 0x10, 0xf9, 0xb2, [0x8000, 0x1, 0x1, 0x4, 0xb34, 0x3, 0x8, 0x5]}}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1b, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6, 0x80, 0x0, 0x7ff00000}]}) 1.47723657s ago: executing program 5 (id=1232): capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000040)={0x0, 0x0, 0x7}) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$SG_IO(r0, 0x2285, &(0x7f00000005c0)={0x53, 0xfffffffffffffffd, 0x6, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="4d11bc3e19fc", 0x0, 0x0, 0x12, 0x0, 0x0}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480), 0x48241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) r2 = socket$kcm(0x2, 0xa, 0x2) (async) r3 = msgget$private(0x0, 0x100) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"/3577], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r4}, 0x10) (async) msgsnd(r3, &(0x7f0000002900)={0x3, "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"}, 0x401, 0x0) (async) msgctl$IPC_SET(r3, 0x1, &(0x7f0000002880)={{0x2, 0x0, 0x0, 0x0, 0x0, 0x1a, 0x7}, 0x0, 0x0, 0x1, 0x1414, 0x10001, 0x4e, 0xffffffffffffffca, 0x8, 0x8580, 0x3}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) write$tun(r1, &(0x7f0000000240)={@val={0x0, 0x800}, @void, @eth={@empty, @random="1f00", @val, {@mpls_mc={0x894f, {[], @llc={@snap={0xab, 0xab, "b9", "ab3468", 0x18, "ef80d5c3360116aa7a5e02183b5ed8bfb9bfd369cf2826467bf1fdd285e540e04fd9e2d6a535488eff42288991398f4f12d1715dc781664137008f01803854bad39b20ce63527a05d9f361efe8fe908e9595729a270d08a2a77ddbfca32479ca515085272129e7713dfb24ed373f86b0b4c1940408a01fd6cdc67596a6ce248012b6afaaee0878c9821729214e836e65df8a5f12872f6a5ac322bbbb084fe19ccf75971158eb7a49d46571c9291e9aaef6d15bc8a2e7d0ebf66f8cab658e288dd7201b27300dba5fcc2d0b116e"}}}}}}}, 0xef) 1.417705941s ago: executing program 5 (id=1234): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kfree\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000700)={0x0, &(0x7f0000000640)}) socket(0x1d, 0x2, 0x6) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000340)={0x0, 0xffffffffffffffff, 0xc6, 0x8, @scatter={0x2, 0x0, &(0x7f0000000240)=[{&(0x7f0000000100)=""/40, 0x28}, {&(0x7f0000000140)=""/36, 0x24}]}, &(0x7f0000000480)="8f34b89a29b0c8812ed0ee2c21eb0230f414e591174dc7e654244e20b21dead2e8ae7629f85ffc9bdc068cf93acceb0259c6a1b06b54783c4c70e1c52fa3518168b991e475d4d101bafe6a84ca71f56955b593583747c089e67e71668e515cb843d516c7f771e569595d550f25f2e7097ffd38ed059013b310530cd24a27ca2db77f96b7d2dc7b05d0219a84cbc03814e35a34df1783baa1a8c9b5e69071be86627ea9b3c668b4c51d831f21f54a4afaef1b11772fab414e4f62d2e7122270d7736893efd07f", &(0x7f0000000740)=""/4096, 0x5, 0x11, 0x1, &(0x7f0000000300)}) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x3, 0x3, 0x3}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) close(r1) 1.327724552s ago: executing program 0 (id=1237): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='nv\x00', 0x3) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r1 = socket$inet6(0x10, 0x2, 0x4) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r3}, &(0x7f0000000180), &(0x7f00000001c0)=r2}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) r5 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f00000000c0)=0xc) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x28, 0x18, 0x1, 0x0, 0x0, {0x2}, [@typed={0x8, 0x800, 0x0, 0x0, @u32=0x4}, @nested={0xc, 0x8, 0x0, 0x1, [@typed={0x8, 0xc, 0x0, 0x0, @uid=r6}]}]}, 0x28}}, 0x0) sendto$inet6(r1, &(0x7f0000000300)="4c00000012001f15b9409b849ac00a00a5784004000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdb0200000000000000a351d1ec0cffc8792cd8000080", 0x4c, 0x4000850, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x590, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x4c58, 0x5, 0x0, 0x1, 0x8, 0x20002, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) syz_emit_ethernet(0x7e, &(0x7f0000000040)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x80}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x48, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x500, {0x0, 0x6, "508359", 0x0, 0x0, 0x0, @private1, @mcast1={0xff, 0x0, '\x00', 0x0}, [@hopopts={0x3a, 0x1, '\x00', [@calipso={0x7, 0x8}]}]}}}}}}}, 0x0) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r1, 0x29, 0x37, &(0x7f0000000440)={0x2b, 0x19, '\x00', [@generic={0x2, 0xbf, "5f29ade65c94ea85aad8e55889b1f1f6d8468e6aa2c2ccc054f72389fec6fdefdbd5fb13e71e47f4ad812258a4c8dc6d44e634b70e7f9b599062b214950c0e8153b7341b9544c5fef9a26771886d3e54439f60c1d068f41f03333e74c1ccd7bdfff9715e5e3e147cb63af011a0866a9a925c7acd5056801a48694e3eb519beb80c00fcb8cac27f710ec87bc90330e125df3f0f776cef7ac3edee6e2b5291f1b6eb8c01f260d1765f7257155d8888fccb00de95f2d7592cc68546254cc46ab8"}, @padn={0x1, 0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}, 0xd8) sendmsg$TIPC_NL_KEY_SET(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r8, 0x1, 0x0, 0xfffffffd, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @private=0xa010102}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x54}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x590, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0xa5d4}, 0x4c58, 0x0, 0x0, 0x1, 0x8, 0x2, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="440000001000370400"/20, @ANYRES32=0x0, @ANYBLOB="ffffadae7a26b869bbad2a80010067656e657665000014000280060005004e2000000500080001000000"], 0x44}, 0x1, 0x0, 0x0, 0x4001}, 0x0) 1.327208452s ago: executing program 5 (id=1238): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004000000"], 0x48) r2 = dup(r1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='kfree\x00', r3}, 0x18) r4 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, r4, 0xfffffffffffffffe, r4, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d0000008500000007"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) lseek(r2, 0x2, 0x0) syz_io_uring_setup(0x10e, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x222}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_SHUTDOWN={0x22, 0x13}) pause() bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r8, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x80, 0x7}) fcntl$lock(r8, 0x24, &(0x7f00000000c0)={0x2, 0x0, 0x402, 0x200000000000}) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x42, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r9}, 0x10) r10 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r3, 0x113, 0x2, &(0x7f00000003c0), &(0x7f00000004c0)=0x4) r11 = dup(r10) syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0x4008032, 0xffffffffffffffff, 0x0) ioctl$PTP_EXTTS_REQUEST2(r11, 0x43403d05, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000500), 0x1, 0x0) 724.80029ms ago: executing program 3 (id=1239): r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x40942, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="b100791100000000000000000000000000000000ce3701b53506cb43d1ccf07efc4760203f37856819ef4432bf287c985fdf2628ea3d26325c5cb4f9151d95847cf2c963aff38e20fda6f4adae654b15d349ab0f3dfc064a8337ef9749a8e56060e62f1e02356530cbfdf7b5310ef01e4f5c9959626cfcaa9b6ec1fd4a851fb3fa373a864f83481583077d3afa6c07098dad93f49010f46ee54df61601e952e4291f85259ec9e95b5928fbffa514250d8c769f5dc26e87b2c3e8fbc3e0a05a88cf773477bea369c4c11b687f414990f5ec1ddfa8bda01948ce8bff7ab9d8f2c1234f3f63c975b0704cc400"/244, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r2}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8011, r0, 0x2000) 618.140982ms ago: executing program 3 (id=1240): pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r1, &(0x7f00000002c0)=ANY=[], 0x200002e6) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xc2b00, 0x0) ioctl$FIONREAD(r2, 0x541b, &(0x7f0000000040)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYRES32, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0xfffffffffffffc3a) syz_open_dev$sg(0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$can_raw(0x1d, 0x3, 0x1) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x785, &(0x7f0000001900)="$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") r4 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x88882, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='btrfs_sync_fs\x00', r3, 0x0, 0x7c}, 0x18) r6 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c5902, 0x0) write$RDMA_USER_CM_CMD_DESTROY_ID(r6, &(0x7f0000003280)={0x1, 0x10, 0xfa00, {0x0}}, 0x18) sendfile(r6, r5, 0x0, 0x7ffff000) fallocate(r4, 0x1, 0x0, 0x1001f0) socket$nl_generic(0x10, 0x3, 0x10) write$cgroup_devices(r0, &(0x7f0000000280)={'a', ' *:* ', 'rm\x00'}, 0x9) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, @void, @value}, 0x94) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8], 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r9}, 0x18) r10 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r10, &(0x7f0000000140)={0x28, 0x0, 0x0, @host}, 0x10) setsockopt$bt_l2cap_L2CAP_LM(r7, 0x6, 0x3, &(0x7f0000000080)=0xe, 0x4) socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000280)={0x3, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x3d, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x3, 0x1}, 0x18002, 0x8002, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) 441.533254ms ago: executing program 5 (id=1241): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x2000081, &(0x7f0000000080)=ANY=[@ANYRES8=0x0, @ANYRES8, @ANYRES64, @ANYRES64=0x0], 0x0, 0x23e, &(0x7f0000000bc0)="$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") r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000540)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='kfree\x00', r0}, 0x18) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000440)={'vxcan0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f00000004c0)={'syztnl0\x00', &(0x7f0000000480)={'syztnl0\x00', r2, 0x7800, 0x40, 0x6, 0x101, {{0x6, 0x4, 0x1, 0x22, 0x18, 0x65, 0x0, 0x7, 0x2f, 0x0, @empty, @remote, {[@ra={0x94, 0x4}]}}}}}) setsockopt$ARPT_SO_SET_REPLACE(r1, 0xa02000000000000, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3e8, 0x0, 0x0, 0x130, 0x300, 0x300, 0x300, 0x7fffffe, 0x0, {[{{@arp={@local, @empty, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pimreg\x00', 'veth0_to_bridge\x00'}, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f67b23ffdfa27f907a03732da3acbc6518e62a77ca06f258762e88c0d9f9d2f413b94a105f4bdf01425ce81c5d000000000000000500ffffffff00"}}}, {{@arp={@multicast2, @empty, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_team\x00', 'ip6tnl0\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 349.402635ms ago: executing program 4 (id=1243): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) write$tun(r0, &(0x7f0000000240)={@val={0x0, 0x8100}, @void, @eth={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x21}, @multicast, @val={@val={0x88a8, 0x0, 0x0, 0x4}, {0x8100, 0x1}}, {@ipv4={0x800, @gre={{0x5, 0x4, 0x1, 0x5, 0x1d6, 0x66, 0x0, 0x8, 0x2f, 0x0, @remote, @multicast2}, {{0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x60, 0x0, [], "e16d7ece9911b115ad3f7e9650ad0c14d311a3e182abcd7d631bba0f05c4c5a4e812948696b734a79bd18e39d75a6776df6a00ecf015b7486610a01cec4aa270b48d99fd30c597760fcbaa5a52d59191c1aca45de00749fff9b09a511b4fcd84"}, {0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x800, [], "f7b3acc423179376096ace0f9cc8e64014878b453f3bd84a735c8b1acc0cc441e47b93a17b85791229adc662d190b4088e602741e0b2b4582c1e1385b44daff6ff8146b1eca7a2213291f9fa850d4280"}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, [], "25b43db4390cb8b8512b7f3b3a1b7f6998a2381828c61c5f8de0cfff4cee6b490f167cd024905fbc2a7d52296968b451d3302e1a245fec33db98a1f474d74bc3d99d73cf2068d236a61251b66194f2f92ccf99ac87c31313dac9369a0800c37856c0997825942ac76835cf947a0739f9903532954e3c78251666f6fbca2acbbb4c49529db916db3ded1c38676b9d4a1d6aca804bf58f98d35c70388b185d9e1a5b790a01500b3e51a664a7"}, {0x8, 0x88be, 0x2, {{0x7, 0x1, 0xbf, 0x0, 0x1, 0x3, 0x0, 0xdf}, 0x1, {0x100}}}, {0x8, 0x22eb, 0x4, {{0x7, 0x2, 0x7, 0x0, 0x0, 0x3, 0x1, 0x1}, 0x2, {0x80000000, 0x7942, 0x3, 0x1f, 0x1, 0x0, 0x2, 0x1, 0x1}}}, {0x8, 0x6558, 0x4, "5cf55a3b84fb3b30c981f313503153e6c7ddce9800dc6795c8252e3a76457f614adc77"}}}}}}}, 0x1f0) 239.357457ms ago: executing program 4 (id=1244): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000400000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000008c0)='mm_collapse_huge_page_isolate\x00', r0, 0x0, 0x6}, 0x18) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000180000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000f0850000002d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r3}, 0x10) setsockopt$inet6_IPV6_RTHDR(r2, 0x29, 0x39, &(0x7f0000000b00)=ANY=[], 0x8) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='mpol=prefer']) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYRESDEC=r4], &(0x7f0000000580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='rpcgss_bad_seqno\x00', 0xffffffffffffffff, 0x0, 0xd}, 0x18) openat$dir(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x70d203, 0x16) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f00000006c0)={{0x1, 0x1, 0x18, r5, {0x5}}, './file0/file0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0xc, 0xc, &(0x7f0000000a00)=ANY=[@ANYRESDEC=0x0, @ANYRES32=r4, @ANYBLOB="0000000000000000b70800e6d5a46b83efd900040000000000000000000000bfa200000000000007020000f8ffffffb703000008000000b7040000f60000ff85e0ab6457455d90d36c48babbdf77115d2f2c7165560d49b8077ef411627bda4d57f7cc85c6f4a8779abb101c5f88a420ca984b86cbb11b4bdf41e08c986a9f3df68737fd54cb9c2e87d8eb4d48ffffe245ad600a6cd48070146cb09933c569bf5c6a74f49e1cef6c8ff6939b3cb1251a53c9174f54a62fe4efc0c65ae0e2733be2eea4bc6c53b03c89689c8243f3eb8cbf3fa0b5a7edc3c0"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfbfffffe, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0x2000000000000116, &(0x7f0000000440)=ANY=[], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x101042, 0x0) fcntl$setlease(r6, 0x400, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r7, &(0x7f0000000300)=ANY=[@ANYBLOB="1500b600395032303030000000000000000000"], 0x15) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf6548723c4611f33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='kfree\x00', r8, 0x0, 0xa}, 0x18) r9 = dup(r7) write$P9_RLERRORu(r9, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) r10 = open_tree(r1, &(0x7f00000004c0)='./file0/file0\x00', 0x0) fcntl$getflags(r7, 0x1) accept4$nfc_llcp(r10, &(0x7f0000000380), &(0x7f0000000280)=0x7b, 0x0) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001040)={&(0x7f0000000500)='fscache_access_cache\x00', r12, 0x0, 0xb998}, 0x18) 237.741307ms ago: executing program 0 (id=1245): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r0, &(0x7f0000000040)="aa", 0x1, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) sendto$inet6(r0, &(0x7f0000000600)="f6", 0x1, 0x80c5, &(0x7f00000001c0)={0xa, 0x0, 0x400, @local, 0x1}, 0x1c) shutdown(r0, 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001780)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) r4 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x3, 0x3, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r3, &(0x7f00000000c0)={&(0x7f0000000000)=@name={0x1e, 0x2, 0x2, {{0x1, 0x3}, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x20000080) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r8 = dup(r7) sendmsg$inet(r8, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f0000000140)="be38", 0xffdf}], 0x1, &(0x7f0000000340)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac14e944d40717de877f588b9a14aa00000000000000001c0000000000070000004404730001000000000000000000"], 0x40}, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000000), &(0x7f0000000040)=0x8) 169.908738ms ago: executing program 4 (id=1246): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f600000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1, 0x0, 0x100}, 0x18) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000240)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r3 = socket$inet6(0xa, 0x3, 0xff) setsockopt$inet6_int(r3, 0x29, 0x16, &(0x7f0000fcb000), 0x4) close_range(r2, 0xffffffffffffffff, 0x0) 169.244038ms ago: executing program 4 (id=1247): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)={0x18c, r1, 0xabbc2f53e3f7baa3, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_NET={0x58, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xf027}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xd}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xc8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xef4}]}, @TIPC_NLA_MEDIA={0x68, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1dd5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9b6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}]}]}, @TIPC_NLA_NODE={0xb8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x4b, 0x4, {'gcm(aes)\x00', 0x23, "6c1ff0d01e0b2870547074834d5674982a215e266771a59f96edc872ede2c42cd16c66"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x3e17}, @TIPC_NLA_NODE_ID={0xd, 0x3, "6c17ad2738fb601d40"}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xe7e}, @TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "b6d285d4b39e18877210bbbc6774bee840e75c7b"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4}]}]}, 0x18c}, 0x1, 0x0, 0x0, 0x40000}, 0x800) 124.096148ms ago: executing program 4 (id=1248): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kfree\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000700)={0x0, &(0x7f0000000640)}) socket(0x1d, 0x2, 0x6) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000340)={0x0, 0xffffffffffffffff, 0xc6, 0x8, @scatter={0x2, 0x0, &(0x7f0000000240)=[{&(0x7f0000000100)=""/40, 0x28}, {&(0x7f0000000140)=""/36, 0x24}]}, &(0x7f0000000480)="8f34b89a29b0c8812ed0ee2c21eb0230f414e591174dc7e654244e20b21dead2e8ae7629f85ffc9bdc068cf93acceb0259c6a1b06b54783c4c70e1c52fa3518168b991e475d4d101bafe6a84ca71f56955b593583747c089e67e71668e515cb843d516c7f771e569595d550f25f2e7097ffd38ed059013b310530cd24a27ca2db77f96b7d2dc7b05d0219a84cbc03814e35a34df1783baa1a8c9b5e69071be86627ea9b3c668b4c51d831f21f54a4afaef1b11772fab414e4f62d2e7122270d7736893efd07f", &(0x7f0000000740)=""/4096, 0x5, 0x11, 0x1, &(0x7f0000000300)}) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x3, 0x3, 0x3}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) close(r1) 108.665328ms ago: executing program 4 (id=1249): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000900000000000000213f0000c50000000e800000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='mmap_lock_acquire_returned\x00', r2}, 0x10) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r3}, 0x8) write$cgroup_int(r4, &(0x7f00000001c0), 0xfffffdef) bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000600)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2673004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r6 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x8000000003, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x3, 0x800000000003}, 0x115d2, 0xff, 0x10000005, 0x3, 0x3, 0x8, 0xfffe, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r7 = syz_open_dev$usbfs(&(0x7f0000000340), 0x206, 0x8401) ioctl$USBDEVFS_BULK(r7, 0x5523, 0x0) ioctl$USBDEVFS_FORBID_SUSPEND(r7, 0x5521) mmap(&(0x7f0000ff2000/0xe000)=nil, 0xe000, 0x8, 0x50, r6, 0xde7d1000) open_tree(0xffffffffffffff9c, 0x0, 0x89901) perf_event_open(&(0x7f00000004c0)={0x8, 0x80, 0x0, 0xf, 0x0, 0x0, 0x82, 0x200000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000080), 0x9}, 0x18204, 0x0, 0x3, 0x0, 0x0, 0x5338c7af, 0x0, 0x0, 0x1, 0x0, 0x2}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 601.53µs ago: executing program 5 (id=1250): sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(0xffffffffffffffff, 0x0, 0x20048004) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(0xffffffffffffffff, 0x0, 0x4880) (async) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(0xffffffffffffffff, 0x0, 0x4880) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) readv(r0, &(0x7f00000001c0)=[{&(0x7f0000000340)=""/237, 0xe}], 0x4) r1 = socket$kcm(0x2, 0xa, 0x2) r2 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'}) epoll_create1(0x0) (async) r3 = epoll_create1(0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) open(&(0x7f0000000240)='./file0\x00', 0xc040, 0x24) (async) open(&(0x7f0000000240)='./file0\x00', 0xc040, 0x24) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYRES16=r3, @ANYRESDEC=r2, @ANYRES8=r0], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) r5 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) r6 = dup2(r5, r5) write$tun(r6, 0x0, 0x46) socket$unix(0x1, 0x5, 0x0) (async) r7 = socket$unix(0x1, 0x5, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r7, &(0x7f0000000080)={0xa0028000}) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000006000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000500)='mm_page_alloc\x00', r8}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r9 = gettid() socket(0x10, 0x803, 0x0) (async) r10 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r10, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r10, 0x89f1, &(0x7f0000000180)={'ip6tnl0\x00', &(0x7f0000000400)={'syztnl1\x00', r11, 0x29, 0xf5, 0x0, 0x7, 0x5d, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, 0x7, 0x7, 0x10000, 0xffff}}) process_vm_writev(r9, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) (async) process_vm_writev(r9, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r7, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) 0s ago: executing program 0 (id=1251): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004000000"], 0x48) r2 = dup(r1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='kfree\x00', r3}, 0x18) r4 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, r4, 0xfffffffffffffffe, r4, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d0000008500000007"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) lseek(r2, 0x2, 0x0) syz_io_uring_setup(0x10e, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x222}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_SHUTDOWN={0x22, 0x13}) pause() bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r8, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x80, 0x7}) fcntl$lock(r8, 0x24, &(0x7f00000000c0)={0x2, 0x0, 0x402, 0x200000000000}) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x42, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r9}, 0x10) r10 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r3, 0x113, 0x2, &(0x7f00000003c0), &(0x7f00000004c0)=0x4) r11 = dup(r10) syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0x4008032, 0xffffffffffffffff, 0x0) ioctl$PTP_EXTTS_REQUEST2(r11, 0x43403d05, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000500), 0x1, 0x0) kernel console output (not intermixed with test programs): ted inode contents [ 78.387825][ T5664] netlink: 32 bytes leftover after parsing attributes in process `syz.3.754'. [ 78.397314][ T5659] EXT4-fs error (device loop1): ext4_dirty_inode:6103: inode #13: comm syz.1.759: mark_inode_dirty error [ 78.413127][ T5659] EXT4-fs error (device loop1): ext4_do_update_inode:5211: inode #13: comm syz.1.759: corrupted inode contents [ 78.438251][ T5659] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #13: comm syz.1.759: mark_inode_dirty error [ 78.452651][ T5659] EXT4-fs error (device loop1): ext4_do_update_inode:5211: inode #13: comm syz.1.759: corrupted inode contents [ 78.474245][ T5659] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem [ 78.492067][ T29] audit: type=1326 audit(1746597216.879:2092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5668 comm="syz.2.762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6ade7e969 code=0x7ffc0000 [ 78.492343][ T5659] EXT4-fs error (device loop1): ext4_do_update_inode:5211: inode #13: comm syz.1.759: corrupted inode contents [ 78.516387][ T29] audit: type=1326 audit(1746597216.879:2093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5668 comm="syz.2.762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6ade7e969 code=0x7ffc0000 [ 78.559368][ T5659] EXT4-fs error (device loop1): ext4_truncate:4255: inode #13: comm syz.1.759: mark_inode_dirty error [ 78.566253][ T29] audit: type=1326 audit(1746597216.949:2094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5668 comm="syz.2.762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=294 compat=0 ip=0x7fb6ade7e969 code=0x7ffc0000 [ 78.576571][ T5659] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem [ 78.594865][ T29] audit: type=1326 audit(1746597216.949:2095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5668 comm="syz.2.762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6ade7e969 code=0x7ffc0000 [ 78.594969][ T29] audit: type=1326 audit(1746597216.949:2096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5668 comm="syz.2.762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6ade7e969 code=0x7ffc0000 [ 78.594997][ T29] audit: type=1326 audit(1746597216.949:2097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5668 comm="syz.2.762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=254 compat=0 ip=0x7fb6ade7e969 code=0x7ffc0000 [ 78.595029][ T29] audit: type=1326 audit(1746597216.949:2098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5668 comm="syz.2.762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6ade7e969 code=0x7ffc0000 [ 78.724379][ T5671] netlink: 4 bytes leftover after parsing attributes in process `syz.2.763'. [ 78.747117][ T5673] FAULT_INJECTION: forcing a failure. [ 78.747117][ T5673] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 78.761129][ T5673] CPU: 1 UID: 0 PID: 5673 Comm: syz.0.764 Not tainted 6.15.0-rc5-syzkaller-00032-g0d8d44db295c #0 PREEMPT(voluntary) [ 78.761238][ T5673] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 78.761255][ T5673] Call Trace: [ 78.761262][ T5673] [ 78.761271][ T5673] __dump_stack+0x1d/0x30 [ 78.761363][ T5673] dump_stack_lvl+0xe8/0x140 [ 78.761394][ T5673] dump_stack+0x15/0x1b [ 78.761416][ T5673] should_fail_ex+0x265/0x280 [ 78.761494][ T5673] should_fail+0xb/0x20 [ 78.761527][ T5673] should_fail_usercopy+0x1a/0x20 [ 78.761544][ T5673] strncpy_from_user+0x25/0x230 [ 78.761570][ T5673] ? kmem_cache_alloc_noprof+0x28f/0x310 [ 78.761657][ T5673] ? getname_flags+0x80/0x3b0 [ 78.761694][ T5673] getname_flags+0xae/0x3b0 [ 78.761724][ T5673] __se_sys_quotactl+0x16a/0x670 [ 78.761773][ T5673] ? fput+0x8f/0xc0 [ 78.761797][ T5673] __x64_sys_quotactl+0x55/0x70 [ 78.761834][ T5673] x64_sys_call+0x2886/0x2fb0 [ 78.761861][ T5673] do_syscall_64+0xd0/0x1a0 [ 78.761896][ T5673] ? clear_bhb_loop+0x25/0x80 [ 78.762052][ T5673] ? clear_bhb_loop+0x25/0x80 [ 78.762079][ T5673] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 78.762102][ T5673] RIP: 0033:0x7fad9139e969 [ 78.762120][ T5673] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 78.762144][ T5673] RSP: 002b:00007fad8fa07038 EFLAGS: 00000246 ORIG_RAX: 00000000000000b3 [ 78.762240][ T5673] RAX: ffffffffffffffda RBX: 00007fad915c5fa0 RCX: 00007fad9139e969 [ 78.762252][ T5673] RDX: 0000000000000000 RSI: 0000200000000300 RDI: ffffffff80000801 [ 78.762264][ T5673] RBP: 00007fad8fa07090 R08: 0000000000000000 R09: 0000000000000000 [ 78.762275][ T5673] R10: 0000200000000200 R11: 0000000000000246 R12: 0000000000000001 [ 78.762287][ T5673] R13: 0000000000000000 R14: 00007fad915c5fa0 R15: 00007ffce0cf8408 [ 78.762312][ T5673] [ 78.967066][ T5659] EXT4-fs (loop1): 1 truncate cleaned up [ 78.985829][ T5659] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.075980][ T5659] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.139127][ T5683] netlink: 'syz.0.767': attribute type 27 has an invalid length. [ 79.306634][ T3382] IPVS: starting estimator thread 0... [ 79.334624][ T5687] pim6reg: entered allmulticast mode [ 79.378999][ T5687] loop3: detected capacity change from 0 to 128 [ 79.397615][ T5694] pim6reg: left allmulticast mode [ 79.425763][ T5703] FAULT_INJECTION: forcing a failure. [ 79.425763][ T5703] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 79.428041][ T5698] IPVS: using max 2016 ests per chain, 100800 per kthread [ 79.440166][ T5703] CPU: 0 UID: 0 PID: 5703 Comm: syz.4.774 Not tainted 6.15.0-rc5-syzkaller-00032-g0d8d44db295c #0 PREEMPT(voluntary) [ 79.440202][ T5703] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 79.440227][ T5703] Call Trace: [ 79.440235][ T5703] [ 79.440245][ T5703] __dump_stack+0x1d/0x30 [ 79.440348][ T5703] dump_stack_lvl+0xe8/0x140 [ 79.440375][ T5703] dump_stack+0x15/0x1b [ 79.440398][ T5703] should_fail_ex+0x265/0x280 [ 79.440494][ T5703] should_fail+0xb/0x20 [ 79.440530][ T5703] should_fail_usercopy+0x1a/0x20 [ 79.440554][ T5703] _copy_from_user+0x1c/0xb0 [ 79.440582][ T5703] sock_do_ioctl+0xe6/0x220 [ 79.440676][ T5703] sock_ioctl+0x41b/0x610 [ 79.440707][ T5703] ? __pfx_sock_ioctl+0x10/0x10 [ 79.440735][ T5703] __se_sys_ioctl+0xcb/0x140 [ 79.440757][ T5703] __x64_sys_ioctl+0x43/0x50 [ 79.440811][ T5703] x64_sys_call+0x19a8/0x2fb0 [ 79.440831][ T5703] do_syscall_64+0xd0/0x1a0 [ 79.440861][ T5703] ? clear_bhb_loop+0x25/0x80 [ 79.440889][ T5703] ? clear_bhb_loop+0x25/0x80 [ 79.440916][ T5703] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 79.440993][ T5703] RIP: 0033:0x7f5394bbe969 [ 79.441022][ T5703] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 79.441092][ T5703] RSP: 002b:00007f5393227038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 79.441116][ T5703] RAX: ffffffffffffffda RBX: 00007f5394de5fa0 RCX: 00007f5394bbe969 [ 79.441170][ T5703] RDX: 0000200000000080 RSI: 0000000000008922 RDI: 000000000000000a [ 79.441261][ T5703] RBP: 00007f5393227090 R08: 0000000000000000 R09: 0000000000000000 [ 79.441277][ T5703] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 79.441293][ T5703] R13: 0000000000000000 R14: 00007f5394de5fa0 R15: 00007ffe64d7eea8 [ 79.441354][ T5703] [ 79.547028][ T5710] loop2: detected capacity change from 0 to 4096 [ 79.661339][ T5710] EXT4-fs error (device loop2): ext4_ext_check_inode:524: inode #3: comm syz.2.776: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 79.747075][ T5710] EXT4-fs error (device loop2): ext4_quota_enable:7129: comm syz.2.776: Bad quota inode: 3, type: 0 [ 79.763930][ T5710] EXT4-fs warning (device loop2): ext4_enable_quotas:7170: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 79.809530][ T5725] loop3: detected capacity change from 0 to 128 [ 79.839813][ T5710] EXT4-fs (loop2): mount failed [ 80.015912][ T5733] usb usb8: usbfs: process 5733 (syz.1.778) did not claim interface 0 before use [ 80.201338][ T5745] loop3: detected capacity change from 0 to 512 [ 80.223872][ T5745] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 80.270883][ T5745] loop3: detected capacity change from 0 to 128 [ 80.984730][ T5774] loop1: detected capacity change from 0 to 512 [ 81.010348][ T5774] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 81.043229][ T5774] EXT4-fs (loop1): 1 truncate cleaned up [ 81.069187][ T5777] __nla_validate_parse: 1 callbacks suppressed [ 81.069212][ T5777] netlink: 60 bytes leftover after parsing attributes in process `syz.3.801'. [ 81.089004][ T5774] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.115167][ T5777] netlink: 60 bytes leftover after parsing attributes in process `syz.3.801'. [ 81.152882][ T5774] ip6gretap1: entered allmulticast mode [ 81.187839][ T5777] netlink: 60 bytes leftover after parsing attributes in process `syz.3.801'. [ 81.197449][ T5777] netlink: 60 bytes leftover after parsing attributes in process `syz.3.801'. [ 81.245503][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.260939][ T5777] netlink: 60 bytes leftover after parsing attributes in process `syz.3.801'. [ 81.270768][ T5777] netlink: 60 bytes leftover after parsing attributes in process `syz.3.801'. [ 81.411115][ T5794] loop3: detected capacity change from 0 to 4096 [ 81.424104][ T5794] EXT4-fs error (device loop3): ext4_ext_check_inode:524: inode #3: comm syz.3.806: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 81.442871][ T5794] EXT4-fs error (device loop3): ext4_quota_enable:7129: comm syz.3.806: Bad quota inode: 3, type: 0 [ 81.454473][ T5794] EXT4-fs warning (device loop3): ext4_enable_quotas:7170: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 81.499402][ T5794] EXT4-fs (loop3): mount failed [ 81.514883][ T5799] sch_tbf: burst 3092 is lower than device lo mtu (11337746) ! [ 81.597607][ T5803] loop1: detected capacity change from 0 to 4096 [ 81.680561][ T5803] EXT4-fs error (device loop1): ext4_ext_check_inode:524: inode #3: comm syz.1.808: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 81.710643][ T5807] netlink: 132 bytes leftover after parsing attributes in process `syz.0.810'. [ 81.731579][ T5803] EXT4-fs error (device loop1): ext4_quota_enable:7129: comm syz.1.808: Bad quota inode: 3, type: 0 [ 81.776329][ T5803] EXT4-fs warning (device loop1): ext4_enable_quotas:7170: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 81.802949][ T5805] netlink: 32 bytes leftover after parsing attributes in process `syz.3.806'. [ 81.814662][ T5803] EXT4-fs (loop1): mount failed [ 82.036079][ T5809] netlink: 40 bytes leftover after parsing attributes in process `syz.1.808'. [ 82.070157][ T3521] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 82.077796][ T3521] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 82.085363][ T3521] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 82.092898][ T3521] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 82.130090][ T3521] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 82.137599][ T3521] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 82.145512][ T3521] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 82.153151][ T3521] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 82.160616][ T3521] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 82.168338][ T3521] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 82.175774][ T3521] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 82.183245][ T3521] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 82.191015][ T3521] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 82.198773][ T3521] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 82.206324][ T3521] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 82.213871][ T3521] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 82.221630][ T3521] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 82.229461][ T3521] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 82.237154][ T3521] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 82.245059][ T3521] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 82.253108][ T3521] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 82.260942][ T3521] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 82.268569][ T3521] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 82.276086][ T3521] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 82.283643][ T3521] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 82.291134][ T3521] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 82.298589][ T3521] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 82.306106][ T3521] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 82.313587][ T3521] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 82.321050][ T3521] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 82.328613][ T3521] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 82.341690][ T3521] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz0] on syz1 [ 82.513754][ T5816] sctp: [Deprecated]: syz.1.813 (pid 5816) Use of int in max_burst socket option. [ 82.513754][ T5816] Use struct sctp_assoc_value instead [ 82.556468][ T5815] FAULT_INJECTION: forcing a failure. [ 82.556468][ T5815] name failslab, interval 1, probability 0, space 0, times 0 [ 82.569517][ T5815] CPU: 1 UID: 0 PID: 5815 Comm: syz.3.812 Not tainted 6.15.0-rc5-syzkaller-00032-g0d8d44db295c #0 PREEMPT(voluntary) [ 82.569678][ T5815] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 82.569691][ T5815] Call Trace: [ 82.569697][ T5815] [ 82.569706][ T5815] __dump_stack+0x1d/0x30 [ 82.569782][ T5815] dump_stack_lvl+0xe8/0x140 [ 82.569802][ T5815] dump_stack+0x15/0x1b [ 82.569819][ T5815] should_fail_ex+0x265/0x280 [ 82.569888][ T5815] should_failslab+0x8c/0xb0 [ 82.569926][ T5815] kmem_cache_alloc_noprof+0x50/0x310 [ 82.569962][ T5815] ? getname_flags+0x80/0x3b0 [ 82.570059][ T5815] getname_flags+0x80/0x3b0 [ 82.570089][ T5815] user_path_at+0x28/0x130 [ 82.570109][ T5815] __se_sys_inotify_add_watch+0x102/0x7a0 [ 82.570161][ T5815] ? fput+0x8f/0xc0 [ 82.570182][ T5815] ? ksys_write+0x16e/0x1a0 [ 82.570214][ T5815] __x64_sys_inotify_add_watch+0x43/0x50 [ 82.570275][ T5815] x64_sys_call+0x29a4/0x2fb0 [ 82.570298][ T5815] do_syscall_64+0xd0/0x1a0 [ 82.570457][ T5815] ? clear_bhb_loop+0x25/0x80 [ 82.570480][ T5815] ? clear_bhb_loop+0x25/0x80 [ 82.570560][ T5815] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.570584][ T5815] RIP: 0033:0x7fd0d249e969 [ 82.570672][ T5815] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 82.570732][ T5815] RSP: 002b:00007fd0d0b07038 EFLAGS: 00000246 ORIG_RAX: 00000000000000fe [ 82.570750][ T5815] RAX: ffffffffffffffda RBX: 00007fd0d26c5fa0 RCX: 00007fd0d249e969 [ 82.570762][ T5815] RDX: 0000000000000013 RSI: 00002000000000c0 RDI: 0000000000000005 [ 82.570773][ T5815] RBP: 00007fd0d0b07090 R08: 0000000000000000 R09: 0000000000000000 [ 82.570787][ T5815] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 82.570802][ T5815] R13: 0000000000000000 R14: 00007fd0d26c5fa0 R15: 00007ffc77fc5968 [ 82.570861][ T5815] [ 82.894772][ T5826] netlink: 12 bytes leftover after parsing attributes in process `syz.1.816'. [ 82.940122][ T5828] loop3: detected capacity change from 0 to 1024 [ 82.947308][ T5828] EXT4-fs: Ignoring removed nomblk_io_submit option [ 82.954596][ T5828] EXT4-fs: Ignoring removed nomblk_io_submit option [ 82.987663][ T5828] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 83.138623][ T5038] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.184768][ T5841] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 83.203282][ T5841] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 83.209567][ T29] kauditd_printk_skb: 500 callbacks suppressed [ 83.209601][ T29] audit: type=1326 audit(1746597221.599:2599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5833 comm=ACED exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f26ac185927 code=0x7ffc0000 [ 83.245674][ T29] audit: type=1326 audit(1746597221.599:2600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5833 comm=ACED exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f26ac12ab39 code=0x7ffc0000 [ 83.268721][ T29] audit: type=1326 audit(1746597221.599:2601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5833 comm=ACED exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f26ac18e969 code=0x7ffc0000 [ 83.291608][ T29] audit: type=1326 audit(1746597221.629:2602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5833 comm=ACED exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f26ac185927 code=0x7ffc0000 [ 83.314519][ T29] audit: type=1326 audit(1746597221.629:2603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5833 comm=ACED exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f26ac12ab39 code=0x7ffc0000 [ 83.338068][ T29] audit: type=1326 audit(1746597221.629:2604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5833 comm=ACED exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f26ac18e969 code=0x7ffc0000 [ 83.418131][ T29] audit: type=1326 audit(1746597221.629:2605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5833 comm=ACED exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f26ac185927 code=0x7ffc0000 [ 83.441010][ T29] audit: type=1326 audit(1746597221.629:2606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5833 comm=ACED exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f26ac12ab39 code=0x7ffc0000 [ 83.463852][ T29] audit: type=1326 audit(1746597221.629:2607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5833 comm=ACED exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f26ac18e969 code=0x7ffc0000 [ 83.463886][ T29] audit: type=1326 audit(1746597221.629:2608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5833 comm=ACED exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f26ac185927 code=0x7ffc0000 [ 83.815474][ T5851] loop4: detected capacity change from 0 to 1024 [ 83.850195][ T5851] EXT4-fs: Ignoring removed i_version option [ 83.895141][ T5851] EXT4-fs: test_dummy_encryption option not supported [ 83.929317][ T5855] FAULT_INJECTION: forcing a failure. [ 83.929317][ T5855] name failslab, interval 1, probability 0, space 0, times 0 [ 83.932519][ T5851] x_tables: duplicate underflow at hook 1 [ 83.942379][ T5855] CPU: 0 UID: 0 PID: 5855 Comm: syz.1.826 Not tainted 6.15.0-rc5-syzkaller-00032-g0d8d44db295c #0 PREEMPT(voluntary) [ 83.942456][ T5855] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 83.942470][ T5855] Call Trace: [ 83.942477][ T5855] [ 83.942529][ T5855] __dump_stack+0x1d/0x30 [ 83.942554][ T5855] dump_stack_lvl+0xe8/0x140 [ 83.942575][ T5855] dump_stack+0x15/0x1b [ 83.942596][ T5855] should_fail_ex+0x265/0x280 [ 83.942641][ T5855] should_failslab+0x8c/0xb0 [ 83.942705][ T5855] __kmalloc_node_track_caller_noprof+0xa4/0x410 [ 83.942771][ T5855] ? trace_probe_init+0x1ca/0x280 [ 83.942868][ T5855] kstrdup+0x3e/0xd0 [ 83.942890][ T5855] trace_probe_init+0x1ca/0x280 [ 83.942917][ T5855] alloc_trace_uprobe+0x8b/0x1e0 [ 83.942948][ T5855] create_local_trace_uprobe+0xb5/0x2c0 [ 83.942980][ T5855] perf_uprobe_init+0xc0/0x150 [ 83.943029][ T5855] perf_uprobe_event_init+0xea/0x150 [ 83.943084][ T5855] perf_try_init_event+0xd0/0x540 [ 83.943111][ T5855] ? perf_event_alloc+0xab1/0x15c0 [ 83.943179][ T5855] perf_event_alloc+0xabc/0x15c0 [ 83.943212][ T5855] __se_sys_perf_event_open+0x5a8/0x1170 [ 83.943271][ T5855] ? __rcu_read_unlock+0x4f/0x70 [ 83.943333][ T5855] __x64_sys_perf_event_open+0x67/0x80 [ 83.943364][ T5855] x64_sys_call+0x27ec/0x2fb0 [ 83.943386][ T5855] do_syscall_64+0xd0/0x1a0 [ 83.943415][ T5855] ? clear_bhb_loop+0x25/0x80 [ 83.943442][ T5855] ? clear_bhb_loop+0x25/0x80 [ 83.943478][ T5855] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.943505][ T5855] RIP: 0033:0x7f26ac18e969 [ 83.943525][ T5855] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 83.943548][ T5855] RSP: 002b:00007f26aa7f7038 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 83.943573][ T5855] RAX: ffffffffffffffda RBX: 00007f26ac3b5fa0 RCX: 00007f26ac18e969 [ 83.943589][ T5855] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000000 [ 83.943628][ T5855] RBP: 00007f26aa7f7090 R08: 0000000000000000 R09: 0000000000000000 [ 83.943643][ T5855] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001 [ 83.943659][ T5855] R13: 0000000000000000 R14: 00007f26ac3b5fa0 R15: 00007ffc982514c8 [ 83.943702][ T5855] [ 83.943724][ T5855] trace_uprobe: Failed to allocate trace_uprobe.(-12) [ 84.268693][ T5858] bridge_slave_0: left allmulticast mode [ 84.274505][ T5858] bridge_slave_0: left promiscuous mode [ 84.280339][ T5858] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.293069][ T5858] bridge_slave_1: left allmulticast mode [ 84.298910][ T5858] bridge_slave_1: left promiscuous mode [ 84.304694][ T5858] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.320051][ T5858] bond0: (slave bond_slave_0): Releasing backup interface [ 84.333864][ T5858] bond0: (slave bond_slave_1): Releasing backup interface [ 84.375810][ T5871] loop2: detected capacity change from 0 to 512 [ 84.403256][ T5871] EXT4-fs error (device loop2): ext4_iget_extra_inode:4693: inode #15: comm syz.2.832: corrupted in-inode xattr: invalid ea_ino [ 84.429612][ T5871] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.832: couldn't read orphan inode 15 (err -117) [ 84.495302][ T5871] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.581532][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.595859][ T5891] FAULT_INJECTION: forcing a failure. [ 84.595859][ T5891] name failslab, interval 1, probability 0, space 0, times 0 [ 84.609120][ T5891] CPU: 1 UID: 0 PID: 5891 Comm: syz.0.840 Not tainted 6.15.0-rc5-syzkaller-00032-g0d8d44db295c #0 PREEMPT(voluntary) [ 84.609175][ T5891] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 84.609189][ T5891] Call Trace: [ 84.609195][ T5891] [ 84.609203][ T5891] __dump_stack+0x1d/0x30 [ 84.609227][ T5891] dump_stack_lvl+0xe8/0x140 [ 84.609248][ T5891] dump_stack+0x15/0x1b [ 84.609264][ T5891] should_fail_ex+0x265/0x280 [ 84.609346][ T5891] should_failslab+0x8c/0xb0 [ 84.609447][ T5891] kmem_cache_alloc_node_noprof+0x57/0x320 [ 84.609486][ T5891] ? __alloc_skb+0x101/0x320 [ 84.609519][ T5891] __alloc_skb+0x101/0x320 [ 84.609552][ T5891] __ip6_append_data+0x192b/0x23b0 [ 84.609612][ T5891] ? __pfx_raw6_getfrag+0x10/0x10 [ 84.609635][ T5891] ? __rcu_read_unlock+0x4f/0x70 [ 84.609729][ T5891] ? __pfx_ip6_mtu+0x10/0x10 [ 84.609760][ T5891] ? ip6_mtu+0xf5/0x120 [ 84.609795][ T5891] ip6_append_data+0x13b/0x250 [ 84.609818][ T5891] ? __pfx_raw6_getfrag+0x10/0x10 [ 84.609855][ T5891] rawv6_sendmsg+0xdab/0xf60 [ 84.609889][ T5891] ? __pfx_rawv6_sendmsg+0x10/0x10 [ 84.609949][ T5891] inet_sendmsg+0xc2/0xd0 [ 84.610031][ T5891] __sock_sendmsg+0x102/0x180 [ 84.610060][ T5891] sock_write_iter+0x165/0x1b0 [ 84.610113][ T5891] do_iter_readv_writev+0x41e/0x4c0 [ 84.610146][ T5891] vfs_writev+0x2c9/0x870 [ 84.610191][ T5891] do_writev+0xe7/0x210 [ 84.610304][ T5891] __x64_sys_writev+0x45/0x50 [ 84.610332][ T5891] x64_sys_call+0x2006/0x2fb0 [ 84.610355][ T5891] do_syscall_64+0xd0/0x1a0 [ 84.610432][ T5891] ? clear_bhb_loop+0x25/0x80 [ 84.610523][ T5891] ? clear_bhb_loop+0x25/0x80 [ 84.610545][ T5891] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.610567][ T5891] RIP: 0033:0x7fad9139e969 [ 84.610584][ T5891] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 84.610724][ T5891] RSP: 002b:00007fad8fa07038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 84.610745][ T5891] RAX: ffffffffffffffda RBX: 00007fad915c5fa0 RCX: 00007fad9139e969 [ 84.610757][ T5891] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000003 [ 84.610771][ T5891] RBP: 00007fad8fa07090 R08: 0000000000000000 R09: 0000000000000000 [ 84.610787][ T5891] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 84.610799][ T5891] R13: 0000000000000000 R14: 00007fad915c5fa0 R15: 00007ffce0cf8408 [ 84.610821][ T5891] [ 84.703844][ T5895] loop4: detected capacity change from 0 to 512 [ 84.881994][ T5901] loop2: detected capacity change from 0 to 512 [ 84.914414][ T5901] EXT4-fs error (device loop2): ext4_orphan_get:1391: inode #15: comm syz.2.838: casefold flag without casefold feature [ 84.932298][ T5895] EXT4-fs error (device loop4): ext4_orphan_get:1391: inode #15: comm syz.4.841: casefold flag without casefold feature [ 84.945185][ T5901] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.838: couldn't read orphan inode 15 (err -117) [ 84.948134][ T5895] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.841: couldn't read orphan inode 15 (err -117) [ 84.970875][ T5901] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 85.002084][ T5895] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 85.148655][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.180872][ T5916] loop3: detected capacity change from 0 to 1024 [ 85.187709][ T5916] EXT4-fs: Ignoring removed oldalloc option [ 85.237860][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.244455][ T5916] EXT4-fs (loop3): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 85.279804][ T5920] lo: entered allmulticast mode [ 85.291618][ T5916] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 85.306111][ T5925] FAULT_INJECTION: forcing a failure. [ 85.306111][ T5925] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 85.319328][ T5925] CPU: 1 UID: 0 PID: 5925 Comm: syz.4.850 Not tainted 6.15.0-rc5-syzkaller-00032-g0d8d44db295c #0 PREEMPT(voluntary) [ 85.319430][ T5925] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 85.319442][ T5925] Call Trace: [ 85.319449][ T5925] [ 85.319456][ T5925] __dump_stack+0x1d/0x30 [ 85.319480][ T5925] dump_stack_lvl+0xe8/0x140 [ 85.319505][ T5925] dump_stack+0x15/0x1b [ 85.319594][ T5925] should_fail_ex+0x265/0x280 [ 85.319638][ T5925] should_fail+0xb/0x20 [ 85.319667][ T5925] should_fail_usercopy+0x1a/0x20 [ 85.319720][ T5925] _copy_from_user+0x1c/0xb0 [ 85.319747][ T5925] __sys_bpf+0x178/0x790 [ 85.319864][ T5925] __x64_sys_bpf+0x41/0x50 [ 85.319896][ T5925] x64_sys_call+0x2478/0x2fb0 [ 85.320007][ T5925] do_syscall_64+0xd0/0x1a0 [ 85.320030][ T5925] ? clear_bhb_loop+0x25/0x80 [ 85.320061][ T5925] ? clear_bhb_loop+0x25/0x80 [ 85.320081][ T5925] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.320227][ T5925] RIP: 0033:0x7f5394bbe969 [ 85.320277][ T5925] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 85.320300][ T5925] RSP: 002b:00007f5393227038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 85.320354][ T5925] RAX: ffffffffffffffda RBX: 00007f5394de5fa0 RCX: 00007f5394bbe969 [ 85.320366][ T5925] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 85.320393][ T5925] RBP: 00007f5393227090 R08: 0000000000000000 R09: 0000000000000000 [ 85.320408][ T5925] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 85.320500][ T5925] R13: 0000000000000000 R14: 00007f5394de5fa0 R15: 00007ffe64d7eea8 [ 85.320524][ T5925] [ 85.506161][ T5919] lo: left allmulticast mode [ 85.545724][ T5038] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.637954][ T5935] netlink: 'syz.4.853': attribute type 16 has an invalid length. [ 85.646255][ T5935] netlink: 'syz.4.853': attribute type 17 has an invalid length. [ 85.680346][ T5935] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 85.933470][ T5889] syz.1.837 (5889) used greatest stack depth: 6208 bytes left [ 86.067771][ T5968] syzkaller1: entered promiscuous mode [ 86.073343][ T5968] syzkaller1: entered allmulticast mode [ 86.146508][ T5975] loop2: detected capacity change from 0 to 512 [ 86.153862][ T5975] EXT4-fs: Ignoring removed nobh option [ 86.176646][ T5975] EXT4-fs error (device loop2): ext4_do_update_inode:5211: inode #16: comm syz.2.865: corrupted inode contents [ 86.189144][ T5975] EXT4-fs (loop2): Remounting filesystem read-only [ 86.196336][ T5975] EXT4-fs (loop2): 1 truncate cleaned up [ 86.203966][ T5975] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 86.211666][ T5980] IPVS: Error connecting to the multicast addr [ 86.217399][ T3420] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 86.233855][ T3420] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 86.236924][ T5975] ext4 filesystem being mounted at /157/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 86.246960][ T3420] EXT4-fs (loop2): Quota write (off=8, len=24) cancelled because transaction is not started [ 86.271141][ T5982] loop1: detected capacity change from 0 to 1024 [ 86.287161][ T5982] EXT4-fs: Ignoring removed bh option [ 86.298048][ T5982] EXT4-fs: Ignoring removed orlov option [ 86.303903][ T5982] EXT4-fs: Ignoring removed nomblk_io_submit option [ 86.334822][ T5988] netlink: 'syz.3.870': attribute type 10 has an invalid length. [ 86.342772][ T5988] __nla_validate_parse: 9 callbacks suppressed [ 86.342786][ T5988] netlink: 40 bytes leftover after parsing attributes in process `syz.3.870'. [ 86.344938][ T5987] FAULT_INJECTION: forcing a failure. [ 86.344938][ T5987] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 86.350947][ T5982] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 86.357921][ T5987] CPU: 1 UID: 0 PID: 5987 Comm: syz.4.869 Not tainted 6.15.0-rc5-syzkaller-00032-g0d8d44db295c #0 PREEMPT(voluntary) [ 86.357950][ T5987] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 86.357966][ T5987] Call Trace: [ 86.357975][ T5987] [ 86.357984][ T5987] __dump_stack+0x1d/0x30 [ 86.358010][ T5987] dump_stack_lvl+0xe8/0x140 [ 86.358045][ T5987] dump_stack+0x15/0x1b [ 86.358061][ T5987] should_fail_ex+0x265/0x280 [ 86.358099][ T5987] should_fail+0xb/0x20 [ 86.358192][ T5987] should_fail_usercopy+0x1a/0x20 [ 86.358218][ T5987] _copy_from_user+0x1c/0xb0 [ 86.358323][ T5987] kstrtouint_from_user+0x69/0xf0 [ 86.358364][ T5987] ? avc_policy_seqno+0x15/0x30 [ 86.358407][ T5987] proc_fail_nth_write+0x50/0x160 [ 86.358463][ T5987] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 86.358546][ T5987] vfs_write+0x266/0x8d0 [ 86.358640][ T5987] ? vfs_read+0x47f/0x6f0 [ 86.358670][ T5987] ? __rcu_read_unlock+0x4f/0x70 [ 86.358698][ T5987] ? __fget_files+0x184/0x1c0 [ 86.358736][ T5987] ksys_write+0xda/0x1a0 [ 86.358783][ T5987] __x64_sys_write+0x40/0x50 [ 86.358816][ T5987] x64_sys_call+0x2cdd/0x2fb0 [ 86.358843][ T5987] do_syscall_64+0xd0/0x1a0 [ 86.358947][ T5987] ? clear_bhb_loop+0x25/0x80 [ 86.358975][ T5987] ? clear_bhb_loop+0x25/0x80 [ 86.359003][ T5987] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.359030][ T5987] RIP: 0033:0x7f5394bbd41f [ 86.359051][ T5987] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 86.359075][ T5987] RSP: 002b:00007f5393227030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 86.359172][ T5987] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f5394bbd41f [ 86.359188][ T5987] RDX: 0000000000000001 RSI: 00007f53932270a0 RDI: 0000000000000007 [ 86.359204][ T5987] RBP: 00007f5393227090 R08: 0000000000000000 R09: 000000000000001c [ 86.359220][ T5987] R10: 0000000020000845 R11: 0000000000000293 R12: 0000000000000002 [ 86.359235][ T5987] R13: 0000000000000000 R14: 00007f5394de5fa0 R15: 00007ffe64d7eea8 [ 86.359260][ T5987] [ 86.360093][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.611067][ T5988] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.620271][ T5988] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.629195][ T5988] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.638070][ T5988] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.649095][ T5988] team0: Port device geneve1 added [ 86.680210][ T5982] loop1: detected capacity change from 1024 to 64 [ 86.711188][ T6003] loop4: detected capacity change from 0 to 1024 [ 86.711997][ T3313] EXT4-fs warning (device loop1): ext4_empty_dir:3080: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 86.749305][ T6003] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 86.759176][ T3313] EXT4-fs warning (device loop1): ext4_empty_dir:3080: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 86.773972][ T3313] EXT4-fs warning (device loop1): ext4_empty_dir:3080: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 86.789144][ T6003] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 86.799937][ T3313] EXT4-fs warning (device loop1): ext4_empty_dir:3080: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 86.815525][ T3313] EXT4-fs warning (device loop1): ext4_empty_dir:3080: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 86.831621][ T6003] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 86.840203][ T3313] EXT4-fs warning (device loop1): ext4_empty_dir:3080: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 86.854104][ T6003] EXT4-fs (loop4): orphan cleanup on readonly fs [ 86.860896][ T3313] EXT4-fs warning (device loop1): ext4_empty_dir:3080: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 86.875697][ T6003] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5899: Corrupt filesystem [ 86.885586][ T3313] EXT4-fs warning (device loop1): ext4_empty_dir:3080: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 86.899968][ T3313] EXT4-fs warning (device loop1): ext4_empty_dir:3080: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 86.913957][ T3313] EXT4-fs warning (device loop1): ext4_empty_dir:3080: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 86.938567][ T6003] EXT4-fs (loop4): Remounting filesystem read-only [ 86.945458][ T6003] EXT4-fs (loop4): 1 orphan inode deleted [ 86.967686][ T6003] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 86.997507][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.035268][ T4808] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.050126][ T5989] kmmpd-loop1: attempt to access beyond end of device [ 87.050126][ T5989] loop1: rw=14337, sector=128, nr_sectors = 2 limit=64 [ 87.064135][ T5989] Buffer I/O error on dev loop1, logical block 64, lost sync page write [ 87.086077][ T6017] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.881'. [ 87.096509][ T6017] netlink: zone id is out of range [ 87.101936][ T6017] netlink: zone id is out of range [ 87.107600][ T6017] netlink: zone id is out of range [ 87.113174][ T6017] netlink: zone id is out of range [ 87.119051][ T6017] netlink: zone id is out of range [ 87.124255][ T6017] netlink: zone id is out of range [ 87.125041][ T6022] loop4: detected capacity change from 0 to 1024 [ 87.129696][ T6017] netlink: del zone limit has 8 unknown bytes [ 87.138596][ T6022] EXT4-fs: Ignoring removed oldalloc option [ 87.148905][ T6022] EXT4-fs: Ignoring removed i_version option [ 87.162422][ T6022] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 87.272105][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.311435][ T3420] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.359899][ T3420] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.403200][ T3420] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.449762][ T3420] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.580972][ T3420] bridge_slave_1: left allmulticast mode [ 87.586974][ T3420] bridge_slave_1: left promiscuous mode [ 87.592955][ T3420] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.616700][ T3420] bridge_slave_0: left allmulticast mode [ 87.623240][ T3420] bridge_slave_0: left promiscuous mode [ 87.629128][ T3420] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.851436][ T3420] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 87.861500][ T3420] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 87.871729][ T3420] bond0 (unregistering): Released all slaves [ 87.882951][ T6074] ipvlan2: entered promiscuous mode [ 87.888676][ T6074] ipvlan2: entered allmulticast mode [ 87.894140][ T6074] hsr0: entered allmulticast mode [ 87.899294][ T6074] hsr_slave_0: entered allmulticast mode [ 87.905389][ T6074] hsr_slave_1: entered allmulticast mode [ 87.933126][ T6039] chnl_net:caif_netlink_parms(): no params data found [ 87.958322][ T3420] hsr0: left allmulticast mode [ 87.963705][ T3420] veth1_macvtap: left promiscuous mode [ 87.969604][ T3420] veth0_macvtap: left promiscuous mode [ 87.975416][ T3420] veth1_vlan: left promiscuous mode [ 87.981908][ T3420] veth0_vlan: left promiscuous mode [ 88.083006][ T6080] loop3: detected capacity change from 0 to 512 [ 88.100977][ T3420] team0 (unregistering): Port device team_slave_1 removed [ 88.111760][ T3420] team0 (unregistering): Port device team_slave_0 removed [ 88.177283][ T6084] FAULT_INJECTION: forcing a failure. [ 88.177283][ T6084] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 88.190627][ T6084] CPU: 0 UID: 0 PID: 6084 Comm: syz.4.899 Not tainted 6.15.0-rc5-syzkaller-00032-g0d8d44db295c #0 PREEMPT(voluntary) [ 88.190739][ T6084] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 88.190754][ T6084] Call Trace: [ 88.190762][ T6084] [ 88.190771][ T6084] __dump_stack+0x1d/0x30 [ 88.190863][ T6084] dump_stack_lvl+0xe8/0x140 [ 88.190887][ T6084] dump_stack+0x15/0x1b [ 88.190907][ T6084] should_fail_ex+0x265/0x280 [ 88.190944][ T6084] should_fail+0xb/0x20 [ 88.190976][ T6084] should_fail_usercopy+0x1a/0x20 [ 88.191060][ T6084] _copy_from_user+0x1c/0xb0 [ 88.191080][ T6084] __sys_bpf+0x178/0x790 [ 88.191117][ T6084] __x64_sys_bpf+0x41/0x50 [ 88.191227][ T6084] x64_sys_call+0x2478/0x2fb0 [ 88.191252][ T6084] do_syscall_64+0xd0/0x1a0 [ 88.191276][ T6084] ? clear_bhb_loop+0x25/0x80 [ 88.191296][ T6084] ? clear_bhb_loop+0x25/0x80 [ 88.191318][ T6084] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.191402][ T6084] RIP: 0033:0x7f5394bbe969 [ 88.191420][ T6084] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 88.191450][ T6084] RSP: 002b:00007f5393227038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 88.191480][ T6084] RAX: ffffffffffffffda RBX: 00007f5394de5fa0 RCX: 00007f5394bbe969 [ 88.191494][ T6084] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 88.191547][ T6084] RBP: 00007f5393227090 R08: 0000000000000000 R09: 0000000000000000 [ 88.191567][ T6084] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 88.191579][ T6084] R13: 0000000000000000 R14: 00007f5394de5fa0 R15: 00007ffe64d7eea8 [ 88.191596][ T6084] [ 88.360441][ T6080] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 88.383977][ T6080] ext4 filesystem being mounted at /51/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 88.399494][ T6085] loop4: detected capacity change from 0 to 512 [ 88.432386][ T6085] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 88.446156][ T6085] ext4 filesystem being mounted at /171/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 88.475655][ T6039] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.483145][ T6039] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.490616][ T6039] bridge_slave_0: entered allmulticast mode [ 88.499883][ T6039] bridge_slave_0: entered promiscuous mode [ 88.509787][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 88.520417][ T6039] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.527919][ T6039] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.548281][ T29] kauditd_printk_skb: 503 callbacks suppressed [ 88.548301][ T29] audit: type=1400 audit(1746597226.929:3102): avc: denied { mount } for pid=6091 comm="syz.4.900" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 88.578133][ T6039] bridge_slave_1: entered allmulticast mode [ 88.597169][ T6061] syz.0.894 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 88.608217][ T6061] CPU: 1 UID: 0 PID: 6061 Comm: syz.0.894 Not tainted 6.15.0-rc5-syzkaller-00032-g0d8d44db295c #0 PREEMPT(voluntary) [ 88.608248][ T6061] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 88.608260][ T6061] Call Trace: [ 88.608266][ T6061] [ 88.608332][ T6061] __dump_stack+0x1d/0x30 [ 88.608353][ T6061] dump_stack_lvl+0xe8/0x140 [ 88.608371][ T6061] dump_stack+0x15/0x1b [ 88.608386][ T6061] dump_header+0x81/0x220 [ 88.608481][ T6061] oom_kill_process+0x334/0x3f0 [ 88.608505][ T6061] out_of_memory+0x979/0xb80 [ 88.608585][ T6061] ? css_next_descendant_pre+0x138/0x160 [ 88.608671][ T6061] mem_cgroup_out_of_memory+0x13d/0x190 [ 88.608707][ T6061] try_charge_memcg+0x5e2/0x870 [ 88.608754][ T6061] charge_memcg+0x51/0xc0 [ 88.608776][ T6061] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 88.608865][ T6061] __read_swap_cache_async+0x1df/0x350 [ 88.608892][ T6061] swap_cluster_readahead+0x277/0x3e0 [ 88.608921][ T6061] swapin_readahead+0xde/0x6f0 [ 88.608944][ T6061] ? __filemap_get_folio+0x49f/0x650 [ 88.609113][ T6061] ? __rcu_read_unlock+0x34/0x70 [ 88.609134][ T6061] ? swap_cache_get_folio+0x77/0x200 [ 88.609157][ T6061] do_swap_page+0x301/0x2460 [ 88.609223][ T6061] ? cgroup_rstat_updated+0xa3/0x510 [ 88.609255][ T6061] ? __pfx_default_wake_function+0x10/0x10 [ 88.609280][ T6061] handle_mm_fault+0xb60/0x2ae0 [ 88.609378][ T6061] ? mas_walk+0xf2/0x120 [ 88.609469][ T6061] do_user_addr_fault+0x636/0x1090 [ 88.609498][ T6061] ? restore_fpregs_from_fpstate+0x61/0x120 [ 88.609564][ T6061] ? fpregs_restore_userregs+0xbb/0x190 [ 88.609592][ T6061] exc_page_fault+0x54/0xc0 [ 88.609655][ T6061] asm_exc_page_fault+0x26/0x30 [ 88.609675][ T6061] RIP: 0033:0x7fad9125d9fc [ 88.609691][ T6061] Code: 23 83 c0 01 44 39 d0 75 dc 48 89 f0 25 ff 1f 00 00 49 89 34 c1 41 88 3c 00 31 c0 c3 66 90 41 38 3c 10 74 0b 41 88 3c 10 31 c0 <49> 89 34 d1 c3 b8 01 00 00 00 c3 66 0f 1f 84 00 00 00 00 00 48 83 [ 88.609709][ T6061] RSP: 002b:00007ffce0cf8488 EFLAGS: 00010246 [ 88.609752][ T6061] RAX: 0000000000000000 RBX: 00007fad920f5720 RCX: ffffffff816039be [ 88.609765][ T6061] RDX: 00000000000019be RSI: ffffffff844059be RDI: 0000000000000003 [ 88.609777][ T6061] RBP: ffffffff844059be R08: 00007fad915b0000 R09: 00007fad915b2000 [ 88.609789][ T6061] R10: 00000000844059c2 R11: 0000000000000003 R12: 0000000000000003 [ 88.609801][ T6061] R13: 0000000000000000 R14: ffffffff84405aa7 R15: 000000000000000b [ 88.609855][ T6061] ? __copy_msghdr+0x107/0x300 [ 88.609874][ T6061] ? __copy_msghdr+0x1e/0x300 [ 88.609892][ T6061] ? bpf_prog_calc_tag+0x1e/0x3c0 [ 88.609976][ T6061] ? __copy_msghdr+0x1e/0x300 [ 88.609994][ T6061] [ 88.610002][ T6061] memory: usage 307200kB, limit 307200kB, failcnt 187 [ 88.638825][ T6039] bridge_slave_1: entered promiscuous mode [ 88.639225][ T6061] memory+swap: usage 307396kB, limit 9007199254740988kB, failcnt 0 [ 88.704348][ T29] audit: type=1400 audit(1746597226.979:3103): avc: denied { unmount } for pid=3304 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 88.710427][ T6061] kmem: usage 307196kB, limit 9007199254740988kB, failcnt 0 [ 88.710460][ T6061] Memory cgroup stats for [ 88.831470][ T6098] netlink: 'syz.2.902': attribute type 13 has an invalid length. [ 88.833769][ T6061] /syz0: [ 88.836686][ T6061] cache 0 [ 88.949920][ T6061] rss 4096 [ 88.952971][ T6061] shmem 0 [ 88.956090][ T6061] mapped_file 0 [ 88.959697][ T6061] dirty 0 [ 88.963096][ T6061] writeback 4096 [ 88.966710][ T6061] workingset_refault_anon 1064 [ 88.972150][ T6061] workingset_refault_file 79 [ 88.977041][ T6061] swap 200704 [ 88.980692][ T6061] swapcached 4096 [ 88.984344][ T6061] pgpgin 54505 [ 88.987787][ T6061] pgpgout 54504 [ 88.991416][ T6061] pgfault 72478 [ 88.994878][ T6061] pgmajfault 170 [ 88.998761][ T6061] inactive_anon 4096 [ 89.002761][ T6061] active_anon 0 [ 89.006600][ T6061] inactive_file 0 [ 89.010397][ T6061] active_file 0 [ 89.013938][ T6061] unevictable 0 [ 89.017543][ T6061] hierarchical_memory_limit 314572800 [ 89.023058][ T6061] hierarchical_memsw_limit 9223372036854771712 [ 89.029855][ T6061] total_cache 0 [ 89.033765][ T6061] total_rss 4096 [ 89.037312][ T6061] total_shmem 0 [ 89.040910][ T6061] total_mapped_file 0 [ 89.044954][ T6061] total_dirty 0 [ 89.048524][ T6061] total_writeback 4096 [ 89.052734][ T6061] total_workingset_refault_anon 1064 [ 89.058212][ T6061] total_workingset_refault_file 79 [ 89.063406][ T6061] total_swap 200704 [ 89.067406][ T6061] total_swapcached 4096 [ 89.071693][ T6061] total_pgpgin 54511 [ 89.075590][ T6061] total_pgpgout 54510 [ 89.079609][ T6061] total_pgfault 72503 [ 89.083601][ T6061] total_pgmajfault 170 [ 89.087832][ T6061] total_inactive_anon 4096 [ 89.092307][ T6061] total_active_anon 0 [ 89.096393][ T6061] total_inactive_file 0 [ 89.100668][ T6061] total_active_file 0 [ 89.104998][ T6061] total_unevictable 0 [ 89.109039][ T6061] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.894,pid=6061,uid=0 [ 89.124231][ T6061] Memory cgroup out of memory: Killed process 6061 (syz.0.894) total-vm:93748kB, anon-rss:936kB, file-rss:22312kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 89.162780][ T5038] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 89.224967][ T29] audit: type=1400 audit(1746597227.599:3104): avc: denied { sys_ptrace } for pid=6101 comm="syz.3.903" capability=19 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 89.255411][ T29] audit: type=1326 audit(1746597227.639:3105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6099 comm="syz.4.904" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5394bbe969 code=0x7ffc0000 [ 89.280632][ T29] audit: type=1326 audit(1746597227.639:3106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6099 comm="syz.4.904" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5394bbe969 code=0x7ffc0000 [ 89.306252][ T29] audit: type=1326 audit(1746597227.639:3107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6099 comm="syz.4.904" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5394bbe969 code=0x7ffc0000 [ 89.329895][ T29] audit: type=1326 audit(1746597227.639:3108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6099 comm="syz.4.904" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5394bbe969 code=0x7ffc0000 [ 89.353776][ T29] audit: type=1326 audit(1746597227.639:3109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6099 comm="syz.4.904" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f5394bbe969 code=0x7ffc0000 [ 89.377517][ T29] audit: type=1326 audit(1746597227.639:3110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6099 comm="syz.4.904" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f5394bbe9a3 code=0x7ffc0000 [ 89.400922][ T29] audit: type=1326 audit(1746597227.639:3111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6099 comm="syz.4.904" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f5394bbe9a3 code=0x7ffc0000 [ 89.430596][ T6098] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.438185][ T6098] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.450694][ T6106] netlink: 24 bytes leftover after parsing attributes in process `syz.3.905'. [ 89.561266][ T6098] hsr0: left allmulticast mode [ 89.566154][ T6098] hsr_slave_0: left allmulticast mode [ 89.571909][ T6098] hsr_slave_1: left allmulticast mode [ 89.583920][ T6098] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.592991][ T6098] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.602305][ T6098] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.610957][ T6098] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.629503][ T6039] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.666972][ T6039] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.690904][ T6039] team0: Port device team_slave_0 added [ 89.701908][ T6039] team0: Port device team_slave_1 added [ 89.712259][ T6113] Cannot find add_set index 0 as target [ 89.739761][ T6039] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.743420][ T6117] loop3: detected capacity change from 0 to 512 [ 89.746806][ T6039] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.746839][ T6039] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.750386][ T6039] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.798266][ T6039] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.820909][ T6117] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 89.825319][ T6039] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.839406][ T6117] ext4 filesystem being mounted at /55/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 89.916454][ T6039] hsr_slave_0: entered promiscuous mode [ 89.923425][ T6039] hsr_slave_1: entered promiscuous mode [ 89.929817][ T6039] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 89.937852][ T6039] Cannot create hsr debugfs directory [ 90.054612][ T6039] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 90.063963][ T6039] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 90.074072][ T6039] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 90.084066][ T6039] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 90.102614][ T5038] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.169789][ T6039] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.169821][ T6136] loop3: detected capacity change from 0 to 256 [ 90.185562][ T6136] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 90.195791][ T6136] FAT-fs (loop3): Filesystem has been set read-only [ 90.202836][ T6136] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 90.214683][ T6136] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 90.232846][ T6039] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.243874][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.251074][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.276810][ T6139] pim6reg: entered allmulticast mode [ 90.287927][ T3420] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.295446][ T3420] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.310045][ T6139] pim6reg: left allmulticast mode [ 90.415287][ T6144] tipc: Started in network mode [ 90.420401][ T6144] tipc: Node identity ac14140f, cluster identity 4711 [ 90.427459][ T6144] tipc: New replicast peer: 10.1.1.2 [ 90.433266][ T6144] tipc: Enabled bearer , priority 10 [ 90.457478][ T6139] loop4: detected capacity change from 0 to 128 [ 90.496542][ T6039] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.632585][ T6152] hub 4-0:1.0: USB hub found [ 90.638235][ T6152] hub 4-0:1.0: 8 ports detected [ 90.687480][ T6161] loop2: detected capacity change from 0 to 1024 [ 90.704525][ T6039] veth0_vlan: entered promiscuous mode [ 90.715711][ T6161] EXT4-fs: Ignoring removed orlov option [ 90.734572][ T6161] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 90.739090][ T6039] veth1_vlan: entered promiscuous mode [ 90.768927][ T6039] veth0_macvtap: entered promiscuous mode [ 90.776368][ T6039] veth1_macvtap: entered promiscuous mode [ 90.788782][ T6039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.799471][ T6039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.810172][ T6039] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.819204][ T6039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.830019][ T6039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.841039][ T6039] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.877495][ T6176] FAULT_INJECTION: forcing a failure. [ 90.877495][ T6176] name failslab, interval 1, probability 0, space 0, times 0 [ 90.891250][ T6176] CPU: 1 UID: 0 PID: 6176 Comm: syz.0.922 Not tainted 6.15.0-rc5-syzkaller-00032-g0d8d44db295c #0 PREEMPT(voluntary) [ 90.891305][ T6176] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 90.891322][ T6176] Call Trace: [ 90.891329][ T6176] [ 90.891338][ T6176] __dump_stack+0x1d/0x30 [ 90.891428][ T6176] dump_stack_lvl+0xe8/0x140 [ 90.891453][ T6176] dump_stack+0x15/0x1b [ 90.891474][ T6176] should_fail_ex+0x265/0x280 [ 90.891519][ T6176] should_failslab+0x8c/0xb0 [ 90.891627][ T6176] __kmalloc_node_track_caller_noprof+0xa4/0x410 [ 90.891650][ T6176] ? sidtab_sid2str_get+0xa0/0x130 [ 90.891702][ T6176] ? skb_put+0xa9/0xf0 [ 90.891799][ T6176] kmemdup_noprof+0x2b/0x70 [ 90.891817][ T6176] sidtab_sid2str_get+0xa0/0x130 [ 90.891852][ T6176] security_sid_to_context_core+0x1eb/0x2e0 [ 90.891916][ T6176] security_sid_to_context+0x27/0x40 [ 90.891949][ T6176] avc_audit_post_callback+0x9d/0x520 [ 90.892091][ T6176] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 90.892243][ T6176] common_lsm_audit+0x1b8/0x230 [ 90.892275][ T6176] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 90.892448][ T6176] ? avc_denied+0xe4/0x100 [ 90.892488][ T6176] slow_avc_audit+0x104/0x140 [ 90.892523][ T6176] avc_has_perm+0x128/0x150 [ 90.892616][ T6176] selinux_socket_connect_helper+0x19a/0x4b0 [ 90.892657][ T6176] selinux_socket_connect+0x31/0x70 [ 90.892678][ T6176] security_socket_connect+0x48/0x80 [ 90.892738][ T6176] __sys_connect+0x181/0x2b0 [ 90.892781][ T6176] __x64_sys_connect+0x3f/0x50 [ 90.892817][ T6176] x64_sys_call+0x1daa/0x2fb0 [ 90.892860][ T6176] do_syscall_64+0xd0/0x1a0 [ 90.892881][ T6176] ? clear_bhb_loop+0x25/0x80 [ 90.892905][ T6176] ? clear_bhb_loop+0x25/0x80 [ 90.892932][ T6176] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.892959][ T6176] RIP: 0033:0x7fad9139e969 [ 90.893039][ T6176] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 90.893081][ T6176] RSP: 002b:00007fad8fa07038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 90.893104][ T6176] RAX: ffffffffffffffda RBX: 00007fad915c5fa0 RCX: 00007fad9139e969 [ 90.893177][ T6176] RDX: 0000000000000010 RSI: 0000200000000000 RDI: 0000000000000005 [ 90.893192][ T6176] RBP: 00007fad8fa07090 R08: 0000000000000000 R09: 0000000000000000 [ 90.893208][ T6176] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 90.893223][ T6176] R13: 0000000000000000 R14: 00007fad915c5fa0 R15: 00007ffce0cf8408 [ 90.893245][ T6176] [ 90.899508][ T6039] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.161324][ T6039] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.170127][ T6039] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.178927][ T6039] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.221961][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.293915][ T6182] netlink: 132 bytes leftover after parsing attributes in process `syz.2.923'. [ 91.387900][ T6203] netlink: 8 bytes leftover after parsing attributes in process `syz.4.929'. [ 91.412522][ T6201] pim6reg: entered allmulticast mode [ 91.423189][ T6201] pim6reg: left allmulticast mode [ 91.456185][ T6213] loop3: detected capacity change from 0 to 512 [ 91.463778][ T6213] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 91.526070][ T6213] EXT4-fs error (device loop3): ext4_get_branch:178: inode #11: block 4294967295: comm syz.3.931: invalid block [ 91.540483][ T6213] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.931: invalid indirect mapped block 4294967295 (level 1) [ 91.561435][ T6213] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.931: invalid indirect mapped block 4294967295 (level 1) [ 91.579765][ T3380] tipc: Node number set to 2886997007 [ 91.636761][ T6213] EXT4-fs (loop3): 2 truncates cleaned up [ 91.644864][ T6222] netlink: 'syz.4.934': attribute type 13 has an invalid length. [ 91.661341][ T6222] netlink: 24859 bytes leftover after parsing attributes in process `syz.4.934'. [ 91.676527][ T6213] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 91.734308][ T6213] netlink: 8 bytes leftover after parsing attributes in process `syz.3.931'. [ 91.751910][ T6213] ip6gre1: entered allmulticast mode [ 91.831980][ T6213] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.931: bg 0: block 5: invalid block bitmap [ 91.854887][ T6214] loop2: detected capacity change from 0 to 128 [ 91.882039][ T5038] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.961363][ T6226] loop3: detected capacity change from 0 to 256 [ 91.993587][ T6226] FAULT_INJECTION: forcing a failure. [ 91.993587][ T6226] name failslab, interval 1, probability 0, space 0, times 0 [ 92.006779][ T6226] CPU: 1 UID: 0 PID: 6226 Comm: syz.3.935 Not tainted 6.15.0-rc5-syzkaller-00032-g0d8d44db295c #0 PREEMPT(voluntary) [ 92.006818][ T6226] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 92.006834][ T6226] Call Trace: [ 92.006842][ T6226] [ 92.006852][ T6226] __dump_stack+0x1d/0x30 [ 92.006877][ T6226] dump_stack_lvl+0xe8/0x140 [ 92.006902][ T6226] dump_stack+0x15/0x1b [ 92.006923][ T6226] should_fail_ex+0x265/0x280 [ 92.006972][ T6226] should_failslab+0x8c/0xb0 [ 92.007005][ T6226] kmem_cache_alloc_noprof+0x50/0x310 [ 92.007133][ T6226] ? getname_flags+0x80/0x3b0 [ 92.007172][ T6226] getname_flags+0x80/0x3b0 [ 92.007209][ T6226] do_sys_openat2+0x60/0x110 [ 92.007241][ T6226] __x64_sys_openat+0xf2/0x120 [ 92.007311][ T6226] x64_sys_call+0x1af/0x2fb0 [ 92.007339][ T6226] do_syscall_64+0xd0/0x1a0 [ 92.007367][ T6226] ? clear_bhb_loop+0x25/0x80 [ 92.007395][ T6226] ? clear_bhb_loop+0x25/0x80 [ 92.007422][ T6226] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 92.007497][ T6226] RIP: 0033:0x7fd0d249e969 [ 92.007540][ T6226] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 92.007563][ T6226] RSP: 002b:00007fd0d0b07038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 92.007585][ T6226] RAX: ffffffffffffffda RBX: 00007fd0d26c5fa0 RCX: 00007fd0d249e969 [ 92.007601][ T6226] RDX: 0000000000105042 RSI: 0000200000000180 RDI: ffffffffffffff9c [ 92.007616][ T6226] RBP: 00007fd0d0b07090 R08: 0000000000000000 R09: 0000000000000000 [ 92.007661][ T6226] R10: 0000000000000189 R11: 0000000000000246 R12: 0000000000000001 [ 92.007676][ T6226] R13: 0000000000000000 R14: 00007fd0d26c5fa0 R15: 00007ffc77fc5968 [ 92.007700][ T6226] [ 92.455458][ T6264] loop4: detected capacity change from 0 to 512 [ 92.509058][ T6264] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 92.522916][ T6264] ext4 filesystem being mounted at /185/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 92.549286][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.151700][ T6283] FAULT_INJECTION: forcing a failure. [ 93.151700][ T6283] name failslab, interval 1, probability 0, space 0, times 0 [ 93.164524][ T6283] CPU: 0 UID: 0 PID: 6283 Comm: syz.3.953 Not tainted 6.15.0-rc5-syzkaller-00032-g0d8d44db295c #0 PREEMPT(voluntary) [ 93.164608][ T6283] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 93.164623][ T6283] Call Trace: [ 93.164631][ T6283] [ 93.164641][ T6283] __dump_stack+0x1d/0x30 [ 93.164667][ T6283] dump_stack_lvl+0xe8/0x140 [ 93.164691][ T6283] dump_stack+0x15/0x1b [ 93.164738][ T6283] should_fail_ex+0x265/0x280 [ 93.164797][ T6283] should_failslab+0x8c/0xb0 [ 93.164824][ T6283] __kmalloc_node_track_caller_noprof+0xa4/0x410 [ 93.164844][ T6283] ? kstrdup_const+0x3e/0x50 [ 93.164860][ T6283] kstrdup+0x3e/0xd0 [ 93.164919][ T6283] kstrdup_const+0x3e/0x50 [ 93.164934][ T6283] alloc_vfsmnt+0xe7/0x350 [ 93.165068][ T6283] clone_mnt+0x41/0x750 [ 93.165086][ T6283] copy_tree+0xb7/0x820 [ 93.165160][ T6283] ? proc_alloc_inum+0x4f/0x70 [ 93.165187][ T6283] copy_mnt_ns+0x120/0x5e0 [ 93.165207][ T6283] ? kmem_cache_alloc_noprof+0x220/0x310 [ 93.165235][ T6283] ? create_new_namespaces+0x3c/0x410 [ 93.165333][ T6283] create_new_namespaces+0x83/0x410 [ 93.165362][ T6283] unshare_nsproxy_namespaces+0xe8/0x120 [ 93.165425][ T6283] ksys_unshare+0x3d0/0x6d0 [ 93.165450][ T6283] ? ksys_write+0x16e/0x1a0 [ 93.165475][ T6283] __x64_sys_unshare+0x1f/0x30 [ 93.165553][ T6283] x64_sys_call+0x2d4b/0x2fb0 [ 93.165580][ T6283] do_syscall_64+0xd0/0x1a0 [ 93.165634][ T6283] ? clear_bhb_loop+0x25/0x80 [ 93.165689][ T6283] ? clear_bhb_loop+0x25/0x80 [ 93.165725][ T6283] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.165743][ T6283] RIP: 0033:0x7fd0d249e969 [ 93.165756][ T6283] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 93.165772][ T6283] RSP: 002b:00007fd0d0b07038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 93.165812][ T6283] RAX: ffffffffffffffda RBX: 00007fd0d26c5fa0 RCX: 00007fd0d249e969 [ 93.165822][ T6283] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020060400 [ 93.165832][ T6283] RBP: 00007fd0d0b07090 R08: 0000000000000000 R09: 0000000000000000 [ 93.165843][ T6283] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 93.165852][ T6283] R13: 0000000000000000 R14: 00007fd0d26c5fa0 R15: 00007ffc77fc5968 [ 93.165923][ T6283] [ 93.454678][ T6287] loop2: detected capacity change from 0 to 4096 [ 93.463095][ T6287] EXT4-fs error (device loop2): ext4_ext_check_inode:524: inode #3: comm syz.2.955: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 93.482283][ T6287] EXT4-fs error (device loop2): ext4_quota_enable:7129: comm syz.2.955: Bad quota inode: 3, type: 0 [ 93.494379][ T6287] EXT4-fs warning (device loop2): ext4_enable_quotas:7170: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 93.528836][ T6287] EXT4-fs (loop2): mount failed [ 93.561272][ T29] kauditd_printk_skb: 748 callbacks suppressed [ 93.561290][ T29] audit: type=1400 audit(1746597231.939:3860): avc: denied { create } for pid=6300 comm="syz.5.959" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 93.587747][ T29] audit: type=1400 audit(1746597231.939:3861): avc: denied { ioctl } for pid=6300 comm="syz.5.959" path="socket:[16315]" dev="sockfs" ino=16315 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 93.642157][ T29] audit: type=1400 audit(1746597232.029:3862): avc: denied { create } for pid=6305 comm="syz.5.960" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 93.662837][ T29] audit: type=1400 audit(1746597232.029:3863): avc: denied { setopt } for pid=6305 comm="syz.5.960" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 93.706895][ T6306] loop5: detected capacity change from 0 to 512 [ 93.721810][ T29] audit: type=1400 audit(1746597232.069:3864): avc: denied { create } for pid=6296 comm="syz.4.958" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 93.741494][ T29] audit: type=1400 audit(1746597232.079:3865): avc: denied { write } for pid=6305 comm="syz.5.960" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 93.762439][ T6306] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 93.809644][ T29] audit: type=1400 audit(1746597232.189:3866): avc: denied { bind } for pid=6309 comm="syz.3.961" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 93.829498][ T29] audit: type=1400 audit(1746597232.189:3867): avc: denied { setopt } for pid=6309 comm="syz.3.961" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 93.849156][ T29] audit: type=1400 audit(1746597232.189:3868): avc: denied { connect } for pid=6309 comm="syz.3.961" lport=60 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 93.903170][ T29] audit: type=1400 audit(1746597232.199:3869): avc: denied { create } for pid=6313 comm="syz.4.963" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 93.934906][ T6308] netlink: 40 bytes leftover after parsing attributes in process `syz.2.955'. [ 93.988540][ T6321] loop5: detected capacity change from 0 to 2048 [ 94.020511][ T6321] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 94.042721][ T6326] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 94.108029][ T6039] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.136456][ T6332] pim6reg: entered allmulticast mode [ 94.143429][ T6332] pim6reg: left allmulticast mode [ 94.209390][ T6339] loop5: detected capacity change from 0 to 256 [ 94.224759][ T6332] loop3: detected capacity change from 0 to 128 [ 94.277187][ T6342] FAULT_INJECTION: forcing a failure. [ 94.277187][ T6342] name failslab, interval 1, probability 0, space 0, times 0 [ 94.290188][ T6342] CPU: 1 UID: 0 PID: 6342 Comm: syz.3.972 Not tainted 6.15.0-rc5-syzkaller-00032-g0d8d44db295c #0 PREEMPT(voluntary) [ 94.290216][ T6342] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 94.290233][ T6342] Call Trace: [ 94.290241][ T6342] [ 94.290251][ T6342] __dump_stack+0x1d/0x30 [ 94.290276][ T6342] dump_stack_lvl+0xe8/0x140 [ 94.290306][ T6342] dump_stack+0x15/0x1b [ 94.290324][ T6342] should_fail_ex+0x265/0x280 [ 94.290354][ T6342] ? tcf_proto_create+0x44/0x1a0 [ 94.290447][ T6342] should_failslab+0x8c/0xb0 [ 94.290500][ T6342] __kmalloc_cache_noprof+0x4c/0x320 [ 94.290525][ T6342] tcf_proto_create+0x44/0x1a0 [ 94.290547][ T6342] tc_new_tfilter+0x95c/0x10a0 [ 94.290658][ T6342] ? ns_capable+0x7d/0xb0 [ 94.290676][ T6342] ? __pfx_tc_new_tfilter+0x10/0x10 [ 94.290756][ T6342] rtnetlink_rcv_msg+0x5fb/0x6d0 [ 94.290776][ T6342] ? avc_has_perm_noaudit+0x1b1/0x200 [ 94.290875][ T6342] netlink_rcv_skb+0x120/0x220 [ 94.290970][ T6342] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 94.290996][ T6342] rtnetlink_rcv+0x1c/0x30 [ 94.291107][ T6342] netlink_unicast+0x59e/0x670 [ 94.291135][ T6342] netlink_sendmsg+0x58b/0x6b0 [ 94.291204][ T6342] ? __pfx_netlink_sendmsg+0x10/0x10 [ 94.291278][ T6342] __sock_sendmsg+0x142/0x180 [ 94.291301][ T6342] ____sys_sendmsg+0x31e/0x4e0 [ 94.291371][ T6342] ___sys_sendmsg+0x17b/0x1d0 [ 94.291457][ T6342] __x64_sys_sendmsg+0xd4/0x160 [ 94.291477][ T6342] x64_sys_call+0x2999/0x2fb0 [ 94.291495][ T6342] do_syscall_64+0xd0/0x1a0 [ 94.291513][ T6342] ? clear_bhb_loop+0x25/0x80 [ 94.291531][ T6342] ? clear_bhb_loop+0x25/0x80 [ 94.291617][ T6342] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.291643][ T6342] RIP: 0033:0x7fd0d249e969 [ 94.291662][ T6342] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 94.291735][ T6342] RSP: 002b:00007fd0d0b07038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 94.291751][ T6342] RAX: ffffffffffffffda RBX: 00007fd0d26c5fa0 RCX: 00007fd0d249e969 [ 94.291762][ T6342] RDX: 0000000000000000 RSI: 00002000000003c0 RDI: 0000000000000004 [ 94.291783][ T6342] RBP: 00007fd0d0b07090 R08: 0000000000000000 R09: 0000000000000000 [ 94.291793][ T6342] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 94.291803][ T6342] R13: 0000000000000000 R14: 00007fd0d26c5fa0 R15: 00007ffc77fc5968 [ 94.291885][ T6342] [ 95.012710][ T6380] batadv1: entered allmulticast mode [ 95.020308][ T6380] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 95.030127][ T6380] bridge0: port 3(batadv1) entered blocking state [ 95.036637][ T6380] bridge0: port 3(batadv1) entered disabled state [ 95.045251][ T6380] batadv1: entered promiscuous mode [ 95.051179][ T6380] bridge0: port 3(batadv1) entered blocking state [ 95.058063][ T6380] bridge0: port 3(batadv1) entered forwarding state [ 95.214498][ T6394] loop3: detected capacity change from 0 to 4096 [ 95.223475][ T6394] EXT4-fs error (device loop3): ext4_ext_check_inode:524: inode #3: comm syz.3.987: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 95.242891][ T6394] EXT4-fs error (device loop3): ext4_quota_enable:7129: comm syz.3.987: Bad quota inode: 3, type: 0 [ 95.255133][ T6394] EXT4-fs warning (device loop3): ext4_enable_quotas:7170: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 95.270645][ T6394] EXT4-fs (loop3): mount failed [ 95.334208][ T6402] pim6reg: entered allmulticast mode [ 95.345527][ T6402] pim6reg: left allmulticast mode [ 95.406238][ T3378] IPVS: starting estimator thread 0... [ 95.422912][ T6404] SELinux: syz.4.991 (6404) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 95.502394][ T6407] netlink: 32 bytes leftover after parsing attributes in process `syz.3.987'. [ 95.503015][ T6406] IPVS: using max 2448 ests per chain, 122400 per kthread [ 95.528494][ T582] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 95.538191][ T582] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 95.586697][ T6413] loop2: detected capacity change from 0 to 1024 [ 95.593658][ T6413] EXT4-fs: Ignoring removed mblk_io_submit option [ 95.600436][ T6413] EXT4-fs: Ignoring removed nobh option [ 95.606078][ T6413] EXT4-fs: Ignoring removed bh option [ 95.619149][ T6413] EXT4-fs (loop2): can't mount with journal_checksum, fs mounted w/o journal [ 95.642503][ T6415] pimreg: tun_chr_ioctl cmd 2147767507 [ 95.699521][ T6422] bond0: (slave vlan2): Opening slave failed [ 95.737449][ T6420] FAULT_INJECTION: forcing a failure. [ 95.737449][ T6420] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 95.751097][ T6420] CPU: 1 UID: 0 PID: 6420 Comm: syz.0.995 Not tainted 6.15.0-rc5-syzkaller-00032-g0d8d44db295c #0 PREEMPT(voluntary) [ 95.751137][ T6420] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 95.751151][ T6420] Call Trace: [ 95.751156][ T6420] [ 95.751164][ T6420] __dump_stack+0x1d/0x30 [ 95.751257][ T6420] dump_stack_lvl+0xe8/0x140 [ 95.751277][ T6420] dump_stack+0x15/0x1b [ 95.751294][ T6420] should_fail_ex+0x265/0x280 [ 95.751327][ T6420] should_fail+0xb/0x20 [ 95.751356][ T6420] should_fail_usercopy+0x1a/0x20 [ 95.751436][ T6420] _copy_to_iter+0xcf/0xdd0 [ 95.751456][ T6420] ? __pfx_woken_wake_function+0x10/0x10 [ 95.751482][ T6420] tty_read+0x1a9/0x470 [ 95.751528][ T6420] ? _parse_integer_limit+0x170/0x190 [ 95.751607][ T6420] ? __import_iovec+0x428/0x540 [ 95.751635][ T6420] do_iter_readv_writev+0x41e/0x4c0 [ 95.751673][ T6420] vfs_readv+0x1e3/0x670 [ 95.751820][ T6420] do_readv+0xe7/0x210 [ 95.751899][ T6420] __x64_sys_readv+0x45/0x50 [ 95.751959][ T6420] x64_sys_call+0x29af/0x2fb0 [ 95.751981][ T6420] do_syscall_64+0xd0/0x1a0 [ 95.752003][ T6420] ? clear_bhb_loop+0x25/0x80 [ 95.752025][ T6420] ? clear_bhb_loop+0x25/0x80 [ 95.752054][ T6420] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.752075][ T6420] RIP: 0033:0x7fad9139e969 [ 95.752092][ T6420] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 95.752172][ T6420] RSP: 002b:00007fad8fa07038 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 95.752192][ T6420] RAX: ffffffffffffffda RBX: 00007fad915c5fa0 RCX: 00007fad9139e969 [ 95.752204][ T6420] RDX: 0000000000000001 RSI: 0000200000000000 RDI: 0000000000000005 [ 95.752216][ T6420] RBP: 00007fad8fa07090 R08: 0000000000000000 R09: 0000000000000000 [ 95.752228][ T6420] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 95.752292][ T6420] R13: 0000000000000000 R14: 00007fad915c5fa0 R15: 00007ffce0cf8408 [ 95.752310][ T6420] [ 96.035137][ T3382] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 96.046974][ T3382] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 96.124245][ T6456] netlink: 20 bytes leftover after parsing attributes in process `syz.0.999'. [ 96.135507][ T6456] : renamed from bond0 (while UP) [ 96.141585][ T6455] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1005'. [ 96.300682][ T6463] loop4: detected capacity change from 0 to 1024 [ 96.308649][ T6463] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (52289!=20869) [ 96.318690][ T6463] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 96.336020][ T6463] EXT4-fs (loop4): invalid journal inode [ 96.344251][ T6473] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.383485][ T6475] xt_hashlimit: size too large, truncated to 1048576 [ 96.398553][ T6473] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.547167][ T6473] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.621470][ T6473] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.742090][ T6473] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.771919][ T6473] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.799589][ T6473] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.834677][ T6473] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.872354][ T6489] loop5: detected capacity change from 0 to 4096 [ 97.012100][ T6495] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1019'. [ 97.042290][ T6496] FAULT_INJECTION: forcing a failure. [ 97.042290][ T6496] name failslab, interval 1, probability 0, space 0, times 0 [ 97.055394][ T6496] CPU: 0 UID: 0 PID: 6496 Comm: syz.3.1018 Not tainted 6.15.0-rc5-syzkaller-00032-g0d8d44db295c #0 PREEMPT(voluntary) [ 97.055424][ T6496] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 97.055440][ T6496] Call Trace: [ 97.055448][ T6496] [ 97.055456][ T6496] __dump_stack+0x1d/0x30 [ 97.055481][ T6496] dump_stack_lvl+0xe8/0x140 [ 97.055564][ T6496] dump_stack+0x15/0x1b [ 97.055585][ T6496] should_fail_ex+0x265/0x280 [ 97.055620][ T6496] should_failslab+0x8c/0xb0 [ 97.055801][ T6496] kmem_cache_alloc_noprof+0x50/0x310 [ 97.055846][ T6496] ? getname_flags+0x80/0x3b0 [ 97.055917][ T6496] getname_flags+0x80/0x3b0 [ 97.055955][ T6496] do_mq_open+0xd6/0x4b0 [ 97.056028][ T6496] __x64_sys_mq_open+0xcb/0x100 [ 97.056067][ T6496] x64_sys_call+0x27d6/0x2fb0 [ 97.056092][ T6496] do_syscall_64+0xd0/0x1a0 [ 97.056117][ T6496] ? clear_bhb_loop+0x25/0x80 [ 97.056144][ T6496] ? clear_bhb_loop+0x25/0x80 [ 97.056218][ T6496] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.056304][ T6496] RIP: 0033:0x7fd0d249e969 [ 97.056323][ T6496] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 97.056341][ T6496] RSP: 002b:00007fd0d0b07038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f0 [ 97.056362][ T6496] RAX: ffffffffffffffda RBX: 00007fd0d26c5fa0 RCX: 00007fd0d249e969 [ 97.056378][ T6496] RDX: 000000000000000c RSI: 0000000000000080 RDI: 0000000000000000 [ 97.056394][ T6496] RBP: 00007fd0d0b07090 R08: 0000000000000000 R09: 0000000000000000 [ 97.056408][ T6496] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 97.056498][ T6496] R13: 0000000000000000 R14: 00007fd0d26c5fa0 R15: 00007ffc77fc5968 [ 97.056595][ T6496] [ 97.284492][ T6489] EXT4-fs error (device loop5): ext4_ext_check_inode:524: inode #3: comm syz.5.1017: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 97.304100][ T6489] EXT4-fs error (device loop5): ext4_quota_enable:7129: comm syz.5.1017: Bad quota inode: 3, type: 0 [ 97.316139][ T6489] EXT4-fs warning (device loop5): ext4_enable_quotas:7170: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 97.334494][ T6489] EXT4-fs (loop5): mount failed [ 97.338123][ T6500] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1022'. [ 97.348560][ T6500] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1022'. [ 97.409432][ T6506] delete_channel: no stack [ 97.518444][ T6523] FAULT_INJECTION: forcing a failure. [ 97.518444][ T6523] name failslab, interval 1, probability 0, space 0, times 0 [ 97.531983][ T6523] CPU: 0 UID: 0 PID: 6523 Comm: syz.4.1028 Not tainted 6.15.0-rc5-syzkaller-00032-g0d8d44db295c #0 PREEMPT(voluntary) [ 97.532028][ T6523] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 97.532044][ T6523] Call Trace: [ 97.532052][ T6523] [ 97.532062][ T6523] __dump_stack+0x1d/0x30 [ 97.532087][ T6523] dump_stack_lvl+0xe8/0x140 [ 97.532150][ T6523] dump_stack+0x15/0x1b [ 97.532170][ T6523] should_fail_ex+0x265/0x280 [ 97.532212][ T6523] should_failslab+0x8c/0xb0 [ 97.532315][ T6523] kmem_cache_alloc_node_noprof+0x57/0x320 [ 97.532348][ T6523] ? __alloc_skb+0x101/0x320 [ 97.532397][ T6523] __alloc_skb+0x101/0x320 [ 97.532445][ T6523] ? audit_log_start+0x365/0x6c0 [ 97.532526][ T6523] audit_log_start+0x380/0x6c0 [ 97.532565][ T6523] audit_seccomp+0x48/0x100 [ 97.532594][ T6523] ? __seccomp_filter+0x68c/0x10d0 [ 97.532617][ T6523] __seccomp_filter+0x69d/0x10d0 [ 97.532683][ T6523] ? update_load_avg+0x1da/0x820 [ 97.532714][ T6523] ? __list_add_valid_or_report+0x38/0xe0 [ 97.532754][ T6523] ? _raw_spin_unlock+0x26/0x50 [ 97.532855][ T6523] ? finish_task_switch+0xad/0x2b0 [ 97.532886][ T6523] __secure_computing+0x82/0x150 [ 97.532911][ T6523] syscall_trace_enter+0xcf/0x1e0 [ 97.532939][ T6523] do_syscall_64+0xaa/0x1a0 [ 97.532966][ T6523] ? clear_bhb_loop+0x25/0x80 [ 97.533065][ T6523] ? clear_bhb_loop+0x25/0x80 [ 97.533093][ T6523] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.533265][ T6523] RIP: 0033:0x7f5394bbd37c [ 97.533283][ T6523] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 97.533306][ T6523] RSP: 002b:00007f5393227030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 97.533328][ T6523] RAX: ffffffffffffffda RBX: 00007f5394de5fa0 RCX: 00007f5394bbd37c [ 97.533344][ T6523] RDX: 000000000000000f RSI: 00007f53932270a0 RDI: 0000000000000006 [ 97.533425][ T6523] RBP: 00007f5393227090 R08: 0000000000000000 R09: 0000000000000000 [ 97.533441][ T6523] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 97.533536][ T6523] R13: 0000000000000000 R14: 00007f5394de5fa0 R15: 00007ffe64d7eea8 [ 97.533558][ T6523] [ 97.796525][ T6516] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1017'. [ 97.848601][ T6533] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1032'. [ 97.887330][ T6539] FAULT_INJECTION: forcing a failure. [ 97.887330][ T6539] name failslab, interval 1, probability 0, space 0, times 0 [ 97.900126][ T6539] CPU: 0 UID: 0 PID: 6539 Comm: syz.3.1034 Not tainted 6.15.0-rc5-syzkaller-00032-g0d8d44db295c #0 PREEMPT(voluntary) [ 97.900153][ T6539] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 97.900167][ T6539] Call Trace: [ 97.900174][ T6539] [ 97.900195][ T6539] __dump_stack+0x1d/0x30 [ 97.900219][ T6539] dump_stack_lvl+0xe8/0x140 [ 97.900237][ T6539] dump_stack+0x15/0x1b [ 97.900252][ T6539] should_fail_ex+0x265/0x280 [ 97.900294][ T6539] should_failslab+0x8c/0xb0 [ 97.900388][ T6539] kmem_cache_alloc_noprof+0x50/0x310 [ 97.900423][ T6539] ? security_file_alloc+0x32/0x100 [ 97.900492][ T6539] security_file_alloc+0x32/0x100 [ 97.900527][ T6539] init_file+0x5c/0x1d0 [ 97.900564][ T6539] alloc_empty_file+0x8b/0x200 [ 97.900674][ T6539] path_openat+0x68/0x2170 [ 97.900699][ T6539] ? __rcu_read_unlock+0x34/0x70 [ 97.900723][ T6539] ? filemap_map_pages+0x9be/0xab0 [ 97.900776][ T6539] ? _parse_integer_limit+0x170/0x190 [ 97.900813][ T6539] ? cgroup_rstat_updated+0xa3/0x510 [ 97.900900][ T6539] ? kstrtoull+0x111/0x140 [ 97.900933][ T6539] do_filp_open+0x109/0x230 [ 97.900995][ T6539] do_sys_openat2+0xa6/0x110 [ 97.901096][ T6539] __x64_sys_openat+0xf2/0x120 [ 97.901132][ T6539] x64_sys_call+0x1af/0x2fb0 [ 97.901154][ T6539] do_syscall_64+0xd0/0x1a0 [ 97.901174][ T6539] ? clear_bhb_loop+0x25/0x80 [ 97.901196][ T6539] ? clear_bhb_loop+0x25/0x80 [ 97.901229][ T6539] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.901328][ T6539] RIP: 0033:0x7fd0d249d2d0 [ 97.901345][ T6539] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 49 94 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 9c 94 02 00 8b 44 [ 97.901366][ T6539] RSP: 002b:00007fd0d0b06b70 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 97.901452][ T6539] RAX: ffffffffffffffda RBX: 0000000000000402 RCX: 00007fd0d249d2d0 [ 97.901463][ T6539] RDX: 0000000000000402 RSI: 00007fd0d0b06c10 RDI: 00000000ffffff9c [ 97.901474][ T6539] RBP: 00007fd0d0b06c10 R08: 0000000000000000 R09: 0000000000000000 [ 97.901485][ T6539] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 97.901562][ T6539] R13: 0000000000000000 R14: 00007fd0d26c5fa0 R15: 00007ffc77fc5968 [ 97.901581][ T6539] [ 98.195612][ T6546] tipc: Started in network mode [ 98.200700][ T6546] tipc: Node identity ba1d0d812f37, cluster identity 4711 [ 98.207858][ T6546] tipc: Enabled bearer , priority 0 [ 98.237011][ T6546] FAULT_INJECTION: forcing a failure. [ 98.237011][ T6546] name failslab, interval 1, probability 0, space 0, times 0 [ 98.250143][ T6546] CPU: 0 UID: 0 PID: 6546 Comm: syz.4.1037 Not tainted 6.15.0-rc5-syzkaller-00032-g0d8d44db295c #0 PREEMPT(voluntary) [ 98.250254][ T6546] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 98.250270][ T6546] Call Trace: [ 98.250278][ T6546] [ 98.250288][ T6546] __dump_stack+0x1d/0x30 [ 98.250315][ T6546] dump_stack_lvl+0xe8/0x140 [ 98.250338][ T6546] dump_stack+0x15/0x1b [ 98.250353][ T6546] should_fail_ex+0x265/0x280 [ 98.250434][ T6546] should_failslab+0x8c/0xb0 [ 98.250469][ T6546] kmem_cache_alloc_node_noprof+0x57/0x320 [ 98.250555][ T6546] ? __alloc_skb+0x101/0x320 [ 98.250592][ T6546] ? _raw_spin_unlock_irqrestore+0x2b/0x60 [ 98.250626][ T6546] __alloc_skb+0x101/0x320 [ 98.250664][ T6546] inet6_netconf_notify_devconf+0x10f/0x1d0 [ 98.250759][ T6546] addrconf_ifdown+0xd8f/0xf30 [ 98.250798][ T6546] ? __pfx_cbs_dev_notifier+0x10/0x10 [ 98.250841][ T6546] ? __rcu_read_unlock+0x4f/0x70 [ 98.250866][ T6546] ? tls_dev_event+0x3d7/0x910 [ 98.250927][ T6546] addrconf_notify+0x222/0x930 [ 98.250950][ T6546] ? __pfx_addrconf_notify+0x10/0x10 [ 98.250976][ T6546] raw_notifier_call_chain+0x6c/0x1b0 [ 98.251007][ T6546] ? call_netdevice_notifiers_info+0x9c/0x100 [ 98.251035][ T6546] call_netdevice_notifiers_info+0xae/0x100 [ 98.251180][ T6546] unregister_netdevice_many_notify+0xd9a/0x16a0 [ 98.251208][ T6546] unregister_netdevice_queue+0x1f5/0x220 [ 98.251290][ T6546] __tun_detach+0x7db/0xad0 [ 98.251334][ T6546] ? __pfx_tun_chr_close+0x10/0x10 [ 98.251405][ T6546] tun_chr_close+0x5a/0x100 [ 98.251443][ T6546] __fput+0x298/0x650 [ 98.251469][ T6546] fput_close_sync+0x6e/0x120 [ 98.251493][ T6546] __x64_sys_close+0x56/0xf0 [ 98.251525][ T6546] x64_sys_call+0x2747/0x2fb0 [ 98.251547][ T6546] do_syscall_64+0xd0/0x1a0 [ 98.251667][ T6546] ? clear_bhb_loop+0x25/0x80 [ 98.251688][ T6546] ? clear_bhb_loop+0x25/0x80 [ 98.251709][ T6546] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.251756][ T6546] RIP: 0033:0x7f5394bbe969 [ 98.251809][ T6546] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 98.251832][ T6546] RSP: 002b:00007f5393227038 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 98.251849][ T6546] RAX: ffffffffffffffda RBX: 00007f5394de5fa0 RCX: 00007f5394bbe969 [ 98.251861][ T6546] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 98.251872][ T6546] RBP: 00007f5393227090 R08: 0000000000000000 R09: 0000000000000000 [ 98.251883][ T6546] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 98.251960][ T6546] R13: 0000000000000000 R14: 00007f5394de5fa0 R15: 00007ffe64d7eea8 [ 98.251983][ T6546] [ 98.308208][ T6546] tipc: Disabling bearer [ 98.564997][ T6553] FAULT_INJECTION: forcing a failure. [ 98.564997][ T6553] name failslab, interval 1, probability 0, space 0, times 0 [ 98.578031][ T6553] CPU: 1 UID: 0 PID: 6553 Comm: syz.2.1040 Not tainted 6.15.0-rc5-syzkaller-00032-g0d8d44db295c #0 PREEMPT(voluntary) [ 98.578087][ T6553] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 98.578101][ T6553] Call Trace: [ 98.578108][ T6553] [ 98.578117][ T6553] __dump_stack+0x1d/0x30 [ 98.578145][ T6553] dump_stack_lvl+0xe8/0x140 [ 98.578168][ T6553] dump_stack+0x15/0x1b [ 98.578185][ T6553] should_fail_ex+0x265/0x280 [ 98.578218][ T6553] should_failslab+0x8c/0xb0 [ 98.578263][ T6553] kmem_cache_alloc_node_noprof+0x57/0x320 [ 98.578305][ T6553] ? __alloc_skb+0x101/0x320 [ 98.578342][ T6553] __alloc_skb+0x101/0x320 [ 98.578422][ T6553] ? audit_log_start+0x365/0x6c0 [ 98.578451][ T6553] audit_log_start+0x380/0x6c0 [ 98.578547][ T6553] audit_seccomp+0x48/0x100 [ 98.578570][ T6553] ? __seccomp_filter+0x68c/0x10d0 [ 98.578640][ T6553] __seccomp_filter+0x69d/0x10d0 [ 98.578665][ T6553] ? __list_add_valid_or_report+0x38/0xe0 [ 98.578687][ T6553] ? free_frozen_page_commit+0x6e/0x2a0 [ 98.578714][ T6553] __secure_computing+0x82/0x150 [ 98.578763][ T6553] syscall_trace_enter+0xcf/0x1e0 [ 98.578785][ T6553] do_syscall_64+0xaa/0x1a0 [ 98.578849][ T6553] ? clear_bhb_loop+0x25/0x80 [ 98.578928][ T6553] ? clear_bhb_loop+0x25/0x80 [ 98.579004][ T6553] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.579024][ T6553] RIP: 0033:0x7fb6ade7d37c [ 98.579039][ T6553] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 98.579060][ T6553] RSP: 002b:00007fb6ac4e7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 98.579187][ T6553] RAX: ffffffffffffffda RBX: 00007fb6ae0a5fa0 RCX: 00007fb6ade7d37c [ 98.579203][ T6553] RDX: 000000000000000f RSI: 00007fb6ac4e70a0 RDI: 0000000000000005 [ 98.579219][ T6553] RBP: 00007fb6ac4e7090 R08: 0000000000000000 R09: 0000000000000000 [ 98.579231][ T6553] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 98.579357][ T6553] R13: 0000000000000000 R14: 00007fb6ae0a5fa0 R15: 00007ffcf58fb1e8 [ 98.579377][ T6553] [ 98.579387][ T6553] audit_log_lost: 205 callbacks suppressed [ 98.579396][ T6553] audit: audit_lost=5 audit_rate_limit=0 audit_backlog_limit=64 [ 98.608218][ T29] audit: type=1326 audit(1746597236.949:4073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6552 comm="syz.2.1040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7fb6ade7e969 code=0x7ffc0000 [ 98.608962][ T6553] audit: out of memory in audit_log_start [ 98.613247][ T29] audit: type=1326 audit(1746597236.949:4074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6552 comm="syz.2.1040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6ade7e969 code=0x7ffc0000 [ 98.805870][ T6551] loop3: detected capacity change from 0 to 256 [ 98.806087][ T29] audit: type=1326 audit(1746597236.949:4075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6552 comm="syz.2.1040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6ade7e969 code=0x7ffc0000 [ 98.889217][ T29] audit: type=1326 audit(1746597236.949:4076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6552 comm="syz.2.1040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb6ade7d2d0 code=0x7ffc0000 [ 98.912824][ T29] audit: type=1326 audit(1746597236.949:4077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6552 comm="syz.2.1040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fb6ade7d41f code=0x7ffc0000 [ 98.936273][ T29] audit: type=1326 audit(1746597236.949:4078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6552 comm="syz.2.1040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=27 compat=0 ip=0x7fb6ade7e969 code=0x7ffc0000 [ 98.960429][ T29] audit: type=1326 audit(1746597237.069:4079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6552 comm="syz.2.1040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fb6ade7d41f code=0x7ffc0000 [ 98.984737][ T29] audit: type=1326 audit(1746597237.069:4080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6552 comm="syz.2.1040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fb6ade7d5ca code=0x7ffc0000 [ 99.113005][ T6571] FAULT_INJECTION: forcing a failure. [ 99.113005][ T6571] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 99.126284][ T6571] CPU: 0 UID: 0 PID: 6571 Comm: syz.4.1046 Not tainted 6.15.0-rc5-syzkaller-00032-g0d8d44db295c #0 PREEMPT(voluntary) [ 99.126318][ T6571] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 99.126390][ T6571] Call Trace: [ 99.126398][ T6571] [ 99.126408][ T6571] __dump_stack+0x1d/0x30 [ 99.126434][ T6571] dump_stack_lvl+0xe8/0x140 [ 99.126458][ T6571] dump_stack+0x15/0x1b [ 99.126479][ T6571] should_fail_ex+0x265/0x280 [ 99.126518][ T6571] should_fail+0xb/0x20 [ 99.126650][ T6571] should_fail_usercopy+0x1a/0x20 [ 99.126674][ T6571] _copy_to_user+0x20/0xa0 [ 99.126711][ T6571] simple_read_from_buffer+0xb5/0x130 [ 99.126741][ T6571] proc_fail_nth_read+0x100/0x140 [ 99.126777][ T6571] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 99.126800][ T6571] vfs_read+0x19d/0x6f0 [ 99.126823][ T6571] ? __sys_getpeername+0x126/0x180 [ 99.126862][ T6571] ksys_read+0xda/0x1a0 [ 99.126939][ T6571] __x64_sys_read+0x40/0x50 [ 99.126968][ T6571] x64_sys_call+0x2d77/0x2fb0 [ 99.126995][ T6571] do_syscall_64+0xd0/0x1a0 [ 99.127021][ T6571] ? clear_bhb_loop+0x25/0x80 [ 99.127085][ T6571] ? clear_bhb_loop+0x25/0x80 [ 99.127112][ T6571] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.127162][ T6571] RIP: 0033:0x7f5394bbd37c [ 99.127177][ T6571] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 99.127195][ T6571] RSP: 002b:00007f5393227030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 99.127219][ T6571] RAX: ffffffffffffffda RBX: 00007f5394de5fa0 RCX: 00007f5394bbd37c [ 99.127234][ T6571] RDX: 000000000000000f RSI: 00007f53932270a0 RDI: 0000000000000005 [ 99.127299][ T6571] RBP: 00007f5393227090 R08: 0000000000000000 R09: 0000000000000000 [ 99.127323][ T6571] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 99.127339][ T6571] R13: 0000000000000000 R14: 00007f5394de5fa0 R15: 00007ffe64d7eea8 [ 99.127362][ T6571] [ 99.389370][ T6583] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1050'. [ 99.450852][ T6589] FAULT_INJECTION: forcing a failure. [ 99.450852][ T6589] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 99.464299][ T6589] CPU: 1 UID: 0 PID: 6589 Comm: syz.3.1054 Not tainted 6.15.0-rc5-syzkaller-00032-g0d8d44db295c #0 PREEMPT(voluntary) [ 99.464331][ T6589] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 99.464345][ T6589] Call Trace: [ 99.464352][ T6589] [ 99.464367][ T6589] __dump_stack+0x1d/0x30 [ 99.464411][ T6589] dump_stack_lvl+0xe8/0x140 [ 99.464480][ T6589] dump_stack+0x15/0x1b [ 99.464497][ T6589] should_fail_ex+0x265/0x280 [ 99.464527][ T6589] should_fail+0xb/0x20 [ 99.464558][ T6589] should_fail_usercopy+0x1a/0x20 [ 99.464576][ T6589] _copy_from_user+0x1c/0xb0 [ 99.464632][ T6589] __se_sys_move_pages+0xd26/0x1330 [ 99.464668][ T6589] ? get_pid_task+0x96/0xd0 [ 99.464707][ T6589] ? ksys_write+0x16e/0x1a0 [ 99.464735][ T6589] __x64_sys_move_pages+0x78/0x90 [ 99.464772][ T6589] x64_sys_call+0x2eab/0x2fb0 [ 99.464808][ T6589] do_syscall_64+0xd0/0x1a0 [ 99.464833][ T6589] ? clear_bhb_loop+0x25/0x80 [ 99.464872][ T6589] ? clear_bhb_loop+0x25/0x80 [ 99.464892][ T6589] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.464918][ T6589] RIP: 0033:0x7fd0d249e969 [ 99.464976][ T6589] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 99.464999][ T6589] RSP: 002b:00007fd0d0b07038 EFLAGS: 00000246 ORIG_RAX: 0000000000000117 [ 99.465022][ T6589] RAX: ffffffffffffffda RBX: 00007fd0d26c5fa0 RCX: 00007fd0d249e969 [ 99.465038][ T6589] RDX: 0000200000000080 RSI: 0000000000001efe RDI: 0000000000000000 [ 99.465053][ T6589] RBP: 00007fd0d0b07090 R08: 0000200000000040 R09: 0000000000000000 [ 99.465068][ T6589] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 99.465083][ T6589] R13: 0000000000000000 R14: 00007fd0d26c5fa0 R15: 00007ffc77fc5968 [ 99.465164][ T6589] [ 99.740429][ T6600] loop4: detected capacity change from 0 to 128 [ 99.765322][ T6595] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1049'. [ 99.978480][ T3382] page_pool_release_retry() stalled pool shutdown: id 23, 1 inflight 60 sec [ 100.027603][ T6619] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1064'. [ 100.109039][ T6627] veth0_macvtap: left promiscuous mode [ 100.135980][ T6627] macvtap0: refused to change device tx_queue_len [ 100.159688][ T6634] netlink: 'syz.4.1066': attribute type 4 has an invalid length. [ 100.167583][ T6634] netlink: 3657 bytes leftover after parsing attributes in process `syz.4.1066'. [ 100.368658][ T6636] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.384539][ T6639] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1070'. [ 100.479989][ T6636] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.567416][ T6636] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.649845][ T6636] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.727332][ T6636] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.753075][ T6636] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.778595][ T6636] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.801595][ T6636] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.845205][ T6657] tipc: Started in network mode [ 100.853855][ T6657] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 100.890228][ T6657] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 100.910922][ T6657] tipc: Enabled bearer , priority 10 [ 100.968442][ T6662] pim6reg1: entered promiscuous mode [ 100.974094][ T6662] pim6reg1: entered allmulticast mode [ 101.056206][ T6666] loop4: detected capacity change from 0 to 4096 [ 101.073169][ T6666] EXT4-fs error (device loop4): ext4_ext_check_inode:524: inode #3: comm syz.4.1079: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 101.101661][ T6666] EXT4-fs error (device loop4): ext4_quota_enable:7129: comm syz.4.1079: Bad quota inode: 3, type: 0 [ 101.149233][ T6666] EXT4-fs warning (device loop4): ext4_enable_quotas:7170: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 101.170485][ T6669] xt_TPROXY: Can be used only with -p tcp or -p udp [ 101.192463][ T6666] EXT4-fs (loop4): mount failed [ 102.018186][ T3521] tipc: Node number set to 1 [ 102.139243][ T6701] __nla_validate_parse: 3 callbacks suppressed [ 102.139270][ T6701] netlink: 160 bytes leftover after parsing attributes in process `syz.4.1091'. [ 102.546512][ T6721] loop5: detected capacity change from 0 to 4096 [ 102.555520][ T6721] EXT4-fs error (device loop5): ext4_ext_check_inode:524: inode #3: comm syz.5.1100: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 102.574714][ T6721] EXT4-fs error (device loop5): ext4_quota_enable:7129: comm syz.5.1100: Bad quota inode: 3, type: 0 [ 102.585947][ T6721] EXT4-fs warning (device loop5): ext4_enable_quotas:7170: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 102.601020][ T6721] EXT4-fs (loop5): mount failed [ 102.642325][ T6726] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1101'. [ 102.796790][ T6729] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1100'. [ 102.984729][ T6738] FAULT_INJECTION: forcing a failure. [ 102.984729][ T6738] name failslab, interval 1, probability 0, space 0, times 0 [ 102.997711][ T6738] CPU: 1 UID: 0 PID: 6738 Comm: syz.4.1106 Not tainted 6.15.0-rc5-syzkaller-00032-g0d8d44db295c #0 PREEMPT(voluntary) [ 102.997747][ T6738] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 102.997763][ T6738] Call Trace: [ 102.997771][ T6738] [ 102.997780][ T6738] __dump_stack+0x1d/0x30 [ 102.997819][ T6738] dump_stack_lvl+0xe8/0x140 [ 102.997843][ T6738] dump_stack+0x15/0x1b [ 102.997864][ T6738] should_fail_ex+0x265/0x280 [ 102.997967][ T6738] should_failslab+0x8c/0xb0 [ 102.998074][ T6738] kmem_cache_alloc_noprof+0x50/0x310 [ 102.998116][ T6738] ? getname_flags+0x80/0x3b0 [ 102.998148][ T6738] ? proc_fail_nth_write+0x12d/0x160 [ 102.998187][ T6738] getname_flags+0x80/0x3b0 [ 102.998223][ T6738] do_mq_open+0xd6/0x4b0 [ 102.998263][ T6738] ? __fget_files+0x184/0x1c0 [ 102.998297][ T6738] __x64_sys_mq_open+0xcb/0x100 [ 102.998383][ T6738] x64_sys_call+0x27d6/0x2fb0 [ 102.998410][ T6738] do_syscall_64+0xd0/0x1a0 [ 102.998437][ T6738] ? clear_bhb_loop+0x25/0x80 [ 102.998463][ T6738] ? clear_bhb_loop+0x25/0x80 [ 102.998505][ T6738] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.998531][ T6738] RIP: 0033:0x7f5394bbe969 [ 102.998549][ T6738] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 102.998617][ T6738] RSP: 002b:00007f5393227038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f0 [ 102.998639][ T6738] RAX: ffffffffffffffda RBX: 00007f5394de5fa0 RCX: 00007f5394bbe969 [ 102.998655][ T6738] RDX: 000000000000000c RSI: 0000000000000080 RDI: 0000000000000000 [ 102.998669][ T6738] RBP: 00007f5393227090 R08: 0000000000000000 R09: 0000000000000000 [ 102.998683][ T6738] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 102.998694][ T6738] R13: 0000000000000000 R14: 00007f5394de5fa0 R15: 00007ffe64d7eea8 [ 102.998711][ T6738] [ 103.294925][ T6747] xt_CT: You must specify a L4 protocol and not use inversions on it [ 103.343741][ T6752] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1112'. [ 103.427867][ T6759] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1111'. [ 103.437218][ T6759] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1111'. [ 103.553015][ T6765] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1117'. [ 103.574873][ T6765] FAULT_INJECTION: forcing a failure. [ 103.574873][ T6765] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 103.588238][ T6765] CPU: 1 UID: 0 PID: 6765 Comm: syz.4.1117 Not tainted 6.15.0-rc5-syzkaller-00032-g0d8d44db295c #0 PREEMPT(voluntary) [ 103.588269][ T6765] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 103.588297][ T6765] Call Trace: [ 103.588306][ T6765] [ 103.588314][ T6765] __dump_stack+0x1d/0x30 [ 103.588400][ T6765] dump_stack_lvl+0xe8/0x140 [ 103.588423][ T6765] dump_stack+0x15/0x1b [ 103.588443][ T6765] should_fail_ex+0x265/0x280 [ 103.588536][ T6765] should_fail+0xb/0x20 [ 103.588565][ T6765] should_fail_usercopy+0x1a/0x20 [ 103.588587][ T6765] _copy_from_user+0x1c/0xb0 [ 103.588653][ T6765] __ia32_sys_rt_sigreturn+0x128/0x350 [ 103.588778][ T6765] x64_sys_call+0x2e8a/0x2fb0 [ 103.588804][ T6765] do_syscall_64+0xd0/0x1a0 [ 103.588830][ T6765] ? clear_bhb_loop+0x25/0x80 [ 103.588853][ T6765] ? clear_bhb_loop+0x25/0x80 [ 103.588872][ T6765] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.588959][ T6765] RIP: 0033:0x7f5394b5ab39 [ 103.589037][ T6765] Code: 64 c7 00 16 00 00 00 b8 ff ff ff ff c3 0f 1f 40 00 90 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 c7 c0 0f 00 00 00 0f 05 <0f> 1f 80 00 00 00 00 48 81 ec 48 01 00 00 49 89 d0 64 48 8b 04 25 [ 103.589063][ T6765] RSP: 002b:00007f5393226a80 EFLAGS: 00000202 ORIG_RAX: 000000000000000f [ 103.589085][ T6765] RAX: ffffffffffffffda RBX: 00007f5394de5fa0 RCX: 00007f5394b5ab39 [ 103.589100][ T6765] RDX: 00007f5393226a80 RSI: 00007f5393226bb0 RDI: 0000000000000021 [ 103.589116][ T6765] RBP: 00007f5393227090 R08: 0000000000000000 R09: 0000000000000000 [ 103.589131][ T6765] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000001 [ 103.589160][ T6765] R13: 0000000000000000 R14: 00007f5394de5fa0 R15: 00007ffe64d7eea8 [ 103.589183][ T6765] [ 103.591701][ T6764] rtc_cmos 00:00: Alarms can be up to one day in the future [ 103.896217][ T6782] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1124'. [ 103.999388][ T29] kauditd_printk_skb: 423 callbacks suppressed [ 103.999406][ T29] audit: type=1326 audit(1746597242.379:4504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6779 comm="syz.3.1123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0d249e969 code=0x7ffc0000 [ 104.029977][ T29] audit: type=1326 audit(1746597242.379:4505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6779 comm="syz.3.1123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0d249e969 code=0x7ffc0000 [ 104.054591][ T29] audit: type=1326 audit(1746597242.379:4506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6779 comm="syz.3.1123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd0d249e969 code=0x7ffc0000 [ 104.079132][ T29] audit: type=1326 audit(1746597242.379:4507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6779 comm="syz.3.1123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0d249e969 code=0x7ffc0000 [ 104.103204][ T29] audit: type=1326 audit(1746597242.379:4508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6779 comm="syz.3.1123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0d249e969 code=0x7ffc0000 [ 104.222720][ T29] audit: type=1326 audit(1746597242.389:4509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6779 comm="syz.3.1123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd0d249e969 code=0x7ffc0000 [ 104.242387][ T6792] loop2: detected capacity change from 0 to 4096 [ 104.246792][ T29] audit: type=1326 audit(1746597242.389:4510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6779 comm="syz.3.1123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0d249e969 code=0x7ffc0000 [ 104.277189][ T29] audit: type=1326 audit(1746597242.389:4511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6779 comm="syz.3.1123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd0d249e969 code=0x7ffc0000 [ 104.301045][ T29] audit: type=1326 audit(1746597242.389:4512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6779 comm="syz.3.1123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0d249e969 code=0x7ffc0000 [ 104.325027][ T29] audit: type=1326 audit(1746597242.389:4513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6779 comm="syz.3.1123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd0d249e969 code=0x7ffc0000 [ 104.367669][ T6792] EXT4-fs error (device loop2): ext4_ext_check_inode:524: inode #3: comm syz.2.1126: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 104.396659][ T6792] EXT4-fs error (device loop2): ext4_quota_enable:7129: comm syz.2.1126: Bad quota inode: 3, type: 0 [ 104.417131][ T6792] EXT4-fs warning (device loop2): ext4_enable_quotas:7170: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 104.474026][ T6792] EXT4-fs (loop2): mount failed [ 104.513784][ T6799] netlink: 160 bytes leftover after parsing attributes in process `syz.3.1127'. [ 104.681328][ T6806] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 104.690762][ T6806] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 104.699843][ T6800] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1126'. [ 104.999146][ T6816] FAULT_INJECTION: forcing a failure. [ 104.999146][ T6816] name failslab, interval 1, probability 0, space 0, times 0 [ 105.012410][ T6816] CPU: 1 UID: 0 PID: 6816 Comm: syz.5.1133 Not tainted 6.15.0-rc5-syzkaller-00032-g0d8d44db295c #0 PREEMPT(voluntary) [ 105.012441][ T6816] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 105.012454][ T6816] Call Trace: [ 105.012460][ T6816] [ 105.012475][ T6816] __dump_stack+0x1d/0x30 [ 105.012500][ T6816] dump_stack_lvl+0xe8/0x140 [ 105.012523][ T6816] dump_stack+0x15/0x1b [ 105.012544][ T6816] should_fail_ex+0x265/0x280 [ 105.012581][ T6816] should_failslab+0x8c/0xb0 [ 105.012631][ T6816] __kmalloc_noprof+0xa5/0x3e0 [ 105.012652][ T6816] ? security_prepare_creds+0x52/0x120 [ 105.012688][ T6816] security_prepare_creds+0x52/0x120 [ 105.012741][ T6816] prepare_creds+0x34a/0x4c0 [ 105.012764][ T6816] lookup_user_key+0x12a/0xd10 [ 105.012793][ T6816] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 105.012870][ T6816] __se_sys_add_key+0x263/0x350 [ 105.012911][ T6816] __x64_sys_add_key+0x67/0x80 [ 105.012940][ T6816] x64_sys_call+0x1d0d/0x2fb0 [ 105.012968][ T6816] do_syscall_64+0xd0/0x1a0 [ 105.012995][ T6816] ? clear_bhb_loop+0x25/0x80 [ 105.013025][ T6816] ? clear_bhb_loop+0x25/0x80 [ 105.013045][ T6816] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.013065][ T6816] RIP: 0033:0x7fd92f92e969 [ 105.013079][ T6816] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 105.013102][ T6816] RSP: 002b:00007fd92df97038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 105.013171][ T6816] RAX: ffffffffffffffda RBX: 00007fd92fb55fa0 RCX: 00007fd92f92e969 [ 105.013222][ T6816] RDX: 00002000000000c0 RSI: 0000200000000040 RDI: 0000200000000080 [ 105.013244][ T6816] RBP: 00007fd92df97090 R08: ffffffffffffffff R09: 0000000000000000 [ 105.013328][ T6816] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000001 [ 105.013339][ T6816] R13: 0000000000000001 R14: 00007fd92fb55fa0 R15: 00007ffee81a0358 [ 105.013403][ T6816] [ 105.823724][ C1] vxcan0: j1939_tp_rxtimer: 0xffff888118b02400: rx timeout, send abort [ 106.323750][ C1] vxcan0: j1939_tp_rxtimer: 0xffff888118b02800: rx timeout, send abort [ 106.338003][ C1] vxcan0: j1939_tp_rxtimer: 0xffff888118b02400: abort rx timeout. Force session deactivation [ 106.384664][ T6870] serio: Serial port pts0 [ 106.832193][ C1] vxcan0: j1939_tp_rxtimer: 0xffff888118b02800: abort rx timeout. Force session deactivation [ 107.266290][ T6920] loop5: detected capacity change from 0 to 1024 [ 107.275744][ T6920] EXT4-fs: Ignoring removed oldalloc option [ 107.282264][ T6920] EXT4-fs: Ignoring removed i_version option [ 107.305997][ T6920] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 107.386644][ T6039] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.465932][ T6929] loop4: detected capacity change from 0 to 4096 [ 107.485210][ T6929] EXT4-fs error (device loop4): ext4_ext_check_inode:524: inode #3: comm syz.4.1173: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 107.506853][ T6931] loop2: detected capacity change from 0 to 256 [ 107.515521][ T6931] FAT-fs (loop2): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 107.524830][ T6931] FAT-fs (loop2): bogus number of directory entries (1) [ 107.531952][ T6931] FAT-fs (loop2): Can't find a valid FAT filesystem [ 107.540357][ T6929] EXT4-fs error (device loop4): ext4_quota_enable:7129: comm syz.4.1173: Bad quota inode: 3, type: 0 [ 107.557270][ T6929] EXT4-fs warning (device loop4): ext4_enable_quotas:7170: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 107.591217][ T6929] EXT4-fs (loop4): mount failed [ 107.597155][ T6938] FAULT_INJECTION: forcing a failure. [ 107.597155][ T6938] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 107.610901][ T6938] CPU: 1 UID: 0 PID: 6938 Comm: syz.3.1175 Not tainted 6.15.0-rc5-syzkaller-00032-g0d8d44db295c #0 PREEMPT(voluntary) [ 107.611031][ T6938] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 107.611044][ T6938] Call Trace: [ 107.611051][ T6938] [ 107.611058][ T6938] __dump_stack+0x1d/0x30 [ 107.611081][ T6938] dump_stack_lvl+0xe8/0x140 [ 107.611152][ T6938] dump_stack+0x15/0x1b [ 107.611169][ T6938] should_fail_ex+0x265/0x280 [ 107.611201][ T6938] should_fail+0xb/0x20 [ 107.611264][ T6938] should_fail_usercopy+0x1a/0x20 [ 107.611314][ T6938] _copy_to_user+0x20/0xa0 [ 107.611336][ T6938] simple_read_from_buffer+0xb5/0x130 [ 107.611482][ T6938] proc_fail_nth_read+0x100/0x140 [ 107.611509][ T6938] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 107.611591][ T6938] vfs_read+0x19d/0x6f0 [ 107.611615][ T6938] ? __rcu_read_unlock+0x4f/0x70 [ 107.611635][ T6938] ? __fget_files+0x184/0x1c0 [ 107.611737][ T6938] ksys_read+0xda/0x1a0 [ 107.611817][ T6938] __x64_sys_read+0x40/0x50 [ 107.611841][ T6938] x64_sys_call+0x2d77/0x2fb0 [ 107.611862][ T6938] do_syscall_64+0xd0/0x1a0 [ 107.611884][ T6938] ? clear_bhb_loop+0x25/0x80 [ 107.611975][ T6938] ? clear_bhb_loop+0x25/0x80 [ 107.611996][ T6938] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.612017][ T6938] RIP: 0033:0x7fd0d249d37c [ 107.612032][ T6938] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 107.612050][ T6938] RSP: 002b:00007fd0d0b07030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 107.612150][ T6938] RAX: ffffffffffffffda RBX: 00007fd0d26c5fa0 RCX: 00007fd0d249d37c [ 107.612162][ T6938] RDX: 000000000000000f RSI: 00007fd0d0b070a0 RDI: 0000000000000004 [ 107.612174][ T6938] RBP: 00007fd0d0b07090 R08: 0000000000000000 R09: 0000000000000000 [ 107.612186][ T6938] R10: 0000000000001498 R11: 0000000000000246 R12: 0000000000000001 [ 107.612197][ T6938] R13: 0000000000000000 R14: 00007fd0d26c5fa0 R15: 00007ffc77fc5968 [ 107.612216][ T6938] [ 107.942189][ T6946] __nla_validate_parse: 3 callbacks suppressed [ 107.942203][ T6946] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1179'. [ 108.081897][ T6948] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1173'. [ 108.084139][ T6955] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1183'. [ 108.109556][ T6955] bond0: entered promiscuous mode [ 108.120061][ T6955] 8021q: adding VLAN 0 to HW filter on device bond0 [ 108.151173][ T6961] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 108.169781][ T6961] batadv2: entered promiscuous mode [ 108.175905][ T6961] bond0: (slave batadv2): Enslaving as an active interface with an up link [ 108.200463][ T6955] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 108.249722][ T6955] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 108.401208][ T6959] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1184'. [ 108.441464][ T6967] infiniband srz1: RDMA CMA: cma_listen_on_dev, error -98 [ 108.471924][ T6971] loop5: detected capacity change from 0 to 256 [ 108.484010][ T6971] FAT-fs (loop5): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 108.493367][ T6971] FAT-fs (loop5): bogus number of directory entries (1) [ 108.500556][ T6971] FAT-fs (loop5): Can't find a valid FAT filesystem [ 108.562298][ T6979] vhci_hcd: default hub control req: 0000 v0000 i0000 l31125 [ 108.574110][ T6981] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1191'. [ 108.586293][ T6978] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1189'. [ 108.595279][ T6978] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1189'. [ 108.607296][ T6978] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1189'. [ 108.633188][ T6978] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1189'. [ 108.642658][ T6978] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1189'. [ 108.745603][ T7003] loop4: detected capacity change from 0 to 1024 [ 108.753669][ T3498] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 108.762735][ T3498] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 108.779420][ T7003] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 108.796201][ T7004] loop5: detected capacity change from 0 to 1024 [ 108.810306][ T7004] EXT4-fs: Ignoring removed nobh option [ 108.816009][ T7004] EXT4-fs: Ignoring removed bh option [ 108.886856][ T7004] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.992090][ T7020] loop2: detected capacity change from 0 to 256 [ 109.038629][ T29] kauditd_printk_skb: 597 callbacks suppressed [ 109.038647][ T29] audit: type=1400 audit(1746597247.429:5111): avc: denied { open } for pid=6992 comm="syz.5.1193" name="file1" dev="loop5" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 109.081238][ T7020] FAT-fs (loop2): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 109.090949][ T7020] FAT-fs (loop2): bogus number of directory entries (1) [ 109.098208][ T7020] FAT-fs (loop2): Can't find a valid FAT filesystem [ 109.115261][ T29] audit: type=1400 audit(1746597247.499:5112): avc: denied { write } for pid=7026 comm="syz.4.1207" name="fdinfo" dev="proc" ino=20746 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 109.137215][ T29] audit: type=1400 audit(1746597247.499:5113): avc: denied { add_name } for pid=7026 comm="syz.4.1207" name="cpuset.effective_cpus" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 109.159396][ T29] audit: type=1400 audit(1746597247.499:5114): avc: denied { create } for pid=7026 comm="syz.4.1207" name="cpuset.effective_cpus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=file permissive=1 [ 109.181078][ T29] audit: type=1400 audit(1746597247.499:5115): avc: denied { associate } for pid=7026 comm="syz.4.1207" name="cpuset.effective_cpus" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 109.223447][ T29] audit: type=1400 audit(1746597247.609:5116): avc: denied { mount } for pid=7024 comm="syz.0.1206" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 109.275604][ T29] audit: type=1400 audit(1746597247.659:5117): avc: denied { unmount } for pid=7024 comm="syz.0.1206" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 109.297305][ T29] audit: type=1400 audit(1746597247.659:5118): avc: denied { write } for pid=7032 comm="syz.4.1208" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 109.365021][ T29] audit: type=1400 audit(1746597247.749:5119): avc: denied { map } for pid=7034 comm="syz.4.1209" path="socket:[20758]" dev="sockfs" ino=20758 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 109.432455][ T7037] loop2: detected capacity change from 0 to 4096 [ 109.444352][ T7037] EXT4-fs error (device loop2): ext4_ext_check_inode:524: inode #3: comm syz.2.1210: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 109.463834][ T7037] EXT4-fs error (device loop2): ext4_quota_enable:7129: comm syz.2.1210: Bad quota inode: 3, type: 0 [ 109.484249][ T7037] EXT4-fs warning (device loop2): ext4_enable_quotas:7170: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 109.523199][ T7037] EXT4-fs (loop2): mount failed [ 109.549612][ T6039] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.813205][ T7057] loop3: detected capacity change from 0 to 2048 [ 109.859035][ T7057] Alternate GPT is invalid, using primary GPT. [ 109.865588][ T7057] loop3: p1 p2 p3 [ 110.196148][ T7074] loop5: detected capacity change from 0 to 512 [ 110.203788][ T29] audit: type=1400 audit(1746597248.599:5120): avc: denied { create } for pid=7076 comm="syz.0.1225" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 110.223809][ T7074] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 110.512904][ T7074] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.703057][ T6039] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.022232][ T7116] loop4: detected capacity change from 0 to 4096 [ 111.075063][ T7116] EXT4-fs error (device loop4): ext4_ext_check_inode:524: inode #3: comm syz.4.1236: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 111.119506][ T7116] EXT4-fs error (device loop4): ext4_quota_enable:7129: comm syz.4.1236: Bad quota inode: 3, type: 0 [ 111.131343][ T7116] EXT4-fs warning (device loop4): ext4_enable_quotas:7170: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 111.147609][ T7116] EXT4-fs (loop4): mount failed [ 111.327010][ T7129] tipc: Started in network mode [ 111.332091][ T7129] tipc: Node identity ac14140f, cluster identity 4711 [ 111.360415][ T7129] tipc: New replicast peer: 10.1.1.2 [ 111.366048][ T7129] tipc: Enabled bearer , priority 10 [ 111.767122][ T7137] loop3: detected capacity change from 0 to 2048 [ 111.801428][ T7137] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 111.943582][ T7145] loop5: detected capacity change from 0 to 256 [ 111.952151][ T7145] FAT-fs (loop5): bogus number of FAT sectors [ 111.958822][ T7145] FAT-fs (loop5): Can't find a valid FAT filesystem [ 112.189291][ T7137] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 1 with max blocks 1 with error 28 [ 112.201785][ T7137] EXT4-fs (loop3): This should not happen!! Data will be lost [ 112.201785][ T7137] [ 112.211751][ T7137] EXT4-fs (loop3): Total free blocks count 0 [ 112.217831][ T7137] EXT4-fs (loop3): Free/Dirty block details [ 112.224078][ T7137] EXT4-fs (loop3): free_blocks=0 [ 112.229149][ T7137] EXT4-fs (loop3): dirty_blocks=0 [ 112.234619][ T7137] EXT4-fs (loop3): Block reservation details [ 112.240786][ T7137] EXT4-fs (loop3): i_reserved_data_blocks=0 [ 112.361029][ T7173] ================================================================== [ 112.369253][ T7173] BUG: KCSAN: data-race in _copy_from_iter / _copy_from_iter [ 112.376659][ T7173] [ 112.379085][ T7173] write to 0xffff88812c0ea000 of 4096 bytes by task 7169 on cpu 0: [ 112.387175][ T7173] _copy_from_iter+0x130/0xdd0 [ 112.391967][ T7173] copy_page_from_iter+0x15a/0x290 [ 112.397205][ T7173] process_vm_rw+0x659/0x950 [ 112.401921][ T7173] __x64_sys_process_vm_writev+0x78/0x90 [ 112.407738][ T7173] x64_sys_call+0xe80/0x2fb0 [ 112.412358][ T7173] do_syscall_64+0xd0/0x1a0 [ 112.416893][ T7173] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.422818][ T7173] [ 112.425159][ T7173] write to 0xffff88812c0ea000 of 4096 bytes by task 7173 on cpu 1: [ 112.433249][ T7173] _copy_from_iter+0x130/0xdd0 [ 112.438058][ T7173] copy_page_from_iter+0x15a/0x290 [ 112.443236][ T7173] process_vm_rw+0x659/0x950 [ 112.448106][ T7173] __x64_sys_process_vm_writev+0x78/0x90 [ 112.453878][ T7173] x64_sys_call+0xe80/0x2fb0 [ 112.458689][ T7173] do_syscall_64+0xd0/0x1a0 [ 112.463665][ T7173] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.469755][ T7173] [ 112.472834][ T7173] Reported by Kernel Concurrency Sanitizer on: [ 112.480238][ T7173] CPU: 1 UID: 0 PID: 7173 Comm: syz.5.1250 Not tainted 6.15.0-rc5-syzkaller-00032-g0d8d44db295c #0 PREEMPT(voluntary) [ 112.493400][ T7173] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 112.504659][ T7173] ================================================================== [ 112.527845][ T3498] tipc: Node number set to 2886997007 [ 112.591135][ T5038] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.