last executing test programs: 23.081547655s ago: executing program 1 (id=490): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000080b7030000000000008500000083000000bf090000000000005509010000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x60, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x2, &(0x7f0000000200)=[{0x6c, 0x0, 0xfe}, {0x6, 0x0, 0x0, 0x7ffffdbd}]}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, 0x0) close(0xffffffffffffffff) r2 = syz_open_procfs(0x0, &(0x7f0000002a00)='net/fib_trie\x00') preadv(r2, &(0x7f0000002240)=[{&(0x7f0000001180)=""/4096, 0x1000}], 0x1, 0x37, 0x0) 23.057073045s ago: executing program 1 (id=491): r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x3d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x62000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_config_ext={0x0, 0x1}, 0x100000, 0x0, 0x0, 0x6, 0x3, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xb5c, 0x3}, 0x801, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xb, &(0x7f0000000100)=ANY=[@ANYBLOB="180800ec0c00000000000000000000001801000020"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = socket$igmp6(0xa, 0x3, 0x2) r4 = socket$kcm(0x2, 0xa, 0x2) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000040)=0x1) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELOBJ={0x34, 0x14, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}]}], {0x14}}, 0x98}}, 0x0) ioctl$TCSETS(r5, 0x89f2, &(0x7f00000000c0)={0x4000000, 0x0, 0x5, 0x1, 0x0, "bb5dee0000000000000000000000f99200231c"}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) write$tun(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72) unshare(0x400) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) 21.992938351s ago: executing program 1 (id=507): openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210000, &(0x7f00000002c0)={[{@jqfmt_vfsv1}, {}, {@barrier_val}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@resuid}, {@nodelalloc}, {@acl}, {@noinit_itable}]}, 0xfc, 0x572, &(0x7f0000003780)="$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") chdir(&(0x7f0000000100)='./file0\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) link(&(0x7f0000001240)='./file0\x00', &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') pipe2(&(0x7f0000000040), 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x808000, 0x4, 0x20300, 0xfc}, 0x1c) setsockopt$sock_int(r1, 0x1, 0x48, &(0x7f0000000040), 0x4) r2 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r2, 0x10d, 0xcc, &(0x7f0000000080), &(0x7f0000000000)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000085000000050000"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000040)=@generic={&(0x7f0000000000)='./file0\x00', 0x0, 0x8}, 0x18) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="3400000010000100000000000000000009000000", @ANYRES32=r5, @ANYBLOB="0006000000000000140012800b00010067656e657665000004000280"], 0x34}, 0x1, 0x2}, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1b000000020000a5d7464700000004dd4a997c72e99d67000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) io_cancel(0x0, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001800)={&(0x7f0000000580)='kfree\x00', r7}, 0x9) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x6, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0c00000004000000040000000000010000000000", @ANYRES32=r8, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000300"/28], 0x50) 21.536017849s ago: executing program 1 (id=512): prctl$PR_SET_NAME(0xf, &(0x7f00000002c0)='4\xb9\xdfs\x7f') mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAPCLR(r0, 0x4b68, 0x0) r1 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@noblock_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") syz_io_uring_complete(0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0b00000007000000010001000000008001000000", @ANYRES32, @ANYBLOB="98b8411051a5be264d0000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x804, &(0x7f0000000380), 0x1, 0x4ef, &(0x7f0000000b00)="$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") r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x18, &(0x7f0000000680)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x80000}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@map_idx={0x18, 0x9, 0x5, 0x0, 0x1}, @tail_call={{0x18, 0x2, 0x1, 0x0, r2}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @exit], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000280)='syzkaller\x00', 0xffff, 0x8c, &(0x7f0000000780)=""/140, 0x41100, 0x7f33a48f8ae680d9, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000003c0)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x2, 0xe, 0xbb, 0x9}, 0x10, 0x0, 0x0, 0x5, &(0x7f00000004c0)=[r2, r2, 0x1, r2], &(0x7f0000000540)=[{0x2, 0x2, 0x3, 0xa}, {0x4, 0x1, 0xc, 0x6}, {0x2, 0x4, 0xf, 0x8}, {0x3, 0x2, 0x1, 0x9}, {0x1, 0x5, 0x9, 0x3}], 0x10, 0x8, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) r4 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x2, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f00000000c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x1b, 0x0, "61a1ed8439cde8054f2ada6fcd5fe76b933e8bb0ac60081e33dffa158f35f7519d5f73b4f5d80eb4881a5b98cb9fb96d225d602392f816d09dcc09b5063087117502d8c24f1fe97f61fd27a06d6a38a7"}, 0xd8) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000280)=@filter={'filter\x00', 0xe, 0x4, 0x4d8, 0xffffffff, 0x0, 0x0, 0xd0, 0xffffffff, 0xffffffff, 0x430, 0x430, 0x430, 0xffffffff, 0x4, &(0x7f00000001c0), {[{{@ipv6={@private2, @mcast2, [0xffffff00, 0x0, 0xff000000, 0xff000000], [0xff000000, 0xffffff00, 0xffffff00, 0xffffff00], 'geneve1\x00', 'caif0\x00', {0xff}, {0xff}, 0x84, 0x2, 0x1}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x9}}}, {{@uncond, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@unspec=@connmark={{0x30}, {0x1, 0xec9b, 0x1}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x2}}}, {{@uncond, 0x0, 0x200, 0x238, 0x0, {}, [@common=@inet=@policy={{0x158}, {[{@ipv4=@multicast1, [0x0, 0xff000000, 0xff, 0xffffff00], @ipv4=@loopback, [0xff, 0xffffffff, 0xff, 0xffffff00], 0x4d3, 0x34ff, 0x3b, 0x0, 0x10, 0x8}, {@ipv6=@private1, [0x0, 0xffffff00, 0xff, 0xffffffff], @ipv4=@multicast2, [0xffffff00, 0xff000000, 0xff], 0x4d2, 0x0, 0x2f, 0x0, 0x1f, 0x14}, {@ipv6=@mcast2, [0xffffff00, 0xffffffff, 0xffffff00, 0xff000000], @ipv4=@rand_addr=0x64010100, [0xffffff00, 0xff, 0xff, 0x1fe000000], 0x4d4, 0x3502, 0x2, 0x1}, {@ipv4=@loopback, [0xffffff00, 0xffffff00, 0xff000000, 0xffffffff], @ipv4=@rand_addr=0x64010100, [0x0, 0x0, 0xff000000, 0xffffffff], 0x4d3, 0x34ff, 0x29, 0x0, 0x5, 0x2}], 0x5}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x0, 0x4, 0x3}, {0x4, 0x5, 0x1}, {0x2, 0x3, 0x3}, 0x7, 0x9}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x538) setsockopt$inet6_tcp_int(r5, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r5, &(0x7f0000000240)="c4", 0x1, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @empty, 0x1}, 0x1c) shutdown(r5, 0x2) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r6, &(0x7f0000002200)={0x0, 0x0, &(0x7f00000021c0)={&(0x7f0000002080)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000004c000064657673696d0000000f0002006e657464657609006d3000000f00b2007365636f6e646e616d6500"/62], 0x44}}, 0x4040800) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x800000000003}, 0x100000, 0x5dd8, 0x3, 0x0, 0x0, 0x8, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r8 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) io_setup(0x3fe, &(0x7f0000000100)=0x0) io_getevents(r9, 0x1, 0xbf, &(0x7f0000004600)=[{}], 0x0) io_submit(r9, 0x1, &(0x7f0000000000)=[&(0x7f0000000900)={0x0, 0x0, 0x0, 0x1, 0x0, r8, 0x0, 0x0, 0x8}]) pwritev2(r4, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x1200, 0x0, 0x3) 21.145158818s ago: executing program 1 (id=521): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x10e, &(0x7f0000000280)={[{@discard}, {@nombcache}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2a}}, {@stripe={'stripe', 0x3d, 0x8}}, {@orlov}, {@dioread_nolock}]}, 0x4, 0x45b, &(0x7f00000010c0)="$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") r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x80044940, &(0x7f0000001b00)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0, 0x0}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000002c000000000000000000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r6}, 0x10) syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0x126a4b5, &(0x7f000000b6c0)=ANY=[@ANYRES16=r4, @ANYRES64=r3, @ANYBLOB="12a4095a2aac12f0bfcb206d982e44066381388d27f14002d8d7431d3947f6399c7ff9f5193fc0398653e5a67bbb319f02bf4ac6f6ccd5acbfe1350cc3a6d2d48cf6c089ddf67171ffb3b15988e7b394c5daf3e12ca05e4dbdad7edd45f10cbc296a53a530d4c2d203ee650d5fff3a9b5aae78794fe84327e508172cdd72eeff5af4d6db9379bef20dde8e64b91d31a84ce8a7598bb78cc85108874811fc650f0520a5", @ANYRES16, @ANYRESDEC=r1, @ANYRES16=r2, @ANYRES16, @ANYBLOB="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", @ANYRES8=r1, @ANYRESOCT=0x0], 0x0, 0x0, &(0x7f0000000000)) 20.824740506s ago: executing program 1 (id=532): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000080b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x60, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r2, 0x0, 0x30, 0xe1515f8735398fb, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0x45c], 0x0, 0x0, 0x1f, 0x1}}, 0x3c) 20.778175766s ago: executing program 32 (id=532): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000080b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x60, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r2, 0x0, 0x30, 0xe1515f8735398fb, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0x45c], 0x0, 0x0, 0x1f, 0x1}}, 0x3c) 10.627462554s ago: executing program 2 (id=572): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0xffff}, 0x6) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r2, &(0x7f0000000100), 0x6) 9.116057697s ago: executing program 0 (id=575): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x13, 0xb, &(0x7f00000009c0)=ANY=[@ANYRESHEX=r0, @ANYRESOCT=r0, @ANYRES8=r0, @ANYRES64=r0, @ANYRESOCT=0x0, @ANYRES32, @ANYRES64, @ANYRES64, @ANYRES64, @ANYRESHEX], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0xffffffffffffff2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) connect$phonet_pipe(r0, &(0x7f0000000040), 0x10) close(0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffffff850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socketpair(0x28, 0x4, 0x5, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='mmap_lock_acquire_returned\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) r4 = syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) tgkill(r4, r4, 0x21) wait4(0x0, 0x0, 0x40000000, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f00000001c0), 0x10000, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000280)='mmap_lock_acquire_returned\x00', r5}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8943, &(0x7f0000000100)={'syzkaller0\x00'}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="0900000004000000080000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000005800c503a035343a4447b066000000000096ec08ef2722bb5238baee217037c0fab841da0a5fb1a00ab8421efcd70dbfb8a96e98adcfa3454d216f61dbaa455245687ad2832da0ed992c671a"], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r7}, 0x10) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @random="110000000002"}) r8 = socket$inet6(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r8, 0x890c, &(0x7f0000000640)={@remote, @private0, @rand_addr=' \x01\x00', 0x40000, 0x40, 0x0, 0x100, 0x0, 0x40180043, r9}) 9.115579658s ago: executing program 2 (id=576): set_tid_address(&(0x7f0000000000)) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) listen(r0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x4) recvmsg$kcm(r1, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) r2 = epoll_create1(0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000000900000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000010000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r5, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa017242ba9380d412000000000000000100000036000000", 0xfe60) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r4}, 0x10) syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x100080) r7 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000580)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r9}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x2}]}, @IFLA_MASTER={0x8}]}, 0x34}}, 0x0) write$P9_RVERSION(r6, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff018000"], 0x15) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000140)='mm_page_alloc\x00', r10}, 0x10) r11 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_IOC_FAIL(r11, 0x4c80, 0xffffffffffffffb6) epoll_wait(r2, &(0x7f0000000040)=[{}], 0x1, 0x400) syz_usb_connect$printer(0x5, 0x0, 0x0, 0x0) sendmsg$kcm(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000400)="89000000120081ae08060cdc030000007f03e3b80000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120800030006010000bdad446b9bbc7a46e3988285dcdf12f21308f801fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) 9.115173677s ago: executing program 3 (id=577): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000030000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000001240)=@raw={'raw\x00', 0x3c1, 0x3, 0x3e0, 0x1b0, 0xc8, 0x8, 0x0, 0x5803, 0x310, 0x2e8, 0x2e8, 0x310, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x190, 0x1b0, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f34a214e67442c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x1, 0x2}}, @common=@inet=@socket1={{0x28}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@remote, @mcast2, [], [], 'macvtap0\x00', 'syzkaller1\x00'}, 0x0, 0xf8, 0x160, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440) 9.114844247s ago: executing program 4 (id=578): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_async', 0x242, 0x2e0) sendfile(r0, r0, 0x0, 0xa) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000000400)={0x60002011}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x6f, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) 7.507485621s ago: executing program 0 (id=579): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10) fspick(0xffffffffffffff9c, 0x0, 0x0) 7.506803891s ago: executing program 3 (id=580): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f0000"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000540)={{r0}, &(0x7f00000004c0), &(0x7f0000000500)='%-5lx \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x2, 0x0, 0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x4410}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x32, &(0x7f00000001c0)={@broadcast, @link_local, @void, {@ipv4={0x800, @udp={{0x6, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty, {[@noop, @lsrr={0x83, 0x3, 0x54}]}}, {0x0, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) 7.506218901s ago: executing program 4 (id=581): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000030000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x18, 0x0, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000001240)=@raw={'raw\x00', 0x3c1, 0x3, 0x3e0, 0x1b0, 0xc8, 0x8, 0x0, 0x5803, 0x310, 0x2e8, 0x2e8, 0x310, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x190, 0x1b0, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f34a214e67442c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x1, 0x2}}, @common=@inet=@socket1={{0x28}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@remote, @mcast2, [], [], 'macvtap0\x00', 'syzkaller1\x00'}, 0x0, 0xf8, 0x160, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440) 5.791432394s ago: executing program 0 (id=582): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) close(r0) 5.790826154s ago: executing program 2 (id=583): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$peekuser(0x3, r3, 0x100) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r2, 0x0, 0x1}, 0x18) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) setsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000380)=0x63, 0x2) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r4}, 0x0, &(0x7f0000000040)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) close(r5) 5.790449774s ago: executing program 3 (id=584): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$P9_RREAD(r0, &(0x7f0000000180)={0x56, 0x75, 0x1, {0x4b, "917d7631df8a355d5f1a551a6646aebd2c236fc71b83302f6a0066d5a42813d9a7dc9fd79c700ddb91512b83782d48d18bcb6d0b2543915c62f353346493db09191b5408bdaef9f50aaf6f"}}, 0x56) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000000)={'syztnl1\x00', &(0x7f0000000300)={'gre0\x00', 0x0, 0x7, 0x20, 0x164, 0x2, {{0x11, 0x4, 0x3, 0x11, 0x44, 0x68, 0x0, 0x9, 0x2f, 0x0, @remote, @multicast2, {[@ssrr={0x89, 0x23, 0x26, [@empty, @broadcast, @rand_addr=0x6, @empty, @broadcast, @dev={0xac, 0x14, 0x14, 0x1c}, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote]}, @timestamp={0x44, 0xc, 0x8d, 0x0, 0x0, [0x4, 0x8]}]}}}}}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x5, 0x1000, 0x2, 0x8, r0, 0x3, '\x00', r1, r0, 0x2, 0x0, 0x2, 0x1, @void, @value, @void, @value}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000fcffffff18110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r3}, 0x10) r4 = socket$kcm(0x10, 0x400000002, 0x0) recvmsg$kcm(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001c80)=""/108, 0x6c}, {&(0x7f00000016c0)=""/206, 0xce}, {&(0x7f00000044c0)=""/4104, 0x1008}, {&(0x7f0000000a00)=""/87, 0x57}, {&(0x7f00000015c0)=""/224, 0xe0}, {&(0x7f0000000340)=""/69, 0x45}, {&(0x7f0000000540)=""/49, 0x31}], 0x7}, 0x0) sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="1c0000005e007f029ea69801d76ab0a272a2a788bab6c95f79725074", 0x1c}], 0x1}, 0x0) r5 = syz_io_uring_setup(0xe42, &(0x7f0000000140)={0x0, 0x40002119, 0x400, 0x1}, &(0x7f0000000240)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000040)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f00000004c0)={0x0, 0x0, 0x32}, &(0x7f0000000500)='./file0\x00', 0x18}) io_uring_enter(r5, 0x47f6, 0x0, 0x0, 0x0, 0x0) 5.790062864s ago: executing program 4 (id=585): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000580)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x11, &(0x7f0000000100)={[{@nombcache}, {@resgid}, {@norecovery}, {@commit={'commit', 0x3d, 0x5}}, {@nombcache}]}, 0x8, 0x601, &(0x7f0000000ac0)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x0, 0x0) open_by_handle_at(r1, &(0x7f0000000240)=@reiserfs_2={0x8, 0x2, {0xb}}, 0x0) 3.981926526s ago: executing program 0 (id=586): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0xffff}, 0x6) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r2, &(0x7f0000000100), 0x6) 3.981384006s ago: executing program 2 (id=587): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x14880}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000007060202000000000000001105000005050001000700000005000100070000000800064000000008050001000700000008000640000000d6"], 0x3c}, 0x1, 0x0, 0x0, 0x20040800}, 0x800) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c00000010004b0400000000000000007b000000", @ANYRES32=r3, @ANYBLOB="00000000000000002c0012800b00010062726964676500001c0002800800080088a8"], 0x4c}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1d, 0xb, &(0x7f00000009c0)=ANY=[@ANYRES64=0x0], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r6, 0x0, 0x1}, 0x18) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000001a00000018000180140002006261746164765f736c6176655f310000311a34094d49c4f885416797f100be7354e11ce3ae599b0e5780a8933c"], 0x2c}}, 0x0) signalfd4(r0, &(0x7f0000000000)={[0x3ff]}, 0x8, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) r8 = mq_open(&(0x7f0000001100)='*a%\xff\x00\xf1\fNC\x84\xe0\x99\x1e-\x9a\x0f\x1a\x90\xee\x10\xfeARsO\xae\xd6\x05K\xe2D\x8d\xa4H8\xcf:\a;\xd8\xc7\xc8\\C\xcf\xa7\xcb\xb4\xe4\x8dY\xe3\xa5K&\xe5\xc4\x84v\xfa\xe7\x11\xc4\x99\x10,\xe3M\x80\xd3\xc2\x1c\xb0\x84\xb83', 0x41, 0x0, 0x0) r9 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newqdisc={0x5c, 0x24, 0xd0f, 0x70bd27, 0x0, {0x60, 0x0, 0x0, r11, {}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_red={{0x8}, {0x30, 0x2, [@TCA_RED_MARK_BLOCK={0x5, 0x6, 0x9}, @TCA_RED_MAX_P={0x8, 0x3, 0x398}, @TCA_RED_PARMS={0x14, 0x1, {0x3, 0x1, 0xd, 0x8, 0x18, 0x14, 0x8}}, @TCA_RED_MARK_BLOCK={0x0, 0x6, 0x2}]}}]}, 0x5c}}, 0x0) mq_getsetattr(r8, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000500)={0x0, 0x0}) ppoll(&(0x7f0000000180)=[{r7, 0x2020}, {r6, 0x2000}, {r6, 0x3180}], 0x3, &(0x7f0000000580)={r12, r13+60000000}, &(0x7f00000005c0)={[0x9]}, 0x8) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000600)={0x1b, 0x0, 0x0, 0x88c, 0x0, r0, 0x40000d68, '\x00', r3, 0xffffffffffffffff, 0x4, 0x5, 0x1, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f0ffffffb703000008000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) r14 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000001640)='kfree\x00', r14}, 0x10) io_uring_setup(0x2e32, &(0x7f0000000180)={0x0, 0x0, 0x2}) r15 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r15, &(0x7f00000002c0)="9e", 0x1a000, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$inet6(r15, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)='h', 0x30400}], 0x1}, 0x0) 3.980576067s ago: executing program 3 (id=588): socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYRES8=r0], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) gettid() r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f0000000580)=0x100000001, 0x4) connect$inet(r2, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000600)=[@sack_perm], 0x8cbd752) ioctl$sock_inet_tcp_SIOCINQ(r2, 0x541b, &(0x7f00000000c0)) sendmsg$inet(r2, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x40) clock_nanosleep(0x2, 0x0, 0x0, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x1000f4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00'}, 0x10) r3 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="5500000018007fd500fe01b2a4a280930a06000000a843089100fe800c00090008001100080000002d000f009b2c136ef75afb83de448daa72540d8102d2c55327c43ab82286ef1fdd20652383656d4d2449155037", 0x55}], 0x1}, 0x4040044) 3.980012377s ago: executing program 4 (id=589): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x10e, &(0x7f0000000280)={[{@discard}, {@nombcache}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2a}}, {@stripe={'stripe', 0x3d, 0x8}}, {@orlov}, {@dioread_nolock}]}, 0x4, 0x45b, &(0x7f00000010c0)="$eJzs281rHOUfAPDvTJL217dfYq0vfVGjVQy+JE1atQcvioIHBcFLPcYkLbXbRpoIthStIvUoBcGjeBT8CzzpRdST4FXvUijSi9XTyuzOdF+6u0nTTabNfj4w2eeZeWbn+c4zz+4z82QDGFjj2Z8kYmdE/B4Ro/Vsa4Hx+sv1axfm/rl2YS6JavWtv5Jaub+vXZgrihb77cgzE2lE+mkS+zscd+nc+VOzlcrC2Tw/tXz6vamlc+efPXl69sTCiYUzM0ePHjk8/cLzM8/1Jc57srru+3DxwN7X3r78xtyxy+/8/G1SxN8WR5+M99r4RLXa58OVa1dTOhlexQ5D61gZVi1rhqy5Rmr9fzSGotF4o/HqJ6VWDlhX1VyXzRerwCaWRNk1AMpRfNFn97/FsnGjj/Jdfal+A5TFfT1f6luGI83LjLTd3/bTeEQcu/jvV9kS6/McAgCgxffZ+OeZTuO/NO5vKvf/2FqbGxrL51J2R8S9EbEnIu6LqJV9ICIe7HSQHhMC7ZMkN49/0itrj25l2fjvxXxuq3X8V4z+Ymwoz+2qxT+SHD9ZWThUOycREzGyNctP9zjGD6/89nm3bc3jv2zJjl+MBfN6XBne2rrP/Ozy7O3E3OzqxxH7hjvFn9yYCUgiYm9E7FvjMU4+9c2BbttWjr+H1cwzraD6dcST9fa/GG3xF5Le85NT/4vKwqGp4qq42S+/Xnqz2/FvK/4+yNp/e8fr/0b8Y0nzfO3Srbx7vXdf+uOzrvc0k2u6/hsrtuSvH8wuL5+djtiSvF6vdPP6mca+Rb4on8U/cbBz/98djTOxPyKyi/ihiHg4Ih7Jo3s0Ih6LiIM9zsJPLz/+bq8zVHb7z7e1/1hrkbb2byS2RPuazomhUz9+1/qOjeTqPv+O1FIT+Zra59+XveNaTb1u9WoGAACAu1UaETsjSSdvpNN0crL+P/x7YntaWVxafvr44vtn5uu/ERiLkbR40jXa9Dx0Or+tL/IzbfnD+XPjL4a21fKTc4uV+bKDhwG3o0v/z/zpNxqw+fVhHg24S+n/MLj0fxhc+j8Mrg79f1sZ9QA2Xqfv/49KqAew8dr6v2k/GCDu/2Fw6f8wuJr7f1JiPYANtbQtVv6R/GZIVKvV6h1Qjc2TiPSOqEZ/Esk694KdZQd464myP5kAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD6478AAAD//+Jk61o=") r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x80044940, &(0x7f0000001b00)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0, 0x0}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000002c0000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0x126a4b5, &(0x7f000000b6c0)=ANY=[@ANYRES16=r4, @ANYRES64=r3, @ANYBLOB="12a4095a2aac12f0bfcb206d982e44066381388d27f14002d8d7431d3947f6399c7ff9f5193fc0398653e5a67bbb319f02bf4ac6f6ccd5acbfe1350cc3a6d2d48cf6c089ddf67171ffb3b15988e7b394c5daf3e12ca05e4dbdad7edd45f10cbc296a53a530d4c2d203ee650d5fff3a9b5aae78794fe84327e508172cdd72eeff5af4d6db9379bef20dde8e64b91d31a84ce8a7598bb78cc85108874811fc650f0520a5", @ANYRES16, @ANYRESDEC=r1, @ANYRES16=r2, @ANYRES16, @ANYBLOB="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", @ANYRES8=r1, @ANYRESOCT=0x0], 0x0, 0x0, &(0x7f0000000000)) 2.062228908s ago: executing program 0 (id=590): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c0000001800dd8d0000000000000000020000000000000600000000060015000100000018001680140001"], 0x3c}, 0x1, 0x0, 0x0, 0x20000010}, 0x200000a0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x20001400) recvmsg$kcm(r0, &(0x7f0000000680)={0x0, 0x0, 0x0}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\t\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', &(0x7f0000000180), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1fd633322c00"]) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000002c0000000000000000000018110000", @ANYRES32=r3, @ANYRESOCT=r3], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r4}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=@framed={{}, [@printk={@u, {}, {}, {}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x5}, {}, {0x85, 0x0, 0x0, 0x72}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000180)='kfree\x00', r5, 0x0, 0x10000000008}, 0x18) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r6, 0x11b, 0x3, &(0x7f00000003c0)=0x800, 0x4) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 2.061742648s ago: executing program 2 (id=591): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000580)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x11, &(0x7f0000000100)={[{@nombcache}, {@resgid}, {@norecovery}, {@commit={'commit', 0x3d, 0x5}}, {@nombcache}]}, 0x8, 0x601, &(0x7f0000000ac0)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x0, 0x0) open_by_handle_at(r1, &(0x7f0000000240)=@reiserfs_2={0x8, 0x2, {0xb}}, 0x0) 2.061118028s ago: executing program 3 (id=592): r0 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dd9a) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="1b00000400000000000000000080000000000000", @ANYRES32, @ANYRES64=r0, @ANYRESDEC=r0, @ANYRES64=r0, @ANYRES16=r0, @ANYRES64=r0], 0x48) r2 = add_key$keyring(&(0x7f0000000240), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000440)='asymmetric\x00', 0x0, &(0x7f0000000280)="3080", 0x2, r2) r3 = openat$rdma_cm(0xffffff9c, &(0x7f00000006c0), 0x2, 0x0) r4 = gettid() getpid() r5 = openat(0xffffffffffffff9c, 0x0, 0x2c41, 0x0) timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000000000)=0x0) timer_settime(r6, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r3, &(0x7f0000000880)={0xc, 0x8, 0x144, {0x0}}, 0x10) write$RDMA_USER_CM_CMD_JOIN_MCAST(r5, &(0x7f00000002c0)={0x16, 0x98, 0xfa00, {&(0x7f0000000140)={0xffffffffffffffff}, 0x2, 0xffffffffffffffff, 0x10, 0x1, @in6={0xa, 0x4e21, 0x2, @dev={0xfe, 0x80, '\x00', 0x38}, 0x5}}}, 0xa0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r3, &(0x7f0000000180)={0x11, 0x10, 0xfa00, {&(0x7f0000000100), r7}}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$inet(0x2, 0x4000000805, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r8 = gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r8}, &(0x7f0000bbdffc)=0x0) timer_settime(r9, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r10, 0x6, &(0x7f0000002000)={0x1}) fcntl$lock(r10, 0x26, &(0x7f00000031c0)) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8002, &(0x7f00000000c0), 0x1, 0x4b4, &(0x7f0000000c80)="$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") r11 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r11, 0xc0406619, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={0xffffffffffffffff, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000300)=[0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0], 0x0, 0x7f, &(0x7f0000000400)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000440), &(0x7f0000000480), 0x8, 0xdd, 0x8, 0x8, &(0x7f00000004c0)}}, 0x10) r13 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYRES8, @ANYRES32=r1, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x1e00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001800)={&(0x7f0000000580)='kfree\x00', r13}, 0x9) getresuid(&(0x7f00000006c0), &(0x7f0000000700), &(0x7f0000000740)) 2.060396968s ago: executing program 4 (id=593): r0 = socket$packet(0x11, 0x3, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x99, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0xfeffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000180)="899d", 0x0, 0x6}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r2, 0xfeffff, 0x113, 0x3f00f000, &(0x7f0000000700)="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", 0x0, 0xf0, 0x0, 0x4a, 0xffffff0c}, 0x40) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'geneve1\x00', 0x0}) bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendto$inet6(r0, &(0x7f0000000280)="0503092c8f0b480301020d00c52cf7c25975e010b02f0800eb2b2ff0dac8897c6b118777faffffff3066100cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0xfc13, 0x800, 0x0, 0x2f) r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r4, &(0x7f0000000140)={&(0x7f0000000040), 0x14, &(0x7f0000000100)={0x0}, 0x7}, 0x0) setsockopt$WPAN_WANTLQI(r4, 0x0, 0x3, &(0x7f0000000000)=0x1, 0x4) recvmmsg(r4, &(0x7f0000000280)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)=""/6, 0x6}}], 0x15, 0x2107, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a010100000100000000000200fffc0900010073797a30000000000800024000000001cc000000030a0102000000000000000002000000090001"], 0x1e4}}, 0x0) write$binfmt_misc(r6, &(0x7f0000000000), 0xfffffecc) splice(r5, 0x0, r7, 0x0, 0x7fff, 0x0) readv(r4, &(0x7f00000015c0)=[{&(0x7f00000001c0)=""/36, 0x24}, {&(0x7f00000003c0)=""/220, 0xdc}, {&(0x7f00000004c0)=""/65, 0x41}, {&(0x7f0000000540)=""/153, 0x99}, {&(0x7f0000000600)=""/177, 0xb1}, {&(0x7f0000001180)=""/172, 0xac}, {&(0x7f0000001240)=""/118, 0x76}, {&(0x7f00000012c0)=""/243, 0xf3}, {&(0x7f00000013c0)=""/193, 0xc1}, {&(0x7f00000014c0)=""/230, 0xe6}], 0xa) 8.71028ms ago: executing program 0 (id=594): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x2, 0x0, 0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x4410}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x32, &(0x7f00000001c0)={@broadcast, @link_local, @void, {@ipv4={0x800, @udp={{0x6, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty, {[@noop, @lsrr={0x83, 0x3, 0x54}]}}, {0x0, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) 1.61518ms ago: executing program 2 (id=595): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000540)={{r0}, &(0x7f00000004c0), &(0x7f0000000500)='%-5lx \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0xffff}, 0x6) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r2, &(0x7f0000000100), 0x6) 696.81µs ago: executing program 3 (id=596): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r1}, &(0x7f0000000000), &(0x7f00000005c0)=r2}, 0x20) sendmsg$NFT_BATCH(r0, &(0x7f00000004c0)={0x0, 0x4e, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a68000000060a0904000000bf00000000020040003c0004802c0001800b0001006e756d67656e00001c0002800800014000000011080002400000009408000340000000000c000180080001006e6174000900010073797a30000000000900020073797a32"], 0x90}}, 0x0) r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$PPPIOCCONNECT(r3, 0x4004743a, &(0x7f0000000240)=0x1) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x80000000}}, './file0\x00'}) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff010000850000000e000000850000005000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xa, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000400)='kmem_cache_free\x00', r4}, 0x10) add_key(&(0x7f0000000280)='rxrpc\x00', 0x0, &(0x7f0000000100)="01000000020000000000006bb55a2a630b00c145f94cd977", 0x18, 0xffffffffffffffff) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r5, 0x800448d2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r7}, 0x10) bind$bt_hci(r5, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r8, &(0x7f00000001c0)=ANY=[@ANYBLOB='+'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r8, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer) io_uring_enter(0xffffffffffffffff, 0x5d62, 0x0, 0x0, 0x0, 0x0) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_PORT_GET(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="0100fdffffff00000000390000000e0001006e657464657673696d0000a3c40def006e6574646576d80e6d3000000800030000000000"], 0x3c}, 0x1, 0x0, 0x0, 0xc000894}, 0x24048800) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1100024}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x70, r9, 0xa00, 0x70bd2b, 0x25dfdbfd, {}, [@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @pci={{0x8}, {0x11}}]}, 0x70}}, 0x1) mount_setattr(0xffffffffffffffff, &(0x7f0000000040)='.\x00', 0x9000, &(0x7f0000001dc0)={0x87, 0x8c}, 0x20) 0s ago: executing program 4 (id=597): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x13, 0xb, &(0x7f00000009c0)=ANY=[@ANYRESHEX=r0, @ANYRESOCT=r0, @ANYRES8=r0, @ANYRES64=r0, @ANYRESOCT=0x0, @ANYRES32, @ANYRES64, @ANYRES64, @ANYRES64, @ANYRESHEX], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0xffffffffffffff2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) connect$phonet_pipe(r0, &(0x7f0000000040), 0x10) close(0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffffff850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socketpair(0x28, 0x4, 0x5, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='mmap_lock_acquire_returned\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) r4 = syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) tgkill(r4, r4, 0x21) wait4(0x0, 0x0, 0x40000000, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f00000001c0), 0x10000, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000280)='mmap_lock_acquire_returned\x00', r5}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8943, &(0x7f0000000100)={'syzkaller0\x00'}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="0900000004000000080000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000005800c503a035343a4447b066000000000096ec08ef2722bb5238baee217037c0fab841da0a5fb1a00ab8421efcd70dbfb8a96e98adcfa3454d216f61dbaa455245687ad2832da0ed992c671a"], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r7}, 0x10) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @random="110000000002"}) r8 = socket$inet6(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r8, 0x890c, &(0x7f0000000640)={@remote, @private0, @rand_addr=' \x01\x00', 0x40000, 0x40, 0x0, 0x100, 0x0, 0x40180043, r9}) kernel console output (not intermixed with test programs): t: type=1326 audit(1734333916.775:975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3809 comm="syz.2.125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=271 compat=0 ip=0x7fe820015d19 code=0x7ffc0000 [ 42.387585][ T29] audit: type=1326 audit(1734333916.775:976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3809 comm="syz.2.125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe820015d19 code=0x7ffc0000 [ 42.420467][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.430202][ T3815] EXT4-fs (loop3): 1 orphan inode deleted [ 42.435986][ T3815] EXT4-fs (loop3): 1 truncate cleaned up [ 42.443692][ T3815] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.501611][ T3815] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: none. [ 42.555858][ T3828] netlink: 'syz.0.128': attribute type 15 has an invalid length. [ 42.670210][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.694399][ T3841] loop4: detected capacity change from 0 to 1024 [ 42.716935][ T3841] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (1764!=20869) [ 42.773594][ T3844] loop3: detected capacity change from 0 to 2048 [ 42.780816][ T3841] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 42.792689][ T3841] EXT4-fs (loop4): invalid journal inode [ 42.798663][ T3841] EXT4-fs (loop4): can't get journal size [ 42.866228][ T3844] loop3: p1 < > p4 [ 42.870925][ T3844] loop3: p4 size 8388608 extends beyond EOD, truncated [ 42.872256][ T3841] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 42.891581][ T3844] FAULT_INJECTION: forcing a failure. [ 42.891581][ T3844] name failslab, interval 1, probability 0, space 0, times 1 [ 42.904319][ T3844] CPU: 1 UID: 0 PID: 3844 Comm: syz.3.134 Not tainted 6.13.0-rc3-syzkaller #0 [ 42.913183][ T3844] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 42.923271][ T3844] Call Trace: [ 42.926568][ T3844] [ 42.929513][ T3844] dump_stack_lvl+0xf2/0x150 [ 42.934143][ T3844] dump_stack+0x15/0x1a [ 42.938377][ T3844] should_fail_ex+0x223/0x230 [ 42.943075][ T3844] should_failslab+0x8f/0xb0 [ 42.947691][ T3844] __kmalloc_node_track_caller_noprof+0xa8/0x410 [ 42.954117][ T3844] ? sidtab_sid2str_get+0xb8/0x140 [ 42.959281][ T3844] kmemdup_noprof+0x2a/0x60 [ 42.963865][ T3844] sidtab_sid2str_get+0xb8/0x140 [ 42.968920][ T3844] security_sid_to_context_core+0x1eb/0x2f0 [ 42.974086][ T2999] loop3: p1 < > p4 [ 42.974832][ T3844] security_sid_to_context+0x27/0x30 [ 42.983938][ T3844] selinux_lsmprop_to_secctx+0x2c/0x40 [ 42.984463][ T2999] loop3: p4 size 8388608 extends beyond EOD, [ 42.989495][ T3844] security_lsmprop_to_secctx+0x4a/0x90 [ 42.995626][ T2999] truncated [ 43.001113][ T3844] audit_log_task_context+0x93/0x1c0 [ 43.009583][ T3844] audit_log_task+0xf9/0x1c0 [ 43.014321][ T3844] audit_seccomp+0x68/0x130 [ 43.018870][ T3844] __seccomp_filter+0x6fa/0x1180 [ 43.023848][ T3844] __secure_computing+0x9f/0x1c0 [ 43.028945][ T3844] syscall_trace_enter+0xd1/0x1f0 [ 43.034064][ T3844] ? fpregs_assert_state_consistent+0x83/0xa0 [ 43.040257][ T3844] do_syscall_64+0xaa/0x1c0 [ 43.044790][ T3844] ? clear_bhb_loop+0x55/0xb0 [ 43.049501][ T3844] ? clear_bhb_loop+0x55/0xb0 [ 43.054200][ T3844] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 43.060138][ T3844] RIP: 0033:0x7f50a037472c [ 43.064562][ T3844] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 43.084316][ T3844] RSP: 002b:00007f509e9e7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 43.092758][ T3844] RAX: ffffffffffffffda RBX: 00007f50a0565fa0 RCX: 00007f50a037472c [ 43.100738][ T3844] RDX: 000000000000000f RSI: 00007f509e9e70a0 RDI: 0000000000000004 [ 43.108718][ T3844] RBP: 00007f509e9e7090 R08: 0000000000000000 R09: 0000000000000000 [ 43.116704][ T3844] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 43.124734][ T3844] R13: 0000000000000000 R14: 00007f50a0565fa0 R15: 00007ffc7463a838 [ 43.132798][ T3844] [ 43.142267][ T3849] netlink: 'syz.1.137': attribute type 15 has an invalid length. [ 43.206575][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.226234][ T3854] netlink: 'syz.3.141': attribute type 29 has an invalid length. [ 43.239053][ T3854] netlink: 'syz.3.141': attribute type 29 has an invalid length. [ 43.247757][ T3854] tmpfs: Unknown parameter '32' [ 43.354841][ T3861] xt_CT: You must specify a L4 protocol and not use inversions on it [ 43.403300][ T3866] loop0: detected capacity change from 0 to 512 [ 43.421403][ T3863] loop2: detected capacity change from 0 to 512 [ 43.434715][ T3866] EXT4-fs: Ignoring removed orlov option [ 43.473503][ T3866] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 43.508276][ T3874] loop4: detected capacity change from 0 to 512 [ 43.515526][ T3863] EXT4-fs error (device loop2): ext4_acquire_dquot:6938: comm syz.2.144: Failed to acquire dquot type 1 [ 43.535960][ T3866] EXT4-fs (loop0): 1 orphan inode deleted [ 43.541734][ T3866] EXT4-fs (loop0): 1 truncate cleaned up [ 43.553694][ T3866] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.572413][ T3863] EXT4-fs (loop2): 1 truncate cleaned up [ 43.644871][ T3863] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.657648][ T3863] ext4 filesystem being mounted at /28/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 43.713752][ T3297] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.724796][ T3866] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: none. [ 43.736459][ T3874] EXT4-fs error (device loop4): ext4_acquire_dquot:6938: comm syz.4.147: Failed to acquire dquot type 1 [ 43.749379][ T3874] EXT4-fs (loop4): 1 truncate cleaned up [ 43.755352][ T3874] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.768114][ T3874] ext4 filesystem being mounted at /24/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 43.805946][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.831486][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.865413][ T3889] netlink: 'syz.1.149': attribute type 15 has an invalid length. [ 44.116316][ T3898] loop0: detected capacity change from 0 to 512 [ 44.127441][ T3898] netlink: 4 bytes leftover after parsing attributes in process `syz.0.152'. [ 44.534388][ T3920] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1025 sclass=netlink_route_socket pid=3920 comm=syz.3.161 [ 44.673252][ T3931] loop0: detected capacity change from 0 to 128 [ 44.687057][ T3931] vfat: Unknown parameter 'uni_xlat' [ 44.925148][ T3957] loop2: detected capacity change from 0 to 512 [ 44.933024][ T3957] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 44.939173][ T3959] loop0: detected capacity change from 0 to 512 [ 44.942776][ T3957] EXT4-fs (loop2): orphan cleanup on readonly fs [ 44.955063][ T3959] EXT4-fs: Ignoring removed orlov option [ 44.964052][ T3959] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 44.998595][ T3957] EXT4-fs warning (device loop2): ext4_enable_quotas:7156: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 45.001039][ T3967] FAULT_INJECTION: forcing a failure. [ 45.001039][ T3967] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 45.014053][ T3957] EXT4-fs (loop2): Cannot turn on quotas: error -117 [ 45.026706][ T3967] CPU: 0 UID: 0 PID: 3967 Comm: syz.3.182 Not tainted 6.13.0-rc3-syzkaller #0 [ 45.034378][ T3957] EXT4-fs error (device loop2): ext4_orphan_get:1389: inode #16: comm syz.2.175: iget: immutable or append flags not allowed on symlinks [ 45.042199][ T3967] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 45.042216][ T3967] Call Trace: [ 45.042224][ T3967] [ 45.072559][ T3967] dump_stack_lvl+0xf2/0x150 [ 45.077223][ T3967] dump_stack+0x15/0x1a [ 45.081395][ T3967] should_fail_ex+0x223/0x230 [ 45.086082][ T3967] should_fail_alloc_page+0xfd/0x110 [ 45.091418][ T3967] __alloc_pages_noprof+0x109/0x340 [ 45.096668][ T3967] alloc_pages_mpol_noprof+0xb1/0x1e0 [ 45.102096][ T3967] vma_alloc_folio_noprof+0x1a0/0x2f0 [ 45.107561][ T3967] handle_mm_fault+0xdd7/0x2ac0 [ 45.112427][ T3967] exc_page_fault+0x296/0x650 [ 45.117221][ T3967] ? pagemap_pte_hole+0x24c/0x280 [ 45.122416][ T3967] asm_exc_page_fault+0x26/0x30 [ 45.127283][ T3967] RIP: 0010:rep_movs_alternative+0x4a/0x70 [ 45.133102][ T3967] Code: 75 f1 c3 cc cc cc cc 66 0f 1f 84 00 00 00 00 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb c9 a4 c3 cc cc cc cc 48 89 c8 48 c1 e9 03 83 e0 07 f3 48 a5 89 c1 [ 45.152767][ T3967] RSP: 0018:ffffc9001112fd58 EFLAGS: 00050206 [ 45.158834][ T3967] RAX: ffff888113afcc78 RBX: 0000000020011f80 RCX: 0000000000000f80 [ 45.166821][ T3967] RDX: 0000000000000000 RSI: ffff88811a03b080 RDI: 0000000020011000 [ 45.174816][ T3967] RBP: 0000000000001000 R08: 0000000080000000 R09: 0000000000000000 [ 45.182800][ T3967] R10: 000188811a03b000 R11: 000188811a03bfff R12: 0000000000001000 [ 45.190798][ T3967] R13: 00007ffffffff000 R14: 0000000020010f80 R15: ffff88811a03b000 [ 45.198841][ T3967] _copy_to_user+0x7c/0xa0 [ 45.203336][ T3967] pagemap_read+0x3af/0x610 [ 45.207901][ T3967] ? __pfx_pagemap_read+0x10/0x10 [ 45.212959][ T3967] vfs_read+0x1a2/0x700 [ 45.217136][ T3967] ? __fget_files+0x17c/0x1c0 [ 45.221917][ T3967] ? __rcu_read_unlock+0x4e/0x70 [ 45.226889][ T3967] ? __fget_files+0x17c/0x1c0 [ 45.231650][ T3967] __x64_sys_pread64+0xf6/0x150 [ 45.236604][ T3967] x64_sys_call+0x26ee/0x2dc0 [ 45.241313][ T3967] do_syscall_64+0xc9/0x1c0 [ 45.245821][ T3967] ? clear_bhb_loop+0x55/0xb0 [ 45.250502][ T3967] ? clear_bhb_loop+0x55/0xb0 [ 45.255333][ T3967] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 45.261257][ T3967] RIP: 0033:0x7f50a0375d19 [ 45.265753][ T3967] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 45.285375][ T3967] RSP: 002b:00007f509e9e7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 45.293797][ T3967] RAX: ffffffffffffffda RBX: 00007f50a0565fa0 RCX: 00007f50a0375d19 [ 45.301826][ T3967] RDX: 00000000fffffda3 RSI: 000000002000cf80 RDI: 0000000000000003 [ 45.310238][ T3967] RBP: 00007f509e9e7090 R08: 0000000000000000 R09: 0000000000000000 [ 45.318329][ T3967] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 45.326303][ T3967] R13: 0000000000000000 R14: 00007f50a0565fa0 R15: 00007ffc7463a838 [ 45.334307][ T3967] [ 45.341323][ T3957] EXT4-fs error (device loop2): ext4_orphan_get:1394: comm syz.2.175: couldn't read orphan inode 16 (err -117) [ 45.365810][ T3959] EXT4-fs (loop0): 1 orphan inode deleted [ 45.371621][ T3959] EXT4-fs (loop0): 1 truncate cleaned up [ 45.381446][ T3957] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 45.401248][ T3957] tipc: Started in network mode [ 45.403528][ T3959] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.406206][ T3957] tipc: Node identity ac14140f, cluster identity 4711 [ 45.407772][ T3957] tipc: New replicast peer: 10.1.1.2 [ 45.430619][ T3957] tipc: Enabled bearer , priority 10 [ 45.448865][ T3959] ext4: Unknown parameter ' Z* m.Dc8'@C9G9?9S{1Jլ5 æԌqqY糔' [ 45.476819][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.524820][ T3988] loop3: detected capacity change from 0 to 1024 [ 45.540032][ T3988] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (1764!=20869) [ 45.550377][ T3988] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 45.562950][ T3988] EXT4-fs (loop3): invalid journal inode [ 45.569045][ T3988] EXT4-fs (loop3): can't get journal size [ 45.574754][ T3991] loop0: detected capacity change from 0 to 1024 [ 45.584760][ T3991] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (1764!=20869) [ 45.586519][ T3988] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 45.594901][ T3991] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 45.617338][ T3991] EXT4-fs (loop0): invalid journal inode [ 45.623003][ T3991] EXT4-fs (loop0): can't get journal size [ 45.629732][ T3991] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 45.642569][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.665071][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.696203][ T3297] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.803010][ T4011] SELinux: policydb version 0 does not match my version range 15-33 [ 45.811650][ T4011] SELinux: failed to load policy [ 45.977595][ T4022] netlink: 'syz.3.196': attribute type 15 has an invalid length. [ 46.237916][ T4031] loop4: detected capacity change from 0 to 1024 [ 46.252769][ T4031] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (1764!=20869) [ 46.266620][ T4031] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 46.278738][ T4029] xt_CT: You must specify a L4 protocol and not use inversions on it [ 46.318579][ T4031] EXT4-fs (loop4): invalid journal inode [ 46.326238][ T4031] EXT4-fs (loop4): can't get journal size [ 46.371739][ T4031] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 46.429901][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.518198][ T4049] loop3: detected capacity change from 0 to 512 [ 46.555304][ T3373] tipc: Node number set to 2886997007 [ 46.569142][ T4055] loop1: detected capacity change from 0 to 1024 [ 46.577443][ T4055] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (1764!=20869) [ 46.588290][ T4055] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 46.599129][ T4055] EXT4-fs (loop1): invalid journal inode [ 46.604802][ T4055] EXT4-fs (loop1): can't get journal size [ 46.612779][ T4049] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.626256][ T4049] ext4 filesystem being mounted at /52/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 46.656329][ T4049] netlink: 4 bytes leftover after parsing attributes in process `syz.3.213'. [ 46.669701][ T4055] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 46.684822][ T4049] netlink: 20 bytes leftover after parsing attributes in process `syz.3.213'. [ 46.694498][ T4049] Process accounting resumed [ 46.702435][ T4049] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 46.734138][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.792300][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.813831][ T4075] netlink: 'syz.3.217': attribute type 29 has an invalid length. [ 46.821909][ T4076] netlink: 'syz.2.215': attribute type 15 has an invalid length. [ 46.843408][ T4075] netlink: 'syz.3.217': attribute type 29 has an invalid length. [ 46.852892][ T4075] tmpfs: Unknown parameter '32' [ 46.944567][ T4081] loop3: detected capacity change from 0 to 1024 [ 46.960997][ T4081] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (1764!=20869) [ 46.970878][ T4081] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 46.989469][ T4081] EXT4-fs (loop3): invalid journal inode [ 46.999166][ T4081] EXT4-fs (loop3): can't get journal size [ 47.005884][ T4081] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 47.031852][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.128233][ T4088] netlink: 'syz.3.222': attribute type 29 has an invalid length. [ 47.141905][ T4088] netlink: 'syz.3.222': attribute type 29 has an invalid length. [ 47.151867][ T4088] tmpfs: Unknown parameter '32' [ 47.232338][ T29] kauditd_printk_skb: 426 callbacks suppressed [ 47.232352][ T29] audit: type=1400 audit(1734333921.855:1397): avc: denied { write } for pid=4094 comm="syz.2.225" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 47.258516][ T4095] loop2: detected capacity change from 0 to 512 [ 47.263534][ T4097] xt_CT: You must specify a L4 protocol and not use inversions on it [ 47.272213][ T4095] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 47.286940][ T4095] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e12c, mo2=0102] [ 47.296964][ T4095] EXT4-fs (loop2): orphan cleanup on readonly fs [ 47.303735][ T4095] EXT4-fs error (device loop2): ext4_clear_blocks:876: inode #11: comm syz.2.225: attempt to clear invalid blocks 1024 len 1 [ 47.317004][ T4095] EXT4-fs (loop2): Remounting filesystem read-only [ 47.323965][ T4095] EXT4-fs (loop2): 1 truncate cleaned up [ 47.330114][ T4095] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 47.342198][ T4095] SELinux: (dev loop2, type ext4) getxattr errno 5 [ 47.349295][ T4095] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 47.394497][ T29] audit: type=1326 audit(1734333922.015:1398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4101 comm="syz.4.228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa037a15d19 code=0x7ffc0000 [ 47.427904][ T29] audit: type=1326 audit(1734333922.015:1399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4101 comm="syz.4.228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa037a15d19 code=0x7ffc0000 [ 47.451339][ T29] audit: type=1326 audit(1734333922.015:1400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4101 comm="syz.4.228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa037a15d19 code=0x7ffc0000 [ 47.474721][ T29] audit: type=1326 audit(1734333922.015:1401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4101 comm="syz.4.228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa037a15d19 code=0x7ffc0000 [ 47.489675][ T4102] loop4: detected capacity change from 0 to 2048 [ 47.498176][ T29] audit: type=1326 audit(1734333922.015:1402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4101 comm="syz.4.228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa037a15d19 code=0x7ffc0000 [ 47.527893][ T29] audit: type=1326 audit(1734333922.015:1403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4101 comm="syz.4.228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa037a15d19 code=0x7ffc0000 [ 47.534953][ T4108] loop3: detected capacity change from 0 to 512 [ 47.551452][ T29] audit: type=1326 audit(1734333922.015:1404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4101 comm="syz.4.228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa037a15d19 code=0x7ffc0000 [ 47.570753][ T4108] EXT4-fs: Ignoring removed orlov option [ 47.580858][ T29] audit: type=1326 audit(1734333922.015:1405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4101 comm="syz.4.228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa037a15d19 code=0x7ffc0000 [ 47.580887][ T29] audit: type=1326 audit(1734333922.015:1406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4101 comm="syz.4.228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa037a15d19 code=0x7ffc0000 [ 47.636269][ T4110] mmap: syz.0.230 (4110) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 47.637863][ T4108] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 47.685535][ T4102] loop4: p1 < > p4 [ 47.714911][ T4102] loop4: p4 size 8388608 extends beyond EOD, truncated [ 47.726607][ T4108] EXT4-fs (loop3): 1 orphan inode deleted [ 47.732474][ T4108] EXT4-fs (loop3): 1 truncate cleaned up [ 47.738795][ T4108] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.787047][ T4118] loop1: detected capacity change from 0 to 512 [ 47.795400][ T3732] udevd[3732]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 47.810795][ T4108] ext4: Unknown parameter ' Z* m.Dc8'@C9G9?9S{1Jլ5 æԌqqY糔' [ 47.849502][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.063654][ T4136] netlink: 'syz.2.235': attribute type 15 has an invalid length. [ 48.106544][ T4118] ext4 filesystem being mounted at /46/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 48.138058][ T4118] pim6reg1: entered promiscuous mode [ 48.143413][ T4118] pim6reg1: entered allmulticast mode [ 48.621960][ T4168] loop1: detected capacity change from 0 to 512 [ 48.631894][ T4168] EXT4-fs: Ignoring removed orlov option [ 48.644107][ T4168] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 48.666850][ T4175] loop0: detected capacity change from 0 to 512 [ 48.673899][ T4175] EXT4-fs: Ignoring removed orlov option [ 48.681745][ T4168] EXT4-fs (loop1): 1 orphan inode deleted [ 48.687623][ T4168] EXT4-fs (loop1): 1 truncate cleaned up [ 48.697439][ T4177] netlink: 96 bytes leftover after parsing attributes in process `syz.2.252'. [ 48.697585][ T4175] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 48.720333][ T4168] ext4: Unknown parameter ' Z* m.Dc8'@C9G9?9S{1Jլ5 æԌqqY糔' [ 48.739487][ T4175] EXT4-fs (loop0): 1 orphan inode deleted [ 48.745348][ T4175] EXT4-fs (loop0): 1 truncate cleaned up [ 48.759390][ T4175] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: none. [ 48.788571][ T4182] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 48.796963][ T4182] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 48.995777][ T4199] netlink: 96 bytes leftover after parsing attributes in process `syz.3.263'. [ 49.081089][ T4211] loop0: detected capacity change from 0 to 512 [ 49.096396][ T4211] EXT4-fs: Ignoring removed orlov option [ 49.102467][ T4211] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 49.118889][ T4211] EXT4-fs (loop0): 1 orphan inode deleted [ 49.122813][ T4209] loop4: detected capacity change from 0 to 512 [ 49.124712][ T4211] EXT4-fs (loop0): 1 truncate cleaned up [ 49.177434][ T4211] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: none. [ 49.222297][ T4209] ext4 filesystem being mounted at /42/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 49.236349][ T4209] FAULT_INJECTION: forcing a failure. [ 49.236349][ T4209] name failslab, interval 1, probability 0, space 0, times 0 [ 49.249021][ T4209] CPU: 0 UID: 0 PID: 4209 Comm: syz.4.268 Not tainted 6.13.0-rc3-syzkaller #0 [ 49.257895][ T4209] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 49.268017][ T4209] Call Trace: [ 49.271306][ T4209] [ 49.274284][ T4209] dump_stack_lvl+0xf2/0x150 [ 49.278979][ T4209] dump_stack+0x15/0x1a [ 49.283161][ T4209] should_fail_ex+0x223/0x230 [ 49.287869][ T4209] should_failslab+0x8f/0xb0 [ 49.292529][ T4209] kmem_cache_alloc_noprof+0x52/0x320 [ 49.297923][ T4209] ? __es_insert_extent+0x563/0xed0 [ 49.303222][ T4209] __es_insert_extent+0x563/0xed0 [ 49.308405][ T4209] ext4_es_cache_extent+0x294/0x3a0 [ 49.313634][ T4209] ext4_find_extent+0x34f/0x7c0 [ 49.318561][ T4209] ext4_ext_map_blocks+0x11f/0x35c0 [ 49.323876][ T4209] ? radix_tree_node_alloc+0x102/0x1e0 [ 49.329422][ T4209] ? __rcu_read_unlock+0x4e/0x70 [ 49.334444][ T4209] ? __radix_tree_replace+0x1c1/0x1f0 [ 49.339844][ T4209] ? xas_load+0x3ae/0x3d0 [ 49.344231][ T4209] ? xas_load+0x3ae/0x3d0 [ 49.348656][ T4209] ? down_read+0x171/0x4b0 [ 49.353180][ T4209] ext4_map_query_blocks+0x71/0x180 [ 49.358413][ T4209] ext4_map_blocks+0x23c/0xd20 [ 49.363215][ T4209] ? __rcu_read_unlock+0x4e/0x70 [ 49.368203][ T4209] ext4_getblk+0x11f/0x530 [ 49.372722][ T4209] ext4_bread_batch+0x5b/0x360 [ 49.377548][ T4209] __ext4_find_entry+0xa1d/0x1090 [ 49.382595][ T4209] ? kmem_cache_alloc_lru_noprof+0x230/0x320 [ 49.388799][ T4209] ? d_alloc_parallel+0xbf0/0xc60 [ 49.394118][ T4209] ext4_lookup+0xba/0x390 [ 49.398542][ T4209] __lookup_slow+0x184/0x250 [ 49.403154][ T4209] lookup_slow+0x3c/0x60 [ 49.407437][ T4209] walk_component+0x1f5/0x230 [ 49.412140][ T4209] ? path_lookupat+0xfd/0x2b0 [ 49.416898][ T4209] path_lookupat+0x10a/0x2b0 [ 49.421586][ T4209] filename_lookup+0x150/0x340 [ 49.426382][ T4209] user_path_at+0x3c/0x120 [ 49.430836][ T4209] do_fchownat+0x92/0x1a0 [ 49.435224][ T4209] __x64_sys_lchown+0x4a/0x60 [ 49.439918][ T4209] x64_sys_call+0x1e29/0x2dc0 [ 49.444639][ T4209] do_syscall_64+0xc9/0x1c0 [ 49.449158][ T4209] ? clear_bhb_loop+0x55/0xb0 [ 49.453885][ T4209] ? clear_bhb_loop+0x55/0xb0 [ 49.458583][ T4209] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 49.464681][ T4209] RIP: 0033:0x7fa037a15d19 [ 49.469105][ T4209] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 49.488761][ T4209] RSP: 002b:00007fa036087038 EFLAGS: 00000246 ORIG_RAX: 000000000000005e [ 49.497184][ T4209] RAX: ffffffffffffffda RBX: 00007fa037c05fa0 RCX: 00007fa037a15d19 [ 49.505168][ T4209] RDX: 000000000000ee01 RSI: 0000000000000000 RDI: 0000000020000400 [ 49.513154][ T4209] RBP: 00007fa036087090 R08: 0000000000000000 R09: 0000000000000000 [ 49.521172][ T4209] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 49.529259][ T4209] R13: 0000000000000000 R14: 00007fa037c05fa0 R15: 00007fff68679468 [ 49.537289][ T4209] [ 49.681702][ T4240] netlink: 96 bytes leftover after parsing attributes in process `syz.0.277'. [ 49.759747][ T4251] loop2: detected capacity change from 0 to 512 [ 49.768487][ T4251] EXT4-fs: Ignoring removed orlov option [ 49.796256][ T4251] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 49.823022][ T4251] EXT4-fs (loop2): 1 orphan inode deleted [ 49.828928][ T4251] EXT4-fs (loop2): 1 truncate cleaned up [ 49.842228][ T4251] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: none. [ 49.964870][ T4267] FAULT_INJECTION: forcing a failure. [ 49.964870][ T4267] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 49.978023][ T4267] CPU: 0 UID: 0 PID: 4267 Comm: syz.0.287 Not tainted 6.13.0-rc3-syzkaller #0 [ 49.986913][ T4267] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 49.996982][ T4267] Call Trace: [ 50.000281][ T4267] [ 50.003257][ T4267] dump_stack_lvl+0xf2/0x150 [ 50.007932][ T4267] dump_stack+0x15/0x1a [ 50.012214][ T4267] should_fail_ex+0x223/0x230 [ 50.016942][ T4267] should_fail+0xb/0x10 [ 50.021188][ T4267] should_fail_usercopy+0x1a/0x20 [ 50.026243][ T4267] _copy_from_user+0x1e/0xb0 [ 50.030861][ T4267] __sys_bpf+0x14e/0x7a0 [ 50.035138][ T4267] __x64_sys_bpf+0x43/0x50 [ 50.039661][ T4267] x64_sys_call+0x2914/0x2dc0 [ 50.044356][ T4267] do_syscall_64+0xc9/0x1c0 [ 50.048950][ T4267] ? clear_bhb_loop+0x55/0xb0 [ 50.053778][ T4267] ? clear_bhb_loop+0x55/0xb0 [ 50.058475][ T4267] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 50.064468][ T4267] RIP: 0033:0x7fd9e40b5d19 [ 50.068891][ T4267] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 50.088602][ T4267] RSP: 002b:00007fd9e2721038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 50.097039][ T4267] RAX: ffffffffffffffda RBX: 00007fd9e42a5fa0 RCX: 00007fd9e40b5d19 [ 50.105074][ T4267] RDX: 0000000000000050 RSI: 00000000200005c0 RDI: 0000000000000000 [ 50.113063][ T4267] RBP: 00007fd9e2721090 R08: 0000000000000000 R09: 0000000000000000 [ 50.121123][ T4267] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 50.129103][ T4267] R13: 0000000000000000 R14: 00007fd9e42a5fa0 R15: 00007ffe506e9998 [ 50.137098][ T4267] [ 50.216848][ T4275] netlink: 96 bytes leftover after parsing attributes in process `syz.2.290'. [ 50.250995][ T4273] netlink: 8 bytes leftover after parsing attributes in process `syz.0.289'. [ 50.262209][ T4278] netlink: 'syz.3.285': attribute type 15 has an invalid length. [ 50.270742][ T4273] netlink: 4 bytes leftover after parsing attributes in process `syz.0.289'. [ 50.280789][ T4273] netlink: 4 bytes leftover after parsing attributes in process `syz.0.289'. [ 50.539202][ T4294] netlink: 'syz.2.295': attribute type 29 has an invalid length. [ 50.567989][ T4297] FAULT_INJECTION: forcing a failure. [ 50.567989][ T4297] name failslab, interval 1, probability 0, space 0, times 0 [ 50.571164][ T4294] netlink: 'syz.2.295': attribute type 29 has an invalid length. [ 50.581380][ T4297] CPU: 0 UID: 0 PID: 4297 Comm: syz.4.296 Not tainted 6.13.0-rc3-syzkaller #0 [ 50.592276][ T4294] tmpfs: Unknown parameter '32' [ 50.597900][ T4297] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 50.597918][ T4297] Call Trace: [ 50.597926][ T4297] [ 50.597936][ T4297] dump_stack_lvl+0xf2/0x150 [ 50.623904][ T4297] dump_stack+0x15/0x1a [ 50.628099][ T4297] should_fail_ex+0x223/0x230 [ 50.632886][ T4297] should_failslab+0x8f/0xb0 [ 50.637517][ T4297] __kmalloc_noprof+0xab/0x3f0 [ 50.642295][ T4297] ? __se_sys_memfd_create+0x230/0x5c0 [ 50.647839][ T4297] __se_sys_memfd_create+0x230/0x5c0 [ 50.653136][ T4297] __x64_sys_memfd_create+0x31/0x40 [ 50.658425][ T4297] x64_sys_call+0x2d4c/0x2dc0 [ 50.663199][ T4297] do_syscall_64+0xc9/0x1c0 [ 50.667710][ T4297] ? clear_bhb_loop+0x55/0xb0 [ 50.672397][ T4297] ? clear_bhb_loop+0x55/0xb0 [ 50.677154][ T4297] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 50.683118][ T4297] RIP: 0033:0x7fa037a15d19 [ 50.687632][ T4297] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 50.707309][ T4297] RSP: 002b:00007fa036086e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 50.715736][ T4297] RAX: ffffffffffffffda RBX: 00000000000007bf RCX: 00007fa037a15d19 [ 50.723710][ T4297] RDX: 00007fa036086ef0 RSI: 0000000000000000 RDI: 00007fa037a92381 [ 50.731719][ T4297] RBP: 0000000020000d80 R08: 00007fa036086bb7 R09: 00007fa036086e40 [ 50.739695][ T4297] R10: 000000000000000a R11: 0000000000000202 R12: 0000000020000080 [ 50.747704][ T4297] R13: 00007fa036086ef0 R14: 00007fa036086eb0 R15: 0000000020000000 [ 50.755718][ T4297] [ 50.908026][ T4311] loop3: detected capacity change from 0 to 1024 [ 50.933996][ T4311] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (1764!=20869) [ 50.961546][ T4317] loop2: detected capacity change from 0 to 512 [ 50.975500][ T4311] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 50.991348][ T4311] EXT4-fs (loop3): invalid journal inode [ 51.004592][ T4311] EXT4-fs (loop3): can't get journal size [ 51.012535][ T4317] EXT4-fs (loop2): orphan cleanup on readonly fs [ 51.029847][ T4317] EXT4-fs warning (device loop2): ext4_enable_quotas:7156: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 51.045068][ T4319] loop4: detected capacity change from 0 to 512 [ 51.063357][ T4317] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 51.073656][ T4319] EXT4-fs (loop4): couldn't mount as ext3 due to feature incompatibilities [ 51.081519][ T4317] EXT4-fs error (device loop2): ext4_ext_check_inode:524: inode #13: comm syz.2.305: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 51.110696][ T4317] EXT4-fs error (device loop2): ext4_orphan_get:1394: comm syz.2.305: couldn't read orphan inode 13 (err -117) [ 51.144528][ T4329] netlink: 96 bytes leftover after parsing attributes in process `syz.0.309'. [ 51.212381][ T4338] loop3: detected capacity change from 0 to 512 [ 51.222945][ T4338] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.308: bg 0: block 393: padding at end of block bitmap is not set [ 51.238803][ T4338] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 51.248006][ T4338] EXT4-fs (loop3): 2 truncates cleaned up [ 51.309309][ T4347] loop0: detected capacity change from 0 to 512 [ 51.320474][ T4347] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.311: bg 0: block 393: padding at end of block bitmap is not set [ 51.337219][ T4347] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 51.348358][ T4350] loop2: detected capacity change from 0 to 256 [ 51.349752][ T4347] EXT4-fs (loop0): 2 truncates cleaned up [ 51.356043][ T4350] FAT-fs (loop2): bogus number of FAT sectors [ 51.366672][ T4350] FAT-fs (loop2): Can't find a valid FAT filesystem [ 51.526536][ T4362] loop2: detected capacity change from 0 to 1024 [ 51.533709][ T4362] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (1764!=20869) [ 51.543541][ T4362] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 51.553933][ T4362] EXT4-fs (loop2): invalid journal inode [ 51.559824][ T4362] EXT4-fs (loop2): can't get journal size [ 51.595070][ T4365] loop2: detected capacity change from 0 to 512 [ 51.602537][ T4365] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 51.613792][ T4365] EXT4-fs (loop2): 1 truncate cleaned up [ 51.682277][ T4372] loop2: detected capacity change from 0 to 512 [ 51.707482][ T4372] ext4 filesystem being mounted at /76/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 51.722569][ T4372] Process accounting resumed [ 51.728594][ T4372] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 51.921534][ T4391] loop2: detected capacity change from 0 to 512 [ 51.931814][ T4391] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 51.942862][ T4395] loop1: detected capacity change from 0 to 1024 [ 51.950248][ T4395] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (1764!=20869) [ 51.951973][ T4391] EXT4-fs (loop2): 1 truncate cleaned up [ 51.960956][ T4395] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 51.977625][ T4395] EXT4-fs (loop1): invalid journal inode [ 51.983481][ T4395] EXT4-fs (loop1): can't get journal size [ 52.029468][ T4402] loop3: detected capacity change from 0 to 512 [ 52.044002][ T4402] EXT4-fs: Ignoring removed orlov option [ 52.051687][ T4402] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 52.066896][ T4402] EXT4-fs (loop3): 1 orphan inode deleted [ 52.072755][ T4402] EXT4-fs (loop3): 1 truncate cleaned up [ 52.083825][ T4402] ext4: Unknown parameter ' Z* m.Dc8'@C9G9?9S{1Jլ5 æԌqqY糔' [ 52.233691][ T4433] loop3: detected capacity change from 0 to 1024 [ 52.240686][ T29] kauditd_printk_skb: 735 callbacks suppressed [ 52.240700][ T29] audit: type=1326 audit(1734333926.865:2142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4434 comm="syz.2.349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fe82000cce7 code=0x7ffc0000 [ 52.244050][ T4433] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (1764!=20869) [ 52.249247][ T29] audit: type=1326 audit(1734333926.875:2143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4434 comm="syz.2.349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe81ffb1f29 code=0x7ffc0000 [ 52.272376][ T4433] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 52.286109][ T29] audit: type=1326 audit(1734333926.915:2144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4434 comm="syz.2.349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe820015d19 code=0x7ffc0000 [ 52.336858][ T29] audit: type=1326 audit(1734333926.915:2145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4434 comm="syz.2.349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fe82000cce7 code=0x7ffc0000 [ 52.357161][ T4437] loop0: detected capacity change from 0 to 512 [ 52.360134][ T29] audit: type=1326 audit(1734333926.915:2146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4434 comm="syz.2.349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe81ffb1f29 code=0x7ffc0000 [ 52.376701][ T4437] EXT4-fs: Ignoring removed orlov option [ 52.389543][ T29] audit: type=1326 audit(1734333926.915:2147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4434 comm="syz.2.349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fe82000cce7 code=0x7ffc0000 [ 52.418478][ T29] audit: type=1326 audit(1734333926.915:2148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4434 comm="syz.2.349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe81ffb1f29 code=0x7ffc0000 [ 52.441747][ T29] audit: type=1326 audit(1734333926.915:2149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4434 comm="syz.2.349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fe82000cce7 code=0x7ffc0000 [ 52.458175][ T4433] EXT4-fs (loop3): invalid journal inode [ 52.464973][ T29] audit: type=1326 audit(1734333926.915:2150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4434 comm="syz.2.349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe81ffb1f29 code=0x7ffc0000 [ 52.470740][ T4437] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 52.493923][ T29] audit: type=1326 audit(1734333926.915:2151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4434 comm="syz.2.349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fe82000cce7 code=0x7ffc0000 [ 52.503937][ T4433] EXT4-fs (loop3): can't get journal size [ 52.552665][ T4435] loop2: detected capacity change from 0 to 512 [ 52.559125][ T4437] EXT4-fs (loop0): 1 orphan inode deleted [ 52.561580][ T4435] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 52.564890][ T4437] EXT4-fs (loop0): 1 truncate cleaned up [ 52.577026][ T4435] EXT4-fs (loop2): 1 truncate cleaned up [ 52.584773][ T4407] loop1: detected capacity change from 0 to 4096 [ 52.619085][ T4437] ext4: Unknown parameter ' Z* m.Dc8'@C9G9?9S{1Jլ5 æԌqqY糔' [ 52.791595][ T4464] loop2: detected capacity change from 0 to 512 [ 52.798536][ T4463] loop0: detected capacity change from 0 to 512 [ 52.812082][ T4464] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 52.824922][ T4464] EXT4-fs (loop2): orphan cleanup on readonly fs [ 52.832645][ T4464] EXT4-fs warning (device loop2): ext4_enable_quotas:7156: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 52.833526][ T4463] ext4 filesystem being mounted at /66/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 52.863647][ T4471] loop4: detected capacity change from 0 to 512 [ 52.874900][ T4464] EXT4-fs (loop2): Cannot turn on quotas: error -117 [ 52.884885][ T4463] Process accounting resumed [ 52.886051][ T4445] bridge_slave_1: left allmulticast mode [ 52.891044][ T4471] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 52.895135][ T4445] bridge_slave_1: left promiscuous mode [ 52.906363][ T4464] EXT4-fs error (device loop2): ext4_orphan_get:1389: inode #16: comm syz.2.354: iget: immutable or append flags not allowed on symlinks [ 52.910694][ T4445] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.927140][ T4464] EXT4-fs error (device loop2): ext4_orphan_get:1394: comm syz.2.354: couldn't read orphan inode 16 (err -117) [ 52.933171][ T4471] EXT4-fs (loop4): 1 truncate cleaned up [ 52.950633][ T4463] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 52.953098][ T4445] netlink: 'syz.3.351': attribute type 2 has an invalid length. [ 52.968681][ T4445] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 52.984977][ T4464] tipc: Enabling of bearer rejected, already enabled [ 53.021179][ T4476] loop4: detected capacity change from 0 to 1024 [ 53.028367][ T4476] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (1764!=20869) [ 53.038283][ T4476] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 53.050909][ T4476] EXT4-fs (loop4): invalid journal inode [ 53.056910][ T4476] EXT4-fs (loop4): can't get journal size [ 53.097976][ T4482] loop4: detected capacity change from 0 to 512 [ 53.104645][ T4482] EXT4-fs: Ignoring removed orlov option [ 53.110658][ T4482] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 53.123154][ T4482] EXT4-fs (loop4): 1 orphan inode deleted [ 53.129019][ T4482] EXT4-fs (loop4): 1 truncate cleaned up [ 53.145667][ T4482] ext4: Unknown parameter ' Z* m.Dc8'@C9G9?9S{1Jլ5 æԌqqY糔' [ 53.218864][ T4496] FAULT_INJECTION: forcing a failure. [ 53.218864][ T4496] name failslab, interval 1, probability 0, space 0, times 0 [ 53.231528][ T4496] CPU: 1 UID: 0 PID: 4496 Comm: syz.4.371 Not tainted 6.13.0-rc3-syzkaller #0 [ 53.240420][ T4496] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 53.250485][ T4496] Call Trace: [ 53.253866][ T4496] [ 53.256847][ T4496] dump_stack_lvl+0xf2/0x150 [ 53.261472][ T4496] dump_stack+0x15/0x1a [ 53.265780][ T4496] should_fail_ex+0x223/0x230 [ 53.270475][ T4496] should_failslab+0x8f/0xb0 [ 53.275162][ T4496] kmem_cache_alloc_node_noprof+0x59/0x320 [ 53.281049][ T4496] ? __alloc_skb+0x10b/0x310 [ 53.285657][ T4496] __alloc_skb+0x10b/0x310 [ 53.290105][ T4496] dccp_send_close+0x63/0x210 [ 53.294868][ T4496] dccp_close+0x52d/0x9d0 [ 53.299206][ T4496] inet_release+0xce/0xf0 [ 53.303554][ T4496] sock_close+0x68/0x150 [ 53.307806][ T4496] ? __pfx_sock_close+0x10/0x10 [ 53.312743][ T4496] __fput+0x17a/0x6d0 [ 53.316747][ T4496] ____fput+0x1c/0x30 [ 53.320752][ T4496] task_work_run+0x13a/0x1a0 [ 53.325393][ T4496] syscall_exit_to_user_mode+0xa8/0x120 [ 53.331033][ T4496] do_syscall_64+0xd6/0x1c0 [ 53.335645][ T4496] ? clear_bhb_loop+0x55/0xb0 [ 53.340327][ T4496] ? clear_bhb_loop+0x55/0xb0 [ 53.345048][ T4496] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 53.350991][ T4496] RIP: 0033:0x7fa037a15d19 [ 53.355409][ T4496] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 53.375058][ T4496] RSP: 002b:00007fa036087038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 53.383495][ T4496] RAX: 0000000000000000 RBX: 00007fa037c05fa0 RCX: 00007fa037a15d19 [ 53.391484][ T4496] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000000000005 [ 53.399506][ T4496] RBP: 00007fa036087090 R08: 0000000000000000 R09: 0000000000000000 [ 53.407500][ T4496] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 53.415486][ T4496] R13: 0000000000000000 R14: 00007fa037c05fa0 R15: 00007fff68679468 [ 53.423502][ T4496] [ 53.438505][ T4501] loop0: detected capacity change from 0 to 1024 [ 53.445833][ T4501] EXT4-fs: Mount option(s) incompatible with ext2 [ 53.455910][ T4498] loop1: detected capacity change from 0 to 512 [ 53.463142][ T4498] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 53.467887][ T4503] FAULT_INJECTION: forcing a failure. [ 53.467887][ T4503] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 53.484523][ T4498] EXT4-fs (loop1): 1 truncate cleaned up [ 53.486156][ T4503] CPU: 1 UID: 0 PID: 4503 Comm: syz.4.374 Not tainted 6.13.0-rc3-syzkaller #0 [ 53.500623][ T4503] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 53.510817][ T4503] Call Trace: [ 53.514134][ T4503] [ 53.517091][ T4503] dump_stack_lvl+0xf2/0x150 [ 53.521706][ T4503] dump_stack+0x15/0x1a [ 53.525912][ T4503] should_fail_ex+0x223/0x230 [ 53.530599][ T4503] should_fail+0xb/0x10 [ 53.534760][ T4503] should_fail_usercopy+0x1a/0x20 [ 53.539793][ T4503] _copy_from_user+0x1e/0xb0 [ 53.544396][ T4503] get_itimerspec64+0x4d/0x230 [ 53.549210][ T4503] __x64_sys_timerfd_settime+0x89/0x140 [ 53.554776][ T4503] x64_sys_call+0x2b76/0x2dc0 [ 53.559457][ T4503] do_syscall_64+0xc9/0x1c0 [ 53.563966][ T4503] ? clear_bhb_loop+0x55/0xb0 [ 53.568683][ T4503] ? clear_bhb_loop+0x55/0xb0 [ 53.573364][ T4503] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 53.579403][ T4503] RIP: 0033:0x7fa037a15d19 [ 53.583824][ T4503] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 53.604079][ T4503] RSP: 002b:00007fa036087038 EFLAGS: 00000246 ORIG_RAX: 000000000000011e [ 53.612633][ T4503] RAX: ffffffffffffffda RBX: 00007fa037c05fa0 RCX: 00007fa037a15d19 [ 53.620609][ T4503] RDX: 0000000020000080 RSI: 0000000000000003 RDI: 0000000000000004 [ 53.628596][ T4503] RBP: 00007fa036087090 R08: 0000000000000000 R09: 0000000000000000 [ 53.636581][ T4503] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 53.644570][ T4503] R13: 0000000000000000 R14: 00007fa037c05fa0 R15: 00007fff68679468 [ 53.652639][ T4503] [ 53.670948][ T4503] __nla_validate_parse: 1 callbacks suppressed [ 53.670963][ T4503] netlink: 56 bytes leftover after parsing attributes in process `syz.4.374'. [ 53.700087][ T4508] loop2: detected capacity change from 0 to 1024 [ 53.707114][ T4508] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (1764!=20869) [ 53.716642][ T4508] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 53.727634][ T4508] EXT4-fs (loop2): invalid journal inode [ 53.733343][ T4508] EXT4-fs (loop2): can't get journal size [ 53.772257][ T4512] loop4: detected capacity change from 0 to 512 [ 53.786783][ T4512] EXT4-fs: Ignoring removed orlov option [ 53.799035][ T4512] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 53.799130][ T4518] loop1: detected capacity change from 0 to 512 [ 53.830124][ T4512] EXT4-fs (loop4): 1 orphan inode deleted [ 53.835947][ T4512] EXT4-fs (loop4): 1 truncate cleaned up [ 53.841212][ T4518] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.375: bg 0: block 393: padding at end of block bitmap is not set [ 53.856284][ T4518] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 53.856817][ T4512] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: none. [ 53.865714][ T4518] EXT4-fs (loop1): 2 truncates cleaned up [ 53.896712][ T4524] netlink: 56 bytes leftover after parsing attributes in process `syz.0.381'. [ 53.976084][ T4530] veth0_virt_wifi: entered promiscuous mode [ 53.983901][ T4530] veth0_virt_wifi: left promiscuous mode [ 53.993922][ T4532] loop4: detected capacity change from 0 to 512 [ 54.001173][ T4532] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 54.022957][ T4532] EXT4-fs (loop4): 1 truncate cleaned up [ 54.062649][ T4541] loop4: detected capacity change from 0 to 512 [ 54.069784][ T4541] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 54.090579][ T4543] loop0: detected capacity change from 0 to 512 [ 54.091243][ T4541] EXT4-fs (loop4): 1 truncate cleaned up [ 54.113482][ T4543] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 54.122025][ T4543] EXT4-fs (loop0): orphan cleanup on readonly fs [ 54.128900][ T4543] EXT4-fs warning (device loop0): ext4_enable_quotas:7156: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 54.143798][ T4543] EXT4-fs (loop0): Cannot turn on quotas: error -117 [ 54.150982][ T4543] EXT4-fs error (device loop0): ext4_orphan_get:1389: inode #16: comm syz.0.386: iget: immutable or append flags not allowed on symlinks [ 54.152761][ T4546] syz.4.389 uses obsolete (PF_INET,SOCK_PACKET) [ 54.166773][ T4543] EXT4-fs error (device loop0): ext4_orphan_get:1394: comm syz.0.386: couldn't read orphan inode 16 (err -117) [ 54.173567][ T4546] FAULT_INJECTION: forcing a failure. [ 54.173567][ T4546] name failslab, interval 1, probability 0, space 0, times 0 [ 54.188821][ T4543] tipc: Enabling of bearer rejected, already enabled [ 54.195799][ T4546] CPU: 1 UID: 0 PID: 4546 Comm: syz.4.389 Not tainted 6.13.0-rc3-syzkaller #0 [ 54.212283][ T4546] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 54.222358][ T4546] Call Trace: [ 54.225642][ T4546] [ 54.228579][ T4546] dump_stack_lvl+0xf2/0x150 [ 54.233200][ T4546] dump_stack+0x15/0x1a [ 54.237437][ T4546] should_fail_ex+0x223/0x230 [ 54.242257][ T4546] should_failslab+0x8f/0xb0 [ 54.246880][ T4546] kmem_cache_alloc_node_noprof+0x59/0x320 [ 54.252691][ T4546] ? __alloc_skb+0x10b/0x310 [ 54.257478][ T4546] ? avc_has_perm_noaudit+0x1cc/0x210 [ 54.262941][ T4546] __alloc_skb+0x10b/0x310 [ 54.267405][ T4546] alloc_skb_with_frags+0x80/0x450 [ 54.272574][ T4546] ? selinux_file_open+0x34a/0x3b0 [ 54.277819][ T4546] ? should_fail_ex+0xd7/0x230 [ 54.282643][ T4546] sock_alloc_send_pskb+0x435/0x4f0 [ 54.287880][ T4546] tun_get_user+0xa33/0x25b0 [ 54.292483][ T4546] ? _parse_integer+0x27/0x30 [ 54.297162][ T4546] ? ref_tracker_alloc+0x1f5/0x2f0 [ 54.302442][ T4546] tun_chr_write_iter+0x188/0x240 [ 54.307567][ T4546] vfs_write+0x77f/0x920 [ 54.312041][ T4546] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 54.317925][ T4546] ksys_write+0xe8/0x1b0 [ 54.322174][ T4546] __x64_sys_write+0x42/0x50 [ 54.326879][ T4546] x64_sys_call+0x287e/0x2dc0 [ 54.331567][ T4546] do_syscall_64+0xc9/0x1c0 [ 54.336071][ T4546] ? clear_bhb_loop+0x55/0xb0 [ 54.340748][ T4546] ? clear_bhb_loop+0x55/0xb0 [ 54.345482][ T4546] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 54.351431][ T4546] RIP: 0033:0x7fa037a15d19 [ 54.355851][ T4546] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 54.375478][ T4546] RSP: 002b:00007fa036087038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 54.383988][ T4546] RAX: ffffffffffffffda RBX: 00007fa037c05fa0 RCX: 00007fa037a15d19 [ 54.391997][ T4546] RDX: 0000000000000086 RSI: 0000000020000600 RDI: 0000000000000005 [ 54.400059][ T4546] RBP: 00007fa036087090 R08: 0000000000000000 R09: 0000000000000000 [ 54.408198][ T4546] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 54.416241][ T4546] R13: 0000000000000000 R14: 00007fa037c05fa0 R15: 00007fff68679468 [ 54.424245][ T4546] [ 54.498229][ T4553] loop2: detected capacity change from 0 to 512 [ 54.518112][ T4553] ext4 filesystem being mounted at /96/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 54.536741][ T4553] Process accounting resumed [ 54.542721][ T4553] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 54.592700][ T4563] netlink: 96 bytes leftover after parsing attributes in process `syz.2.396'. [ 54.608625][ T4567] loop3: detected capacity change from 0 to 512 [ 54.625074][ T4567] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 54.634198][ T4569] loop1: detected capacity change from 0 to 512 [ 54.642124][ T4569] EXT4-fs: Ignoring removed orlov option [ 54.647900][ T4572] netlink: 'syz.2.400': attribute type 29 has an invalid length. [ 54.648434][ T4567] EXT4-fs (loop3): 1 truncate cleaned up [ 54.656929][ T4569] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 54.676717][ T4569] EXT4-fs (loop1): 1 orphan inode deleted [ 54.682489][ T4569] EXT4-fs (loop1): 1 truncate cleaned up [ 54.684664][ T4572] netlink: 'syz.2.400': attribute type 29 has an invalid length. [ 54.697481][ T4569] ext4: Unknown parameter ' Z* m.Dc8'@C9G9?9S{1Jլ5 æԌqqY糔' [ 54.699251][ T4572] tmpfs: Unknown parameter '32' [ 54.746996][ T4577] FAULT_INJECTION: forcing a failure. [ 54.746996][ T4577] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 54.760133][ T4577] CPU: 1 UID: 0 PID: 4577 Comm: syz.1.402 Not tainted 6.13.0-rc3-syzkaller #0 [ 54.769009][ T4577] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 54.779170][ T4577] Call Trace: [ 54.782457][ T4577] [ 54.785391][ T4577] dump_stack_lvl+0xf2/0x150 [ 54.790027][ T4577] dump_stack+0x15/0x1a [ 54.794443][ T4577] should_fail_ex+0x223/0x230 [ 54.799160][ T4577] should_fail+0xb/0x10 [ 54.803347][ T4577] should_fail_usercopy+0x1a/0x20 [ 54.808386][ T4577] _copy_from_user+0x1e/0xb0 [ 54.813042][ T4577] __x64_sys_epoll_ctl+0x8e/0xf0 [ 54.818014][ T4577] x64_sys_call+0x1361/0x2dc0 [ 54.822719][ T4577] do_syscall_64+0xc9/0x1c0 [ 54.827251][ T4577] ? clear_bhb_loop+0x55/0xb0 [ 54.831939][ T4577] ? clear_bhb_loop+0x55/0xb0 [ 54.836635][ T4577] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 54.842551][ T4577] RIP: 0033:0x7f62f2dc5d19 [ 54.846971][ T4577] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 54.866678][ T4577] RSP: 002b:00007f62f1431038 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 54.875151][ T4577] RAX: ffffffffffffffda RBX: 00007f62f2fb5fa0 RCX: 00007f62f2dc5d19 [ 54.883288][ T4577] RDX: 0000000000000006 RSI: 0000000000000003 RDI: 0000000000000005 [ 54.891333][ T4577] RBP: 00007f62f1431090 R08: 0000000000000000 R09: 0000000000000000 [ 54.899358][ T4577] R10: 0000000020000040 R11: 0000000000000246 R12: 0000000000000001 [ 54.907338][ T4577] R13: 0000000000000000 R14: 00007f62f2fb5fa0 R15: 00007ffd51685c48 [ 54.915327][ T4577] [ 54.981399][ T4588] loop0: detected capacity change from 0 to 512 [ 55.008855][ T4588] ext4 filesystem being mounted at /77/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 55.026507][ T4593] loop2: detected capacity change from 0 to 512 [ 55.035159][ T4588] Process accounting resumed [ 55.041075][ T4588] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 55.053073][ T4593] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.405: bg 0: block 393: padding at end of block bitmap is not set [ 55.068165][ T4593] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 55.078101][ T4593] EXT4-fs (loop2): 2 truncates cleaned up [ 55.102360][ T4600] loop0: detected capacity change from 0 to 512 [ 55.111512][ T4600] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 55.127151][ T4600] EXT4-fs (loop0): 1 truncate cleaned up [ 55.172482][ T4611] loop1: detected capacity change from 0 to 512 [ 55.179437][ T4611] EXT4-fs: Ignoring removed orlov option [ 55.185857][ T4611] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 55.197474][ T4611] EXT4-fs (loop1): 1 orphan inode deleted [ 55.203377][ T4611] EXT4-fs (loop1): 1 truncate cleaned up [ 55.214549][ T4613] loop0: detected capacity change from 0 to 512 [ 55.223660][ T4611] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: none. [ 55.227118][ T4613] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 55.241622][ T4613] EXT4-fs (loop0): orphan cleanup on readonly fs [ 55.248566][ T4613] EXT4-fs warning (device loop0): ext4_enable_quotas:7156: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 55.264791][ T4613] EXT4-fs (loop0): Cannot turn on quotas: error -117 [ 55.271787][ T4613] EXT4-fs error (device loop0): ext4_orphan_get:1389: inode #16: comm syz.0.415: iget: immutable or append flags not allowed on symlinks [ 55.286387][ T4613] EXT4-fs error (device loop0): ext4_orphan_get:1394: comm syz.0.415: couldn't read orphan inode 16 (err -117) [ 55.363756][ T4617] FAULT_INJECTION: forcing a failure. [ 55.363756][ T4617] name failslab, interval 1, probability 0, space 0, times 0 [ 55.376602][ T4617] CPU: 1 UID: 0 PID: 4617 Comm: syz.1.417 Not tainted 6.13.0-rc3-syzkaller #0 [ 55.385475][ T4617] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 55.386151][ T4621] netlink: 48 bytes leftover after parsing attributes in process `syz.4.418'. [ 55.395676][ T4617] Call Trace: [ 55.395688][ T4617] [ 55.395697][ T4617] dump_stack_lvl+0xf2/0x150 [ 55.415465][ T4617] dump_stack+0x15/0x1a [ 55.417077][ T4609] tipc: Enabling of bearer rejected, already enabled [ 55.419645][ T4617] should_fail_ex+0x223/0x230 [ 55.419681][ T4617] should_failslab+0x8f/0xb0 [ 55.436640][ T4617] kmem_cache_alloc_noprof+0x52/0x320 [ 55.442115][ T4617] ? audit_log_start+0x34c/0x6b0 [ 55.447086][ T4617] audit_log_start+0x34c/0x6b0 [ 55.451891][ T4617] ? kmem_cache_free+0xdc/0x2d0 [ 55.456811][ T4617] audit_seccomp+0x4b/0x130 [ 55.461420][ T4617] __seccomp_filter+0x6fa/0x1180 [ 55.466464][ T4617] ? update_load_avg+0x1f7/0x7c0 [ 55.471435][ T4617] ? __dequeue_entity+0x2c3/0x310 [ 55.476579][ T4617] ? __list_add_valid_or_report+0x36/0xc0 [ 55.482336][ T4617] ? tracing_record_taskinfo_sched_switch+0x6f/0x270 [ 55.489070][ T4617] __secure_computing+0x9f/0x1c0 [ 55.494119][ T4617] syscall_trace_enter+0xd1/0x1f0 [ 55.499282][ T4617] do_syscall_64+0xaa/0x1c0 [ 55.503838][ T4617] ? clear_bhb_loop+0x55/0xb0 [ 55.508546][ T4617] ? clear_bhb_loop+0x55/0xb0 [ 55.512865][ T4628] loop4: detected capacity change from 0 to 512 [ 55.513224][ T4617] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 55.524538][ T4628] ext4 filesystem being mounted at /71/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 55.525510][ T4617] RIP: 0033:0x7f62f2d61f29 [ 55.525532][ T4617] Code: 64 c7 00 16 00 00 00 b8 ff ff ff ff c3 0f 1f 40 00 90 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 c7 c0 0f 00 00 00 0f 05 <0f> 1f 80 00 00 00 00 48 81 ec 48 01 00 00 49 89 d0 64 48 8b 04 25 [ 55.525554][ T4617] RSP: 002b:00007f62f1430a80 EFLAGS: 00000202 ORIG_RAX: 000000000000000f [ 55.525578][ T4617] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007f62f2d61f29 [ 55.542934][ T4628] Process accounting resumed [ 55.559979][ T4617] RDX: 00007f62f1430a80 RSI: 00007f62f1430bb0 RDI: 0000000000000021 [ 55.559999][ T4617] RBP: 00007f62f1431090 R08: 0000000000000000 R09: 00007f62f1430df6 [ 55.560014][ T4617] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000000000a [ 55.560027][ T4617] R13: 0000000000000000 R14: 00007f62f2fb5fa0 R15: 00007ffd51685c48 [ 55.560048][ T4617] [ 55.591925][ T4632] netlink: 'syz.1.423': attribute type 1 has an invalid length. [ 55.624067][ T4632] netlink: 224 bytes leftover after parsing attributes in process `syz.1.423'. [ 55.648173][ T4628] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 55.698936][ T4640] loop4: detected capacity change from 0 to 512 [ 55.707609][ T4640] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 55.722942][ T4646] loop1: detected capacity change from 0 to 512 [ 55.723193][ T4640] EXT4-fs (loop4): 1 truncate cleaned up [ 55.740056][ T4646] ext4 filesystem being mounted at /78/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 55.770288][ T4646] Process accounting resumed [ 55.795074][ T4646] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 55.847736][ T4658] FAULT_INJECTION: forcing a failure. [ 55.847736][ T4658] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 55.860952][ T4658] CPU: 1 UID: 0 PID: 4658 Comm: syz.4.430 Not tainted 6.13.0-rc3-syzkaller #0 [ 55.869828][ T4658] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 55.874879][ T4659] loop0: detected capacity change from 0 to 512 [ 55.879885][ T4658] Call Trace: [ 55.879897][ T4658] [ 55.879906][ T4658] dump_stack_lvl+0xf2/0x150 [ 55.879948][ T4658] dump_stack+0x15/0x1a [ 55.901193][ T4658] should_fail_ex+0x223/0x230 [ 55.905910][ T4658] should_fail+0xb/0x10 [ 55.910093][ T4658] should_fail_usercopy+0x1a/0x20 [ 55.915150][ T4658] _copy_from_user+0x1e/0xb0 [ 55.919805][ T4658] copy_msghdr_from_user+0x54/0x2a0 [ 55.925032][ T4658] ? __fget_files+0x17c/0x1c0 [ 55.929772][ T4658] __sys_sendmsg+0x13e/0x230 [ 55.934482][ T4658] __x64_sys_sendmsg+0x46/0x50 [ 55.939275][ T4658] x64_sys_call+0x2734/0x2dc0 [ 55.943964][ T4658] do_syscall_64+0xc9/0x1c0 [ 55.948488][ T4658] ? clear_bhb_loop+0x55/0xb0 [ 55.953231][ T4658] ? clear_bhb_loop+0x55/0xb0 [ 55.957933][ T4658] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 55.963923][ T4658] RIP: 0033:0x7fa037a15d19 [ 55.968353][ T4658] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 55.987986][ T4658] RSP: 002b:00007fa036087038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 55.989176][ T4659] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 55.996406][ T4658] RAX: ffffffffffffffda RBX: 00007fa037c05fa0 RCX: 00007fa037a15d19 [ 55.996425][ T4658] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000005 [ 56.004600][ T4659] EXT4-fs (loop0): orphan cleanup on readonly fs [ 56.012285][ T4658] RBP: 00007fa036087090 R08: 0000000000000000 R09: 0000000000000000 [ 56.012302][ T4658] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 56.034806][ T4659] EXT4-fs warning (device loop0): ext4_enable_quotas:7156: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 56.042646][ T4658] R13: 0000000000000000 R14: 00007fa037c05fa0 R15: 00007fff68679468 [ 56.042700][ T4658] [ 56.075491][ T4659] EXT4-fs (loop0): Cannot turn on quotas: error -117 [ 56.082136][ T4665] loop2: detected capacity change from 0 to 164 [ 56.088476][ T4659] EXT4-fs error (device loop0): ext4_orphan_get:1389: inode #16: comm syz.0.429: iget: immutable or append flags not allowed on symlinks [ 56.088821][ T4659] EXT4-fs error (device loop0): ext4_orphan_get:1394: comm syz.0.429: couldn't read orphan inode 16 (err -117) [ 56.124921][ T4659] tipc: Enabling of bearer rejected, already enabled [ 56.136378][ T4672] netlink: 8 bytes leftover after parsing attributes in process `syz.2.436'. [ 56.155589][ T4670] netlink: 16 bytes leftover after parsing attributes in process `syz.3.435'. [ 56.226254][ T4681] loop1: detected capacity change from 0 to 512 [ 56.231529][ T4683] loop4: detected capacity change from 0 to 512 [ 56.239324][ T4681] EXT4-fs: Ignoring removed orlov option [ 56.240044][ T4683] EXT4-fs: Ignoring removed orlov option [ 56.250735][ T4684] loop2: detected capacity change from 0 to 512 [ 56.251323][ T4681] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 56.258158][ T4684] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 56.266954][ T4683] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 56.279071][ T4684] EXT4-fs (loop2): 1 truncate cleaned up [ 56.288220][ T4683] EXT4-fs (loop4): 1 orphan inode deleted [ 56.298200][ T4683] EXT4-fs (loop4): 1 truncate cleaned up [ 56.309983][ T4683] ext4: Unknown parameter ' Z* m.Dc8'@C9G9?9S{1Jլ5 æԌqqY糔' [ 56.317076][ T4681] EXT4-fs (loop1): 1 orphan inode deleted [ 56.328609][ T4681] EXT4-fs (loop1): 1 truncate cleaned up [ 56.353968][ T4681] ext4: Unknown parameter ' Z* m.Dc8'@C9G9?9S{1Jլ5 æԌqqY糔' [ 56.390237][ T4691] loop4: detected capacity change from 0 to 4096 [ 56.402319][ T4691] EXT4-fs error (device loop4): ext4_do_update_inode:5153: inode #15: comm syz.4.444: corrupted inode contents [ 56.414468][ T4691] EXT4-fs error (device loop4): ext4_dirty_inode:6041: inode #15: comm syz.4.444: mark_inode_dirty error [ 56.434119][ T4691] EXT4-fs error (device loop4): ext4_do_update_inode:5153: inode #15: comm syz.4.444: corrupted inode contents [ 56.449391][ T4691] EXT4-fs error (device loop4): __ext4_ext_dirty:207: inode #15: comm syz.4.444: mark_inode_dirty error [ 56.461043][ T4691] EXT4-fs error (device loop4): ext4_do_update_inode:5153: inode #15: comm syz.4.444: corrupted inode contents [ 56.474493][ T4691] EXT4-fs error (device loop4): __ext4_ext_dirty:207: inode #15: comm syz.4.444: mark_inode_dirty error [ 56.486315][ T4691] EXT4-fs error (device loop4): ext4_do_update_inode:5153: inode #15: comm syz.4.444: corrupted inode contents [ 56.497178][ T4700] netlink: 'syz.2.448': attribute type 10 has an invalid length. [ 56.498980][ T4691] EXT4-fs error (device loop4): ext4_truncate:4240: inode #15: comm syz.4.444: mark_inode_dirty error [ 56.505883][ T4700] netlink: 2 bytes leftover after parsing attributes in process `syz.2.448'. [ 56.521239][ T4691] EXT4-fs error (device loop4) in ext4_setattr:5568: Corrupt filesystem [ 56.526172][ T4700] team0: entered promiscuous mode [ 56.534728][ T4701] EXT4-fs error (device loop4): ext4_do_update_inode:5153: inode #15: comm syz.4.444: corrupted inode contents [ 56.539082][ T4700] team_slave_0: entered promiscuous mode [ 56.556714][ T4700] team_slave_1: entered promiscuous mode [ 56.562697][ T4700] bridge0: port 2(team0) entered blocking state [ 56.569034][ T4700] bridge0: port 2(team0) entered disabled state [ 56.572985][ T4704] netlink: 'syz.2.448': attribute type 1 has an invalid length. [ 56.575442][ T4700] team0: entered allmulticast mode [ 56.588198][ T4700] team_slave_0: entered allmulticast mode [ 56.593940][ T4700] team_slave_1: entered allmulticast mode [ 56.601404][ T4700] bridge0: port 2(team0) entered blocking state [ 56.607761][ T4700] bridge0: port 2(team0) entered forwarding state [ 56.653994][ T4710] netlink: 'syz.0.450': attribute type 27 has an invalid length. [ 56.667289][ T4710] bond0: (slave bond_slave_0): Releasing backup interface [ 56.739028][ T4720] loop3: detected capacity change from 0 to 512 [ 56.756284][ T4720] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 56.793486][ T4727] loop4: detected capacity change from 0 to 512 [ 56.802064][ T4720] EXT4-fs (loop3): 1 truncate cleaned up [ 56.818780][ T4727] EXT4-fs: Ignoring removed orlov option [ 56.826671][ T4727] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 56.853575][ T4727] EXT4-fs (loop4): 1 orphan inode deleted [ 56.859423][ T4727] EXT4-fs (loop4): 1 truncate cleaned up [ 56.863861][ T4737] FAULT_INJECTION: forcing a failure. [ 56.863861][ T4737] name failslab, interval 1, probability 0, space 0, times 0 [ 56.877728][ T4737] CPU: 1 UID: 0 PID: 4737 Comm: syz.2.461 Not tainted 6.13.0-rc3-syzkaller #0 [ 56.886611][ T4737] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 56.896771][ T4737] Call Trace: [ 56.900106][ T4737] [ 56.903037][ T4737] dump_stack_lvl+0xf2/0x150 [ 56.907784][ T4737] dump_stack+0x15/0x1a [ 56.911970][ T4737] should_fail_ex+0x223/0x230 [ 56.916660][ T4737] should_failslab+0x8f/0xb0 [ 56.921310][ T4737] kmem_cache_alloc_noprof+0x52/0x320 [ 56.926694][ T4737] ? getname_flags+0x81/0x3b0 [ 56.931384][ T4737] getname_flags+0x81/0x3b0 [ 56.935953][ T4737] getname+0x17/0x20 [ 56.939850][ T4737] do_sys_openat2+0x67/0x120 [ 56.944501][ T4737] __x64_sys_openat+0xf3/0x120 [ 56.949323][ T4737] x64_sys_call+0x2b30/0x2dc0 [ 56.954037][ T4737] do_syscall_64+0xc9/0x1c0 [ 56.958611][ T4737] ? clear_bhb_loop+0x55/0xb0 [ 56.963347][ T4737] ? clear_bhb_loop+0x55/0xb0 [ 56.968045][ T4737] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 56.973995][ T4737] RIP: 0033:0x7fe820015d19 [ 56.978416][ T4737] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 56.998121][ T4737] RSP: 002b:00007fe81e681038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 57.006583][ T4737] RAX: ffffffffffffffda RBX: 00007fe820205fa0 RCX: 00007fe820015d19 [ 57.014607][ T4737] RDX: 0000000000002c41 RSI: 0000000020000580 RDI: ffffffffffffff9c [ 57.022659][ T4737] RBP: 00007fe81e681090 R08: 0000000000000000 R09: 0000000000000000 [ 57.030632][ T4737] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 57.038625][ T4737] R13: 0000000000000000 R14: 00007fe820205fa0 R15: 00007ffcec7dbfc8 [ 57.046627][ T4737] [ 57.055682][ T4727] ext4: Unknown parameter ' Z* m.Dc8'@C9G9?9S{1Jլ5 æԌqqY糔' [ 57.074783][ T4738] loop3: detected capacity change from 0 to 512 [ 57.088602][ T4738] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 57.097205][ T4738] EXT4-fs (loop3): orphan cleanup on readonly fs [ 57.104656][ T4738] EXT4-fs warning (device loop3): ext4_enable_quotas:7156: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 57.141789][ T4738] EXT4-fs (loop3): Cannot turn on quotas: error -117 [ 57.150874][ T4738] EXT4-fs error (device loop3): ext4_orphan_get:1389: inode #16: comm syz.3.460: iget: immutable or append flags not allowed on symlinks [ 57.154550][ T4748] tmpfs: Unknown parameter '' [ 57.166520][ T4738] EXT4-fs error (device loop3): ext4_orphan_get:1394: comm syz.3.460: couldn't read orphan inode 16 (err -117) [ 57.178064][ T4748] loop1: detected capacity change from 0 to 1024 [ 57.188827][ T4738] tipc: Enabling of bearer rejected, already enabled [ 57.219400][ T4748] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 57.234232][ T4754] FAULT_INJECTION: forcing a failure. [ 57.234232][ T4754] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 57.234278][ T4754] CPU: 1 UID: 0 PID: 4754 Comm: +}[@ Not tainted 6.13.0-rc3-syzkaller #0 [ 57.234300][ T4754] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 57.234312][ T4754] Call Trace: [ 57.234318][ T4754] [ 57.234325][ T4754] dump_stack_lvl+0xf2/0x150 [ 57.248215][ T4748] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 57.255831][ T4754] dump_stack+0x15/0x1a [ 57.265957][ T4748] EXT4-fs (loop1): This should not happen!! Data will be lost [ 57.265957][ T4748] [ 57.269186][ T4754] should_fail_ex+0x223/0x230 [ 57.269221][ T4754] should_fail+0xb/0x10 [ 57.272187][ T4748] EXT4-fs (loop1): Total free blocks count 0 [ 57.276756][ T4754] should_fail_usercopy+0x1a/0x20 [ 57.288998][ T4748] EXT4-fs (loop1): Free/Dirty block details [ 57.293080][ T4754] _copy_to_user+0x20/0xa0 [ 57.302737][ T4748] EXT4-fs (loop1): free_blocks=68451041280 [ 57.307351][ T4754] copy_siginfo_to_user+0x24/0xb0 [ 57.307400][ T4754] x64_setup_rt_frame+0x2b4/0x590 [ 57.311532][ T4748] EXT4-fs (loop1): dirty_blocks=80 [ 57.317505][ T4754] arch_do_signal_or_restart+0x287/0x4b0 [ 57.322531][ T4748] EXT4-fs (loop1): Block reservation details [ 57.322547][ T4748] EXT4-fs (loop1): i_reserved_data_blocks=5 [ 57.328418][ T4754] syscall_exit_to_user_mode+0x62/0x120 [ 57.342142][ T4748] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 64 with max blocks 4 with error 28 [ 57.343660][ T4754] do_syscall_64+0xd6/0x1c0 [ 57.348803][ T4748] EXT4-fs (loop1): This should not happen!! Data will be lost [ 57.348803][ T4748] [ 57.353840][ T4754] ? clear_bhb_loop+0x55/0xb0 [ 57.361209][ T4748] netlink: 1040 bytes leftover after parsing attributes in process `syz.1.465'. [ 57.365513][ T4754] ? clear_bhb_loop+0x55/0xb0 [ 57.371423][ T4748] netlink: 764 bytes leftover after parsing attributes in process `syz.1.465'. [ 57.376956][ T4754] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 57.377006][ T4754] RIP: 0033:0x7fe820015d17 [ 57.377024][ T4754] Code: ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 [ 57.377062][ T4754] RSP: 002b:00007fe81e681038 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 57.377082][ T4754] RAX: 0000000000000116 RBX: 00007fe820205fa0 RCX: 00007fe820015d19 [ 57.441205][ T29] kauditd_printk_skb: 4047 callbacks suppressed [ 57.441223][ T29] audit: type=1400 audit(1734334700.064:6189): avc: denied { create } for pid=4747 comm="syz.1.465" name=E91F7189591E9233614B scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=sock_file permissive=1 [ 57.441670][ T4754] RDX: 0000000000000001 RSI: 00000000200001c0 RDI: 0000000000000004 [ 57.513943][ T4754] RBP: 00007fe81e681090 R08: 0000000000000000 R09: 0000000000000000 [ 57.521939][ T4754] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 57.530046][ T4754] R13: 0000000000000000 R14: 00007fe820205fa0 R15: 00007ffcec7dbfc8 [ 57.538021][ T4754] [ 57.582143][ T4759] loop2: detected capacity change from 0 to 512 [ 57.588665][ T29] audit: type=1326 audit(1734334700.204:6190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4758 comm="syz.2.470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe820015d19 code=0x7ffc0000 [ 57.595362][ T4759] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 57.612057][ T29] audit: type=1326 audit(1734334700.204:6191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4758 comm="syz.2.470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fe820015d19 code=0x7ffc0000 [ 57.645142][ T29] audit: type=1326 audit(1734334700.204:6192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4758 comm="syz.2.470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fe820015d53 code=0x7ffc0000 [ 57.668489][ T29] audit: type=1326 audit(1734334700.204:6193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4758 comm="syz.2.470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fe8200147cf code=0x7ffc0000 [ 57.691786][ T29] audit: type=1326 audit(1734334700.204:6194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4758 comm="syz.2.470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fe820015da7 code=0x7ffc0000 [ 57.715025][ T29] audit: type=1326 audit(1734334700.204:6195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4758 comm="syz.2.470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe820014680 code=0x7ffc0000 [ 57.738668][ T29] audit: type=1326 audit(1734334700.204:6196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4758 comm="syz.2.470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe82001591b code=0x7ffc0000 [ 57.762001][ T29] audit: type=1326 audit(1734334700.224:6197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4758 comm="syz.2.470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fe82001497a code=0x7ffc0000 [ 57.785308][ T29] audit: type=1326 audit(1734334700.224:6198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4758 comm="syz.2.470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fe82001497a code=0x7ffc0000 [ 57.849108][ T4759] EXT4-fs (loop2): 1 truncate cleaned up [ 57.928085][ T4782] FAULT_INJECTION: forcing a failure. [ 57.928085][ T4782] name failslab, interval 1, probability 0, space 0, times 0 [ 57.940764][ T4782] CPU: 1 UID: 0 PID: 4782 Comm: syz.1.478 Not tainted 6.13.0-rc3-syzkaller #0 [ 57.949699][ T4782] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 57.959836][ T4782] Call Trace: [ 57.963121][ T4782] [ 57.966066][ T4782] dump_stack_lvl+0xf2/0x150 [ 57.970835][ T4782] dump_stack+0x15/0x1a [ 57.975020][ T4782] should_fail_ex+0x223/0x230 [ 57.979763][ T4782] should_failslab+0x8f/0xb0 [ 57.984401][ T4782] __kmalloc_node_track_caller_noprof+0xa8/0x410 [ 57.990825][ T4782] ? kstrdup_const+0x3e/0x50 [ 57.995443][ T4782] kstrdup+0x38/0x80 [ 57.999499][ T4782] kstrdup_const+0x3e/0x50 [ 58.003951][ T4782] alloc_lookup_fw_priv+0x179/0x370 [ 58.009178][ T4782] _request_firmware+0x1ed/0x9c0 [ 58.014142][ T4782] ? rpm_resume+0x655/0xd00 [ 58.018706][ T4782] ? __rcu_read_unlock+0x4e/0x70 [ 58.023674][ T4782] request_firmware+0x36/0x50 [ 58.028366][ T4782] devlink_compat_flash_update+0xaf/0x1b0 [ 58.034112][ T4782] ? _raw_spin_unlock_irqrestore+0x2b/0x60 [ 58.039986][ T4782] dev_ethtool+0x138b/0x14c0 [ 58.044607][ T4782] ? __rcu_read_unlock+0x4e/0x70 [ 58.049661][ T4782] dev_ioctl+0x854/0xab0 [ 58.053942][ T4782] sock_do_ioctl+0x11c/0x260 [ 58.058620][ T4782] sock_ioctl+0x40f/0x600 [ 58.063042][ T4782] ? __pfx_sock_ioctl+0x10/0x10 [ 58.067972][ T4782] __se_sys_ioctl+0xc9/0x140 [ 58.072617][ T4782] __x64_sys_ioctl+0x43/0x50 [ 58.077253][ T4782] x64_sys_call+0x1690/0x2dc0 [ 58.082023][ T4782] do_syscall_64+0xc9/0x1c0 [ 58.086573][ T4782] ? clear_bhb_loop+0x55/0xb0 [ 58.091272][ T4782] ? clear_bhb_loop+0x55/0xb0 [ 58.096041][ T4782] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 58.102101][ T4782] RIP: 0033:0x7f62f2dc5d19 [ 58.106530][ T4782] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 58.126148][ T4782] RSP: 002b:00007f62f1431038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 58.134595][ T4782] RAX: ffffffffffffffda RBX: 00007f62f2fb5fa0 RCX: 00007f62f2dc5d19 [ 58.142567][ T4782] RDX: 0000000020000000 RSI: 0000000000008946 RDI: 0000000000000004 [ 58.150547][ T4782] RBP: 00007f62f1431090 R08: 0000000000000000 R09: 0000000000000000 [ 58.158577][ T4782] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 58.166559][ T4782] R13: 0000000000000000 R14: 00007f62f2fb5fa0 R15: 00007ffd51685c48 [ 58.174541][ T4782] [ 58.188717][ T4784] pim6reg: entered allmulticast mode [ 58.205736][ T4787] pim6reg: entered allmulticast mode [ 58.211334][ T4784] pim6reg: left allmulticast mode [ 58.238784][ T4787] pim6reg: left allmulticast mode [ 58.249404][ T4790] netlink: 'syz.0.474': attribute type 15 has an invalid length. [ 58.289930][ T4792] loop2: detected capacity change from 0 to 512 [ 58.304811][ T4794] loop1: detected capacity change from 0 to 512 [ 58.311969][ T4794] EXT4-fs: Ignoring removed orlov option [ 58.318936][ T4794] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 58.330009][ T4794] EXT4-fs (loop1): 1 orphan inode deleted [ 58.335784][ T4794] EXT4-fs (loop1): 1 truncate cleaned up [ 58.345631][ T4794] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: none. [ 58.387255][ T4792] ext4 filesystem being mounted at /118/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 58.400791][ T4801] FAULT_INJECTION: forcing a failure. [ 58.400791][ T4801] name failslab, interval 1, probability 0, space 0, times 0 [ 58.413476][ T4801] CPU: 1 UID: 0 PID: 4801 Comm: syz.0.485 Not tainted 6.13.0-rc3-syzkaller #0 [ 58.422397][ T4801] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 58.432481][ T4801] Call Trace: [ 58.435773][ T4801] [ 58.438731][ T4801] dump_stack_lvl+0xf2/0x150 [ 58.443469][ T4801] dump_stack+0x15/0x1a [ 58.447648][ T4801] should_fail_ex+0x223/0x230 [ 58.452361][ T4801] should_failslab+0x8f/0xb0 [ 58.457025][ T4801] __kmalloc_noprof+0xab/0x3f0 [ 58.461801][ T4801] ? __se_sys_memfd_create+0x230/0x5c0 [ 58.467332][ T4801] __se_sys_memfd_create+0x230/0x5c0 [ 58.472728][ T4801] __x64_sys_memfd_create+0x31/0x40 [ 58.478003][ T4801] x64_sys_call+0x2d4c/0x2dc0 [ 58.482690][ T4801] do_syscall_64+0xc9/0x1c0 [ 58.487245][ T4801] ? clear_bhb_loop+0x55/0xb0 [ 58.492080][ T4801] ? clear_bhb_loop+0x55/0xb0 [ 58.496765][ T4801] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 58.502747][ T4801] RIP: 0033:0x7fd9e40b5d19 [ 58.507163][ T4801] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 58.526982][ T4801] RSP: 002b:00007fd9e2720e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 58.535400][ T4801] RAX: ffffffffffffffda RBX: 00000000000004c6 RCX: 00007fd9e40b5d19 [ 58.543388][ T4801] RDX: 00007fd9e2720ef0 RSI: 0000000000000000 RDI: 00007fd9e4132381 [ 58.551414][ T4801] RBP: 0000000020000700 R08: 00007fd9e2720bb7 R09: 00007fd9e2720e40 [ 58.559443][ T4801] R10: 000000000000000a R11: 0000000000000202 R12: 00000000200000c0 [ 58.567447][ T4801] R13: 00007fd9e2720ef0 R14: 00007fd9e2720eb0 R15: 0000000020000280 [ 58.575550][ T4801] [ 58.649240][ T4804] loop3: detected capacity change from 0 to 512 [ 58.659973][ T4804] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities [ 58.677903][ T4820] __nla_validate_parse: 2 callbacks suppressed [ 58.677918][ T4820] netlink: 12 bytes leftover after parsing attributes in process `syz.0.489'. [ 58.716375][ T4826] FAULT_INJECTION: forcing a failure. [ 58.716375][ T4826] name failslab, interval 1, probability 0, space 0, times 0 [ 58.729085][ T4826] CPU: 0 UID: 0 PID: 4826 Comm: syz.0.492 Not tainted 6.13.0-rc3-syzkaller #0 [ 58.737948][ T4826] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 58.748032][ T4826] Call Trace: [ 58.751403][ T4826] [ 58.754422][ T4826] dump_stack_lvl+0xf2/0x150 [ 58.759161][ T4826] dump_stack+0x15/0x1a [ 58.763411][ T4826] should_fail_ex+0x223/0x230 [ 58.768134][ T4826] should_failslab+0x8f/0xb0 [ 58.772859][ T4826] __kmalloc_noprof+0xab/0x3f0 [ 58.777648][ T4826] ? __seq_open_private+0x27/0x120 [ 58.782789][ T4826] __seq_open_private+0x27/0x120 [ 58.787734][ T4826] seq_open_private+0x24/0x40 [ 58.792493][ T4826] proc_seq_open+0x58/0x80 [ 58.796965][ T4826] proc_reg_open+0x19d/0x350 [ 58.801574][ T4826] ? __pfx_proc_reg_open+0x10/0x10 [ 58.806745][ T4826] do_dentry_open+0x621/0xa20 [ 58.808059][ T4828] netlink: 4 bytes leftover after parsing attributes in process `syz.1.491'. [ 58.811513][ T4826] vfs_open+0x38/0x1f0 [ 58.811542][ T4826] path_openat+0x1ac2/0x1fa0 [ 58.829111][ T4826] do_filp_open+0x107/0x230 [ 58.833664][ T4826] do_sys_openat2+0xab/0x120 [ 58.838327][ T4826] __x64_sys_openat+0xf3/0x120 [ 58.843106][ T4826] x64_sys_call+0x2b30/0x2dc0 [ 58.847792][ T4826] do_syscall_64+0xc9/0x1c0 [ 58.852340][ T4826] ? clear_bhb_loop+0x55/0xb0 [ 58.857081][ T4826] ? clear_bhb_loop+0x55/0xb0 [ 58.861779][ T4826] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 58.867803][ T4826] RIP: 0033:0x7fd9e40b5d19 [ 58.872352][ T4826] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 58.891984][ T4826] RSP: 002b:00007fd9e2721038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 58.900452][ T4826] RAX: ffffffffffffffda RBX: 00007fd9e42a5fa0 RCX: 00007fd9e40b5d19 [ 58.908448][ T4826] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: ffffffffffffff9c [ 58.916424][ T4826] RBP: 00007fd9e2721090 R08: 0000000000000000 R09: 0000000000000000 [ 58.924399][ T4826] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 58.932376][ T4826] R13: 0000000000000000 R14: 00007fd9e42a5fa0 R15: 00007ffe506e9998 [ 58.940355][ T4826] [ 59.002913][ T4833] loop0: detected capacity change from 0 to 128 [ 59.012529][ T4833] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 59.050841][ T4836] FAULT_INJECTION: forcing a failure. [ 59.050841][ T4836] name failslab, interval 1, probability 0, space 0, times 0 [ 59.063533][ T4836] CPU: 0 UID: 0 PID: 4836 Comm: syz.3.494 Not tainted 6.13.0-rc3-syzkaller #0 [ 59.072407][ T4836] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 59.082493][ T4836] Call Trace: [ 59.085829][ T4836] [ 59.088797][ T4836] dump_stack_lvl+0xf2/0x150 [ 59.093438][ T4836] dump_stack+0x15/0x1a [ 59.097619][ T4836] should_fail_ex+0x223/0x230 [ 59.102373][ T4836] ? audit_log_d_path+0x96/0x250 [ 59.107385][ T4836] should_failslab+0x8f/0xb0 [ 59.112031][ T4836] __kmalloc_cache_noprof+0x4e/0x320 [ 59.117407][ T4836] audit_log_d_path+0x96/0x250 [ 59.122202][ T4836] ? __rcu_read_unlock+0x4e/0x70 [ 59.127338][ T4836] audit_log_d_path_exe+0x42/0x70 [ 59.132455][ T4836] audit_log_task+0x192/0x1c0 [ 59.137158][ T4836] audit_seccomp+0x68/0x130 [ 59.141686][ T4836] __seccomp_filter+0x6fa/0x1180 [ 59.146738][ T4836] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 59.152401][ T4836] ? vfs_write+0x596/0x920 [ 59.156874][ T4836] __secure_computing+0x9f/0x1c0 [ 59.161840][ T4836] syscall_trace_enter+0xd1/0x1f0 [ 59.166925][ T4836] ? fpregs_assert_state_consistent+0x83/0xa0 [ 59.170764][ T4833] IPv6: Can't replace route, no match found [ 59.173071][ T4836] do_syscall_64+0xaa/0x1c0 [ 59.183498][ T4836] ? clear_bhb_loop+0x55/0xb0 [ 59.188233][ T4836] ? clear_bhb_loop+0x55/0xb0 [ 59.192931][ T4836] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 59.198915][ T4836] RIP: 0033:0x7f50a037472c [ 59.203347][ T4836] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 59.206059][ T4839] loop0: detected capacity change from 0 to 512 [ 59.222950][ T4836] RSP: 002b:00007f509e9e7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 59.222997][ T4836] RAX: ffffffffffffffda RBX: 00007f50a0565fa0 RCX: 00007f50a037472c [ 59.223012][ T4836] RDX: 000000000000000f RSI: 00007f509e9e70a0 RDI: 0000000000000005 [ 59.223028][ T4836] RBP: 00007f509e9e7090 R08: 0000000000000000 R09: 0000000000000000 [ 59.223043][ T4836] R10: 0000000000007fff R11: 0000000000000246 R12: 0000000000000002 [ 59.231290][ T4839] EXT4-fs: Ignoring removed orlov option [ 59.237655][ T4836] R13: 0000000000000000 R14: 00007f50a0565fa0 R15: 00007ffc7463a838 [ 59.237733][ T4836] [ 59.287913][ T4839] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 59.299863][ T4839] EXT4-fs (loop0): 1 orphan inode deleted [ 59.305647][ T4839] EXT4-fs (loop0): 1 truncate cleaned up [ 59.316504][ T4839] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: none. [ 59.339685][ T4844] loop4: detected capacity change from 0 to 512 [ 59.348158][ T4844] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.496: bg 0: block 393: padding at end of block bitmap is not set [ 59.363161][ T4844] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 59.372612][ T4844] EXT4-fs (loop4): 2 truncates cleaned up [ 59.424754][ T4853] FAULT_INJECTION: forcing a failure. [ 59.424754][ T4853] name failslab, interval 1, probability 0, space 0, times 0 [ 59.437488][ T4853] CPU: 1 UID: 0 PID: 4853 Comm: syz.2.499 Not tainted 6.13.0-rc3-syzkaller #0 [ 59.446367][ T4853] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 59.456442][ T4853] Call Trace: [ 59.459747][ T4853] [ 59.462690][ T4853] dump_stack_lvl+0xf2/0x150 [ 59.467337][ T4853] dump_stack+0x15/0x1a [ 59.471597][ T4853] should_fail_ex+0x223/0x230 [ 59.476334][ T4853] should_failslab+0x8f/0xb0 [ 59.480968][ T4853] __kmalloc_noprof+0xab/0x3f0 [ 59.485755][ T4853] ? security_sk_alloc+0x53/0x120 [ 59.490797][ T4853] security_sk_alloc+0x53/0x120 [ 59.495668][ T4853] sk_prot_alloc+0xc6/0x190 [ 59.500288][ T4853] sk_alloc+0x33/0x360 [ 59.504386][ T4853] unix_create1+0xa6/0x400 [ 59.508843][ T4853] ? release_sock+0x117/0x150 [ 59.513659][ T4853] unix_stream_connect+0x181/0x9b0 [ 59.518806][ T4853] ? __pfx_unix_stream_connect+0x10/0x10 [ 59.524518][ T4853] __sys_connect+0x18f/0x1b0 [ 59.529134][ T4853] __x64_sys_connect+0x41/0x50 [ 59.533987][ T4853] x64_sys_call+0x22a7/0x2dc0 [ 59.538749][ T4853] do_syscall_64+0xc9/0x1c0 [ 59.543304][ T4853] ? clear_bhb_loop+0x55/0xb0 [ 59.548108][ T4853] ? clear_bhb_loop+0x55/0xb0 [ 59.552856][ T4853] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 59.558827][ T4853] RIP: 0033:0x7fe820015d19 [ 59.563270][ T4853] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 59.582904][ T4853] RSP: 002b:00007fe81e681038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 59.583051][ T4861] loop3: detected capacity change from 0 to 128 [ 59.591340][ T4853] RAX: ffffffffffffffda RBX: 00007fe820205fa0 RCX: 00007fe820015d19 [ 59.591358][ T4853] RDX: 000000000000006e RSI: 0000000020000640 RDI: 0000000000000004 [ 59.591373][ T4853] RBP: 00007fe81e681090 R08: 0000000000000000 R09: 0000000000000000 [ 59.591387][ T4853] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 59.591400][ T4853] R13: 0000000000000000 R14: 00007fe820205fa0 R15: 00007ffcec7dbfc8 [ 59.591423][ T4853] [ 59.642797][ T4861] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 59.656419][ T4861] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 59.736584][ T4870] netlink: 'syz.0.505': attribute type 21 has an invalid length. [ 59.749326][ T4872] loop1: detected capacity change from 0 to 1024 [ 59.758575][ T4870] netlink: 120 bytes leftover after parsing attributes in process `syz.0.505'. [ 59.832961][ T4881] loop0: detected capacity change from 0 to 512 [ 59.846749][ T4881] EXT4-fs: Ignoring removed orlov option [ 59.853254][ T4861] IPv6: Can't replace route, no match found [ 59.859315][ T4861] FAULT_INJECTION: forcing a failure. [ 59.859315][ T4861] name failslab, interval 1, probability 0, space 0, times 0 [ 59.872032][ T4861] CPU: 1 UID: 0 PID: 4861 Comm: syz.3.502 Not tainted 6.13.0-rc3-syzkaller #0 [ 59.872608][ T4881] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 59.880969][ T4861] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 59.880987][ T4861] Call Trace: [ 59.880994][ T4861] [ 59.881003][ T4861] dump_stack_lvl+0xf2/0x150 [ 59.897467][ T4881] EXT4-fs (loop0): 1 orphan inode deleted [ 59.900910][ T4861] dump_stack+0x15/0x1a [ 59.904191][ T4881] EXT4-fs (loop0): 1 truncate cleaned up [ 59.907113][ T4861] should_fail_ex+0x223/0x230 [ 59.907147][ T4861] should_failslab+0x8f/0xb0 [ 59.936764][ T4861] kmem_cache_alloc_node_noprof+0x59/0x320 [ 59.942618][ T4861] ? __alloc_skb+0x10b/0x310 [ 59.947268][ T4861] ? __rtnl_unlock+0x99/0xb0 [ 59.951891][ T4861] __alloc_skb+0x10b/0x310 [ 59.956327][ T4861] netlink_ack+0xef/0x4f0 [ 59.960744][ T4861] ? __dev_queue_xmit+0x186/0x2090 [ 59.965880][ T4861] netlink_rcv_skb+0x19c/0x230 [ 59.970730][ T4861] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 59.976287][ T4861] rtnetlink_rcv+0x1c/0x30 [ 59.980734][ T4861] netlink_unicast+0x599/0x670 [ 59.985585][ T4861] netlink_sendmsg+0x5cc/0x6e0 [ 59.990393][ T4861] ? __pfx_netlink_sendmsg+0x10/0x10 [ 59.995737][ T4861] __sock_sendmsg+0x140/0x180 [ 60.000443][ T4861] ____sys_sendmsg+0x312/0x410 [ 60.005209][ T4861] __sys_sendmsg+0x19d/0x230 [ 60.009848][ T4861] __x64_sys_sendmsg+0x46/0x50 [ 60.014615][ T4861] x64_sys_call+0x2734/0x2dc0 [ 60.019343][ T4861] do_syscall_64+0xc9/0x1c0 [ 60.023858][ T4861] ? clear_bhb_loop+0x55/0xb0 [ 60.028589][ T4861] ? clear_bhb_loop+0x55/0xb0 [ 60.033267][ T4861] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 60.039258][ T4861] RIP: 0033:0x7f50a0375d19 [ 60.043680][ T4861] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 60.063375][ T4861] RSP: 002b:00007f509e9e7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 60.071844][ T4861] RAX: ffffffffffffffda RBX: 00007f50a0565fa0 RCX: 00007f50a0375d19 [ 60.079867][ T4861] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000004 [ 60.087852][ T4861] RBP: 00007f509e9e7090 R08: 0000000000000000 R09: 0000000000000000 [ 60.095835][ T4861] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 60.103863][ T4861] R13: 0000000000000000 R14: 00007f50a0565fa0 R15: 00007ffc7463a838 [ 60.111997][ T4861] [ 60.115860][ T4872] geneve0: entered allmulticast mode [ 60.121631][ T4881] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: none. [ 60.261346][ T4895] loop1: detected capacity change from 0 to 1024 [ 60.275649][ T4895] EXT4-fs: Ignoring removed orlov option [ 60.281338][ T4895] EXT4-fs: Ignoring removed nomblk_io_submit option [ 60.310454][ T4895] netlink: 48 bytes leftover after parsing attributes in process `4s'. [ 60.331293][ T4900] loop0: detected capacity change from 0 to 1024 [ 60.339627][ T4900] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 60.361786][ T4900] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 60.370587][ T4900] EXT4-fs (loop0): too many log groups per flexible block group [ 60.378340][ T4900] EXT4-fs (loop0): failed to initialize mballoc (-12) [ 60.385379][ T4900] EXT4-fs (loop0): mount failed [ 60.631394][ T4928] ip6t_srh: unknown srh invflags 92A7 [ 60.709679][ T4937] FAULT_INJECTION: forcing a failure. [ 60.709679][ T4937] name failslab, interval 1, probability 0, space 0, times 0 [ 60.722437][ T4937] CPU: 0 UID: 0 PID: 4937 Comm: syz.2.527 Not tainted 6.13.0-rc3-syzkaller #0 [ 60.731311][ T4937] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 60.741386][ T4937] Call Trace: [ 60.744822][ T4937] [ 60.747762][ T4937] dump_stack_lvl+0xf2/0x150 [ 60.752420][ T4937] dump_stack+0x15/0x1a [ 60.756655][ T4937] should_fail_ex+0x223/0x230 [ 60.761411][ T4937] should_failslab+0x8f/0xb0 [ 60.766087][ T4937] kmem_cache_alloc_noprof+0x52/0x320 [ 60.771605][ T4937] ? audit_log_start+0x34c/0x6b0 [ 60.776610][ T4937] audit_log_start+0x34c/0x6b0 [ 60.781422][ T4937] audit_seccomp+0x4b/0x130 [ 60.786014][ T4937] __seccomp_filter+0x6fa/0x1180 [ 60.791058][ T4937] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 60.796741][ T4937] ? vfs_write+0x596/0x920 [ 60.801200][ T4937] __secure_computing+0x9f/0x1c0 [ 60.806208][ T4937] syscall_trace_enter+0xd1/0x1f0 [ 60.811352][ T4937] ? fpregs_assert_state_consistent+0x83/0xa0 [ 60.817472][ T4937] do_syscall_64+0xaa/0x1c0 [ 60.822028][ T4937] ? clear_bhb_loop+0x55/0xb0 [ 60.826778][ T4937] ? clear_bhb_loop+0x55/0xb0 [ 60.831516][ T4937] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 60.837427][ T4937] RIP: 0033:0x7fe820015d19 [ 60.841898][ T4937] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 60.861517][ T4937] RSP: 002b:00007fe81e681038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b1 [ 60.869963][ T4937] RAX: ffffffffffffffda RBX: 00007fe820205fa0 RCX: 00007fe820015d19 [ 60.877957][ T4937] RDX: 0000000000000000 RSI: 0000000020000000 RDI: ffffffffffffff9c [ 60.886078][ T4937] RBP: 00007fe81e681090 R08: 0000000000000000 R09: 0000000000000000 [ 60.894069][ T4937] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 60.902088][ T4937] R13: 0000000000000000 R14: 00007fe820205fa0 R15: 00007ffcec7dbfc8 [ 60.910098][ T4937] [ 60.930920][ T56] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.978042][ T56] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.028413][ T56] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.087985][ T56] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.169356][ T56] bridge_slave_1: left allmulticast mode [ 61.175139][ T56] bridge_slave_1: left promiscuous mode [ 61.180960][ T56] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.188846][ T56] bridge_slave_0: left allmulticast mode [ 61.194519][ T56] bridge_slave_0: left promiscuous mode [ 61.200241][ T56] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.287418][ T56] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 61.297348][ T56] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 61.306899][ T56] bond0 (unregistering): Released all slaves [ 61.348751][ T56] hsr_slave_0: left promiscuous mode [ 61.354669][ T56] hsr_slave_1: left promiscuous mode [ 61.360381][ T56] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 61.367825][ T56] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 61.375333][ T56] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 61.382729][ T56] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 61.391850][ T56] veth1_macvtap: left promiscuous mode [ 61.397385][ T56] veth0_macvtap: left promiscuous mode [ 61.402881][ T56] veth1_vlan: left promiscuous mode [ 61.408291][ T56] veth0_vlan: left promiscuous mode [ 61.468541][ T56] team0 (unregistering): Port device team_slave_1 removed [ 61.477864][ T56] team0 (unregistering): Port device team_slave_0 removed [ 62.544414][ T29] kauditd_printk_skb: 448 callbacks suppressed [ 62.544430][ T29] audit: type=1400 audit(1734334705.164:6641): avc: denied { prog_load } for pid=4968 comm="syz.0.540" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 62.569721][ T29] audit: type=1400 audit(1734334705.164:6642): avc: denied { create } for pid=4968 comm="syz.0.540" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=0 [ 62.594486][ T29] audit: type=1400 audit(1734334705.164:6643): avc: denied { prog_load } for pid=4968 comm="syz.0.540" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 62.613705][ T29] audit: type=1400 audit(1734334705.164:6644): avc: denied { map_create } for pid=4968 comm="syz.0.540" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 62.632796][ T29] audit: type=1400 audit(1734334705.164:6645): avc: denied { prog_load } for pid=4968 comm="syz.0.540" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 62.651860][ T29] audit: type=1326 audit(1734334705.174:6646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4968 comm="syz.0.540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9e40b5d19 code=0x7ffc0000 [ 62.675366][ T29] audit: type=1326 audit(1734334705.174:6647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4968 comm="syz.0.540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9e40b5d19 code=0x7ffc0000 [ 62.698751][ T29] audit: type=1326 audit(1734334705.174:6648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4968 comm="syz.0.540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7fd9e40b5d19 code=0x7ffc0000 [ 62.722058][ T29] audit: type=1326 audit(1734334705.174:6649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4970 comm="syz.0.540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd9e40e85c5 code=0x7ffc0000 [ 62.745421][ T29] audit: type=1326 audit(1734334705.174:6650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4968 comm="syz.0.540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9e40b5d19 code=0x7ffc0000 [ 66.105939][ T5015] FAULT_INJECTION: forcing a failure. [ 66.105939][ T5015] name failslab, interval 1, probability 0, space 0, times 0 [ 66.118602][ T5015] CPU: 0 UID: 0 PID: 5015 Comm: syz.4.557 Not tainted 6.13.0-rc3-syzkaller #0 [ 66.127475][ T5015] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 66.137548][ T5015] Call Trace: [ 66.140912][ T5015] [ 66.143838][ T5015] dump_stack_lvl+0xf2/0x150 [ 66.148472][ T5015] dump_stack+0x15/0x1a [ 66.152643][ T5015] should_fail_ex+0x223/0x230 [ 66.157408][ T5015] should_failslab+0x8f/0xb0 [ 66.162161][ T5015] kmem_cache_alloc_lru_noprof+0x57/0x320 [ 66.167982][ T5015] ? proc_alloc_inode+0x34/0x90 [ 66.172855][ T5015] ? __d_lookup_rcu+0x25b/0x2a0 [ 66.177820][ T5015] proc_alloc_inode+0x34/0x90 [ 66.182509][ T5015] ? __pfx_proc_alloc_inode+0x10/0x10 [ 66.187911][ T5015] alloc_inode+0x3c/0x160 [ 66.192296][ T5015] new_inode+0x1e/0x100 [ 66.196458][ T5015] proc_pid_make_inode+0x1d/0xd0 [ 66.201412][ T5015] proc_pident_instantiate+0x44/0x180 [ 66.206795][ T5015] proc_pident_lookup+0x112/0x190 [ 66.211843][ T5015] proc_tgid_base_lookup+0x2b/0x40 [ 66.216971][ T5015] __lookup_slow+0x184/0x250 [ 66.221670][ T5015] lookup_slow+0x3c/0x60 [ 66.225915][ T5015] link_path_walk+0x69e/0x820 [ 66.230675][ T5015] path_openat+0x1af/0x1fa0 [ 66.235196][ T5015] ? _parse_integer_limit+0x167/0x180 [ 66.240586][ T5015] ? kstrtouint_from_user+0xb0/0xe0 [ 66.245919][ T5015] do_filp_open+0x107/0x230 [ 66.250436][ T5015] ? __pfx_kfree_link+0x10/0x10 [ 66.255309][ T5015] do_sys_openat2+0xab/0x120 [ 66.259931][ T5015] __x64_sys_openat+0xf3/0x120 [ 66.264715][ T5015] x64_sys_call+0x2b30/0x2dc0 [ 66.269408][ T5015] do_syscall_64+0xc9/0x1c0 [ 66.273978][ T5015] ? clear_bhb_loop+0x55/0xb0 [ 66.278655][ T5015] ? clear_bhb_loop+0x55/0xb0 [ 66.283393][ T5015] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 66.289296][ T5015] RIP: 0033:0x7fa037a14680 [ 66.293718][ T5015] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 49 94 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 9c 94 02 00 8b 44 [ 66.313355][ T5015] RSP: 002b:00007fa036086f60 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 66.321840][ T5015] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fa037a14680 [ 66.329833][ T5015] RDX: 0000000000000000 RSI: 00007fa037a91b38 RDI: 00000000ffffff9c [ 66.337810][ T5015] RBP: 00007fa037a91b38 R08: 0000000000000000 R09: 0000000000000000 [ 66.345792][ T5015] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 66.353769][ T5015] R13: 0000000000000000 R14: 00007fa037c05fa0 R15: 00007fff68679468 [ 66.361812][ T5015] [ 67.228316][ T5028] FAULT_INJECTION: forcing a failure. [ 67.228316][ T5028] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 67.241595][ T5028] CPU: 0 UID: 0 PID: 5028 Comm: syz.0.558 Not tainted 6.13.0-rc3-syzkaller #0 [ 67.250527][ T5028] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 67.260664][ T5028] Call Trace: [ 67.263996][ T5028] [ 67.266930][ T5028] dump_stack_lvl+0xf2/0x150 [ 67.271616][ T5028] dump_stack+0x15/0x1a [ 67.275787][ T5028] should_fail_ex+0x223/0x230 [ 67.280484][ T5028] should_fail_alloc_page+0xfd/0x110 [ 67.285906][ T5028] __alloc_pages_noprof+0x109/0x340 [ 67.291191][ T5028] alloc_pages_mpol_noprof+0xb1/0x1e0 [ 67.296584][ T5028] folio_alloc_mpol_noprof+0x36/0x70 [ 67.301875][ T5028] shmem_get_folio_gfp+0x3d1/0xd90 [ 67.307079][ T5028] shmem_write_begin+0xa2/0x180 [ 67.311928][ T5028] generic_perform_write+0x1a8/0x4a0 [ 67.317225][ T5028] shmem_file_write_iter+0xc2/0xe0 [ 67.322351][ T5028] vfs_write+0x77f/0x920 [ 67.326604][ T5028] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 67.332432][ T5028] __x64_sys_pwrite64+0xf6/0x150 [ 67.337480][ T5028] x64_sys_call+0xab0/0x2dc0 [ 67.342173][ T5028] do_syscall_64+0xc9/0x1c0 [ 67.346690][ T5028] ? clear_bhb_loop+0x55/0xb0 [ 67.351372][ T5028] ? clear_bhb_loop+0x55/0xb0 [ 67.356120][ T5028] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 67.362068][ T5028] RIP: 0033:0x7fd9e40b5d19 [ 67.366515][ T5028] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 67.386189][ T5028] RSP: 002b:00007fd9e2700038 EFLAGS: 00000246 ORIG_RAX: 0000000000000012 [ 67.394618][ T5028] RAX: ffffffffffffffda RBX: 00007fd9e42a6080 RCX: 00007fd9e40b5d19 [ 67.402693][ T5028] RDX: 000000000000fdef RSI: 0000000020000140 RDI: 0000000000000004 [ 67.410758][ T5028] RBP: 00007fd9e2700090 R08: 0000000000000000 R09: 0000000000000000 [ 67.419332][ T5028] R10: 000000000000fecc R11: 0000000000000246 R12: 0000000000000001 [ 67.427299][ T5028] R13: 0000000000000000 R14: 00007fd9e42a6080 R15: 00007ffe506e9998 [ 67.435283][ T5028] [ 68.374750][ T29] kauditd_printk_skb: 240 callbacks suppressed [ 68.374768][ T29] audit: type=1400 audit(1734334710.994:6891): avc: denied { prog_load } for pid=5030 comm="syz.2.563" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 68.409498][ T5036] FAULT_INJECTION: forcing a failure. [ 68.409498][ T5036] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 68.422816][ T5036] CPU: 1 UID: 0 PID: 5036 Comm: syz.0.562 Not tainted 6.13.0-rc3-syzkaller #0 [ 68.430037][ T29] audit: type=1400 audit(1734334710.994:6892): avc: denied { prog_load } for pid=5030 comm="syz.2.563" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 68.431740][ T5036] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 68.450811][ T29] audit: type=1400 audit(1734334710.994:6893): avc: denied { read } for pid=5030 comm="syz.2.563" dev="nsfs" ino=4026532628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=0 [ 68.460781][ T5036] Call Trace: [ 68.460794][ T5036] [ 68.460803][ T5036] dump_stack_lvl+0xf2/0x150 [ 68.460839][ T5036] dump_stack+0x15/0x1a [ 68.481921][ T29] audit: type=1400 audit(1734334711.014:6894): avc: denied { read write } for pid=3297 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 68.485144][ T5036] should_fail_ex+0x223/0x230 [ 68.488112][ T29] audit: type=1400 audit(1734334711.024:6895): avc: denied { execmem } for pid=5029 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 68.492655][ T5036] should_fail_alloc_page+0xfd/0x110 [ 68.496846][ T29] audit: type=1400 audit(1734334711.024:6896): avc: denied { create } for pid=5033 comm="syz.4.565" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=0 [ 68.520959][ T5036] __alloc_pages_noprof+0x109/0x340 [ 68.521010][ T5036] alloc_pages_mpol_noprof+0xb1/0x1e0 [ 68.525699][ T29] audit: type=1400 audit(1734334711.024:6897): avc: denied { prog_load } for pid=5033 comm="syz.4.565" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 68.545033][ T5036] vma_alloc_folio_noprof+0x1a0/0x2f0 [ 68.545065][ T5036] handle_mm_fault+0xdd7/0x2ac0 [ 68.550382][ T29] audit: type=1400 audit(1734334711.024:6898): avc: denied { prog_load } for pid=5033 comm="syz.4.565" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 68.569865][ T5036] exc_page_fault+0x296/0x650 [ 68.575055][ T29] audit: type=1400 audit(1734334711.024:6899): avc: denied { prog_load } for pid=5033 comm="syz.4.565" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 68.580405][ T5036] ? pagemap_pte_hole+0x24c/0x280 [ 68.599351][ T29] audit: type=1400 audit(1734334711.024:6900): avc: denied { prog_load } for pid=5033 comm="syz.4.565" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 68.604674][ T5036] asm_exc_page_fault+0x26/0x30 [ 68.681355][ T5036] RIP: 0010:rep_movs_alternative+0x4a/0x70 [ 68.688415][ T5036] Code: 75 f1 c3 cc cc cc cc 66 0f 1f 84 00 00 00 00 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb c9 a4 c3 cc cc cc cc 48 89 c8 48 c1 e9 03 83 e0 07 f3 48 a5 89 c1 [ 68.708166][ T5036] RSP: 0018:ffffc900019c7d58 EFLAGS: 00050206 [ 68.714301][ T5036] RAX: ffff888102178a78 RBX: 0000000020002240 RCX: 0000000000000240 [ 68.722274][ T5036] RDX: 0000000000000000 RSI: ffff88811a03edc0 RDI: 0000000020002000 [ 68.730296][ T5036] RBP: 0000000000001000 R08: 0000000080000000 R09: 0000000000000000 [ 68.738268][ T5036] R10: 000188811a03e000 R11: 000188811a03efff R12: 0000000000001000 [ 68.746241][ T5036] R13: 00007ffffffff000 R14: 0000000020001240 R15: ffff88811a03e000 [ 68.754266][ T5036] _copy_to_user+0x7c/0xa0 [ 68.758778][ T5036] pagemap_read+0x3af/0x610 [ 68.763324][ T5036] ? __pfx_pagemap_read+0x10/0x10 [ 68.768406][ T5036] vfs_read+0x1a2/0x700 [ 68.772569][ T5036] ? __fget_files+0x17c/0x1c0 [ 68.777276][ T5036] ? __rcu_read_unlock+0x4e/0x70 [ 68.782292][ T5036] ? __fget_files+0x17c/0x1c0 [ 68.787027][ T5036] __x64_sys_pread64+0xf6/0x150 [ 68.791981][ T5036] x64_sys_call+0x26ee/0x2dc0 [ 68.796699][ T5036] do_syscall_64+0xc9/0x1c0 [ 68.801210][ T5036] ? clear_bhb_loop+0x55/0xb0 [ 68.805920][ T5036] ? clear_bhb_loop+0x55/0xb0 [ 68.810632][ T5036] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 68.816589][ T5036] RIP: 0033:0x7fd9e40b5d19 [ 68.821113][ T5036] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 68.840726][ T5036] RSP: 002b:00007fd9e2721038 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 68.849256][ T5036] RAX: ffffffffffffffda RBX: 00007fd9e42a5fa0 RCX: 00007fd9e40b5d19 [ 68.857235][ T5036] RDX: 0000000000200000 RSI: 0000000020001240 RDI: 0000000000000003 [ 68.865241][ T5036] RBP: 00007fd9e2721090 R08: 0000000000000000 R09: 0000000000000000 [ 68.873216][ T5036] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 68.881195][ T5036] R13: 0000000000000000 R14: 00007fd9e42a5fa0 R15: 00007ffe506e9998 [ 68.889177][ T5036] [ 71.131591][ T5061] netlink: 'syz.3.573': attribute type 29 has an invalid length. [ 71.143682][ T5061] netlink: 'syz.3.573': attribute type 29 has an invalid length. [ 71.187526][ T5065] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 71.195837][ T5065] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 72.648665][ T5074] xt_CT: You must specify a L4 protocol and not use inversions on it [ 74.251109][ T29] kauditd_printk_skb: 178 callbacks suppressed [ 74.251127][ T29] audit: type=1400 audit(1734334716.874:7079): avc: denied { execmem } for pid=5079 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 74.273304][ T5083] xt_CT: You must specify a L4 protocol and not use inversions on it [ 74.277628][ T29] audit: type=1400 audit(1734334716.884:7080): avc: denied { map_create } for pid=5081 comm="syz.3.580" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 74.304599][ T29] audit: type=1400 audit(1734334716.884:7081): avc: denied { prog_load } for pid=5081 comm="syz.3.580" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 74.323613][ T29] audit: type=1400 audit(1734334716.884:7082): avc: denied { prog_load } for pid=5081 comm="syz.3.580" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 74.342693][ T29] audit: type=1400 audit(1734334716.884:7083): avc: denied { open } for pid=5081 comm="syz.3.580" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 74.361873][ T29] audit: type=1400 audit(1734334716.894:7084): avc: denied { read write } for pid=3307 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 74.386135][ T29] audit: type=1400 audit(1734334716.894:7085): avc: denied { map_create } for pid=5082 comm="syz.4.581" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 74.405246][ T29] audit: type=1400 audit(1734334716.894:7086): avc: denied { prog_load } for pid=5082 comm="syz.4.581" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 74.424248][ T29] audit: type=1326 audit(1734334716.904:7087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5080 comm="syz.0.579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9e40b5d19 code=0x7ffc0000 [ 74.447669][ T29] audit: type=1326 audit(1734334716.904:7088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5080 comm="syz.0.579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9e40b5d19 code=0x7ffc0000 [ 79.695843][ T29] kauditd_printk_skb: 60 callbacks suppressed [ 79.695859][ T29] audit: type=1400 audit(1734334722.314:7149): avc: denied { execmem } for pid=5110 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 79.707524][ T5117] netlink: 'syz.0.590': attribute type 29 has an invalid length. [ 79.748936][ T29] audit: type=1400 audit(1734334722.324:7150): avc: denied { map_create } for pid=5113 comm="syz.2.591" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 79.763700][ T5117] netlink: 'syz.0.590': attribute type 29 has an invalid length. [ 79.768075][ T29] audit: type=1400 audit(1734334722.324:7151): avc: denied { prog_load } for pid=5113 comm="syz.2.591" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 79.794864][ T29] audit: type=1400 audit(1734334722.354:7152): avc: denied { map_create } for pid=5111 comm="syz.3.592" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 79.813950][ T29] audit: type=1400 audit(1734334722.354:7153): avc: denied { read write } for pid=5111 comm="syz.3.592" name="rdma_cm" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 79.837214][ T29] audit: type=1400 audit(1734334722.354:7154): avc: denied { map_create } for pid=5111 comm="syz.3.592" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 79.856250][ T29] audit: type=1400 audit(1734334722.354:7155): avc: denied { lock } for pid=5111 comm="syz.3.592" path="socket:[9795]" dev="sockfs" ino=9795 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=0 [ 79.879861][ T29] audit: type=1400 audit(1734334722.354:7156): avc: denied { lock } for pid=5111 comm="syz.3.592" path="socket:[9795]" dev="sockfs" ino=9795 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=0 [ 79.903713][ T29] audit: type=1400 audit(1734334722.364:7157): avc: denied { read write } for pid=5111 comm="syz.3.592" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 79.928036][ T29] audit: type=1400 audit(1734334722.364:7158): avc: denied { read write } for pid=5113 comm="syz.2.591" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 Dec 16 07:38:44 syzkaller auth.info sshd[3285]: Received disconnect from 10.128.0.163 port 42218:11: disconnected by user Dec 16 07:38:44 syzkaller auth.info sshd[3285]: Disconnected from user root 10.128.0.163 port 42218 [ 82.068609][ T151] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.138809][ T151] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.177855][ T151] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.257858][ T151] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.309786][ T151] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.378476][ T151] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.427937][ T151] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.477825][ T151] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.537177][ T151] bridge_slave_0: left allmulticast mode [ 82.542829][ T151] bridge_slave_0: left promiscuous mode [ 82.548492][ T151] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.556441][ T151] team0: left allmulticast mode [ 82.561366][ T151] team_slave_0: left allmulticast mode [ 82.566887][ T151] team_slave_1: left allmulticast mode [ 82.572472][ T151] bridge0: port 2(team0) entered disabled state [ 82.579470][ T151] bridge_slave_0: left allmulticast mode [ 82.585292][ T151] bridge_slave_0: left promiscuous mode [ 82.591006][ T151] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.817108][ T151] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 82.827320][ T151] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 82.836926][ T151] bond0 (unregistering): Released all slaves [ 82.846183][ T151] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 82.855972][ T151] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 82.865587][ T151] bond0 (unregistering): Released all slaves [ 82.896826][ T151] tipc: Disabling bearer [ 82.902070][ T151] tipc: Left network mode [ 82.906857][ T151] tipc: Disabling bearer [ 82.912073][ T151] tipc: Left network mode [ 82.919402][ T151] hsr_slave_0: left promiscuous mode [ 82.925053][ T151] hsr_slave_1: left promiscuous mode [ 82.930833][ T151] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 82.938242][ T151] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 82.945794][ T151] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 82.953171][ T151] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 82.962000][ T151] hsr_slave_0: left promiscuous mode [ 82.967809][ T151] hsr_slave_1: left promiscuous mode [ 82.973478][ T151] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 82.980892][ T151] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 82.988515][ T151] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 82.996010][ T151] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 83.006317][ T151] veth1_macvtap: left promiscuous mode [ 83.011813][ T151] veth0_macvtap: left promiscuous mode [ 83.017356][ T151] veth1_vlan: left promiscuous mode [ 83.022641][ T151] veth0_vlan: left promiscuous mode [ 83.028374][ T151] veth1_macvtap: left promiscuous mode [ 83.033839][ T151] veth0_macvtap: left promiscuous mode [ 83.039349][ T151] veth1_vlan: left promiscuous mode [ 83.044561][ T151] veth0_vlan: left promiscuous mode [ 83.134458][ T151] team0 (unregistering): Port device team_slave_1 removed [ 83.144109][ T151] team0 (unregistering): Port device team_slave_0 removed [ 83.195443][ T151] team_slave_1 (unregistering): left promiscuous mode [ 83.202719][ T151] team0 (unregistering): Port device team_slave_1 removed [ 83.212055][ T151] team_slave_0 (unregistering): left promiscuous mode [ 83.219156][ T151] team0 (unregistering): Port device team_slave_0 removed [ 83.699344][ T151] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.737742][ T151] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.807702][ T151] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.848496][ T151] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.899580][ T151] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.947590][ T151] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.997535][ T151] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.067520][ T151] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.138107][ T151] bridge_slave_1: left allmulticast mode [ 84.143782][ T151] bridge_slave_1: left promiscuous mode [ 84.149470][ T151] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.157127][ T151] bridge_slave_0: left allmulticast mode [ 84.162777][ T151] bridge_slave_0: left promiscuous mode [ 84.168572][ T151] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.176583][ T151] bridge_slave_0: left allmulticast mode [ 84.182235][ T151] bridge_slave_0: left promiscuous mode [ 84.187904][ T151] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.357451][ T151] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 84.366906][ T151] bond0 (unregistering): Released all slaves [ 84.375467][ T151] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 84.385201][ T151] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 84.394621][ T151] bond0 (unregistering): Released all slaves [ 84.426783][ T151] tipc: Disabling bearer [ 84.432025][ T151] tipc: Left network mode [ 84.436836][ T151] tipc: Disabling bearer [ 84.442043][ T151] tipc: Left network mode [ 84.449403][ T151] hsr_slave_0: left promiscuous mode [ 84.455048][ T151] hsr_slave_1: left promiscuous mode [ 84.460806][ T151] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 84.468262][ T151] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 84.475785][ T151] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 84.483236][ T151] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 84.493706][ T151] hsr_slave_0: left promiscuous mode [ 84.499386][ T151] hsr_slave_1: left promiscuous mode [ 84.504996][ T151] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 84.512468][ T151] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 84.522225][ T151] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 84.529758][ T151] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 84.539513][ T151] veth1_macvtap: left promiscuous mode [ 84.544972][ T151] veth0_macvtap: left promiscuous mode [ 84.550532][ T151] veth1_vlan: left promiscuous mode [ 84.555769][ T151] veth0_vlan: left promiscuous mode [ 84.561509][ T151] veth1_macvtap: left promiscuous mode [ 84.567104][ T151] veth0_macvtap: left promiscuous mode [ 84.572596][ T151] veth1_vlan: left promiscuous mode [ 84.577914][ T151] veth0_vlan: left promiscuous mode [ 84.663388][ T151] team0 (unregistering): Port device team_slave_1 removed [ 84.672842][ T151] team0 (unregistering): Port device team_slave_0 removed [ 84.721737][ T151] team0 (unregistering): Port device team_slave_1 removed [ 84.731505][ T151] team0 (unregistering): Port device team_slave_0 removed [ 88.415527][ T0] ================================================================== [ 88.423627][ T0] BUG: KCSAN: data-race in __tmigr_cpu_activate / tmigr_update_events [ 88.431785][ T0] [ 88.434093][ T0] write to 0xffff888237c205dc of 1 bytes by task 0 on cpu 0: [ 88.441464][ T0] __tmigr_cpu_activate+0x55/0x200 [ 88.446570][ T0] tmigr_cpu_activate+0x8a/0xc0 [ 88.451417][ T0] timer_clear_idle+0x28/0x100 [ 88.456177][ T0] tick_nohz_restart_sched_tick+0x22/0x110 [ 88.461989][ T0] tick_nohz_idle_exit+0xfe/0x1d0 [ 88.467031][ T0] do_idle+0x1eb/0x230 [ 88.471113][ T0] cpu_startup_entry+0x25/0x30 [ 88.475879][ T0] rest_init+0xef/0xf0 [ 88.479946][ T0] start_kernel+0x586/0x5e0 [ 88.484462][ T0] x86_64_start_reservations+0x2a/0x30 [ 88.489922][ T0] x86_64_start_kernel+0x9a/0xa0 [ 88.494876][ T0] common_startup_64+0x12c/0x137 [ 88.499830][ T0] [ 88.502168][ T0] read to 0xffff888237c205dc of 1 bytes by task 0 on cpu 1: [ 88.509437][ T0] tmigr_update_events+0x41d/0x5d0 [ 88.514560][ T0] __tmigr_cpu_deactivate+0x2b1/0x410 [ 88.519933][ T0] tmigr_cpu_deactivate+0x66/0x180 [ 88.525060][ T0] __get_next_timer_interrupt+0x137/0x530 [ 88.530779][ T0] timer_base_try_to_set_idle+0x54/0x60 [ 88.536322][ T0] tick_nohz_idle_stop_tick+0x15b/0x650 [ 88.541894][ T0] do_idle+0x175/0x230 [ 88.545981][ T0] cpu_startup_entry+0x25/0x30 [ 88.550754][ T0] start_secondary+0x96/0xa0 [ 88.555332][ T0] common_startup_64+0x12c/0x137 [ 88.560270][ T0] [ 88.562604][ T0] value changed: 0x00 -> 0x01 [ 88.567266][ T0] [ 88.569582][ T0] Reported by Kernel Concurrency Sanitizer on: [ 88.575730][ T0] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted 6.13.0-rc3-syzkaller #0 [ 88.584323][ T0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 88.594371][ T0] ==================================================================