last executing test programs: 4.234351448s ago: executing program 3 (id=364): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="060000000400000099000000"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000640)=ANY=[@ANYBLOB="38010000210001000000000000000000fc020000000000000000000000000000fc02000000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000e800110020010000000000000000000000000000fc000000000000000000000000000001fc020000000000000000000000000000fe8000000000000000000000000000aaff0300000200000002000a0064010100000000000000000000000000fe8000000000000000000000000000aa000000000a0000000000000000000000ac1e0101000000000000000000000000ff040000003500000200080064010101000000000000000000000000fc02000000000000000000000000000064010102000000000000000000000000fc0200000000000000000000000000f43b0000000000000008000200"], 0x138}}, 0x0) 4.177574429s ago: executing program 3 (id=367): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000640)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) symlink(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') readlink(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000001200)=""/4096, 0x1000) 4.13311024s ago: executing program 3 (id=368): r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff000000000200000009000100"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000b40)=ANY=[@ANYBLOB="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"], 0x90}}, 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000009900000001"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r5, 0x0, 0x8000000000}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000640)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) symlink(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') readlink(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000001200)=""/4096, 0x1000) setsockopt$inet_tcp_int(r3, 0x6, 0x14, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r3, &(0x7f0000000300)={0x2, 0x0, @remote}, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000d00)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x65, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r7, 0x0, 0xffffffffffffffff}, 0x18) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x60, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_USERDATA={0x5, 0xd, 0x1, 0x0, 'w'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x8c}}, 0x20050800) sendto$inet(r3, &(0x7f0000000200)="e1", 0xfea8, 0x0, 0x0, 0x0) splice(r3, 0x0, r2, 0x0, 0xfea8, 0xa) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x8, &(0x7f0000000040)=[{0x3, 0x1, 0x6}, {0x5, 0x80, 0xd, 0x7}, {0x81, 0x20, 0xc, 0x10006}, {0x9, 0x9, 0xe, 0x10001}, {0xc, 0xb, 0xb, 0x3}, {0x0, 0x3, 0x9, 0x4}, {0xd, 0x81, 0xfe, 0x6}, {0x8, 0xff, 0x5, 0x200}]}) 3.731219145s ago: executing program 3 (id=372): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="34000000100001080000cd6c0000000000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x34}}, 0x44000) socket$inet6(0xa, 0x1, 0x8010000000000084) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000600)='selinux_audited\x00', r1, 0x0, 0x805}, 0x18) prctl$PR_SET_NAME(0xf, &(0x7f0000000280)='+}[@\x00') r2 = socket$inet(0x2, 0x3, 0x8) setsockopt$inet_int(r2, 0x0, 0x5, &(0x7f0000000080)=0x7, 0x4) r3 = socket$inet(0x2, 0x3, 0x6) r4 = dup3(r2, r3, 0x0) setsockopt$inet_int(r4, 0x0, 0x5, &(0x7f0000000080)=0x7, 0x4) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0xa, &(0x7f0000000180)=ANY=[@ANYBLOB="18110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000010000087b8aff00000000bfa200000000000007020000f8ffffffb703000008000000b7e17d00000000008500000082000000852000000200000000"], &(0x7f0000000040)='GPL\x00', 0x955, 0xe, &(0x7f0000000100)=""/14, 0x40f00, 0x44, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000000240)={0x5, 0x8, 0x8001, 0x5}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000280), &(0x7f0000000400)=[{0x2, 0x5, 0xd, 0xb}, {0x1, 0x4, 0x2, 0xb}, {0x5, 0x5, 0x8, 0x3}, {0x4, 0x4, 0x3, 0xa}, {0x4, 0x2, 0x7, 0xb}], 0x10, 0x8, @void, @value}, 0x94) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000300)={0x8, 0x0}, 0x8) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000180)=r6, 0x4) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000680)=ANY=[@ANYRES32, @ANYRES32=r5, @ANYBLOB="21000074ebf63644b200"/22, @ANYRES32=r0, @ANYBLOB, @ANYRES32=r6, @ANYBLOB, @ANYRES64=0x0], 0x20) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, @perf_bp={0x0, 0x13}, 0x400, 0xffffffff, 0x6, 0x4, 0x0, 0x1, 0xfff9, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000001001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x101400) 3.071811965s ago: executing program 3 (id=380): bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$selinux_avc_hash_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) rseq(0x0, 0x0, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) gettid() futex(0x0, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, 0x0, 0x0) syz_emit_ethernet(0x7a, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x1, r1}, 0x38) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x18) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0xfffffff9, r1}, 0x38) (fail_nth: 5) 2.7656895s ago: executing program 0 (id=382): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r0, 0xc0105500, &(0x7f0000000000)={0x80, 0x6, 0x2fe, 0xfffd, 0x0, 0x249, 0x0}) 2.596116552s ago: executing program 3 (id=386): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000a80)='kfree\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141b82, 0x0) write$cgroup_int(r2, &(0x7f0000000000)=0x700, 0x12) connect$inet(r2, &(0x7f0000000240)={0x2, 0x4e22, @remote}, 0x10) syz_usb_disconnect(r1) syz_usb_connect(0x4, 0x24, &(0x7f00000000c0)=ANY=[], 0x0) ioctl$EVIOCRMFF(r1, 0x40095505, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000001280)="$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") r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) ftruncate(r4, 0x2000009) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1, 0x1b5) pwritev2(r5, &(0x7f00000001c0)=[{&(0x7f0000000400)="ba", 0xfdef}], 0x1, 0xe7b, 0x0, 0x1) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000900850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000380)='mm_page_alloc\x00', r7}, 0x18) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYBLOB="3800000014001fff000000000000000000060000", @ANYRES32=0x0, @ANYBLOB="80feffff00000000180012800e00010077697265677561726400000004000280"], 0x38}}, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kmem_cache_free\x00', r8}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000000)={0x2, &(0x7f0000000280)=[{0x1ff, 0x1, 0x0, 0x7ffc1ffb}, {0x4, 0x7, 0xb8, 0x171}]}) semop(0x0, &(0x7f00000000c0)=[{0x2}], 0x1) 2.552162353s ago: executing program 0 (id=388): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x90020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x6aa2, &(0x7f0000000640)={0x0, 0xffffffff, 0x0, 0x0, 0x1f8}) epoll_create1(0x0) epoll_create1(0x0) r1 = syz_io_uring_setup(0x27f0, &(0x7f0000000340)={0x0, 0x400000, 0x10100, 0x400001, 0x28c}, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1868, &(0x7f00000003c0)={0x0, 0xd762, 0x100, 0x0, 0x134, 0x0, r1}, &(0x7f00000002c0)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r1, 0x8184c, 0x0, 0x9, 0x0, 0x0) r4 = socket(0x10, 0x2, 0xfffffffd) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f00000009c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @mcast1, @empty}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000640)={'ip6tnl0\x00', r5, 0x4, 0x2, 0x81, 0xcf57, 0xff00, @ipv4={'\x00', '\xff\xff', @local}, @loopback, 0x8000, 0x0, 0x0, 0x300}}) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a5"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r7, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r8}, 0x10) r9 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$PIO_UNIMAPCLR(r9, 0x4b68, 0x0) r10 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r10, &(0x7f0000000000)={0x27}, 0x74) sendmmsg$unix(r10, &(0x7f0000000f80)=[{{&(0x7f00000000c0)=@file={0x1, './file1\x00'}, 0x6e, 0x0}}, {{&(0x7f0000000e80)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000000740)=[{&(0x7f0000001dc0)="b6", 0x1}, {0x0}], 0x2}}, {{&(0x7f0000000580)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f00000006c0)=[{&(0x7f0000000600)='{', 0x1}], 0x1}}, {{&(0x7f0000000440)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000000cc0)=[{&(0x7f0000001e00)="ec991e285d0626620bac5a356edfe32537ecab189b88e3cdc7adf85ed894dfef27da4d816134621c9e5836fab8aa125e3d1913ff7d4e77735e2982312a5beb99b90ac1bfcf5635c78ac06794e5f8a3a3cd3980b9173f2e70717a13fccd84c958a621bcc5c43aa433f2c4f6979068462fb3e453d8872a3891331d757771e88432b1af2ed731fa02e7a3969a27295d861f85a5a1e448fb933eaf197854c7a145499f28bb2c5b112a254652f7f9dd43a73ffc43a362daee8f555e46bcc39c32a109c100104e5c99cc2db7beb6e9c47e34f0c2a20082b030b550e1b16a3c1230a901c5c872158dfd14aa046d4f40be04ac19fc838c8f0d42ad7db649f9e8388a020593f4ca983e5e1f7710e427010fd8590ef869a996629fd39d0f3a3263eca01365e0e968e31f703c4d14a52e90621503e84604f6e0144a7ef522640cc81cf8b30f8c3463e604adc0ddde30938a9bfc7a66997d5b4243bd229e6b8d3b83e972e81bc26a8c2021265e76631449f811b3451b730081e6a0b7175ae1aee22cfcfd3b90920a8a9f0f422b1af3da4774864c6975fed0e966577c2a57cb12a6c5ba3b8383f4f51bd74b50f6619ec91db2b500da05870ad453dff8dc42418c64341a43259b3afd6b427691eb71f8bb09127a0e88cf270957f16404a0bea66a271745a3836a2693f579141fa81472afc6e5e466fc57ff93d841ae5a5453ac8c04ce6368520c1d655c1270d09b9f7529ba7b3239ceef0de3a0d1829d26f442b147df34e799a93a53e0d33fcbcf292458f548b8e879a148f0b7f49a089a9debfbad936ee032a28994fe8d130848c49f5a4cc7cf42a62b471534a5686fee3c7ac0e34125362a67ffb7a5b8486a202e4bc5c2aa63cc971f076e8227a805f326235b72228df0a36cf6c182e21a02d4b6b317a89bd60e5c78a9a60a08ee87b58943760b71cf71e5227fbf8fb9bc8d44b41832a78cbd5ede51bd75ae331679c067dbb1c5ea377f59802643cf998d832bcf063724f49d6073d97f8dd5f36daf221e8e6e327bfbfe40397e55e188eb66ec435540925075cbc2080fc8773d74a75d582dea038e872aaf9b7fbbbf3352d97f9aa6a485e1120aa84f4fc0c736000025f9e532ed57add44290ef1d32fd6b4ecbdeb2f99b0c5e69d75b4c3bd59004f41bb0db8e94077961ea3e6aba0545f1aeb29f0b3b3b6c981af92e2615230bcfc086ff0e99428551d1473a2012ae730488e7fe21a2c2f31a7e4423d0a84e08581c072f697e29af4b773277087052a298e55208cc52ecd43790d9e971eca1962d98f7f61bbfe0c4938a1ee8ac0d8c0eb6af6594bad700a76e49d87ea0db01d377df2bb04154b690fea579a1bb4a95d05975f0247c25aad79e7c9acc81a8297051a5de0d7ee86320f2d8f006e30a2de53598c916f8d6e2b8c764743e0a68bc380515beb856fc054c8bf84fb7fd2b9fc28e6b09fc214b9db98e622f37a6540e9e2b2f1bc1270ad9a02538a6e24cba033ec7ec711eb4ef44676536a46a99460f96010c0d7249da11e1afe1d3feee42b4e9b0ac098d60a274796e75b9e9d142fbb39f46025f2c0f099fd5eb261794822893dc6a5ffb28c91475be20c1541dc0e330112a7c2ab06882f7dab3287f76b07c8ed327462b885ec6e198c4187a68c064ecaa33823d047ae65ab46a32627e6f7ab59e765c96506787af063ab566fee1b2f47ea4ecdf549d1826dd99b1d73646934a3e970e767604fe195d96c5810f3e723ed64c9c147fee4737c842e9908d048b4472265c912426843a2e4e519aaced131b6deb220d8c0448b22aac87f3fe992179c549cad7ebfd88c3ab6a490c2cac5eb63c4ed3e4ade735d538e7e3557a76ee9c2257ff22f84bff77009811256f22ae70ede90a008de76a3f66a57023c07bcffafdee4f63b2db2b86ac72e9e3c6668029910d0436786330fba31e1038a591764e8c1fe0a903b1f11ca97d3a76d85cb829940264452d1520c24901b0b0724fbd4f7fdc082f234b75e060b20f75ba4b418082efd821ba1d663f43820383346d05569b5dd38d793fe67e74ae995878a17b4a7524756b2f92ecd9814e75d578ac54b77c65a30d82169133a422bd8280844eeb6645c677f49fb34a908f0ecdf161e10a23285568666cc37ec7a12c5b7c2f9ab8dc691c775105eb17c44d37fea738fcc9cbd27fdce48cabb7fc022a27cf006d9858f1f90b2ba18e8768240b0557c17db72c2d724f0a58bed451d2b464fda4e63f4201647d0b5b6bf150f19ef4309d08e309b7ff03d66f9f32a4dae47a8b7cb3d410bba6a65fb828b77ffc29e70f66290e959a0a2681161dbf5ed255b78db430a27da8e107b4dd511654505f8631db9b801505201934727d85f8ed6b4af781e6bf5b8d4e510a352c24c134b0feb76f35f22d8c7d38c42f96d4b4fc6cd5c63021a59c9ebcff9d82debb699bc52edba13557b5d5209d344407abf942a392955cdd65e1f98f5376040e6be7cda13332fc122213ac714fd5ba814c0ea90a768e564e8c3ea66659e24cc678e9fa04aacbf7e4392e39006ddfd8b4f2527ab335df592d7a6eb8b2d379fdb38950add9606d624aab2f66676f102abaeb1d2ea51b44c9005404c841f23d518f86173b63416988e859659e9389a48f969a40a28b4be243b976cf2bc48c071f22c9de2ccee314adf6791eda9391a3e87bd321c90955946d1d665d687fb70db7eb55a74128d02d7b5053f97dcad953b35452af6576cfa9df4c88692006ad009fb1e32a69112bc5c77ce3adabf0012c35bcd996ab1777653799c7ff32c3f69cf52b39f2c53511663c7eaec57d47bfb08e9f8839a4119d8a93cac95a191b4db3540651adaaf316e253ab5c41ea29b39febe46e1ef6425c7f747d9511ebce2c6c3cfac4cf122d3fe494ace9e91134df99c9cb3b2682537c4b46415a5ea3a43000ccb13541c74f2be13410aae011c534ea0b3157ab0d2f59e5bc4eb0f1f6de5c0fc3744b7b2cfc977c25d4247c5a30a75f01d057274396e0710441c5c38216e48e8fa75ae777a03283de0d84484e07a919b3d61ecc09539de382454e6a17e6be33316fe4f82dcf601712254993cfb8890fcb8c3d285ba6257514bb93545efad535bea5a5444e5aa66cb1c356406923dd1d9fd255be0fe49da8799b8c9f545150ba55ec3cd6bf9227de8e452e610a58450db9b5890b487cc2c596defc56a684fc9d02a4f4d8992a43792613e0cf7a3250bf30daff3f18f4ea97c91207ea903b33e9cc0fa6a3cef5f9ccb566aa228e24925b0210aec13be7f36f05394987a511d162788535d6ecb02e1e809ef6307e41d9740878ab78e55ae588bf99f2a470653c39f97618254d416256f8de625d6345b417901083f486a38aedcab112cae3b313f42579b9522bee61d7553d70ffc3eff5bd4382f9d49aac808cb1597b3cfb2281a7cc3c27cba66ac1002e2d75b5d187f6e9ed1d8d139d49132917662a12d4c2f6da9f51a4788c9d0fae5e6d2131e7e89e64cb59e647cf993cea2527928105f52bfc3f69b0818df2f84a9ef2ba6732e6f43835280e05df152795fbf5a297e0c166fdf80e5cca3318aa3e16e9d87a2080d8aff25554594e68d322c6af7d00d52833ef711305685044b9b214acc0b2da916869a5a5a651bb465a31657c66dde585c088863c0373f64d4e30eeb3ffc6cf65c2600201bed9e8893bc2e849f90f4bccf42e7a5925556bfb3d39331bdbdccd2305271d67940e67aac1d7d38def4e2b8fb2f01155df9521c5871e9ab49a24ffc34dddbf619f3ba5a83aa818b09c14a4f3efc26f79c4c124c68eb49d5c398d02300d8cd824e834fb004f7e4fdf1f6c932e96ba5d3999ba0f35c539fd3be385437c21f7abf779e70f6c0e13f02330a347cc762e0b26405de8021d1bf7aa70e189ae0edfd25d35bad52ad67a90ed5cd14ef11926a81a203cd53f2d39bb4588724f6ad131893637b870598dbef9a93e3774f6b596559799a2b4f5d585e51cefe724b246d2c1c7d2144ceded334ea14c15032b4bbd55e17c65e4e224e97793dd70362a927a3d10484befb813e40eeb0aa64bcb02c405f6d957032c0361d5c91973429b8c240879983e495692064b3a066c18010cd137c40b63046176763d7eb07e72bdebb501c0161b7d15358c58e33c4035d126c562f4388bebd4c6ba470fe01b557d68f73a1af1a91b0a4e4d4e8f00a9f33e690603f04935765d56475cb13c82b2474626cae02d1f5d992290ea1006c739567047706449a5d6714464516023f4933d89bab105fbdb0a688ece7472e66b030b56da1bfa29dc24972b04a806a32e5844da0744352ebe85e86945a0e6575d35464571832dafc3558008eb2c1bdb261f135a80f03cde693bf1dffbac789ef4dd4fae853c72495f0745388c2508087ffbf86481e664e75b7b0b7720de1a2bbe329c278b889ada7c649af62acee7662a26237bf51a595028c0d74eca1053c9ee9c758bfd380ee2e9820308a7b30cede0fe806ab277dd15c6aa5f92dbf3a45c9503334671f105330c69cb45244058aa0ca6f73229c621ce20152696af04411f2ce74aace2515f705ca4594382692a6ccecdf866876e98ffb1df38342ad54c0067126438577ba9764fe4e4b8bc448534068b863330a810a0ee4d101a5d15ee74c7e883fff93375c61fa2991d2b2bae00e99b11972efe032e24dc74157be3c772375cefff3840ddf03df44b216781836b9ada573df068fd15bf2f6494f80f5dbe23f2964266a63099c66b580cd6a51d5928a3ec2e81e3722d1f8addbfc87a81d95670151f0c9c07a0bc9ba9453265678c7b2904ceb1c1c0524bd5f158f0d40c1edb21dbbad18cb4fb041e965d34e6ff3aeea1e2484dc50b222ed7703656480021f00c4a3ec093f343f9a8cf49096fd11592bf95ad8382395023c57cb054104afef5d7a8bc371fa079d24d19886c781db461c8746fb45cea9dbab2375f8fbd6f9684d0daca9d4b79fc031255ae72a985ca7225fd19391892c4f3651a70119f81c66ad8b24c9625e09b8bc313ca626cf609ca45507b3a14251fe229f1e66bbb2b58f32805189b1e4839a58232bb722d1f4a247ea315c9196efd4dd716db0c77884ba4f04b9ead55b1a2eb3074c9e658325152607c50f46ba10ca32ffa2781498c885d33f9c74a7b0d4e51b6b6e168cf1daf329b4b1c6342cac625a504eee618bcc5c2c16e7552df7183a8cbdedd850baf333dee7b5caa0d6b1d37f6fd910aac85f4173d506884bf0e6a29740ffd5c5e507f1de970cc25247a4fbe051fef28239b90472ee720361d5cb5b5bdbca77e3b76752519539dd69070c93aa99be398bf420c51d75371a8c33ed320bebbde139baa5094053a8c417b603fa663a531a217051bcea56b6f0b3e4b9f2ebfaa3eb069498d6c610adb12b8f301b1b259c3cfa38b22f115f133cc998482c33b6d73509527fa25ec8e8c86331ef919ddb75d91be2d865c89b7fb91738fbee2318fd22092ac8ed62b247b47bdf5a0effb4bd1dfd4cdf93ad66076836a31c1af3c4c25532f4a75246eca27c54eaa322ac5cc31c43041540c219a835c413208ba70c66b6f6a84579f19fe5fde4ff530b30d60d6ece2cad226d331e103dba732889002d4362706ad97036cd24cf7ec2df50734d877dd37a7ef32087d682cc537ea674b52558fb016b94cfc99e2f670a88ba716ad7b8b59519601d4252a8a8c75e7d007d0ca98f930ad331fa037b3e56dab91f4112613bd9b5dde44fb2035be5ae875acafa1732c97da6452eef1458f6f65ab6ffe4ffb683f65151e41fbb331c54ecb3bc5", 0x1000}, {&(0x7f0000000940)="edeb6584a68fb7373e34fb9bfc31c02bacca00b62cd8002f220b6f8c290717899fac59a3f01324388323fca2a072a15816678877bba12759816303c6ad3dd5de973e8a519a8aa98913eba023b8e17e883d9d2a8766460e88", 0x58}, {&(0x7f0000000a40)="813f5ee47a66d3b037649cca3e7fdfd14cd3e3f7b52848eab8acb490f1e06127d7462f1e341d33a323254da5e84b6182b7841ec2b063e090cab74e59453ee4abe89ca7948d6a433b4f6cc033f3ebdcef56316b125473d728c24e78547a", 0x5d}, {&(0x7f0000000bc0)="849cb82abe9740115d7e3396a8c36be561117d508c116efd9ba460451e0fe1ba8e516f7792db84cdaa691f9b847d600865d4d33c0374c5c285880c4dfb442d2152ed39c5708d59b8b3f5d26b7d6b6feaaed3857df9a9c43ed72d69ce8b58fcf0d9ae97dc11c0b1058df8", 0x6a}, {&(0x7f0000000ac0)="d685b1a02e400c32584517c8af2e5fc36642cd3b5309bc2fc47871638a7394290b34bdc69651c9f8cfac2fbd1e340e2b4d4e5814744d", 0x36}, {&(0x7f0000000c40)="bb13fe8b6bd6f08aabc9d72b8820b16ea36d658f868b536d66006aaa30e1dcadf9b61bfc186ef39419a78f7e669788aea80ab46838d5d2abb89006f88b7004b0dcadcce9e99a8bdebeabadf33bae5ba35bc59bef69f38dd687a09d6d842e26d440717f83fde46a71f3605a", 0x6b}], 0x6, &(0x7f0000000f00)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [r0, r6]}}], 0x58, 0x840}}], 0x4, 0x0) ppoll(&(0x7f0000000180)=[{r10, 0x2011}], 0x1, &(0x7f0000000200)={0x0, 0x3938700}, 0x0, 0x0) r11 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$binfmt_aout(r11, &(0x7f0000000340)=ANY=[], 0xff2e) ioctl$int_in(r11, 0x5452, &(0x7f0000000340)=0x4) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) select(0x40, &(0x7f0000000340)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x2e787ec3}, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f0000000200)={[{@max_batch_time={'max_batch_time', 0x3d, 0x358}}, {@resuid}, {@stripe={'stripe', 0x3d, 0x9}}]}, 0x3, 0x44b, &(0x7f00000004c0)="$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") open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) 2.0386877s ago: executing program 2 (id=393): syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8042, &(0x7f0000000380)={[{@grpjquota}, {@init_itable_val={'init_itable', 0x3d, 0x7}}, {@dioread_nolock}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x7fffffff}}]}, 0x3, 0x4f3, &(0x7f00000012c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101000, 0x0) getdents64(r0, 0x0, 0x0) lseek(r0, 0x3, 0x1) getdents64(r0, 0x0, 0x0) 1.828279313s ago: executing program 1 (id=396): mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x2000, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x67) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x3, &(0x7f00000000c0)=[{0x7}, {0x3, 0x5, 0x2c, 0x9}, {0x77cf, 0x7f, 0x1, 0x80000001}]}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x20081, 0x0) r0 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000340)) readv(0xffffffffffffffff, &(0x7f00000018c0)=[{&(0x7f0000000840)=""/4096, 0x1000}], 0x1) 1.771941854s ago: executing program 1 (id=397): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r0}, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000640)='fib6_table_lookup\x00', r1}, 0x10) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f00000002c0)}, 0x20) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200}) (async, rerun: 64) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 64) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000b80)={[{@nombcache}, {@abort}, {@dioread_lock}, {@norecovery}, {@discard}, {@lazytime}, {@noload}, {@usrquota}, {@noauto_da_alloc}]}, 0xfe, 0x558, &(0x7f0000000c00)="$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") (async) symlink(&(0x7f000000a900)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000cc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x0, 0x1008, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, &(0x7f0000000080)) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r5, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002ec0)={0x38, r4, 0x10ada85e65c25359, 0xfffffffd, 0x25dfdbfd, {{0x6b}, {@val={0x8}, @val={0xc, 0x99, {0x2, 0x72}}}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x4}]}]}]}]}, 0x38}}, 0x0) (async) sendmsg$NL80211_CMD_GET_SCAN(r2, &(0x7f0000000480)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0x20, r4, 0x20, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x5, 0x4e}}}}, ["", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4014}, 0x4000040) (async, rerun: 32) r6 = socket(0x10, 0x2, 0x0) (rerun: 32) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) lchown(&(0x7f00000000c0)='./bus\x00', r7, r8) (async, rerun: 32) r9 = getegid() (rerun: 32) setresgid(0xffffffffffffffff, r8, r9) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f00000004c0)='cachefiles_mark_inactive\x00', r1, 0x0, 0x8}, 0x18) 1.704224415s ago: executing program 1 (id=398): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r0, 0xc0105500, &(0x7f0000000000)={0x80, 0x6, 0x2fe, 0xfffd, 0x0, 0x249, 0x0}) 1.682593275s ago: executing program 1 (id=399): bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$selinux_avc_hash_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = gettid() timer_create(0x0, &(0x7f0000000140)={0x0, 0x21, 0x800000000006, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) readv(r1, &(0x7f0000002980)=[{&(0x7f0000000700)=""/163, 0xa3}], 0x2) syz_clone(0x48204411, 0x0, 0x0, 0x0, 0x0, 0x0) rseq(0x0, 0x0, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) gettid() futex(0x0, 0x9, 0x2, 0x0, 0x0, 0xfffffffc) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, 0x0, 0x0) syz_emit_ethernet(0x7a, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x1, r3}, 0x38) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x18) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0xfffffff9, r3}, 0x38) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) bind$unix(r4, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) 1.622365756s ago: executing program 4 (id=400): ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vxcan1\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000000300)={0x1d, r1}, 0x10) sendmsg$can_bcm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000200)={'wg1\x00'}) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r4, {0x1}, {}, {0x0, 0x3}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r5, 0x89f0, &(0x7f0000000040)={'syztnl2\x00', &(0x7f0000000100)={'syztnl2\x00', r1, 0x40, 0x80, 0x1ff, 0x4800, {{0x19, 0x4, 0x3, 0x8, 0x64, 0x66, 0x0, 0x8, 0x2f, 0x0, @loopback, @local, {[@lsrr={0x83, 0x7, 0xfb, [@loopback]}, @timestamp={0x44, 0x2c, 0xef, 0x0, 0x1, [0x7, 0x5, 0x6, 0x2, 0x8, 0x3, 0x9, 0x2, 0x0, 0x0]}, @ssrr={0x89, 0x1b, 0xa6, [@broadcast, @multicast2, @multicast1, @broadcast, @empty, @empty]}]}}}}}) 1.549877137s ago: executing program 2 (id=401): socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x22}}, 0x10, 0x0}, 0x300440f1) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1800403, &(0x7f0000000940), 0x2, 0x5ad, &(0x7f0000000180)="$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") r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x22004002, &(0x7f0000000080)={[{@jqfmt_vfsold}, {@stripe={'stripe', 0x3d, 0xffff}}, {@sysvgroups}, {@jqfmt_vfsold}, {@nouid32}, {@grpjquota, 0x2e}]}, 0x84, 0x46c, &(0x7f00000004c0)="$eJzs3EtvG0UcAPD/rpP0RR6U8ugDaiiIiELSpAV64AICqRckJDjAMaShKnVb1ASJVhUtCJUj4hMARyQ+ASe4IOAE4gp3hFShXggckNHau40TO6njxHWDfz9pk5ndWc/Mzk4yu7PrAPpWOfuRRFQj4teIGK1Hlyco138t3rg8+/eNy7NJVKuv/pnU0v114/JskbTYb1ceGU8j0o+S2N8i3/mLl87MVCpzF/L45MLZdybnL1566vTZmVNzp+bOTR8/fuzo1LPPTD+9KfUczsq67/3zB/aeeOPTl2er8eYPX2XlvSvf3liPurEN51mO8vJjWTNU+/nYhj/9zjLcEE4GelgQ1qUUEVlzDdb6/2iUYqnxRuOlD3taOKCrqtVqdVvT2lIRuFoF/seS6HUJgN4o/tFn17/FchuHHz13/fn6BVBW78V8qW8ZiDT7tb1+xT7cpfzLEfH61X8+y5ZoeR8CAGBzfZONf55sNf4bSe5rSDeSzw2NRcThiNgdEfdExJ6IuDcisrT3R8QD68y/vCLePP75eUdHFWtTNv57Lp/bWj7+S4skY6U8Nlyr/2Dy1unK3JH8mIzH4LYsPrVGHt+++Msnq21rHP9lS5Z/MRbMy/HHwIobdCdnFmY2UudG1z+I2DfQqv7JzZmAJCL2RsS+Dj4/O2ann/jyQBYe2dW8/cAt67+GTZhnqn4R8Xi9/a/GivoXknpOq81PTm6PytyRyeKsaPbjT9deaYwPNoRv3f7dlbX/zpbnf17/ohsU87Xz68/j2m8fr3pN0+n5P5S8VgsP5evem1lYuDAVMZSvWLZ+emnfIl6kz+o/fqhV/UeS3RH/fp7vtz8/Vx+MiIci4mBe9ocj4pGIOLRG/b9/4dG31z5CvW3/k2u1f8RY0jhf30GgdOa7r1fLv732P1YLjedr2vn7124BN3LsAAAAYKtIa8/AJ+nEzXCaTkzUn+HfEzvTyvn5hcPlePfcyfqz8mMxmBZ3ukYb7odO5feGi/j0ivjRiLi79qTRjlp8YvZ8pVtz6kB7dq3S/zO/l3pdOqDr1jWP1vxGG7CFeV8T+pf+D/1L/4f+pf9D/2rV/69ELPagKMBt5v8/9C/9H/qX/g/9S/+HvtT8SnzxdSudvOm/FNh9YkO791Gg1KVPjsYv7ehCINKeH7rOA+mdUIyDeWBbRLS715WutunK8wcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGDr+y8AAP//BcXhGA==") open_by_handle_at(r1, &(0x7f0000000980)=ANY=[@ANYBLOB="1c000000050000000400000001000000c4bc46ce280af90000000004"], 0x40000) preadv2(0xffffffffffffffff, &(0x7f0000000e00)=[{&(0x7f00000003c0)=""/218, 0xda}, {&(0x7f0000000840)=""/77, 0x4d}, {0x0}, {0x0}], 0x4, 0xffff, 0x9a17, 0x10) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000500), 0x8c02) r3 = dup(r2) ioperm(0x401, 0x1fd, 0x2) prctl$PR_SCHED_CORE(0x4d, 0x2, 0x0, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB="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"]) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000060000000000000000008500000007000000850000000e00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000012c0)={&(0x7f0000000a00)='ext4_writepages_result\x00', r5, 0x0, 0x4}, 0x18) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000bc0)=@raw={'raw\x00', 0x3c1, 0x3, 0x380, 0x0, 0x4c, 0x1a, 0x160, 0x73, 0x2b0, 0x258, 0x258, 0x2b0, 0x258, 0x3, 0x0, {[{{@ipv6={@private0, @local, [], [], 'dvmrp1\x00', 'macvlan1\x00', {}, {}, 0x73}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x3, 0x0, 0x7}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@uncond, 0x0, 0x120, 0x150, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@inet=@multiport={{0x50}, {0x1, 0x4, [0x4e22, 0x4e20, 0x4e24, 0x8, 0x4e21, 0x4e22, 0x4e23, 0x4e21, 0x4e21, 0x4e23, 0x4e22, 0x4e20, 0x4e23, 0x4e21, 0x4e24], [0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1], 0x1}}]}, @common=@inet=@SET2={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x5400}}, {0x28}}}}, 0x3e0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) timer_create(0x0, &(0x7f0000000180)={0x0, 0x13, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)=0x0) timer_settime(r7, 0x0, &(0x7f0000000340)={{0x77359400}, {0x0, 0x989680}}, 0x0) r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x200400, 0x0) ioctl$TIOCNXCL(r8, 0x540d) faccessat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x2) 1.451660439s ago: executing program 0 (id=402): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x54, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "e3de3d7b4cd07ec3ee777de774fc7987cca41989"}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) sendmsg$TIPC_NL_SOCK_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000200)={&(0x7f00000007c0)={0x384, r1, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x6b6d}]}, @TIPC_NLA_SOCK={0x74, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xffffff81}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x10}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xbe1}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x80}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_MEDIA={0x74, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffff6b}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xc87}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_BEARER={0x154, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd83a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3c}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @rand_addr=0x64010100}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0xd26, @empty, 0x401}}}}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}]}]}, @TIPC_NLA_MEDIA={0xa0, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x61b}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}]}, @TIPC_NLA_MEDIA_PROP={0x4}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8}]}]}, @TIPC_NLA_MEDIA={0x84, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}]}]}]}, 0x384}}, 0x24000084) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000480)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r4}, 0x10) r5 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x101000) syz_usb_disconnect(r5) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[], 0x0) ioctl$EVIOCGBITSW(r5, 0x40095505, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r6, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x5, 0x0, "ff00f7000000000000000000af88008300"}) r7 = syz_open_pts(r6, 0x141601) write(r7, &(0x7f0000000000)="d5", 0xfffffedf) close_range(r6, 0xffffffffffffffff, 0x0) 1.38555172s ago: executing program 4 (id=403): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r1, 0x0, 0x8000000000}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000640)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) symlink(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') readlink(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000001200)=""/4096, 0x1000) 1.165311083s ago: executing program 4 (id=404): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r2, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = io_uring_setup(0x177d, &(0x7f00000002c0)={0x0, 0x6990, 0x40, 0x2, 0xfffffffe}) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCMIWAIT(r4, 0x545c, 0x0) close_range(r3, 0xffffffffffffffff, 0x200000000000000) munlock(&(0x7f0000ffa000/0x3000)=nil, 0x3000) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000400)={[{@errors_remount}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x7}}, {@dioread_lock}, {@data_err_ignore}, {@mblk_io_submit}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@nojournal_checksum}]}, 0x1, 0x553, &(0x7f0000001080)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r6 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r6, &(0x7f0000000180)={0x28, 0x0, 0x2711, @local}, 0x10) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000100000000000000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r7}, 0x18) connect$vsock_stream(r6, &(0x7f0000000400)={0x28, 0x0, 0x2710, @host}, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r8) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r9, @ANYBLOB='ya\x00\x00\x00\x00\x00\x00\x00\x00~'], 0x1c}}, 0x4000054) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004}, 0x40) 917.406906ms ago: executing program 2 (id=405): socket$nl_route(0x10, 0x3, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/kexec_crash_loaded', 0x149a82, 0x24) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x65, &(0x7f0000000080), 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) socket$key(0xf, 0x3, 0x2) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000005c0)) r1 = syz_open_dev$usbfs(&(0x7f00000001c0), 0x800000001fe, 0x2) r2 = dup(r1) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1801000001ffffeb00000000eb658e0d850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) ioctl$USBDEVFS_CONTROL(r2, 0xc0185500, &(0x7f0000000040)={0x23, 0x3, 0x10, 0x2, 0x0, 0x0, 0x0}) 846.736938ms ago: executing program 1 (id=406): r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a3000000000090003007379"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000b40)=ANY=[@ANYBLOB="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"], 0x90}}, 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000009900000001"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r5, 0x0, 0x8000000000}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000640)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) symlink(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') readlink(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000001200)=""/4096, 0x1000) setsockopt$inet_tcp_int(r3, 0x6, 0x14, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r3, &(0x7f0000000300)={0x2, 0x0, @remote}, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000d00)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x65, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r7, 0x0, 0xffffffffffffffff}, 0x18) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x60, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_USERDATA={0x5, 0xd, 0x1, 0x0, 'w'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x8c}}, 0x20050800) sendto$inet(r3, &(0x7f0000000200)="e1", 0xfea8, 0x0, 0x0, 0x0) splice(r3, 0x0, r2, 0x0, 0xfea8, 0xa) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x8, &(0x7f0000000040)=[{0x3, 0x1, 0x6}, {0x5, 0x80, 0xd, 0x7}, {0x81, 0x20, 0xc, 0x10006}, {0x9, 0x9, 0xe, 0x10001}, {0xc, 0xb, 0xb, 0x3}, {0x0, 0x3, 0x9, 0x4}, {0xd, 0x81, 0xfe, 0x6}, {0x8, 0xff, 0x5, 0x200}]}) 672.39047ms ago: executing program 4 (id=407): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000ffffffff00"/24], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = io_uring_setup(0x177d, &(0x7f00000002c0)={0x0, 0x6990, 0x40, 0x2, 0xfffffffe}) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCMIWAIT(r3, 0x545c, 0x0) close_range(r2, 0xffffffffffffffff, 0x200000000000000) munlock(&(0x7f0000ffa000/0x3000)=nil, 0x3000) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_FLAGS(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c020000", @ANYRES16=r4, @ANYBLOB="010026bd7000ffdbdf250700000028000680080003007f00000114000400fe80000000000000000000000000003505000200b5000000"], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x20004040) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$netlink(0x10, 0x3, 0x14) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000400)={[{@errors_remount}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x7}}, {@dioread_lock}, {@data_err_ignore}, {@mblk_io_submit}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@nojournal_checksum}]}, 0x1, 0x553, &(0x7f0000001080)="$eJzs3d9rW1UcAPDvTdv91nUwhopIYQ9O5tK19ccEH+aj6HCg7zO0d2U0WUaTjrUO3B7ciy8yBBEH4ru++zj8B/wrBjoYMoo++BK56U2XrUmbddnSmc8Hbjkn9ybnfnPv9/TcnBsSwNCayP4UIl6OiG+SiIMRkeTrRiNfObG23er9q7PZkkSj8elfSXO7rN56rdbz9ueVlyLit68ijhc2tltbXlkolcvpYl6frFcuTdaWV05cqJTm0/n04vTMzKm3Z6bfe/edvsX6xtl/vv/k9oenvj66+t0vdw/dTOJ0HMjXtcfxBK61VyZiIn9PxuL0IxtO9aGxnSQZ9A6wLSN5no9F1gccjJE864H/vy8jogEMqUT+w5BqjQNa1/Z9ug5+btz7YO0CaGP8o2ufjcSe5rXRvtXkoSuj7Hp3vA/tZ238+uetm9kS/fscAmBL165HxMnR0Y39X5L3f9t3sodtHm1D/wfPzu1s/PNmp/FPYX38Ex3GP/s75O52bJ3/hbt9aKarbPz3fsfx7/qk1fhIXnuhOeYbS85fKKdZ3/ZiRByLsd1ZfbP5nFOrdxrd1rWP/7Ila781Fsz34+7o7oefM1eql54k5nb3rke80nH8m6wf/6TD8c/ej7M9tnEkvfVat3Vbx/90NX6KeL3j8X8wo5VsPj852TwfJltnxUZ/3zjye7f2Bx1/dvz3bR7/eNI+X1t7/DZ+3PNv2m3dQ/FH7+f/ruSzZnlX/tiVUr2+OBWxK/l44+PTD57bqre2z+I/dnTz/q/T+b83Ij7vMf4bh39+taf4B3T85x7r+D9+4c5HX/zQrf3e+r+3mqVj+SO99H+97uCTvHcAAAAAAACw0xQi4kAkheJ6uVAoFtfu7zgc+wrlaq1+/Hx16eJcNL8rOx5jhdZM98G2+yGm8vthW/XpR+ozEXEoIr4d2dusF2er5blBBw8AAAAAAAAAAAAAAAAAAAA7xP4u3//P/DEy6L0Dnjo/+Q3Da8v878cvPQE7kv//MLzkPwwv+Q/DS/7D8JL/MLzkPwwv+Q/DS/4DAAAAAAAAAAAAAAAAAAAAAAAAAABAX509cyZbGqv3r85m9bnLy0sL1csn5tLaQrGyNFucrS5eKs5Xq/PltDhbrWz1euVq9dLUdCxdmayntfpkbXnlXKW6dLF+7kKlNJ+eS8eeSVQAAAAAAAAAAAAAAAAAAADwfKktryyUyuV0UUFhW4XRnbEbCn0uDLpnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAH/gsAAP//6AY3sQ==") bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 671.83817ms ago: executing program 1 (id=408): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f3bbb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68000000000000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465a932b77a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900ff0000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80af740b5b7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48bc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1f001b2cd3170400000085be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890cec55bf404e4e1f74b7eed82571be54c72d978cf906df08f11f1c4042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9f0390a6f01e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5eaff07000000000000b99c9cc0ad1857216f000000009191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a798de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270b939b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf01cfaed9ef0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546bb2e51935ab9067ec3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f626602111b40e761fd21081920382f14d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df902aeec50e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd6d89f80a4377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f000000000100000000d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fb03b84f63e022fe755f4007a4a899eaf52c4f491f1e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c7167d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c2499ce3ffe2fef03f7cdd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba3c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63e4581d5cc41cbde2ba66adc1168070c8c6e18a6a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c514b37c668554d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c3340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b909006f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f1400010000ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1b0100448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732ab916a781b9912160a3fd2a2e74dd690c57bdfdc1f069f949170ef8cb9c13c12138116bca7a8c59363799be7005c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2c74664d60a4b9423f3297bc8eb91b4ee1d73272abbef3e7a828a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece58e752b47e6f677eff7c5c568a89d6e36b165c39132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae1676384ff799783f55d7e5a1a0920300000000000000d98440c355927629f2bcf9dc405a18ca0264400abf38e90000000000000000008faf2cddffbfa69bf32eb718e88ec75603ed7c7a8825ce0f27a114bd7a4ab74d0c7b8d90ccc1c3ca6620def782e24d75aed70eb676437f62677a69e0994cd82d72e95493c830fe9515329f40b7025326dec33a527c5d999298eaa3690fd0d38a02fc6e0bc16dbe19f353027edc014411e1138087221492f5d5e5cc9d0a1acd3f581eda9a807aa0e609f935f626d96351e0ff116686cbeb8939feecd5dac8cf45101942cc7cec21b7f337df5431bcf7e504b7c427f70a10e1cb8993a661306a0576b638a0171e6800b5b35589d676eb30ed1a72e8f7b057eb281c4504195635b6b285ebaba019913a2520e43ed790231f047f7d3789c10ae7d724929f77aec1d33d9587580268ee14396f71e7ef588cb2560d6bd0795a9b97281229eb16de086553469fad7214ffc3e416f8b8e442dce1d37f9b1c88a5d8a8d9f2fe45bd8df213ecb4194c8554aea13cadcd502e51f6fec80418e772b5bd8d0228949058038b185909ee542848680f9ad43f4057d676d5e21ae3d7e0e4a28c04f112a94707f032b35915e42993ff148291b8babe026646ee41905992db217561b90811c4702a14f312fe5d2ae7257db6be1034cc1c346b76a853ce274bf0435e18f7e86c660c18c80f30505dd4cf2ae2a1893b83c62d61bfeadc1f913e4cab2b897e096dd3fe3525090410cb23bab36cdf200a36014032cf6e5121803c5a0c4a273a19f340163fc6265425d513a1294b8439276394945d94a589708e32a1cb30f1fa4b2f08e01dc5e8c6732e6dc59b5c8cb400000000000000592c9b68f09c8f5ddb20b4ae08b4d9df548e5ed6cd47b91a4bea8b6aa52edf64576aef1e43f2958437fdc20fbbd0d4e13d8cce1193b2f9b4f107e25af178d056e1b1e40bd75b013f7484fae0bc447b1ffaf34819fe3ad1a634c94345e26e1e68dec08723a37b05d1594a66a4718a51d4d67fc880c9d640f4eacc509873f1a103c87f69"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0xfffffffff7ffffe9}, 0x18) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) prctl$PR_SET_NAME(0xf, &(0x7f0000000000)='\x00') sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000016c0)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0x4000000, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x1, 0x0, 0x2, 0x0, 0x0, 0x6}, {0xff}, 0x0, 0x1}}, @TCA_TBF_RTAB={0x404, 0x2, [0x1, 0x0, 0x1ff, 0x0, 0xfffffc80, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3b, 0x0, 0x0, 0x0, 0xffffffff, 0x2, 0xc00, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x2, 0x0, 0x0, 0x7, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0x9, 0x0, 0x0, 0x0, 0x40000002, 0x0, 0x40, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0xb97, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4200, 0x3, 0x5e, 0xfffffffc, 0x8, 0x0, 0xfffffffd, 0x400000, 0x3, 0x4, 0xc, 0x0, 0x9, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x2, 0xb484, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x7fffffff, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0xb3c, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, 0x1000, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xd64a, 0x0, 0x4, 0x0, 0x0, 0x0, 0xf20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0xd79, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1000, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x100, 0x0, 0x4, 0xfffffffd, 0x0, 0x0, 0x3ff, 0xfffffffe, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffd]}]}}]}, 0x45c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) pipe(&(0x7f0000000040)={0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r6, 0x0, r7, 0x0, 0x25a5, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000480)={{{@in=@broadcast, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in6=@private2}}, &(0x7f0000000580)=0xe8) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000005c0)={0x0, 0x0}, &(0x7f00000006c0)=0xc) fstat(r5, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0}) r11 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r11) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) r13 = getgid() fstat(r12, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000580)={{0x2, 0x0, r13, r14, r15, 0x8, 0xb8}, 0x0, 0x0, 0x0, 0x100, 0x8, 0x8, 0x0, 0x10, 0xa1, 0x200, r11, r11}) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000780)={{0x0, 0x0, 0x0, r14, r15, 0x8, 0xfffd}, 0x0, 0x0, 0x5, 0x1, 0x7, 0x2, 0xd592, 0x5163, 0x6, 0x338b, r11, r11}) r16 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000001c0)=0x0, &(0x7f0000000200)=0x4) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@empty, @in6=@ipv4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@local}}, &(0x7f00000003c0)=0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(r16, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast1, @in=@local, 0x4e24, 0xa623, 0x4e1f, 0xfff, 0x2, 0x20, 0xa0, 0x6, r17, r18}, {0x5ebf, 0x1, 0x7, 0x5, 0x6fc6f3a7, 0x6, 0xffffffffffffffff, 0x6}, {0x0, 0x6, 0x8, 0x8000000000000001}, 0xb, 0x6e6bb7, 0xeac490b9506a4bd4, 0xebc03556b4e92817, 0x0, 0x1}, {{@in=@broadcast, 0x4d4, 0x6c}, 0xa, @in6=@empty, 0x3505, 0x2, 0x3, 0x5c, 0x7, 0x6, 0xfffffff7}}, 0xe8) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000440), 0x80000, &(0x7f0000000880)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r6, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB=',dfltuid=', @ANYRESHEX=r8, @ANYBLOB=',hash,func=FIRMWARE_CHECK,uid=', @ANYRESDEC=r9, @ANYBLOB=',euid=', @ANYRESDEC=r10, @ANYBLOB=',dont_measure,euid>', @ANYRESDEC=r14, @ANYBLOB=',euid=', @ANYRESDEC=r18, @ANYBLOB="8757a774b8b0a8511f63b1eae3418d092cc38a5e59a2ea44e70174c85494da77c38975006740075800e2877a0d58998a29add4a8914415d17b76cecebf75c551526e5bb3630b9b9f0e07cd3562cc89f58615f52a42"]) pipe2(&(0x7f0000000080), 0x0) 590.125471ms ago: executing program 2 (id=409): r0 = socket$kcm(0x2, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) socketpair(0x22, 0x2, 0x25, &(0x7f0000000680)) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000021007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) sendmsg$inet(r0, &(0x7f0000000a80)={&(0x7f0000000300)={0x2, 0x4e24, @empty}, 0x10, 0x0, 0x0, &(0x7f00000007c0)=[@ip_retopts={{0x10}}], 0x10}, 0x40010) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000080)="9ee35e5d7208d609ce1c2f8308cd02fc90027f93c77d6ac84c951684c250dab87a86c6738c60c4a83882940a693009d939f28570", 0x34}, {&(0x7f00000003c0)="f93c6690b45a71504ba0fb3bbe824722088a3753284fc5f19230ad8a804b068c8d818c13841821431c8aadeedd42e19f19e50cd5f884ee7ade2c70634a159933376cf76a680fc03b6796533c024de9ce3569abd70dfeb8a8ccefaa6738b0b871fe90141062698b2b93773fa15d6bce881e95e64bcd55ae6143a54362892600627de9e938caba423fc8b63a87f54d1193b15008b463fc35a5548746bf417147893bc65d05a146c9334fd332e4e74bc579206c7a83dc4892bae2043b389742d433bbe203875b406a2b825df070cf205163dfd8fa690b21a7f69758c4b922391ff46690020d9719b6", 0xe7}, {&(0x7f00000000c0)="f1253ea69a741417612741fdc61b424646f3da6a4b78ce1a8336a3599566274ceb272367b8de1da3fc39e4729630fa86351551e1e3a3ed96f1019b31f192cb601690e8197cf117ec6f7e1b1188e9646c6a8733800040b8d0d676994885a2c4eb0d528805e7f6a05df793a7495661a54c1fa87650ceff7dd34c0513695ff7c3b2f6d63c82", 0x84}, {&(0x7f00000004c0)="9fbd5009bb9468935fe106d27ba0a35a363dd4e26981b9d73db04e9245e80237878feea6ef775de57500b22b4b44bdf2ee74d1c280715dc6d83395f16ee70af04fb5fa04c6e749ca4cb52f4e00beed6429d6ee52317bb3248f0a1ee797f07fbee2903fbd820716c9f51c893742759777d69676b210ef1189e06c8d8f205987844e209d568877bfa22c8591e381f235b1a69c41644133f36d4f1d201261a3c83183cf6d3a603a6b51d9d58744fec46f2d1b92a051aed3cacfdee593875ab8ed7209c574096934ee23cddfaa576584443ead03f4406ceb41", 0xd7}, {&(0x7f00000001c0)="dd149445a9793a65e0dfca515fdbb7717e3a33ede03306edabed199aa101a188dd2abd72d68ab4277454d85bf228713c7622", 0x32}], 0x5}, 0x48000) 338.275755ms ago: executing program 2 (id=410): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) getrandom(0x0, 0x0, 0x0) (fail_nth: 7) 297.552276ms ago: executing program 0 (id=411): connect$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x4, 0x3ff, @empty, 0x1}, 0x1c) bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x4e20, @multicast2}, 0x10) 285.415746ms ago: executing program 2 (id=412): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="34000000100001080000cd6c0000000000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x34}}, 0x44000) socket$inet6(0xa, 0x1, 0x8010000000000084) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000600)='selinux_audited\x00', r1, 0x0, 0x805}, 0x18) prctl$PR_SET_NAME(0xf, &(0x7f0000000280)='+}[@\x00') r2 = socket$inet(0x2, 0x3, 0x8) setsockopt$inet_int(r2, 0x0, 0x5, &(0x7f0000000080)=0x7, 0x4) r3 = socket$inet(0x2, 0x3, 0x6) r4 = dup3(r2, r3, 0x0) setsockopt$inet_int(r4, 0x0, 0x5, &(0x7f0000000080)=0x7, 0x4) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0xa, &(0x7f0000000180)=ANY=[@ANYBLOB="18110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000010000087b8aff00000000bfa200000000000007020000f8ffffffb703000008000000b7e17d00000000008500000082000000852000000200000000"], &(0x7f0000000040)='GPL\x00', 0x955, 0xe, &(0x7f0000000100)=""/14, 0x40f00, 0x44, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000000240)={0x5, 0x8, 0x8001, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000280)=[0x1], 0x0, 0x10, 0x8, @void, @value}, 0x94) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000300)={0x8, 0x0}, 0x8) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000180)=r6, 0x4) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000680)=ANY=[@ANYRES32, @ANYRES32=r5, @ANYBLOB="21000074ebf63644b200"/22, @ANYRES32=r0, @ANYBLOB, @ANYRES32=r6, @ANYBLOB, @ANYRES64=0x0], 0x20) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, @perf_bp={0x0, 0x13}, 0x400, 0xffffffff, 0x6, 0x4, 0x0, 0x1, 0xfff9, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000001001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x101400) 275.722606ms ago: executing program 4 (id=413): setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r0, 0x0, 0x7}, 0x18) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000000500)="a4", 0x34000, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) (fail_nth: 2) 220.087377ms ago: executing program 0 (id=414): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000013c0)={0x11, 0xc, &(0x7f0000001080)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000009008500000082000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2e, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kfree\x00', r2, 0x0, 0xffffffffffffffff}, 0x18) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={0xffffffffffffffff, 0x5, 0x0, 0x280d0000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) fchdir(r4) open(&(0x7f0000000280)='.\x00', 0x0, 0x8) close_range(r0, 0xffffffffffffffff, 0x0) 7.6769ms ago: executing program 4 (id=415): r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = dup(r0) ioctl$PTP_EXTTS_REQUEST2(r1, 0x43403d05, 0x0) 0s ago: executing program 0 (id=416): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065fffff53000000800395032303030"], 0x15) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) chown(0x0, 0xee00, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0xe8) (fail_nth: 4) 0s ago: executing program 1 (id=418): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x42, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0, 0x2}, 0x1100, 0x5dd9, 0x0, 0x5, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) (async) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b40)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) (async) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2042, 0x0) ioctl$AUTOFS_IOC_FAIL(r3, 0x4c80, 0x7000000) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r4 = socket$rds(0x15, 0x5, 0x0) (async) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x105042, 0x40) write$cgroup_subtree(r5, &(0x7f0000000a40)=ANY=[], 0x32600) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f0000000200)={'tunl0\x00', &(0x7f0000000180)={'syztnl0\x00', 0x0, 0x7800, 0x8000, 0x80000001, 0x5, {{0x5, 0x4, 0x3, 0x0, 0x14, 0x2064, 0x0, 0x4, 0x29, 0x0, @empty, @loopback}}}}) (async, rerun: 32) r6 = socket$packet(0x11, 0x3, 0x300) (async, rerun: 32) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r8 = shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000) shmdt(r8) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) (async, rerun: 32) r10 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) sendmsg$NL80211_CMD_VENDOR(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000005c0)={0x100, r9, 0x701, 0x0, 0x0, {{}, {@void, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0x8}, @NL80211_ATTR_VENDOR_DATA={0xe2, 0xc5, "99dd287461d29a5b3e18aeb728a472da0018bcabbc82454247c4b5d60be5979d88a5c6d8f1b439b62b321ed592ee4f436a29caae4a068d317e7f1515e01073684847468b8b8a9fd6a743af81241e5ecc63121dab7bdff032e79351e7d00000001f0a97086d8ff416be5a23ca9eff34423a7405255a82dca1795e63c14c6060436244878259ad6daed9e40ba3c70ca6a32188dbc2aafec81ae0856d7056e2b9fc86efb185c9f76561a8fb3683ff277ea3af4a63154793254e0571686773f0336f0f58494b7f1b0d235bd6a45473a66d41ee634f0ad2d7ebf5293c75af65eb"}]}, 0x100}}, 0x0) (async, rerun: 32) r11 = socket$packet(0x11, 0x3, 0x300) (rerun: 32) setsockopt$packet_int(r11, 0x107, 0xf, &(0x7f0000000100)=0xa, 0x4) (async) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000000c0)={'geneve0\x00', 0x0}) sendto$packet(r11, &(0x7f0000000180)="0b036800e0ff64000200475400f6a13bb10000000800894f4820", 0x1fffe, 0x0, &(0x7f0000000140)={0x11, 0x0, r12}, 0x14) (async) mmap$xdp(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xb, 0x80010, 0xffffffffffffffff, 0x80000000) (async) r13 = socket(0x2b, 0x80801, 0x1) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r13, 0x0, 0x61, 0x0, 0x0) (async) bind$rds(r13, &(0x7f0000000340)={0x2, 0x0, @empty}, 0x10) sendmsg$rds(r4, &(0x7f0000000740)={&(0x7f0000000040)={0x2, 0x0, @dev}, 0x10, 0x0, 0x0, &(0x7f0000004680)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000002bc0)=[{&(0x7f0000001900)=""/135, 0x87}, {0xfffffffffffffffe, 0x2}], 0x2}}], 0x48}, 0x0) kernel console output (not intermixed with test programs): 9] R13: 00007fb2607b6ef0 R14: 00007fb2607b6eb0 R15: 0000200000000940 [ 31.972725][ T3469] [ 32.160671][ T3468] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 32.171699][ T3468] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 32.207276][ T3468] JBD2: no valid journal superblock found [ 32.213166][ T3468] EXT4-fs (loop3): Could not load journal inode [ 32.270241][ T3478] loop4: detected capacity change from 0 to 1024 [ 32.279477][ T3480] 9pnet: Could not find request transport: rš ˜ [ 32.308155][ T3482] loop2: detected capacity change from 0 to 128 [ 32.316087][ T3478] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 32.327128][ T3478] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 32.360244][ C1] hrtimer: interrupt took 37392 ns [ 32.360247][ T3482] /dev/loop2: Can't open blockdev [ 32.376290][ T3478] JBD2: no valid journal superblock found [ 32.382112][ T3478] EXT4-fs (loop4): Could not load journal inode [ 32.504301][ T3494] netlink: 28 bytes leftover after parsing attributes in process `syz.1.12'. [ 32.513196][ T3494] netlink: 28 bytes leftover after parsing attributes in process `syz.1.12'. [ 32.525419][ T3494] veth0: entered promiscuous mode [ 32.590981][ T3494] veth0: left promiscuous mode [ 32.640939][ T3495] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 32.649261][ T3495] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 32.766826][ T3507] syz.1.19 uses obsolete (PF_INET,SOCK_PACKET) [ 32.877630][ T3512] netlink: 4 bytes leftover after parsing attributes in process `syz.0.21'. [ 32.900841][ T3514] : renamed from bond0 (while UP) [ 32.921512][ T3516] loop3: detected capacity change from 0 to 128 [ 32.989822][ T3523] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3523 comm=syz.1.25 [ 33.011496][ T3524] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3524 comm=syz.3.26 [ 33.032045][ T3526] loop2: detected capacity change from 0 to 1024 [ 33.043328][ T3526] ======================================================= [ 33.043328][ T3526] WARNING: The mand mount option has been deprecated and [ 33.043328][ T3526] and is ignored by this kernel. Remove the mand [ 33.043328][ T3526] option from the mount to silence this warning. [ 33.043328][ T3526] ======================================================= [ 33.113468][ T3526] EXT4-fs: Ignoring removed oldalloc option [ 33.119564][ T3526] ext4: Unknown parameter 'euid<00000000000000000000' [ 33.135451][ T3530] loop3: detected capacity change from 0 to 512 [ 33.136774][ T3523] loop1: detected capacity change from 0 to 512 [ 33.183185][ T3530] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 33.191456][ T3530] EXT4-fs (loop3): orphan cleanup on readonly fs [ 33.206565][ T3523] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 33.227656][ T3530] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.26: invalid indirect mapped block 256 (level 2) [ 33.241889][ T3526] loop2: detected capacity change from 0 to 2048 [ 33.255356][ T3523] EXT4-fs (loop1): orphan cleanup on readonly fs [ 33.267177][ T3523] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.25: invalid indirect mapped block 256 (level 2) [ 33.289511][ T3526] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 33.312031][ T3530] EXT4-fs (loop3): 2 truncates cleaned up [ 33.335737][ T3530] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 33.352487][ T3523] EXT4-fs (loop1): 2 truncates cleaned up [ 33.369591][ T3543] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3543 comm=syz.4.32 [ 33.369589][ T3523] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 33.413806][ T3321] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.430522][ T3543] team0: Port device gretap1 added [ 33.447529][ T3543] loop4: detected capacity change from 0 to 512 [ 33.460174][ T3543] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 33.503004][ T3543] EXT4-fs (loop4): orphan cleanup on readonly fs [ 33.520156][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.554239][ T3543] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.32: invalid indirect mapped block 256 (level 2) [ 33.666022][ T3550] dvmrp0: entered allmulticast mode [ 33.689469][ T3543] EXT4-fs (loop4): 2 truncates cleaned up [ 33.695555][ T3549] dvmrp0: left allmulticast mode [ 33.703952][ T3551] netlink: 4 bytes leftover after parsing attributes in process `syz.1.33'. [ 33.728199][ T3553] 9pnet: Could not find request transport: rš ˜ [ 33.753331][ T3543] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 33.884919][ T3543] syz.4.32 (3543) used greatest stack depth: 10816 bytes left [ 33.908577][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.966662][ T37] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 33.969728][ T37] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 33.969752][ T37] EXT4-fs (loop2): This should not happen!! Data will be lost [ 33.969752][ T37] [ 33.969806][ T37] EXT4-fs (loop2): Total free blocks count 0 [ 33.969817][ T37] EXT4-fs (loop2): Free/Dirty block details [ 33.969827][ T37] EXT4-fs (loop2): free_blocks=2415919104 [ 33.969838][ T37] EXT4-fs (loop2): dirty_blocks=4288 [ 33.969931][ T37] EXT4-fs (loop2): Block reservation details [ 33.969943][ T37] EXT4-fs (loop2): i_reserved_data_blocks=268 [ 33.973870][ T37] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 18 with max blocks 2048 with error 28 [ 34.013677][ T3558] FAULT_INJECTION: forcing a failure. [ 34.013677][ T3558] name failslab, interval 1, probability 0, space 0, times 0 [ 34.013736][ T3558] CPU: 0 UID: 0 PID: 3558 Comm: syz.3.36 Not tainted 6.15.0-rc6-syzkaller-00047-ge9565e23cd89 #0 PREEMPT(voluntary) [ 34.013767][ T3558] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 34.013782][ T3558] Call Trace: [ 34.013789][ T3558] [ 34.013797][ T3558] __dump_stack+0x1d/0x30 [ 34.013840][ T3558] dump_stack_lvl+0xe8/0x140 [ 34.013874][ T3558] dump_stack+0x15/0x1b [ 34.013904][ T3558] should_fail_ex+0x265/0x280 [ 34.013938][ T3558] should_failslab+0x8c/0xb0 [ 34.014043][ T3558] __kvmalloc_node_noprof+0x126/0x4d0 [ 34.014139][ T3558] ? alloc_netdev_mqs+0x5ac/0xab0 [ 34.014161][ T3558] ? get_random_bytes+0x1d/0x30 [ 34.014192][ T3558] alloc_netdev_mqs+0x5ac/0xab0 [ 34.014215][ T3558] ip6_tnl_locate+0x37e/0x4a0 [ 34.014298][ T3558] ip6_tnl_siocdevprivate+0x550/0x920 [ 34.014346][ T3558] ? __schedule+0x6a2/0xb20 [ 34.014502][ T3558] dev_ifsioc+0x8f8/0xaa0 [ 34.014531][ T3558] dev_ioctl+0x78d/0x960 [ 34.014556][ T3558] sock_ioctl+0x593/0x610 [ 34.014599][ T3558] ? __pfx_sock_ioctl+0x10/0x10 [ 34.014628][ T3558] __se_sys_ioctl+0xce/0x140 [ 34.014656][ T3558] __x64_sys_ioctl+0x43/0x50 [ 34.014684][ T3558] x64_sys_call+0x19a8/0x2fb0 [ 34.014766][ T3558] do_syscall_64+0xd0/0x1a0 [ 34.014796][ T3558] ? clear_bhb_loop+0x40/0x90 [ 34.014823][ T3558] ? clear_bhb_loop+0x40/0x90 [ 34.014848][ T3558] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 34.014868][ T3558] RIP: 0033:0x7f8c8f54e969 [ 34.014882][ T3558] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 34.014999][ T3558] RSP: 002b:00007f8c8dbb7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 34.015043][ T3558] RAX: ffffffffffffffda RBX: 00007f8c8f775fa0 RCX: 00007f8c8f54e969 [ 34.015058][ T3558] RDX: 0000200000000080 RSI: 00000000000089f1 RDI: 0000000000000004 [ 34.015073][ T3558] RBP: 00007f8c8dbb7090 R08: 0000000000000000 R09: 0000000000000000 [ 34.015084][ T3558] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 34.015113][ T3558] R13: 0000000000000000 R14: 00007f8c8f775fa0 R15: 00007fff1c267ba8 [ 34.015130][ T3558] [ 34.339071][ T3578] 9pnet: Could not find request transport: rš ˜ [ 34.477821][ T3589] loop2: detected capacity change from 0 to 2048 [ 34.478111][ T3589] EXT4-fs: dax option not supported [ 34.795470][ T3595] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3595 comm=syz.2.48 [ 34.897609][ T3598] loop2: detected capacity change from 0 to 512 [ 34.911257][ T3598] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 34.911386][ T3598] EXT4-fs (loop2): orphan cleanup on readonly fs [ 34.911727][ T3598] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.48: invalid indirect mapped block 256 (level 2) [ 34.925366][ T3598] EXT4-fs (loop2): 2 truncates cleaned up [ 34.925823][ T3598] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 35.003555][ T3323] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.312633][ T3608] loop1: detected capacity change from 0 to 164 [ 35.381450][ T3608] iso9660: Unknown parameter '0x0000000000000004' [ 35.407016][ T3616] loop0: detected capacity change from 0 to 128 [ 35.460825][ T3616] FAULT_INJECTION: forcing a failure. [ 35.460825][ T3616] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 35.474082][ T3616] CPU: 1 UID: 0 PID: 3616 Comm: syz.0.57 Not tainted 6.15.0-rc6-syzkaller-00047-ge9565e23cd89 #0 PREEMPT(voluntary) [ 35.474134][ T3616] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 35.474149][ T3616] Call Trace: [ 35.474157][ T3616] [ 35.474166][ T3616] __dump_stack+0x1d/0x30 [ 35.474199][ T3616] dump_stack_lvl+0xe8/0x140 [ 35.474223][ T3616] dump_stack+0x15/0x1b [ 35.474400][ T3616] should_fail_ex+0x265/0x280 [ 35.474434][ T3616] should_fail+0xb/0x20 [ 35.474482][ T3616] should_fail_usercopy+0x1a/0x20 [ 35.474604][ T3616] _copy_to_user+0x20/0xa0 [ 35.474638][ T3616] simple_read_from_buffer+0xb5/0x130 [ 35.474670][ T3616] proc_fail_nth_read+0x100/0x140 [ 35.474705][ T3616] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 35.474729][ T3616] vfs_read+0x1a0/0x6f0 [ 35.474826][ T3616] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 35.474851][ T3616] ? __rcu_read_unlock+0x4f/0x70 [ 35.474939][ T3616] ? __fget_files+0x184/0x1c0 [ 35.474969][ T3616] ksys_read+0xda/0x1a0 [ 35.474998][ T3616] __x64_sys_read+0x40/0x50 [ 35.475056][ T3616] x64_sys_call+0x2d77/0x2fb0 [ 35.475078][ T3616] do_syscall_64+0xd0/0x1a0 [ 35.475106][ T3616] ? clear_bhb_loop+0x40/0x90 [ 35.475126][ T3616] ? clear_bhb_loop+0x40/0x90 [ 35.475203][ T3616] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 35.475226][ T3616] RIP: 0033:0x7f2a81cbd37c [ 35.475242][ T3616] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 35.475259][ T3616] RSP: 002b:00007f2a80327030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 35.475281][ T3616] RAX: ffffffffffffffda RBX: 00007f2a81ee5fa0 RCX: 00007f2a81cbd37c [ 35.475373][ T3616] RDX: 000000000000000f RSI: 00007f2a803270a0 RDI: 0000000000000005 [ 35.475389][ T3616] RBP: 00007f2a80327090 R08: 0000000000000000 R09: 0000000000000000 [ 35.475401][ T3616] R10: 0000000800000009 R11: 0000000000000246 R12: 0000000000000001 [ 35.475411][ T3616] R13: 0000000000000000 R14: 00007f2a81ee5fa0 R15: 00007ffd16947d38 [ 35.475429][ T3616] [ 35.815602][ T3634] loop0: detected capacity change from 0 to 512 [ 35.822236][ T3634] EXT4-fs: Ignoring removed mblk_io_submit option [ 35.869364][ T3634] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -13 [ 35.877849][ T3634] EXT4-fs error (device loop0): ext4_clear_blocks:876: inode #13: comm syz.0.66: attempt to clear invalid blocks 2 len 1 [ 36.019239][ T3634] EXT4-fs (loop0): Remounting filesystem read-only [ 36.061767][ T3634] EXT4-fs (loop0): 1 truncate cleaned up [ 36.092680][ T29] kauditd_printk_skb: 221 callbacks suppressed [ 36.098893][ T29] audit: type=1326 audit(1747166991.003:322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3646 comm="syz.1.70" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31da46e969 code=0x7ffc0000 [ 36.172326][ T29] audit: type=1326 audit(1747166991.033:323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3646 comm="syz.1.70" exe="/root/syz-executor" sig=0 arch=c000003e syscall=88 compat=0 ip=0x7f31da46e969 code=0x7ffc0000 [ 36.195473][ T29] audit: type=1326 audit(1747166991.043:324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3646 comm="syz.1.70" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31da46e969 code=0x7ffc0000 [ 36.218696][ T29] audit: type=1326 audit(1747166991.043:325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3646 comm="syz.1.70" exe="/root/syz-executor" sig=0 arch=c000003e syscall=89 compat=0 ip=0x7f31da46e969 code=0x7ffc0000 [ 36.242293][ T29] audit: type=1326 audit(1747166991.043:326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3646 comm="syz.1.70" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31da46e969 code=0x7ffc0000 [ 36.266007][ T29] audit: type=1400 audit(1747166991.063:327): avc: denied { create } for pid=3648 comm="syz.4.71" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 36.285703][ T29] audit: type=1400 audit(1747166991.063:328): avc: denied { connect } for pid=3648 comm="syz.4.71" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 36.305415][ T29] audit: type=1400 audit(1747166991.063:329): avc: denied { write } for pid=3648 comm="syz.4.71" path="socket:[4981]" dev="sockfs" ino=4981 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 36.331590][ T3634] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.361724][ T3634] EXT4-fs (loop0): Quota file not on filesystem root. Journaled quota will not work [ 36.440305][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.535515][ T29] audit: type=1400 audit(1747166991.303:330): avc: denied { quotaon } for pid=3633 comm="syz.0.66" name="file0" dev="loop0" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 36.559172][ T29] audit: type=1400 audit(1747166991.313:331): avc: denied { ioctl } for pid=3633 comm="syz.0.66" path="/dev/sg0" dev="devtmpfs" ino=135 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 36.617482][ T3663] netlink: 'syz.0.75': attribute type 21 has an invalid length. [ 36.627925][ T3663] netlink: 8 bytes leftover after parsing attributes in process `syz.0.75'. [ 36.640599][ T3666] loop4: detected capacity change from 0 to 128 [ 36.659062][ T3668] loop0: detected capacity change from 0 to 128 [ 36.734145][ T3666] FAULT_INJECTION: forcing a failure. [ 36.734145][ T3666] name failslab, interval 1, probability 0, space 0, times 0 [ 36.746912][ T3666] CPU: 1 UID: 0 PID: 3666 Comm: syz.4.76 Not tainted 6.15.0-rc6-syzkaller-00047-ge9565e23cd89 #0 PREEMPT(voluntary) [ 36.746945][ T3666] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 36.746999][ T3666] Call Trace: [ 36.747005][ T3666] [ 36.747012][ T3666] __dump_stack+0x1d/0x30 [ 36.747034][ T3666] dump_stack_lvl+0xe8/0x140 [ 36.747092][ T3666] dump_stack+0x15/0x1b [ 36.747109][ T3666] should_fail_ex+0x265/0x280 [ 36.747143][ T3666] ? alloc_pipe_info+0xae/0x350 [ 36.747165][ T3666] should_failslab+0x8c/0xb0 [ 36.747208][ T3666] __kmalloc_cache_noprof+0x4c/0x320 [ 36.747253][ T3666] alloc_pipe_info+0xae/0x350 [ 36.747286][ T3666] splice_direct_to_actor+0x592/0x680 [ 36.747367][ T3666] ? kstrtouint_from_user+0x9f/0xf0 [ 36.747397][ T3666] ? __pfx_direct_splice_actor+0x10/0x10 [ 36.747425][ T3666] ? __rcu_read_unlock+0x4f/0x70 [ 36.747452][ T3666] ? get_pid_task+0x96/0xd0 [ 36.747476][ T3666] ? avc_policy_seqno+0x15/0x30 [ 36.747502][ T3666] do_splice_direct+0xda/0x150 [ 36.747529][ T3666] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 36.747674][ T3666] do_sendfile+0x380/0x640 [ 36.747762][ T3666] __x64_sys_sendfile64+0x105/0x150 [ 36.747800][ T3666] x64_sys_call+0xb39/0x2fb0 [ 36.747820][ T3666] do_syscall_64+0xd0/0x1a0 [ 36.747844][ T3666] ? clear_bhb_loop+0x40/0x90 [ 36.747897][ T3666] ? clear_bhb_loop+0x40/0x90 [ 36.747923][ T3666] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 36.748025][ T3666] RIP: 0033:0x7fb26214e969 [ 36.748038][ T3666] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 36.748080][ T3666] RSP: 002b:00007fb2607b7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 36.748102][ T3666] RAX: ffffffffffffffda RBX: 00007fb262375fa0 RCX: 00007fb26214e969 [ 36.748125][ T3666] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000004 [ 36.748139][ T3666] RBP: 00007fb2607b7090 R08: 0000000000000000 R09: 0000000000000000 [ 36.748154][ T3666] R10: 0000000800000009 R11: 0000000000000246 R12: 0000000000000001 [ 36.748168][ T3666] R13: 0000000000000000 R14: 00007fb262375fa0 R15: 00007ffd378e3e98 [ 36.748189][ T3666] [ 36.907120][ T3672] netlink: 'syz.0.79': attribute type 21 has an invalid length. [ 36.973664][ T3672] FAULT_INJECTION: forcing a failure. [ 36.973664][ T3672] name failslab, interval 1, probability 0, space 0, times 0 [ 36.986326][ T3672] CPU: 0 UID: 0 PID: 3672 Comm: syz.0.79 Not tainted 6.15.0-rc6-syzkaller-00047-ge9565e23cd89 #0 PREEMPT(voluntary) [ 36.986353][ T3672] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 36.986367][ T3672] Call Trace: [ 36.986373][ T3672] [ 36.986380][ T3672] __dump_stack+0x1d/0x30 [ 36.986401][ T3672] dump_stack_lvl+0xe8/0x140 [ 36.986486][ T3672] dump_stack+0x15/0x1b [ 36.986505][ T3672] should_fail_ex+0x265/0x280 [ 36.986546][ T3672] should_failslab+0x8c/0xb0 [ 36.986601][ T3672] __kmalloc_noprof+0xa5/0x3e0 [ 36.986618][ T3672] ? fib_create_info+0xbb1/0x1980 [ 36.986652][ T3672] fib_create_info+0xbb1/0x1980 [ 36.986706][ T3672] fib_table_insert+0x60/0xeb0 [ 36.986732][ T3672] ? __schedule+0x6a2/0xb20 [ 36.986764][ T3672] ? __cond_resched+0x4e/0x90 [ 36.986865][ T3672] ? fib_new_table+0xad/0x1c0 [ 36.986897][ T3672] inet_rtm_newroute+0xab/0x140 [ 36.986949][ T3672] ? __pfx_inet_rtm_newroute+0x10/0x10 [ 36.986985][ T3672] rtnetlink_rcv_msg+0x5fb/0x6d0 [ 36.987059][ T3672] netlink_rcv_skb+0x120/0x220 [ 36.987090][ T3672] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 36.987175][ T3672] rtnetlink_rcv+0x1c/0x30 [ 36.987262][ T3672] netlink_unicast+0x5a1/0x670 [ 36.987292][ T3672] netlink_sendmsg+0x58b/0x6b0 [ 36.987311][ T3672] ? __pfx_netlink_sendmsg+0x10/0x10 [ 36.987330][ T3672] __sock_sendmsg+0x142/0x180 [ 36.987379][ T3672] ____sys_sendmsg+0x31e/0x4e0 [ 36.987403][ T3672] ___sys_sendmsg+0x17b/0x1d0 [ 36.987432][ T3672] __x64_sys_sendmsg+0xd4/0x160 [ 36.987529][ T3672] x64_sys_call+0x2999/0x2fb0 [ 36.987550][ T3672] do_syscall_64+0xd0/0x1a0 [ 36.987578][ T3672] ? clear_bhb_loop+0x40/0x90 [ 36.987604][ T3672] ? clear_bhb_loop+0x40/0x90 [ 36.987732][ T3672] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 36.987786][ T3672] RIP: 0033:0x7f2a81cbe969 [ 36.987802][ T3672] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 36.987818][ T3672] RSP: 002b:00007f2a80327038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 36.987834][ T3672] RAX: ffffffffffffffda RBX: 00007f2a81ee5fa0 RCX: 00007f2a81cbe969 [ 36.987845][ T3672] RDX: 0000000000048084 RSI: 00002000000002c0 RDI: 0000000000000003 [ 36.987860][ T3672] RBP: 00007f2a80327090 R08: 0000000000000000 R09: 0000000000000000 [ 36.987954][ T3672] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 36.988025][ T3672] R13: 0000000000000000 R14: 00007f2a81ee5fa0 R15: 00007ffd16947d38 [ 36.988092][ T3672] [ 37.377312][ T3686] FAULT_INJECTION: forcing a failure. [ 37.377312][ T3686] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 37.390418][ T3686] CPU: 0 UID: 0 PID: 3686 Comm: syz.3.86 Not tainted 6.15.0-rc6-syzkaller-00047-ge9565e23cd89 #0 PREEMPT(voluntary) [ 37.390476][ T3686] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 37.390492][ T3686] Call Trace: [ 37.390499][ T3686] [ 37.390508][ T3686] __dump_stack+0x1d/0x30 [ 37.390533][ T3686] dump_stack_lvl+0xe8/0x140 [ 37.390620][ T3686] dump_stack+0x15/0x1b [ 37.390635][ T3686] should_fail_ex+0x265/0x280 [ 37.390664][ T3686] should_fail+0xb/0x20 [ 37.390694][ T3686] should_fail_usercopy+0x1a/0x20 [ 37.390757][ T3686] _copy_to_user+0x20/0xa0 [ 37.390784][ T3686] simple_read_from_buffer+0xb5/0x130 [ 37.390814][ T3686] proc_fail_nth_read+0x100/0x140 [ 37.390845][ T3686] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 37.390950][ T3686] vfs_read+0x1a0/0x6f0 [ 37.390978][ T3686] ? __rcu_read_unlock+0x4f/0x70 [ 37.391061][ T3686] ? __fget_files+0x184/0x1c0 [ 37.391095][ T3686] ksys_read+0xda/0x1a0 [ 37.391141][ T3686] __x64_sys_read+0x40/0x50 [ 37.391164][ T3686] x64_sys_call+0x2d77/0x2fb0 [ 37.391183][ T3686] do_syscall_64+0xd0/0x1a0 [ 37.391237][ T3686] ? clear_bhb_loop+0x40/0x90 [ 37.391263][ T3686] ? clear_bhb_loop+0x40/0x90 [ 37.391376][ T3686] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 37.391440][ T3686] RIP: 0033:0x7f8c8f54d37c [ 37.391504][ T3686] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 37.391594][ T3686] RSP: 002b:00007f8c8dbb7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 37.391613][ T3686] RAX: ffffffffffffffda RBX: 00007f8c8f775fa0 RCX: 00007f8c8f54d37c [ 37.391627][ T3686] RDX: 000000000000000f RSI: 00007f8c8dbb70a0 RDI: 0000000000000004 [ 37.391717][ T3686] RBP: 00007f8c8dbb7090 R08: 0000000000000000 R09: 0000000000000000 [ 37.391797][ T3686] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 37.391807][ T3686] R13: 0000000000000000 R14: 00007f8c8f775fa0 R15: 00007fff1c267ba8 [ 37.391822][ T3686] [ 37.454785][ T3681] FAULT_INJECTION: forcing a failure. [ 37.454785][ T3681] name failslab, interval 1, probability 0, space 0, times 0 [ 37.604190][ T3681] CPU: 1 UID: 0 PID: 3681 Comm: syz.0.84 Not tainted 6.15.0-rc6-syzkaller-00047-ge9565e23cd89 #0 PREEMPT(voluntary) [ 37.604258][ T3681] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 37.604272][ T3681] Call Trace: [ 37.604278][ T3681] [ 37.604287][ T3681] __dump_stack+0x1d/0x30 [ 37.604308][ T3681] dump_stack_lvl+0xe8/0x140 [ 37.604325][ T3681] dump_stack+0x15/0x1b [ 37.604349][ T3681] should_fail_ex+0x265/0x280 [ 37.604379][ T3681] ? __pfx_nfc_genl_rcv_nl_event+0x10/0x10 [ 37.604408][ T3681] ? nfc_genl_rcv_nl_event+0x6f/0x130 [ 37.604441][ T3681] should_failslab+0x8c/0xb0 [ 37.604523][ T3681] __kmalloc_cache_noprof+0x4c/0x320 [ 37.604546][ T3681] ? __pfx_nfc_genl_rcv_nl_event+0x10/0x10 [ 37.604637][ T3681] nfc_genl_rcv_nl_event+0x6f/0x130 [ 37.604674][ T3681] blocking_notifier_call_chain+0x98/0x1f0 [ 37.604704][ T3681] netlink_release+0xaa9/0xf20 [ 37.604809][ T3681] sock_close+0x6b/0x150 [ 37.604840][ T3681] ? __pfx_sock_close+0x10/0x10 [ 37.604871][ T3681] __fput+0x29b/0x650 [ 37.604897][ T3681] ____fput+0x1c/0x30 [ 37.604921][ T3681] task_work_run+0x131/0x1a0 [ 37.605007][ T3681] resume_user_mode_work+0x6a/0x70 [ 37.605031][ T3681] syscall_exit_to_user_mode+0x77/0xb0 [ 37.605119][ T3681] do_syscall_64+0xdd/0x1a0 [ 37.605150][ T3681] ? clear_bhb_loop+0x40/0x90 [ 37.605232][ T3681] ? clear_bhb_loop+0x40/0x90 [ 37.605259][ T3681] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 37.605283][ T3681] RIP: 0033:0x7f2a81cbe969 [ 37.605346][ T3681] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 37.605365][ T3681] RSP: 002b:00007f2a80327038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 37.605387][ T3681] RAX: 0000000000000000 RBX: 00007f2a81ee5fa0 RCX: 00007f2a81cbe969 [ 37.605402][ T3681] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000000000006 [ 37.605417][ T3681] RBP: 00007f2a80327090 R08: 0000000000000000 R09: 0000000000000000 [ 37.605431][ T3681] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 37.605516][ T3681] R13: 0000000000000000 R14: 00007f2a81ee5fa0 R15: 00007ffd16947d38 [ 37.605539][ T3681] [ 37.936352][ T3703] SELinux: policydb magic number 0x8 does not match expected magic number 0xf97cff8c [ 37.946115][ T3703] SELinux: failed to load policy [ 37.962464][ T3706] random: crng reseeded on system resumption [ 38.136349][ T3725] loop3: detected capacity change from 0 to 164 [ 38.211694][ T3725] rock: directory entry would overflow storage [ 38.217946][ T3725] rock: sig=0x4f50, size=4, remaining=3 [ 38.223693][ T3725] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 38.272235][ T3729] pim6reg: entered allmulticast mode [ 38.297949][ T3726] team0: entered allmulticast mode [ 38.303223][ T3726] team_slave_0: entered allmulticast mode [ 38.309032][ T3726] team_slave_1: entered allmulticast mode [ 38.314512][ T3722] FAULT_INJECTION: forcing a failure. [ 38.314512][ T3722] name failslab, interval 1, probability 0, space 0, times 0 [ 38.327464][ T3722] CPU: 0 UID: 0 PID: 3722 Comm: syz.1.98 Not tainted 6.15.0-rc6-syzkaller-00047-ge9565e23cd89 #0 PREEMPT(voluntary) [ 38.327533][ T3722] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 38.327561][ T3722] Call Trace: [ 38.327569][ T3722] [ 38.327578][ T3722] __dump_stack+0x1d/0x30 [ 38.327603][ T3722] dump_stack_lvl+0xe8/0x140 [ 38.327626][ T3722] dump_stack+0x15/0x1b [ 38.327647][ T3722] should_fail_ex+0x265/0x280 [ 38.327722][ T3722] ? io_ring_ctx_alloc+0x38/0x650 [ 38.327745][ T3722] should_failslab+0x8c/0xb0 [ 38.327850][ T3722] __kmalloc_cache_noprof+0x4c/0x320 [ 38.327874][ T3722] ? avc_has_perm_noaudit+0x1b1/0x200 [ 38.328036][ T3722] io_ring_ctx_alloc+0x38/0x650 [ 38.328064][ T3722] ? avc_has_perm+0xd3/0x150 [ 38.328085][ T3722] ? io_uring_fill_params+0x270/0x300 [ 38.328121][ T3722] io_uring_create+0x10f/0x610 [ 38.328146][ T3722] __se_sys_io_uring_setup+0x1f7/0x210 [ 38.328219][ T3722] __x64_sys_io_uring_setup+0x31/0x40 [ 38.328253][ T3722] x64_sys_call+0x184b/0x2fb0 [ 38.328277][ T3722] do_syscall_64+0xd0/0x1a0 [ 38.328302][ T3722] ? clear_bhb_loop+0x40/0x90 [ 38.328450][ T3722] ? clear_bhb_loop+0x40/0x90 [ 38.328472][ T3722] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 38.328495][ T3722] RIP: 0033:0x7f31da46e969 [ 38.328511][ T3722] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 38.328530][ T3722] RSP: 002b:00007f31d8ad7038 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 38.328631][ T3722] RAX: ffffffffffffffda RBX: 00007f31da695fa0 RCX: 00007f31da46e969 [ 38.328645][ T3722] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000005732 [ 38.328659][ T3722] RBP: 00007f31d8ad7090 R08: 0000000000000000 R09: 0000000000000000 [ 38.328673][ T3722] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 38.328687][ T3722] R13: 0000000000000000 R14: 00007f31da695fa0 R15: 00007ffd38ab46e8 [ 38.328708][ T3722] [ 38.539716][ T3726] vlan2: entered allmulticast mode [ 38.544943][ T3726] batadv0: entered allmulticast mode [ 38.628821][ T3736] loop3: detected capacity change from 0 to 1024 [ 38.638662][ T3736] EXT4-fs: Ignoring removed bh option [ 38.707819][ T3736] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback. [ 38.855531][ T3753] tmpfs: Bad value for 'mpol' [ 38.863038][ T3753] loop2: detected capacity change from 0 to 164 [ 38.902148][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 38.946669][ T3753] process 'syz.2.108' launched '/dev/fd/5' with NULL argv: empty string added [ 38.961642][ T3753] syz.2.108: attempt to access beyond end of device [ 38.961642][ T3753] loop2: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 38.985403][ T3753] syz.2.108: attempt to access beyond end of device [ 38.985403][ T3753] loop2: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 39.063428][ T3753] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 39.089222][ T3771] loop0: detected capacity change from 0 to 164 [ 39.120591][ T3778] loop2: detected capacity change from 0 to 1024 [ 39.161851][ T3778] EXT4-fs: Ignoring removed bh option [ 39.172290][ T3784] FAULT_INJECTION: forcing a failure. [ 39.172290][ T3784] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 39.185442][ T3784] CPU: 0 UID: 0 PID: 3784 Comm: syz.3.119 Not tainted 6.15.0-rc6-syzkaller-00047-ge9565e23cd89 #0 PREEMPT(voluntary) [ 39.185473][ T3784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 39.185487][ T3784] Call Trace: [ 39.185494][ T3784] [ 39.185502][ T3784] __dump_stack+0x1d/0x30 [ 39.185521][ T3784] dump_stack_lvl+0xe8/0x140 [ 39.185539][ T3784] dump_stack+0x15/0x1b [ 39.185572][ T3784] should_fail_ex+0x265/0x280 [ 39.185718][ T3784] should_fail+0xb/0x20 [ 39.185754][ T3784] should_fail_usercopy+0x1a/0x20 [ 39.185778][ T3784] _copy_from_user+0x1c/0xb0 [ 39.185806][ T3784] ___sys_sendmsg+0xc1/0x1d0 [ 39.185841][ T3784] __x64_sys_sendmsg+0xd4/0x160 [ 39.185881][ T3784] x64_sys_call+0x2999/0x2fb0 [ 39.185915][ T3784] do_syscall_64+0xd0/0x1a0 [ 39.185998][ T3784] ? clear_bhb_loop+0x40/0x90 [ 39.186024][ T3784] ? clear_bhb_loop+0x40/0x90 [ 39.186044][ T3784] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 39.186132][ T3784] RIP: 0033:0x7f8c8f54e969 [ 39.186149][ T3784] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 39.186170][ T3784] RSP: 002b:00007f8c8dbb7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 39.186191][ T3784] RAX: ffffffffffffffda RBX: 00007f8c8f775fa0 RCX: 00007f8c8f54e969 [ 39.186206][ T3784] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 39.186235][ T3784] RBP: 00007f8c8dbb7090 R08: 0000000000000000 R09: 0000000000000000 [ 39.186250][ T3784] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 39.186263][ T3784] R13: 0000000000000000 R14: 00007f8c8f775fa0 R15: 00007fff1c267ba8 [ 39.186286][ T3784] [ 39.190093][ T3771] rock: directory entry would overflow storage [ 39.367469][ T3771] rock: sig=0x4f50, size=4, remaining=3 [ 39.373057][ T3771] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 39.381818][ T3791] netlink: 4 bytes leftover after parsing attributes in process `syz.1.120'. [ 39.394088][ T3778] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback. [ 39.491929][ T3323] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 39.571132][ T3791] bridge_slave_0: left allmulticast mode [ 39.577041][ T3791] bridge_slave_0: left promiscuous mode [ 39.582886][ T3791] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.625782][ T3791] bridge_slave_1: left allmulticast mode [ 39.631597][ T3791] bridge_slave_1: left promiscuous mode [ 39.637302][ T3791] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.735392][ T3791] : (slave bond_slave_0): Releasing backup interface [ 39.792657][ T3791] : (slave bond_slave_1): Releasing backup interface [ 39.813257][ T3811] syz.0.126 (3811) used greatest stack depth: 9456 bytes left [ 39.888944][ T3791] team0: Port device team_slave_0 removed [ 39.916159][ T3791] team0: Port device team_slave_1 removed [ 39.934061][ T3791] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 39.941638][ T3791] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 39.988996][ T3791] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 39.996479][ T3791] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 40.012999][ T3817] FAULT_INJECTION: forcing a failure. [ 40.012999][ T3817] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 40.026164][ T3817] CPU: 0 UID: 0 PID: 3817 Comm: syz.2.127 Not tainted 6.15.0-rc6-syzkaller-00047-ge9565e23cd89 #0 PREEMPT(voluntary) [ 40.026272][ T3817] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 40.026284][ T3817] Call Trace: [ 40.026289][ T3817] [ 40.026296][ T3817] __dump_stack+0x1d/0x30 [ 40.026316][ T3817] dump_stack_lvl+0xe8/0x140 [ 40.026459][ T3817] dump_stack+0x15/0x1b [ 40.026478][ T3817] should_fail_ex+0x265/0x280 [ 40.026542][ T3817] should_fail+0xb/0x20 [ 40.026629][ T3817] should_fail_usercopy+0x1a/0x20 [ 40.026648][ T3817] _copy_from_user+0x1c/0xb0 [ 40.026670][ T3817] __copy_msghdr+0x244/0x300 [ 40.026761][ T3817] ___sys_sendmsg+0x109/0x1d0 [ 40.026803][ T3817] __x64_sys_sendmsg+0xd4/0x160 [ 40.026835][ T3817] x64_sys_call+0x2999/0x2fb0 [ 40.026912][ T3817] do_syscall_64+0xd0/0x1a0 [ 40.026986][ T3817] ? clear_bhb_loop+0x40/0x90 [ 40.027014][ T3817] ? clear_bhb_loop+0x40/0x90 [ 40.027041][ T3817] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 40.027067][ T3817] RIP: 0033:0x7fb910d6e969 [ 40.027086][ T3817] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 40.027122][ T3817] RSP: 002b:00007fb90f3d7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 40.027145][ T3817] RAX: ffffffffffffffda RBX: 00007fb910f95fa0 RCX: 00007fb910d6e969 [ 40.027160][ T3817] RDX: 0000000000000000 RSI: 0000200000000380 RDI: 0000000000000005 [ 40.027175][ T3817] RBP: 00007fb90f3d7090 R08: 0000000000000000 R09: 0000000000000000 [ 40.027187][ T3817] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 40.027198][ T3817] R13: 0000000000000000 R14: 00007fb910f95fa0 R15: 00007ffd584c1438 [ 40.027217][ T3817] [ 40.062362][ T3812] pim6reg: entered allmulticast mode [ 40.116086][ T3819] sock: sock_timestamping_bind_phc: sock not bind to device [ 40.142807][ T3796] team0: entered allmulticast mode [ 40.225978][ T3796] team_slave_0: entered allmulticast mode [ 40.231751][ T3796] team_slave_1: entered allmulticast mode [ 40.302601][ T3821] loop0: detected capacity change from 0 to 128 [ 40.311829][ T3821] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 40.345072][ T3821] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 40.415181][ T3815] vlan2: entered allmulticast mode [ 40.420364][ T3815] batadv0: entered allmulticast mode [ 40.485792][ T51] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 40.576801][ T3834] loop3: detected capacity change from 0 to 1024 [ 40.620524][ T3834] EXT4-fs: Ignoring removed bh option [ 40.631323][ T3823] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 40.650528][ T3823] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 40.804976][ T3843] loop0: detected capacity change from 0 to 512 [ 40.857767][ T3834] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback. [ 40.890580][ T3843] EXT4-fs error (device loop0): ext4_xattr_inode_iget:433: comm syz.0.136: Parent and EA inode have the same ino 15 [ 40.961983][ T3843] EXT4-fs (loop0): 1 orphan inode deleted [ 40.970338][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 40.980547][ T3843] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.066419][ T3854] 9pnet: Could not find request transport: rš ˜ [ 41.092678][ T3856] loop2: detected capacity change from 0 to 1024 [ 41.093217][ T3856] EXT4-fs: Ignoring removed mblk_io_submit option [ 41.093253][ T3856] EXT4-fs: Ignoring removed nobh option [ 41.093315][ T3856] EXT4-fs: Ignoring removed bh option [ 41.093511][ T29] kauditd_printk_skb: 111 callbacks suppressed [ 41.093525][ T29] audit: type=1400 audit(1747166996.003:443): avc: denied { create } for pid=3849 comm="syz.2.137" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 41.115135][ T29] audit: type=1326 audit(1747166996.033:444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3857 comm="syz.4.141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb26214e969 code=0x7ffc0000 [ 41.116600][ T29] audit: type=1326 audit(1747166996.033:445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3857 comm="syz.4.141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=88 compat=0 ip=0x7fb26214e969 code=0x7ffc0000 [ 41.116852][ T29] audit: type=1326 audit(1747166996.033:446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3857 comm="syz.4.141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb26214e969 code=0x7ffc0000 [ 41.117053][ T29] audit: type=1326 audit(1747166996.033:447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3857 comm="syz.4.141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=89 compat=0 ip=0x7fb26214e969 code=0x7ffc0000 [ 41.117192][ T29] audit: type=1326 audit(1747166996.033:448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3857 comm="syz.4.141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb26214e969 code=0x7ffc0000 [ 41.143877][ T29] audit: type=1400 audit(1747166996.063:449): avc: denied { ioctl } for pid=3849 comm="syz.2.137" path="socket:[5279]" dev="sockfs" ino=5279 ioctlcmd=0x545c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 41.358898][ T3864] netlink: 24 bytes leftover after parsing attributes in process `syz.4.142'. [ 41.374734][ T29] audit: type=1400 audit(1747166996.293:450): avc: denied { write } for pid=3861 comm="syz.4.142" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 41.394338][ T29] audit: type=1400 audit(1747166996.293:451): avc: denied { ioctl } for pid=3861 comm="syz.4.142" path="socket:[6413]" dev="sockfs" ino=6413 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 41.418755][ T29] audit: type=1400 audit(1747166996.293:452): avc: denied { bind } for pid=3861 comm="syz.4.142" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 41.459272][ T3856] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.479238][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.705656][ T3323] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.735550][ T3879] vlan2: entered allmulticast mode [ 41.781408][ T3883] loop1: detected capacity change from 0 to 1024 [ 41.811764][ T3883] EXT4-fs: Ignoring removed bh option [ 41.831485][ T3876] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 41.841424][ T3876] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 41.857985][ T3883] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback. [ 41.950505][ T3321] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 42.012347][ T3881] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 42.024784][ T3881] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 42.033087][ T3890] loop0: detected capacity change from 0 to 128 [ 42.119441][ T3899] batman_adv: batadv0: Adding interface: dummy0 [ 42.125819][ T3899] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 42.151137][ T3899] batman_adv: batadv0: Interface activated: dummy0 [ 42.160670][ T3899] batadv0: mtu less than device minimum [ 42.166774][ T3899] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 42.177796][ T3899] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 42.188730][ T3899] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 42.199462][ T3899] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 42.210227][ T3899] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 42.221179][ T3899] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 42.231971][ T3899] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 42.242815][ T3899] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 42.253501][ T3899] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 42.505904][ T3908] 9pnet: Could not find request transport: rš ˜ [ 42.529093][ T3910] loop3: detected capacity change from 0 to 1024 [ 42.536471][ T3910] EXT4-fs: Ignoring removed mblk_io_submit option [ 42.551525][ T3910] EXT4-fs: Ignoring removed nobh option [ 42.557681][ T3910] EXT4-fs: Ignoring removed bh option [ 42.585400][ T3910] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.663547][ T3918] loop0: detected capacity change from 0 to 1024 [ 42.670531][ T3918] EXT4-fs: Ignoring removed bh option [ 42.688127][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.721630][ T3918] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback. [ 42.725496][ T3922] syzkaller1: entered promiscuous mode [ 42.739609][ T3922] syzkaller1: entered allmulticast mode [ 42.754123][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 42.809448][ T3930] FAULT_INJECTION: forcing a failure. [ 42.809448][ T3930] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 42.822591][ T3930] CPU: 1 UID: 0 PID: 3930 Comm: syz.3.166 Not tainted 6.15.0-rc6-syzkaller-00047-ge9565e23cd89 #0 PREEMPT(voluntary) [ 42.822623][ T3930] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 42.822716][ T3930] Call Trace: [ 42.822724][ T3930] [ 42.822732][ T3930] __dump_stack+0x1d/0x30 [ 42.822756][ T3930] dump_stack_lvl+0xe8/0x140 [ 42.822779][ T3930] dump_stack+0x15/0x1b [ 42.822797][ T3930] should_fail_ex+0x265/0x280 [ 42.822834][ T3930] should_fail+0xb/0x20 [ 42.822938][ T3930] should_fail_usercopy+0x1a/0x20 [ 42.822960][ T3930] _copy_to_user+0x20/0xa0 [ 42.822987][ T3930] simple_read_from_buffer+0xb5/0x130 [ 42.823074][ T3930] proc_fail_nth_read+0x100/0x140 [ 42.823104][ T3930] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 42.823212][ T3930] vfs_read+0x1a0/0x6f0 [ 42.823247][ T3930] ? __rcu_read_unlock+0x4f/0x70 [ 42.823274][ T3930] ? __fget_files+0x184/0x1c0 [ 42.823398][ T3930] ksys_read+0xda/0x1a0 [ 42.823510][ T3930] __x64_sys_read+0x40/0x50 [ 42.823540][ T3930] x64_sys_call+0x2d77/0x2fb0 [ 42.823567][ T3930] do_syscall_64+0xd0/0x1a0 [ 42.823651][ T3930] ? clear_bhb_loop+0x40/0x90 [ 42.823674][ T3930] ? clear_bhb_loop+0x40/0x90 [ 42.823700][ T3930] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 42.823722][ T3930] RIP: 0033:0x7f8c8f54d37c [ 42.823735][ T3930] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 42.823810][ T3930] RSP: 002b:00007f8c8dbb7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 42.823833][ T3930] RAX: ffffffffffffffda RBX: 00007f8c8f775fa0 RCX: 00007f8c8f54d37c [ 42.823848][ T3930] RDX: 000000000000000f RSI: 00007f8c8dbb70a0 RDI: 0000000000000003 [ 42.823863][ T3930] RBP: 00007f8c8dbb7090 R08: 0000000000000000 R09: 0000000000000000 [ 42.823878][ T3930] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 42.823890][ T3930] R13: 0000000000000000 R14: 00007f8c8f775fa0 R15: 00007fff1c267ba8 [ 42.823905][ T3930] [ 43.042407][ T3935] loop1: detected capacity change from 0 to 2048 [ 43.064830][ T3935] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.081245][ T3935] ext4 filesystem being mounted at /33/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 43.100805][ T3935] FAULT_INJECTION: forcing a failure. [ 43.100805][ T3935] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 43.114024][ T3935] CPU: 1 UID: 0 PID: 3935 Comm: syz.1.167 Not tainted 6.15.0-rc6-syzkaller-00047-ge9565e23cd89 #0 PREEMPT(voluntary) [ 43.114049][ T3935] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 43.114061][ T3935] Call Trace: [ 43.114067][ T3935] [ 43.114073][ T3935] __dump_stack+0x1d/0x30 [ 43.114096][ T3935] dump_stack_lvl+0xe8/0x140 [ 43.114118][ T3935] dump_stack+0x15/0x1b [ 43.114206][ T3935] should_fail_ex+0x265/0x280 [ 43.114241][ T3935] should_fail+0xb/0x20 [ 43.114268][ T3935] should_fail_usercopy+0x1a/0x20 [ 43.114290][ T3935] _copy_from_user+0x1c/0xb0 [ 43.114314][ T3935] memdup_user+0x5e/0xd0 [ 43.114348][ T3935] strndup_user+0x68/0xb0 [ 43.114365][ T3935] __se_sys_mount+0x4d/0x2e0 [ 43.114396][ T3935] ? do_mkdirat+0x3ac/0x3f0 [ 43.114426][ T3935] __x64_sys_mount+0x67/0x80 [ 43.114477][ T3935] x64_sys_call+0xd36/0x2fb0 [ 43.114501][ T3935] do_syscall_64+0xd0/0x1a0 [ 43.114535][ T3935] ? clear_bhb_loop+0x40/0x90 [ 43.114580][ T3935] ? clear_bhb_loop+0x40/0x90 [ 43.114602][ T3935] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 43.114626][ T3935] RIP: 0033:0x7f31da47010a [ 43.114642][ T3935] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 43.114702][ T3935] RSP: 002b:00007f31d8ad6e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 43.114721][ T3935] RAX: ffffffffffffffda RBX: 00007f31d8ad6ef0 RCX: 00007f31da47010a [ 43.114755][ T3935] RDX: 0000200000000f40 RSI: 0000200000000f00 RDI: 0000000000000000 [ 43.114770][ T3935] RBP: 0000200000000f40 R08: 00007f31d8ad6ef0 R09: 0000000001a4a438 [ 43.114785][ T3935] R10: 0000000001a4a438 R11: 0000000000000246 R12: 0000200000000f00 [ 43.114799][ T3935] R13: 00007f31d8ad6eb0 R14: 0000000000000000 R15: 00002000000008c0 [ 43.114821][ T3935] [ 43.311493][ T3937] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 43.314725][ T3946] netlink: 4 bytes leftover after parsing attributes in process `syz.2.171'. [ 43.340889][ T3321] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.344965][ T3946] bridge_slave_0: left allmulticast mode [ 43.350146][ T3937] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 43.355544][ T3946] bridge_slave_0: left promiscuous mode [ 43.368933][ T3946] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.383361][ T3946] bridge_slave_1: left allmulticast mode [ 43.389106][ T3946] bridge_slave_1: left promiscuous mode [ 43.395018][ T3946] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.422675][ T3946] bond0: (slave bond_slave_0): Releasing backup interface [ 43.433702][ T3946] bond0: (slave bond_slave_1): Releasing backup interface [ 43.446250][ T3946] team0: Port device team_slave_0 removed [ 43.455211][ T3946] team0: Port device team_slave_1 removed [ 43.462435][ T3946] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 43.469981][ T3946] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 43.478719][ T3946] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 43.486323][ T3946] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 43.582584][ T3962] loop3: detected capacity change from 0 to 1024 [ 43.591768][ T3962] EXT4-fs: Ignoring removed nomblk_io_submit option [ 43.604143][ T3962] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.627259][ T3962] FAULT_INJECTION: forcing a failure. [ 43.627259][ T3962] name failslab, interval 1, probability 0, space 0, times 0 [ 43.639977][ T3962] CPU: 1 UID: 0 PID: 3962 Comm: syz.3.176 Not tainted 6.15.0-rc6-syzkaller-00047-ge9565e23cd89 #0 PREEMPT(voluntary) [ 43.640005][ T3962] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 43.640021][ T3962] Call Trace: [ 43.640029][ T3962] [ 43.640038][ T3962] __dump_stack+0x1d/0x30 [ 43.640064][ T3962] dump_stack_lvl+0xe8/0x140 [ 43.640088][ T3962] dump_stack+0x15/0x1b [ 43.640108][ T3962] should_fail_ex+0x265/0x280 [ 43.640150][ T3962] ? alloc_pipe_info+0xae/0x350 [ 43.640222][ T3962] should_failslab+0x8c/0xb0 [ 43.640259][ T3962] __kmalloc_cache_noprof+0x4c/0x320 [ 43.640365][ T3962] alloc_pipe_info+0xae/0x350 [ 43.640399][ T3962] splice_direct_to_actor+0x592/0x680 [ 43.640434][ T3962] ? kstrtouint_from_user+0x9f/0xf0 [ 43.640471][ T3962] ? __pfx_direct_splice_actor+0x10/0x10 [ 43.640567][ T3962] ? __rcu_read_unlock+0x4f/0x70 [ 43.640590][ T3962] ? get_pid_task+0x96/0xd0 [ 43.640609][ T3962] ? avc_policy_seqno+0x15/0x30 [ 43.640633][ T3962] do_splice_direct+0xda/0x150 [ 43.640717][ T3962] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 43.640772][ T3962] do_sendfile+0x380/0x640 [ 43.640798][ T3962] __x64_sys_sendfile64+0x105/0x150 [ 43.640838][ T3962] x64_sys_call+0xb39/0x2fb0 [ 43.640859][ T3962] do_syscall_64+0xd0/0x1a0 [ 43.640884][ T3962] ? clear_bhb_loop+0x40/0x90 [ 43.641004][ T3962] ? clear_bhb_loop+0x40/0x90 [ 43.641030][ T3962] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 43.641109][ T3962] RIP: 0033:0x7f8c8f54e969 [ 43.641127][ T3962] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 43.641185][ T3962] RSP: 002b:00007f8c8dbb7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 43.641207][ T3962] RAX: ffffffffffffffda RBX: 00007f8c8f775fa0 RCX: 00007f8c8f54e969 [ 43.641223][ T3962] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000005 [ 43.641238][ T3962] RBP: 00007f8c8dbb7090 R08: 0000000000000000 R09: 0000000000000000 [ 43.641249][ T3962] R10: 0000000000fffe80 R11: 0000000000000246 R12: 0000000000000001 [ 43.641260][ T3962] R13: 0000000000000000 R14: 00007f8c8f775fa0 R15: 00007fff1c267ba8 [ 43.641278][ T3962] [ 43.867628][ T3951] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 43.876403][ T3951] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 43.886935][ T3967] loop2: detected capacity change from 0 to 1024 [ 43.894724][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.894842][ T3969] loop0: detected capacity change from 0 to 1024 [ 43.912752][ T3969] EXT4-fs: Ignoring removed nomblk_io_submit option [ 43.955212][ T3969] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.968552][ T3967] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.988064][ T3979] FAULT_INJECTION: forcing a failure. [ 43.988064][ T3979] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 44.001208][ T3979] CPU: 0 UID: 0 PID: 3979 Comm: syz.3.181 Not tainted 6.15.0-rc6-syzkaller-00047-ge9565e23cd89 #0 PREEMPT(voluntary) [ 44.001241][ T3979] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 44.001256][ T3979] Call Trace: [ 44.001282][ T3979] [ 44.001290][ T3979] __dump_stack+0x1d/0x30 [ 44.001401][ T3979] dump_stack_lvl+0xe8/0x140 [ 44.001421][ T3979] dump_stack+0x15/0x1b [ 44.001438][ T3979] should_fail_ex+0x265/0x280 [ 44.001502][ T3979] should_fail+0xb/0x20 [ 44.001532][ T3979] should_fail_usercopy+0x1a/0x20 [ 44.001597][ T3979] strncpy_from_user+0x25/0x230 [ 44.001627][ T3979] ? kmem_cache_alloc_noprof+0x186/0x310 [ 44.001711][ T3979] ? getname_flags+0x80/0x3b0 [ 44.001743][ T3979] getname_flags+0xae/0x3b0 [ 44.001797][ T3979] __se_sys_statx+0x5e/0x1b0 [ 44.001817][ T3979] ? __rcu_read_unlock+0x4f/0x70 [ 44.001824][ T3967] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, [ 44.001844][ T3979] ? bpf_trace_run2+0x124/0x1c0 [ 44.001876][ T3979] ? __bpf_trace_sys_enter+0x10/0x30 [ 44.001975][ T3979] ? trace_sys_enter+0xd0/0x110 [ 44.002006][ T3979] __x64_sys_statx+0x67/0x80 [ 44.002031][ T3979] x64_sys_call+0x27cb/0x2fb0 [ 44.002127][ T3979] do_syscall_64+0xd0/0x1a0 [ 44.002159][ T3979] ? clear_bhb_loop+0x40/0x90 [ 44.002187][ T3979] ? clear_bhb_loop+0x40/0x90 [ 44.002214][ T3979] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 44.002292][ T3979] RIP: 0033:0x7f8c8f54e969 [ 44.002399][ T3979] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 44.002422][ T3979] RSP: 002b:00007f8c8dbb7038 EFLAGS: 00000246 ORIG_RAX: 000000000000014c [ 44.002446][ T3979] RAX: ffffffffffffffda RBX: 00007f8c8f775fa0 RCX: 00007f8c8f54e969 [ 44.002461][ T3979] RDX: 0000000000004000 RSI: 0000000000000000 RDI: ffffffffffffffff [ 44.002523][ T3979] RBP: 00007f8c8dbb7090 R08: 0000000000000000 R09: 0000000000000000 [ 44.002539][ T3979] R10: 00000000000007ff R11: 0000000000000246 R12: 0000000000000001 [ 44.002554][ T3979] R13: 0000000000000000 R14: 00007f8c8f775fa0 R15: 00007fff1c267ba8 [ 44.002578][ T3979] [ 44.104474][ T3982] loop3: detected capacity change from 0 to 2048 [ 44.105903][ T3967] block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 44.134232][ T3982] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.140834][ T3967] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 44.196878][ T3982] ext4 filesystem being mounted at /45/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 44.269352][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.270151][ T3981] FAULT_INJECTION: forcing a failure. [ 44.270151][ T3981] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 44.291558][ T3981] CPU: 0 UID: 0 PID: 3981 Comm: syz.3.182 Not tainted 6.15.0-rc6-syzkaller-00047-ge9565e23cd89 #0 PREEMPT(voluntary) [ 44.291591][ T3981] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 44.291676][ T3981] Call Trace: [ 44.291683][ T3981] [ 44.291692][ T3981] __dump_stack+0x1d/0x30 [ 44.291718][ T3981] dump_stack_lvl+0xe8/0x140 [ 44.291742][ T3981] dump_stack+0x15/0x1b [ 44.291757][ T3981] should_fail_ex+0x265/0x280 [ 44.291891][ T3981] should_fail+0xb/0x20 [ 44.291968][ T3981] should_fail_usercopy+0x1a/0x20 [ 44.291992][ T3981] _copy_from_user+0x1c/0xb0 [ 44.292078][ T3981] memdup_user+0x5e/0xd0 [ 44.292100][ T3981] strndup_user+0x68/0xb0 [ 44.292149][ T3981] __se_sys_mount+0x4d/0x2e0 [ 44.292183][ T3981] ? do_mkdirat+0x3ac/0x3f0 [ 44.292214][ T3981] __x64_sys_mount+0x67/0x80 [ 44.292243][ T3981] x64_sys_call+0xd36/0x2fb0 [ 44.292271][ T3981] do_syscall_64+0xd0/0x1a0 [ 44.292294][ T3981] ? clear_bhb_loop+0x40/0x90 [ 44.292361][ T3981] ? clear_bhb_loop+0x40/0x90 [ 44.292388][ T3981] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 44.292425][ T3981] RIP: 0033:0x7f8c8f55010a [ 44.292443][ T3981] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 44.292478][ T3981] RSP: 002b:00007f8c8dbb6e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 44.292500][ T3981] RAX: ffffffffffffffda RBX: 00007f8c8dbb6ef0 RCX: 00007f8c8f55010a [ 44.292515][ T3981] RDX: 0000200000000f40 RSI: 0000200000000f00 RDI: 0000000000000000 [ 44.292526][ T3981] RBP: 0000200000000f40 R08: 00007f8c8dbb6ef0 R09: 0000000001a4a438 [ 44.292536][ T3981] R10: 0000000001a4a438 R11: 0000000000000246 R12: 0000200000000f00 [ 44.292613][ T3981] R13: 00007f8c8dbb6eb0 R14: 0000000000000000 R15: 00002000000008c0 [ 44.292636][ T3981] [ 44.296543][ T3967] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 483 with error 28 [ 44.489271][ T3967] EXT4-fs (loop2): This should not happen!! Data will be lost [ 44.489271][ T3967] [ 44.498964][ T3967] EXT4-fs (loop2): Total free blocks count 0 [ 44.505008][ T3967] EXT4-fs (loop2): Free/Dirty block details [ 44.510958][ T3967] EXT4-fs (loop2): free_blocks=20480 [ 44.516303][ T3967] EXT4-fs (loop2): dirty_blocks=496 [ 44.521526][ T3967] EXT4-fs (loop2): Block reservation details [ 44.527609][ T3967] EXT4-fs (loop2): i_reserved_data_blocks=31 [ 44.556422][ T37] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 44.584826][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.598251][ T3998] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 44.612930][ T3997] loop4: detected capacity change from 0 to 1024 [ 44.622991][ T3997] EXT4-fs: Ignoring removed bh option [ 44.670621][ T3997] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback. [ 44.724727][ T4018] FAULT_INJECTION: forcing a failure. [ 44.724727][ T4018] name failslab, interval 1, probability 0, space 0, times 0 [ 44.737453][ T4018] CPU: 1 UID: 0 PID: 4018 Comm: syz.3.197 Not tainted 6.15.0-rc6-syzkaller-00047-ge9565e23cd89 #0 PREEMPT(voluntary) [ 44.737485][ T4018] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 44.737500][ T4018] Call Trace: [ 44.737507][ T4018] [ 44.737545][ T4018] __dump_stack+0x1d/0x30 [ 44.737569][ T4018] dump_stack_lvl+0xe8/0x140 [ 44.737592][ T4018] dump_stack+0x15/0x1b [ 44.737613][ T4018] should_fail_ex+0x265/0x280 [ 44.737681][ T4018] should_failslab+0x8c/0xb0 [ 44.737718][ T4018] kmem_cache_alloc_noprof+0x50/0x310 [ 44.737768][ T4018] ? audit_log_start+0x365/0x6c0 [ 44.737805][ T4018] audit_log_start+0x365/0x6c0 [ 44.737855][ T4018] audit_seccomp+0x48/0x100 [ 44.737923][ T4018] ? __seccomp_filter+0x68c/0x10d0 [ 44.737947][ T4018] __seccomp_filter+0x69d/0x10d0 [ 44.737973][ T4018] ? update_curr+0x16e/0x320 [ 44.738005][ T4018] ? pick_task_fair+0xd0/0x130 [ 44.738025][ T4018] ? pick_next_task_fair+0x20/0x2b0 [ 44.738097][ T4018] __secure_computing+0x82/0x150 [ 44.738124][ T4018] syscall_trace_enter+0xcf/0x1e0 [ 44.738154][ T4018] do_syscall_64+0xaa/0x1a0 [ 44.738184][ T4018] ? clear_bhb_loop+0x40/0x90 [ 44.738211][ T4018] ? clear_bhb_loop+0x40/0x90 [ 44.738237][ T4018] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 44.738262][ T4018] RIP: 0033:0x7f8c8f54d37c [ 44.738359][ T4018] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 44.738379][ T4018] RSP: 002b:00007f8c8dbb7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 44.738401][ T4018] RAX: ffffffffffffffda RBX: 00007f8c8f775fa0 RCX: 00007f8c8f54d37c [ 44.738416][ T4018] RDX: 000000000000000f RSI: 00007f8c8dbb70a0 RDI: 0000000000000003 [ 44.738477][ T4018] RBP: 00007f8c8dbb7090 R08: 0000000000000000 R09: 0000000000000000 [ 44.738493][ T4018] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 44.738508][ T4018] R13: 0000000000000000 R14: 00007f8c8f775fa0 R15: 00007fff1c267ba8 [ 44.738531][ T4018] [ 44.740701][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 44.907658][ T4012] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 44.942819][ T4022] FAULT_INJECTION: forcing a failure. [ 44.942819][ T4022] name failslab, interval 1, probability 0, space 0, times 0 [ 44.952247][ T4012] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 44.959756][ T4022] CPU: 0 UID: 0 PID: 4022 Comm: syz.3.200 Not tainted 6.15.0-rc6-syzkaller-00047-ge9565e23cd89 #0 PREEMPT(voluntary) [ 44.959789][ T4022] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 44.959842][ T4022] Call Trace: [ 44.959850][ T4022] [ 44.959859][ T4022] __dump_stack+0x1d/0x30 [ 44.959884][ T4022] dump_stack_lvl+0xe8/0x140 [ 44.959924][ T4022] dump_stack+0x15/0x1b [ 44.959944][ T4022] should_fail_ex+0x265/0x280 [ 44.960000][ T4022] should_failslab+0x8c/0xb0 [ 44.960037][ T4022] kmem_cache_alloc_node_noprof+0x57/0x320 [ 44.960071][ T4022] ? __alloc_skb+0x101/0x320 [ 44.960112][ T4022] ? mm_account_pinned_pages+0x47/0x230 [ 44.960140][ T4022] __alloc_skb+0x101/0x320 [ 44.960177][ T4022] ? ip_generic_getfrag+0x135/0x1b0 [ 44.960234][ T4022] __ip_append_data+0x19fb/0x2490 [ 44.960385][ T4022] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 44.960423][ T4022] ip_append_data+0xd6/0x130 [ 44.960452][ T4022] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 44.960493][ T4022] udp_sendmsg+0x36e/0x13a0 [ 44.960518][ T4022] ? mntput+0x4b/0x80 [ 44.960606][ T4022] ? __rcu_read_unlock+0x4f/0x70 [ 44.960634][ T4022] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 44.960664][ T4022] ? avc_has_perm+0xd3/0x150 [ 44.960779][ T4022] ? __pfx_udp_sendmsg+0x10/0x10 [ 44.960803][ T4022] inet_sendmsg+0xac/0xd0 [ 44.960838][ T4022] __sock_sendmsg+0x102/0x180 [ 44.960867][ T4022] __sys_sendto+0x268/0x330 [ 44.961027][ T4022] __x64_sys_sendto+0x76/0x90 [ 44.961075][ T4022] x64_sys_call+0x2eb6/0x2fb0 [ 44.961103][ T4022] do_syscall_64+0xd0/0x1a0 [ 44.961180][ T4022] ? clear_bhb_loop+0x40/0x90 [ 44.961259][ T4022] ? clear_bhb_loop+0x40/0x90 [ 44.961369][ T4022] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 44.961396][ T4022] RIP: 0033:0x7f8c8f54e969 [ 44.961416][ T4022] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 44.961436][ T4022] RSP: 002b:00007f8c8dbb7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 44.961476][ T4022] RAX: ffffffffffffffda RBX: 00007f8c8f775fa0 RCX: 00007f8c8f54e969 [ 44.961491][ T4022] RDX: 000000000000fdbe RSI: 0000200000000100 RDI: 0000000000000006 [ 44.961504][ T4022] RBP: 00007f8c8dbb7090 R08: 0000000000000000 R09: 0000000011000a00 [ 44.961518][ T4022] R10: 0000000004004084 R11: 0000000000000246 R12: 0000000000000001 [ 44.961532][ T4022] R13: 0000000000000000 R14: 00007f8c8f775fa0 R15: 00007fff1c267ba8 [ 44.961553][ T4022] [ 44.963151][ T4014] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 45.235701][ T4014] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 45.278248][ T4028] bridge0: port 3(macvlan2) entered blocking state [ 45.285143][ T4028] bridge0: port 3(macvlan2) entered disabled state [ 45.291928][ T4028] macvlan2: entered allmulticast mode [ 45.299977][ T4028] macvlan2: left allmulticast mode [ 45.384922][ T4045] loop3: detected capacity change from 0 to 1024 [ 45.391869][ T4045] EXT4-fs: Ignoring removed bh option [ 45.410462][ T4049] loop4: detected capacity change from 0 to 512 [ 45.418646][ T4045] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback. [ 45.434280][ T4049] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -13 [ 45.442586][ T4049] EXT4-fs warning (device loop4): ext4_block_to_path:107: block 3279945729 > max in inode 13 [ 45.454203][ T4049] EXT4-fs warning (device loop4): ext4_block_to_path:107: block 3279945730 > max in inode 13 [ 45.466129][ T4049] EXT4-fs (loop4): 1 truncate cleaned up [ 45.472296][ T4049] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.487788][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 45.499141][ T4049] xt_TPROXY: Can be used only with -p tcp or -p udp [ 45.507125][ T4049] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 45.520875][ T4049] netlink: 'syz.4.210': attribute type 298 has an invalid length. [ 45.521496][ T4056] loop3: detected capacity change from 0 to 256 [ 45.552575][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.578894][ T4062] SELinux: Context system_u:object_r:mouse_device_t:s0 is not valid (left unmapped). [ 45.613008][ T4068] netlink: 64 bytes leftover after parsing attributes in process `syz.1.218'. [ 45.617755][ T4062] netlink: 'syz.4.215': attribute type 1 has an invalid length. [ 45.636923][ T4062] 8021q: adding VLAN 0 to HW filter on device bond1 [ 45.705365][ T4079] loop4: detected capacity change from 0 to 1024 [ 45.712123][ T4079] EXT4-fs: Ignoring removed bh option [ 45.724101][ T4079] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback. [ 45.759244][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 45.767138][ T4088] loop1: detected capacity change from 0 to 512 [ 45.775198][ T4088] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 45.788342][ T4088] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 45.809374][ T4088] EXT4-fs (loop1): 1 truncate cleaned up [ 45.821407][ T4088] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.846961][ T4092] netlink: 'syz.4.226': attribute type 10 has an invalid length. [ 45.860337][ T4092] batman_adv: batadv0: Adding interface: team0 [ 45.866555][ T4092] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.891896][ T4092] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 45.951497][ T3321] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.985586][ T4111] FAULT_INJECTION: forcing a failure. [ 45.985586][ T4111] name failslab, interval 1, probability 0, space 0, times 0 [ 45.998457][ T4111] CPU: 1 UID: 0 PID: 4111 Comm: syz.1.231 Not tainted 6.15.0-rc6-syzkaller-00047-ge9565e23cd89 #0 PREEMPT(voluntary) [ 45.998490][ T4111] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 45.998504][ T4111] Call Trace: [ 45.998510][ T4111] [ 45.998518][ T4111] __dump_stack+0x1d/0x30 [ 45.998615][ T4111] dump_stack_lvl+0xe8/0x140 [ 45.998641][ T4111] dump_stack+0x15/0x1b [ 45.998661][ T4111] should_fail_ex+0x265/0x280 [ 45.998738][ T4111] should_failslab+0x8c/0xb0 [ 45.998776][ T4111] kmem_cache_alloc_noprof+0x50/0x310 [ 45.998800][ T4111] ? skb_clone+0x151/0x1f0 [ 45.998828][ T4111] skb_clone+0x151/0x1f0 [ 45.998853][ T4111] nfnetlink_rcv+0x305/0x1690 [ 45.998913][ T4111] ? __kfree_skb+0x109/0x150 [ 45.998984][ T4111] ? nlmon_xmit+0x4f/0x60 [ 45.999015][ T4111] ? nlmon_xmit+0x4f/0x60 [ 45.999047][ T4111] ? dev_hard_start_xmit+0x39e/0x3d0 [ 45.999067][ T4111] ? __dev_queue_xmit+0x11c0/0x1fb0 [ 45.999105][ T4111] ? __dev_queue_xmit+0x182/0x1fb0 [ 45.999129][ T4111] ? __rcu_read_unlock+0x4f/0x70 [ 45.999158][ T4111] ? ref_tracker_free+0x37d/0x3e0 [ 45.999270][ T4111] netlink_unicast+0x5a1/0x670 [ 45.999307][ T4111] netlink_sendmsg+0x58b/0x6b0 [ 45.999332][ T4111] ? __pfx_netlink_sendmsg+0x10/0x10 [ 45.999438][ T4111] __sock_sendmsg+0x142/0x180 [ 45.999472][ T4111] ____sys_sendmsg+0x31e/0x4e0 [ 45.999501][ T4111] ___sys_sendmsg+0x17b/0x1d0 [ 45.999545][ T4111] __x64_sys_sendmsg+0xd4/0x160 [ 45.999570][ T4111] x64_sys_call+0x2999/0x2fb0 [ 45.999589][ T4111] do_syscall_64+0xd0/0x1a0 [ 45.999616][ T4111] ? clear_bhb_loop+0x40/0x90 [ 45.999696][ T4111] ? clear_bhb_loop+0x40/0x90 [ 45.999723][ T4111] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 45.999748][ T4111] RIP: 0033:0x7f31da46e969 [ 45.999822][ T4111] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 45.999838][ T4111] RSP: 002b:00007f31d8ad7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 45.999921][ T4111] RAX: ffffffffffffffda RBX: 00007f31da695fa0 RCX: 00007f31da46e969 [ 45.999935][ T4111] RDX: 0000000020050800 RSI: 00002000000000c0 RDI: 0000000000000003 [ 45.999948][ T4111] RBP: 00007f31d8ad7090 R08: 0000000000000000 R09: 0000000000000000 [ 45.999959][ T4111] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 45.999969][ T4111] R13: 0000000000000000 R14: 00007f31da695fa0 R15: 00007ffd38ab46e8 [ 45.999990][ T4111] [ 46.011335][ T4110] netlink: 'syz.0.235': attribute type 10 has an invalid length. [ 46.032511][ T4113] FAULT_INJECTION: forcing a failure. [ 46.032511][ T4113] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 46.043618][ T4110] batman_adv: batadv0: Adding interface: team0 [ 46.044655][ T4113] CPU: 1 UID: 0 PID: 4113 Comm: syz.1.236 Not tainted 6.15.0-rc6-syzkaller-00047-ge9565e23cd89 #0 PREEMPT(voluntary) [ 46.044730][ T4113] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 46.044791][ T4113] Call Trace: [ 46.044799][ T4113] [ 46.044807][ T4113] __dump_stack+0x1d/0x30 [ 46.044835][ T4113] dump_stack_lvl+0xe8/0x140 [ 46.044860][ T4113] dump_stack+0x15/0x1b [ 46.044882][ T4113] should_fail_ex+0x265/0x280 [ 46.044942][ T4113] should_fail+0xb/0x20 [ 46.044980][ T4113] should_fail_usercopy+0x1a/0x20 [ 46.045013][ T4113] _copy_to_user+0x20/0xa0 [ 46.045043][ T4113] simple_read_from_buffer+0xb5/0x130 [ 46.045098][ T4113] proc_fail_nth_read+0x100/0x140 [ 46.045133][ T4113] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 46.045166][ T4113] vfs_read+0x1a0/0x6f0 [ 46.045197][ T4113] ? __rcu_read_unlock+0x4f/0x70 [ 46.045287][ T4113] ? __fget_files+0x184/0x1c0 [ 46.045362][ T4113] ksys_read+0xda/0x1a0 [ 46.045396][ T4113] __x64_sys_read+0x40/0x50 [ 46.045441][ T4113] x64_sys_call+0x2d77/0x2fb0 [ 46.045508][ T4113] do_syscall_64+0xd0/0x1a0 [ 46.045602][ T4113] ? clear_bhb_loop+0x40/0x90 [ 46.045629][ T4113] ? clear_bhb_loop+0x40/0x90 [ 46.045676][ T4113] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 46.045702][ T4113] RIP: 0033:0x7f31da46d37c [ 46.045720][ T4113] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 46.045742][ T4113] RSP: 002b:00007f31d8ad7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 46.045765][ T4113] RAX: ffffffffffffffda RBX: 00007f31da695fa0 RCX: 00007f31da46d37c [ 46.045780][ T4113] RDX: 000000000000000f RSI: 00007f31d8ad70a0 RDI: 000000000000000d [ 46.045822][ T4113] RBP: 00007f31d8ad7090 R08: 0000000000000000 R09: 0000000000000000 [ 46.045837][ T4113] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 46.045852][ T4113] R13: 0000000000000000 R14: 00007f31da695fa0 R15: 00007ffd38ab46e8 [ 46.045875][ T4113] [ 46.472273][ T4110] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.497412][ T4110] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 46.583010][ T4126] loop0: detected capacity change from 0 to 1024 [ 46.604276][ T4126] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.622775][ T4126] ext4 filesystem being mounted at /48/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 46.644167][ T4126] FAULT_INJECTION: forcing a failure. [ 46.644167][ T4126] name failslab, interval 1, probability 0, space 0, times 0 [ 46.657018][ T4126] CPU: 1 UID: 0 PID: 4126 Comm: syz.0.242 Not tainted 6.15.0-rc6-syzkaller-00047-ge9565e23cd89 #0 PREEMPT(voluntary) [ 46.657151][ T4126] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 46.657165][ T4126] Call Trace: [ 46.657173][ T4126] [ 46.657182][ T4126] __dump_stack+0x1d/0x30 [ 46.657204][ T4126] dump_stack_lvl+0xe8/0x140 [ 46.657240][ T4126] dump_stack+0x15/0x1b [ 46.657259][ T4126] should_fail_ex+0x265/0x280 [ 46.657308][ T4126] should_failslab+0x8c/0xb0 [ 46.657345][ T4126] kmem_cache_alloc_noprof+0x50/0x310 [ 46.657443][ T4126] ? mb_cache_entry_create+0xf0/0x540 [ 46.657474][ T4126] ? check_xattrs+0x27d/0x7d0 [ 46.657499][ T4126] mb_cache_entry_create+0xf0/0x540 [ 46.657598][ T4126] ext4_xattr_get+0x298/0x470 [ 46.657701][ T4126] ext4_xattr_security_get+0x32/0x40 [ 46.657723][ T4126] ? __pfx_ext4_xattr_security_get+0x10/0x10 [ 46.657748][ T4126] __vfs_getxattr+0x2aa/0x2c0 [ 46.657825][ T4126] cap_inode_need_killpriv+0x2e/0x50 [ 46.657853][ T4126] security_inode_need_killpriv+0x36/0x70 [ 46.657886][ T4126] file_remove_privs_flags+0x123/0x320 [ 46.657931][ T4126] ? selinux_file_open+0x31c/0x370 [ 46.657979][ T4126] ? __rcu_read_unlock+0x4f/0x70 [ 46.658003][ T4126] file_modified_flags+0x32/0x350 [ 46.658022][ T4126] file_modified+0x17/0x20 [ 46.658164][ T4126] ext4_buffered_write_iter+0x1d0/0x3c0 [ 46.658198][ T4126] ? ext4_file_write_iter+0xfe/0xf00 [ 46.658227][ T4126] ext4_file_write_iter+0x383/0xf00 [ 46.658262][ T4126] ? path_openat+0x1bf8/0x2170 [ 46.658289][ T4126] ? _parse_integer_limit+0x170/0x190 [ 46.658332][ T4126] do_iter_readv_writev+0x41e/0x4c0 [ 46.658411][ T4126] vfs_writev+0x2c9/0x870 [ 46.658436][ T4126] __se_sys_pwritev2+0xfc/0x1c0 [ 46.658482][ T4126] __x64_sys_pwritev2+0x67/0x80 [ 46.658518][ T4126] x64_sys_call+0x1cea/0x2fb0 [ 46.658574][ T4126] do_syscall_64+0xd0/0x1a0 [ 46.658596][ T4126] ? clear_bhb_loop+0x40/0x90 [ 46.658621][ T4126] ? clear_bhb_loop+0x40/0x90 [ 46.658646][ T4126] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 46.658670][ T4126] RIP: 0033:0x7f2a81cbe969 [ 46.658695][ T4126] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 46.658715][ T4126] RSP: 002b:00007f2a80327038 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 46.658815][ T4126] RAX: ffffffffffffffda RBX: 00007f2a81ee5fa0 RCX: 00007f2a81cbe969 [ 46.658830][ T4126] RDX: 0000000000000001 RSI: 00002000000001c0 RDI: 0000000000000006 [ 46.658844][ T4126] RBP: 00007f2a80327090 R08: 0000000000000000 R09: 0000000000000002 [ 46.658858][ T4126] R10: 0000000000000e7b R11: 0000000000000246 R12: 0000000000000001 [ 46.658871][ T4126] R13: 0000000000000000 R14: 00007f2a81ee5fa0 R15: 00007ffd16947d38 [ 46.658891][ T4126] [ 46.741161][ T4126] EXT4-fs error (device loop0): ext4_map_blocks:709: inode #15: block 3: comm syz.0.242: lblock 3 mapped to illegal pblock 3 (length 1) [ 46.765520][ T4120] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 46.844828][ T4126] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 117 [ 46.856482][ T4140] IPv6: Can't replace route, no match found [ 46.861497][ T4126] EXT4-fs (loop0): This should not happen!! Data will be lost [ 46.861497][ T4126] [ 46.868182][ T4120] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 46.893794][ T29] kauditd_printk_skb: 368 callbacks suppressed [ 46.893810][ T29] audit: type=1326 audit(1747167001.783:819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4136 comm="syz.2.245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb910d6e969 code=0x7ffc0000 [ 47.025989][ T29] audit: type=1326 audit(1747167001.813:820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4136 comm="syz.2.245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=88 compat=0 ip=0x7fb910d6e969 code=0x7ffc0000 [ 47.049236][ T29] audit: type=1326 audit(1747167001.813:821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4136 comm="syz.2.245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb910d6e969 code=0x7ffc0000 [ 47.072507][ T29] audit: type=1326 audit(1747167001.813:822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4136 comm="syz.2.245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=89 compat=0 ip=0x7fb910d6e969 code=0x7ffc0000 [ 47.095718][ T29] audit: type=1326 audit(1747167001.813:823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4136 comm="syz.2.245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb910d6e969 code=0x7ffc0000 [ 47.119017][ T29] audit: type=1326 audit(1747167001.813:824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4136 comm="syz.2.245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fb910d6e969 code=0x7ffc0000 [ 47.142310][ T29] audit: type=1326 audit(1747167001.813:825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4136 comm="syz.2.245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb910d6e969 code=0x7ffc0000 [ 47.142761][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.165623][ T29] audit: type=1326 audit(1747167001.813:826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4136 comm="syz.2.245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7fb910d6e969 code=0x7ffc0000 [ 47.197706][ T29] audit: type=1326 audit(1747167001.813:827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4136 comm="syz.2.245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb910d6e969 code=0x7ffc0000 [ 47.221040][ T29] audit: type=1326 audit(1747167001.813:828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4136 comm="syz.2.245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb910d6e969 code=0x7ffc0000 [ 47.349742][ T4160] 9pnet: Could not find request transport: rš ˜ [ 47.617334][ T4185] FAULT_INJECTION: forcing a failure. [ 47.617334][ T4185] name failslab, interval 1, probability 0, space 0, times 0 [ 47.630190][ T4185] CPU: 1 UID: 0 PID: 4185 Comm: syz.3.263 Not tainted 6.15.0-rc6-syzkaller-00047-ge9565e23cd89 #0 PREEMPT(voluntary) [ 47.630238][ T4185] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 47.630252][ T4185] Call Trace: [ 47.630258][ T4185] [ 47.630265][ T4185] __dump_stack+0x1d/0x30 [ 47.630289][ T4185] dump_stack_lvl+0xe8/0x140 [ 47.630349][ T4185] dump_stack+0x15/0x1b [ 47.630365][ T4185] should_fail_ex+0x265/0x280 [ 47.630457][ T4185] should_failslab+0x8c/0xb0 [ 47.630527][ T4185] kmem_cache_alloc_noprof+0x50/0x310 [ 47.630545][ T4185] ? audit_log_start+0x365/0x6c0 [ 47.630575][ T4185] audit_log_start+0x365/0x6c0 [ 47.630608][ T4185] audit_seccomp+0x48/0x100 [ 47.630645][ T4185] ? __seccomp_filter+0x68c/0x10d0 [ 47.630666][ T4185] __seccomp_filter+0x69d/0x10d0 [ 47.630688][ T4185] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 47.630714][ T4185] ? vfs_write+0x75e/0x8d0 [ 47.630741][ T4185] ? __rcu_read_unlock+0x4f/0x70 [ 47.630762][ T4185] ? __fget_files+0x184/0x1c0 [ 47.630792][ T4185] __secure_computing+0x82/0x150 [ 47.630814][ T4185] syscall_trace_enter+0xcf/0x1e0 [ 47.630911][ T4185] do_syscall_64+0xaa/0x1a0 [ 47.630981][ T4185] ? clear_bhb_loop+0x40/0x90 [ 47.631006][ T4185] ? clear_bhb_loop+0x40/0x90 [ 47.631027][ T4185] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 47.631058][ T4185] RIP: 0033:0x7f8c8f54e969 [ 47.631072][ T4185] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 47.631089][ T4185] RSP: 002b:00007f8c8dbb7038 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 47.631181][ T4185] RAX: ffffffffffffffda RBX: 00007f8c8f775fa0 RCX: 00007f8c8f54e969 [ 47.631193][ T4185] RDX: 0000000000000017 RSI: 0000000000004000 RDI: 0000200000ffa000 [ 47.631205][ T4185] RBP: 00007f8c8dbb7090 R08: 0000000000000000 R09: 0000000000000000 [ 47.631216][ T4185] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 47.631292][ T4185] R13: 0000000000000000 R14: 00007f8c8f775fa0 R15: 00007fff1c267ba8 [ 47.631310][ T4185] [ 47.635247][ T4182] netlink: 8 bytes leftover after parsing attributes in process `syz.0.261'. [ 48.067279][ T4207] 9pnet: Could not find request transport: rš ˜ [ 48.173257][ T4196] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 48.173373][ T4196] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 48.267858][ T4225] syzkaller1: entered promiscuous mode [ 48.273618][ T4225] syzkaller1: entered allmulticast mode [ 48.517887][ T4246] bridge0: port 3(gretap0) entered blocking state [ 48.524489][ T4246] bridge0: port 3(gretap0) entered disabled state [ 48.534160][ T4246] gretap0: entered allmulticast mode [ 48.540080][ T4246] gretap0: entered promiscuous mode [ 48.547286][ T4246] bridge0: port 3(gretap0) entered blocking state [ 48.553775][ T4246] bridge0: port 3(gretap0) entered forwarding state [ 48.565788][ T4246] gretap0: left allmulticast mode [ 48.570987][ T4246] gretap0: left promiscuous mode [ 48.576202][ T4246] bridge0: port 3(gretap0) entered disabled state [ 48.613425][ T4246] loop3: detected capacity change from 0 to 512 [ 48.626332][ T4252] 9pnet: Could not find request transport: rš ˜ [ 48.633904][ T4246] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 48.674261][ T4246] EXT4-fs error (device loop3): ext4_get_branch:178: inode #11: block 4294967295: comm syz.3.284: invalid block [ 48.699631][ T4255] syzkaller1: entered promiscuous mode [ 48.705243][ T4255] syzkaller1: entered allmulticast mode [ 48.875014][ T4246] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.284: invalid indirect mapped block 4294967295 (level 1) [ 48.944034][ T4246] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.284: invalid indirect mapped block 4294967295 (level 1) [ 48.975102][ T4246] EXT4-fs (loop3): 2 truncates cleaned up [ 48.981456][ T4246] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.094005][ T4246] EXT4-fs error (device loop3): ext4_inlinedir_to_tree:1339: inode #12: block 7: comm syz.3.284: path /67/file0/file0: bad entry in directory: rec_len % 4 != 0 - offset=259, inode=4278190093, rec_len=255, size=60 fake=0 [ 49.124916][ T4292] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=22 sclass=netlink_audit_socket pid=4292 comm=syz.2.303 [ 49.148665][ T4246] EXT4-fs error (device loop3): ext4_inlinedir_to_tree:1339: inode #12: block 7: comm syz.3.284: path /67/file0/file0: bad entry in directory: rec_len % 4 != 0 - offset=259, inode=4278190093, rec_len=255, size=60 fake=0 [ 49.192283][ T4297] FAULT_INJECTION: forcing a failure. [ 49.192283][ T4297] name failslab, interval 1, probability 0, space 0, times 0 [ 49.205055][ T4297] CPU: 0 UID: 0 PID: 4297 Comm: syz.4.305 Not tainted 6.15.0-rc6-syzkaller-00047-ge9565e23cd89 #0 PREEMPT(voluntary) [ 49.205081][ T4297] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 49.205092][ T4297] Call Trace: [ 49.205116][ T4297] [ 49.205122][ T4297] __dump_stack+0x1d/0x30 [ 49.205145][ T4297] dump_stack_lvl+0xe8/0x140 [ 49.205178][ T4297] dump_stack+0x15/0x1b [ 49.205193][ T4297] should_fail_ex+0x265/0x280 [ 49.205227][ T4297] should_failslab+0x8c/0xb0 [ 49.205308][ T4297] kmem_cache_alloc_noprof+0x50/0x310 [ 49.205330][ T4297] ? audit_log_start+0x365/0x6c0 [ 49.205359][ T4297] audit_log_start+0x365/0x6c0 [ 49.205398][ T4297] audit_seccomp+0x48/0x100 [ 49.205485][ T4297] ? __seccomp_filter+0x68c/0x10d0 [ 49.205505][ T4297] __seccomp_filter+0x69d/0x10d0 [ 49.205525][ T4297] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 49.205563][ T4297] ? vfs_write+0x75e/0x8d0 [ 49.205692][ T4297] ? __rcu_read_unlock+0x4f/0x70 [ 49.205783][ T4297] ? __fget_files+0x184/0x1c0 [ 49.205818][ T4297] __secure_computing+0x82/0x150 [ 49.205844][ T4297] syscall_trace_enter+0xcf/0x1e0 [ 49.205928][ T4297] do_syscall_64+0xaa/0x1a0 [ 49.205955][ T4297] ? clear_bhb_loop+0x40/0x90 [ 49.205997][ T4297] ? clear_bhb_loop+0x40/0x90 [ 49.206017][ T4297] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 49.206050][ T4297] RIP: 0033:0x7fb26214e969 [ 49.206143][ T4297] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 49.206162][ T4297] RSP: 002b:00007fb2607b7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000048 [ 49.206226][ T4297] RAX: ffffffffffffffda RBX: 00007fb262375fa0 RCX: 00007fb26214e969 [ 49.206240][ T4297] RDX: 0000200000000040 RSI: 0000000000000025 RDI: 0000000000000004 [ 49.206255][ T4297] RBP: 00007fb2607b7090 R08: 0000000000000000 R09: 0000000000000000 [ 49.206269][ T4297] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 49.206282][ T4297] R13: 0000000000000000 R14: 00007fb262375fa0 R15: 00007ffd378e3e98 [ 49.206304][ T4297] [ 49.452267][ T4299] syzkaller1: entered promiscuous mode [ 49.457965][ T4299] syzkaller1: entered allmulticast mode [ 49.465396][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.540452][ T4309] RDS: rds_bind could not find a transport for ::ffff:100.1.1.0, load rds_tcp or rds_rdma? [ 49.582422][ T4313] FAULT_INJECTION: forcing a failure. [ 49.582422][ T4313] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 49.595619][ T4313] CPU: 0 UID: 0 PID: 4313 Comm: syz.2.313 Not tainted 6.15.0-rc6-syzkaller-00047-ge9565e23cd89 #0 PREEMPT(voluntary) [ 49.595650][ T4313] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 49.595661][ T4313] Call Trace: [ 49.595667][ T4313] [ 49.595675][ T4313] __dump_stack+0x1d/0x30 [ 49.595750][ T4313] dump_stack_lvl+0xe8/0x140 [ 49.595773][ T4313] dump_stack+0x15/0x1b [ 49.595793][ T4313] should_fail_ex+0x265/0x280 [ 49.595840][ T4313] should_fail+0xb/0x20 [ 49.595875][ T4313] should_fail_usercopy+0x1a/0x20 [ 49.595958][ T4313] _copy_from_user+0x1c/0xb0 [ 49.595980][ T4313] __se_sys_io_uring_setup+0x11f/0x210 [ 49.596100][ T4313] __x64_sys_io_uring_setup+0x31/0x40 [ 49.596129][ T4313] x64_sys_call+0x184b/0x2fb0 [ 49.596151][ T4313] do_syscall_64+0xd0/0x1a0 [ 49.596198][ T4313] ? clear_bhb_loop+0x40/0x90 [ 49.596218][ T4313] ? clear_bhb_loop+0x40/0x90 [ 49.596243][ T4313] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 49.596268][ T4313] RIP: 0033:0x7fb910d6e969 [ 49.596285][ T4313] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 49.596305][ T4313] RSP: 002b:00007fb90f3d7038 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 49.596325][ T4313] RAX: ffffffffffffffda RBX: 00007fb910f95fa0 RCX: 00007fb910d6e969 [ 49.596340][ T4313] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000004e4d [ 49.596356][ T4313] RBP: 00007fb90f3d7090 R08: 0000000000000000 R09: 0000000000000000 [ 49.596369][ T4313] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 49.596379][ T4313] R13: 0000000000000000 R14: 00007fb910f95fa0 R15: 00007ffd584c1438 [ 49.596447][ T4313] [ 49.832350][ T4331] loop1: detected capacity change from 0 to 1024 [ 49.841107][ T4331] EXT4-fs: Ignoring removed orlov option [ 49.861852][ T4331] EXT4-fs: Ignoring removed bh option [ 49.876291][ T4331] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback. [ 49.920048][ T3321] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 49.944610][ T4340] syzkaller1: entered promiscuous mode [ 49.950143][ T4340] syzkaller1: entered allmulticast mode [ 49.978224][ T4343] loop4: detected capacity change from 0 to 1024 [ 50.003257][ T4343] EXT4-fs: Ignoring removed bh option [ 50.029429][ T4349] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=21 sclass=netlink_audit_socket pid=4349 comm=syz.2.327 [ 50.055709][ T4347] loop1: detected capacity change from 0 to 2048 [ 50.064303][ T4343] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback. [ 50.127335][ T4347] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.148262][ T4361] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge_slave_0, syncid = 0, id = 0 [ 50.162976][ T4347] ext4 filesystem being mounted at /74/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 50.196387][ T4364] Zero length message leads to an empty skb [ 50.240401][ T4343] FAULT_INJECTION: forcing a failure. [ 50.240401][ T4343] name failslab, interval 1, probability 0, space 0, times 0 [ 50.253263][ T4343] CPU: 0 UID: 0 PID: 4343 Comm: syz.4.325 Not tainted 6.15.0-rc6-syzkaller-00047-ge9565e23cd89 #0 PREEMPT(voluntary) [ 50.253316][ T4343] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 50.253331][ T4343] Call Trace: [ 50.253339][ T4343] [ 50.253348][ T4343] __dump_stack+0x1d/0x30 [ 50.253374][ T4343] dump_stack_lvl+0xe8/0x140 [ 50.253395][ T4343] dump_stack+0x15/0x1b [ 50.253456][ T4343] should_fail_ex+0x265/0x280 [ 50.253498][ T4343] should_failslab+0x8c/0xb0 [ 50.253557][ T4343] kmem_cache_alloc_noprof+0x50/0x310 [ 50.253575][ T4343] ? ext4_mb_new_blocks+0x79f/0x2050 [ 50.253615][ T4343] ext4_mb_new_blocks+0x79f/0x2050 [ 50.253663][ T4343] ? iput+0x1ca/0x5b0 [ 50.253687][ T4343] ? ext4_xattr_set_entry+0x495/0x1020 [ 50.253714][ T4343] ext4_new_meta_blocks+0xc3/0x1b0 [ 50.253798][ T4343] ext4_xattr_block_set+0x10ff/0x1a30 [ 50.253837][ T4343] ext4_expand_extra_isize_ea+0xc65/0x11f0 [ 50.253885][ T4343] __ext4_expand_extra_isize+0x246/0x280 [ 50.253982][ T4343] __ext4_mark_inode_dirty+0x29d/0x3f0 [ 50.254018][ T4343] ext4_dirty_inode+0x92/0xc0 [ 50.254057][ T4343] ? __pfx_ext4_dirty_inode+0x10/0x10 [ 50.254095][ T4343] __mark_inode_dirty+0x15f/0x760 [ 50.254156][ T4343] ? file_modified_flags+0x30f/0x350 [ 50.254180][ T4343] file_modified_flags+0x324/0x350 [ 50.254205][ T4343] file_modified+0x17/0x20 [ 50.254243][ T4343] ext4_buffered_write_iter+0x1d0/0x3c0 [ 50.254345][ T4343] ext4_file_write_iter+0x383/0xf00 [ 50.254380][ T4343] ? path_openat+0x1bf8/0x2170 [ 50.254466][ T4343] ? _parse_integer_limit+0x170/0x190 [ 50.254501][ T4343] do_iter_readv_writev+0x41e/0x4c0 [ 50.254611][ T4343] vfs_writev+0x2c9/0x870 [ 50.254644][ T4343] __se_sys_pwritev2+0xfc/0x1c0 [ 50.254683][ T4343] __x64_sys_pwritev2+0x67/0x80 [ 50.254721][ T4343] x64_sys_call+0x1cea/0x2fb0 [ 50.254801][ T4343] do_syscall_64+0xd0/0x1a0 [ 50.254831][ T4343] ? clear_bhb_loop+0x40/0x90 [ 50.254858][ T4343] ? clear_bhb_loop+0x40/0x90 [ 50.254887][ T4343] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 50.254969][ T4343] RIP: 0033:0x7fb26214e969 [ 50.254988][ T4343] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 50.255026][ T4343] RSP: 002b:00007fb2607b7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 50.255049][ T4343] RAX: ffffffffffffffda RBX: 00007fb262375fa0 RCX: 00007fb26214e969 [ 50.255063][ T4343] RDX: 0000000000000001 RSI: 00002000000001c0 RDI: 0000000000000004 [ 50.255077][ T4343] RBP: 00007fb2607b7090 R08: 0000000000000000 R09: 0000000000000000 [ 50.255163][ T4343] R10: 0000000000000e7b R11: 0000000000000246 R12: 0000000000000001 [ 50.255178][ T4343] R13: 0000000000000000 R14: 00007fb262375fa0 R15: 00007ffd378e3e98 [ 50.255202][ T4343] [ 50.555220][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 50.570392][ T3321] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.604858][ T4374] vhci_hcd: invalid port number 65 [ 50.693334][ T4384] loop4: detected capacity change from 0 to 1024 [ 50.700103][ T4384] EXT4-fs: Ignoring removed bh option [ 50.727275][ T4384] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback. [ 50.754627][ T4384] Illegal XDP return value 4294967274 on prog (id 204) dev syz_tun, expect packet loss! [ 50.758970][ T4393] syzkaller1: entered promiscuous mode [ 50.770038][ T4393] syzkaller1: entered allmulticast mode [ 50.800443][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 50.875845][ T4405] loop2: detected capacity change from 0 to 1024 [ 50.893289][ T4405] EXT4-fs: Ignoring removed bh option [ 50.914626][ T4405] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback. [ 50.949368][ T4405] FAULT_INJECTION: forcing a failure. [ 50.949368][ T4405] name failslab, interval 1, probability 0, space 0, times 0 [ 50.962053][ T4405] CPU: 0 UID: 0 PID: 4405 Comm: syz.2.343 Not tainted 6.15.0-rc6-syzkaller-00047-ge9565e23cd89 #0 PREEMPT(voluntary) [ 50.962086][ T4405] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 50.962100][ T4405] Call Trace: [ 50.962108][ T4405] [ 50.962117][ T4405] __dump_stack+0x1d/0x30 [ 50.962216][ T4405] dump_stack_lvl+0xe8/0x140 [ 50.962240][ T4405] dump_stack+0x15/0x1b [ 50.962260][ T4405] should_fail_ex+0x265/0x280 [ 50.962372][ T4405] should_failslab+0x8c/0xb0 [ 50.962409][ T4405] kmem_cache_alloc_noprof+0x50/0x310 [ 50.962433][ T4405] ? ext4_mb_new_blocks+0x79f/0x2050 [ 50.962465][ T4405] ext4_mb_new_blocks+0x79f/0x2050 [ 50.962535][ T4405] ? ext4_ext_search_right+0x310/0x4e0 [ 50.962561][ T4405] ? ext4_inode_to_goal_block+0x189/0x1e0 [ 50.962663][ T4405] ext4_ext_map_blocks+0xfe6/0x3620 [ 50.962687][ T4405] ? __brelse+0x32/0x60 [ 50.962744][ T4405] ? ext4_mark_iloc_dirty+0xd3f/0xda0 [ 50.962815][ T4405] ? mark_buffer_dirty+0xf8/0x210 [ 50.962849][ T4405] ext4_map_blocks+0x5ab/0xd00 [ 50.962887][ T4405] ? ext4_destroy_inline_data_nolock+0x2f4/0x340 [ 50.962916][ T4405] ext4_convert_inline_data_nolock+0x16e/0x4c0 [ 50.962993][ T4405] ext4_convert_inline_data+0x2b8/0x350 [ 50.963027][ T4405] ext4_fallocate+0xa6/0x660 [ 50.963052][ T4405] vfs_fallocate+0x413/0x450 [ 50.963083][ T4405] __x64_sys_fallocate+0x7a/0xd0 [ 50.963190][ T4405] x64_sys_call+0x2b88/0x2fb0 [ 50.963276][ T4405] do_syscall_64+0xd0/0x1a0 [ 50.963349][ T4405] ? clear_bhb_loop+0x40/0x90 [ 50.963375][ T4405] ? clear_bhb_loop+0x40/0x90 [ 50.963402][ T4405] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 50.963497][ T4405] RIP: 0033:0x7fb910d6e969 [ 50.963512][ T4405] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 50.963576][ T4405] RSP: 002b:00007fb90f3d7038 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 50.963599][ T4405] RAX: ffffffffffffffda RBX: 00007fb910f95fa0 RCX: 00007fb910d6e969 [ 50.963614][ T4405] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 50.963628][ T4405] RBP: 00007fb90f3d7090 R08: 0000000000000000 R09: 0000000000000000 [ 50.963643][ T4405] R10: 0000000008000c62 R11: 0000000000000246 R12: 0000000000000001 [ 50.963657][ T4405] R13: 0000000000000000 R14: 00007fb910f95fa0 R15: 00007ffd584c1438 [ 50.963680][ T4405] [ 51.248211][ T4419] loop0: detected capacity change from 0 to 1024 [ 51.262111][ T4428] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4428 comm=syz.4.351 [ 51.263184][ T4419] EXT4-fs: Ignoring removed mblk_io_submit option [ 51.292811][ T4419] EXT4-fs: Ignoring removed nobh option [ 51.298509][ T4419] EXT4-fs: Ignoring removed bh option [ 51.305078][ T4431] loop3: detected capacity change from 0 to 128 [ 51.311701][ T4431] vfat: Unknown parameter 'vfat' [ 51.319349][ T4428] loop4: detected capacity change from 0 to 512 [ 51.347834][ T4433] FAULT_INJECTION: forcing a failure. [ 51.347834][ T4433] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 51.361036][ T4433] CPU: 1 UID: 0 PID: 4433 Comm: syz.3.353 Not tainted 6.15.0-rc6-syzkaller-00047-ge9565e23cd89 #0 PREEMPT(voluntary) [ 51.361086][ T4433] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 51.361100][ T4433] Call Trace: [ 51.361108][ T4433] [ 51.361116][ T4433] __dump_stack+0x1d/0x30 [ 51.361141][ T4433] dump_stack_lvl+0xe8/0x140 [ 51.361165][ T4433] dump_stack+0x15/0x1b [ 51.361185][ T4433] should_fail_ex+0x265/0x280 [ 51.361238][ T4433] should_fail+0xb/0x20 [ 51.361319][ T4433] should_fail_usercopy+0x1a/0x20 [ 51.361343][ T4433] _copy_from_user+0x1c/0xb0 [ 51.361444][ T4433] tipc_setsockopt+0x388/0x620 [ 51.361485][ T4433] ? __pfx_tipc_setsockopt+0x10/0x10 [ 51.361518][ T4433] __sys_setsockopt+0x181/0x200 [ 51.361616][ T4433] __x64_sys_setsockopt+0x64/0x80 [ 51.361646][ T4433] x64_sys_call+0x2bd5/0x2fb0 [ 51.361672][ T4433] do_syscall_64+0xd0/0x1a0 [ 51.361701][ T4433] ? clear_bhb_loop+0x40/0x90 [ 51.361726][ T4433] ? clear_bhb_loop+0x40/0x90 [ 51.361752][ T4433] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 51.361846][ T4433] RIP: 0033:0x7f8c8f54e969 [ 51.361863][ T4433] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 51.361884][ T4433] RSP: 002b:00007f8c8dbb7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 51.361905][ T4433] RAX: ffffffffffffffda RBX: 00007f8c8f775fa0 RCX: 00007f8c8f54e969 [ 51.361920][ T4433] RDX: 0000000000000087 RSI: 000000000000010f RDI: 0000000000000008 [ 51.361985][ T4433] RBP: 00007f8c8dbb7090 R08: 0000000000000010 R09: 0000000000000000 [ 51.362000][ T4433] R10: 0000200000000440 R11: 0000000000000246 R12: 0000000000000001 [ 51.362014][ T4433] R13: 0000000000000000 R14: 00007f8c8f775fa0 R15: 00007fff1c267ba8 [ 51.362038][ T4433] [ 51.554491][ T4428] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 51.563665][ T3323] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 51.576874][ T4428] EXT4-fs (loop4): orphan cleanup on readonly fs [ 51.603483][ T4419] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.604204][ T4428] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.351: invalid indirect mapped block 256 (level 2) [ 51.647578][ T4441] syzkaller1: entered promiscuous mode [ 51.653128][ T4441] syzkaller1: entered allmulticast mode [ 51.665721][ T4428] EXT4-fs (loop4): 2 truncates cleaned up [ 51.677095][ T4443] netlink: 12 bytes leftover after parsing attributes in process `syz.3.356'. [ 51.697902][ T4428] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 51.786344][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.845755][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.903219][ T4453] FAULT_INJECTION: forcing a failure. [ 51.903219][ T4453] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 51.916414][ T4453] CPU: 1 UID: 0 PID: 4453 Comm: syz.2.359 Not tainted 6.15.0-rc6-syzkaller-00047-ge9565e23cd89 #0 PREEMPT(voluntary) [ 51.916523][ T4453] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 51.916537][ T4453] Call Trace: [ 51.916544][ T4453] [ 51.916552][ T4453] __dump_stack+0x1d/0x30 [ 51.916577][ T4453] dump_stack_lvl+0xe8/0x140 [ 51.916627][ T4453] dump_stack+0x15/0x1b [ 51.916648][ T4453] should_fail_ex+0x265/0x280 [ 51.916684][ T4453] should_fail+0xb/0x20 [ 51.916716][ T4453] should_fail_usercopy+0x1a/0x20 [ 51.916781][ T4453] _copy_from_user+0x1c/0xb0 [ 51.916880][ T4453] __sys_bind+0x106/0x2a0 [ 51.916915][ T4453] __x64_sys_bind+0x3f/0x50 [ 51.916999][ T4453] x64_sys_call+0x2086/0x2fb0 [ 51.917069][ T4453] do_syscall_64+0xd0/0x1a0 [ 51.917095][ T4453] ? clear_bhb_loop+0x40/0x90 [ 51.917120][ T4453] ? clear_bhb_loop+0x40/0x90 [ 51.917181][ T4453] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 51.917204][ T4453] RIP: 0033:0x7fb910d6e969 [ 51.917218][ T4453] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 51.917234][ T4453] RSP: 002b:00007fb90f3d7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 51.917251][ T4453] RAX: ffffffffffffffda RBX: 00007fb910f95fa0 RCX: 00007fb910d6e969 [ 51.917262][ T4453] RDX: 000000000000006e RSI: 0000200000000240 RDI: 0000000000000006 [ 51.917290][ T4453] RBP: 00007fb90f3d7090 R08: 0000000000000000 R09: 0000000000000000 [ 51.917303][ T4453] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 51.917371][ T4453] R13: 0000000000000000 R14: 00007fb910f95fa0 R15: 00007ffd584c1438 [ 51.917395][ T4453] [ 51.917413][ T29] kauditd_printk_skb: 562 callbacks suppressed [ 51.917426][ T29] audit: type=1400 audit(1747167006.823:1387): avc: denied { create } for pid=4457 comm="syz.3.362" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 52.162171][ T29] audit: type=1400 audit(1747167007.073:1388): avc: denied { write } for pid=4465 comm="syz.3.364" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 52.182364][ T29] audit: type=1400 audit(1747167007.073:1389): avc: denied { nlmsg_write } for pid=4465 comm="syz.3.364" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 52.284312][ T4475] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4475 comm=syz.0.369 [ 52.293037][ T29] audit: type=1326 audit(1747167007.133:1390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4471 comm="syz.3.367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c8f54e969 code=0x7ffc0000 [ 52.297368][ T4477] netlink: 12 bytes leftover after parsing attributes in process `syz.3.368'. [ 52.319959][ T29] audit: type=1326 audit(1747167007.133:1391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4471 comm="syz.3.367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c8f54e969 code=0x7ffc0000 [ 52.320017][ T29] audit: type=1326 audit(1747167007.133:1392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4471 comm="syz.3.367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=88 compat=0 ip=0x7f8c8f54e969 code=0x7ffc0000 [ 52.362002][ T4475] loop0: detected capacity change from 0 to 512 [ 52.375449][ T29] audit: type=1326 audit(1747167007.133:1393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4471 comm="syz.3.367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c8f54e969 code=0x7ffc0000 [ 52.405118][ T29] audit: type=1326 audit(1747167007.133:1394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4471 comm="syz.3.367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c8f54e969 code=0x7ffc0000 [ 52.407729][ T4468] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 52.428592][ T29] audit: type=1326 audit(1747167007.143:1395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4471 comm="syz.3.367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=89 compat=0 ip=0x7f8c8f54e969 code=0x7ffc0000 [ 52.460223][ T29] audit: type=1326 audit(1747167007.143:1396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4471 comm="syz.3.367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c8f54e969 code=0x7ffc0000 [ 52.491593][ T4475] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 52.493684][ T4468] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 52.532853][ T4475] EXT4-fs (loop0): orphan cleanup on readonly fs [ 52.611376][ T4475] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.369: invalid indirect mapped block 256 (level 2) [ 52.679712][ T4486] syzkaller1: entered promiscuous mode [ 52.685285][ T4486] syzkaller1: entered allmulticast mode [ 52.693132][ T4489] netlink: 4 bytes leftover after parsing attributes in process `syz.3.372'. [ 52.738458][ T4475] EXT4-fs (loop0): 2 truncates cleaned up [ 52.754841][ T4475] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 52.788799][ T4489] bridge_slave_0: left allmulticast mode [ 52.794609][ T4489] bridge_slave_0: left promiscuous mode [ 52.800379][ T4489] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.836555][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.847020][ T4489] bridge_slave_1: left allmulticast mode [ 52.853043][ T4489] bridge_slave_1: left promiscuous mode [ 52.858827][ T4489] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.876125][ T4489] bond0: (slave bond_slave_0): Releasing backup interface [ 52.888494][ T4489] bond0: (slave bond_slave_1): Releasing backup interface [ 52.945837][ T4489] team_slave_0: left allmulticast mode [ 52.995367][ T4489] team0: Port device team_slave_0 removed [ 53.034961][ T4489] team_slave_1: left allmulticast mode [ 53.073257][ T4489] team0: Port device team_slave_1 removed [ 53.117307][ T4489] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 53.124927][ T4489] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 53.146568][ T4494] netlink: 'syz.0.373': attribute type 3 has an invalid length. [ 53.187956][ T4489] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 53.195528][ T4489] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 53.308348][ T4503] netlink: 4 bytes leftover after parsing attributes in process `syz.2.377'. [ 53.326687][ T4509] FAULT_INJECTION: forcing a failure. [ 53.326687][ T4509] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 53.340081][ T4509] CPU: 0 UID: 0 PID: 4509 Comm: syz.3.380 Not tainted 6.15.0-rc6-syzkaller-00047-ge9565e23cd89 #0 PREEMPT(voluntary) [ 53.340230][ T4509] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 53.340326][ T4509] Call Trace: [ 53.340333][ T4509] [ 53.340342][ T4509] __dump_stack+0x1d/0x30 [ 53.340368][ T4509] dump_stack_lvl+0xe8/0x140 [ 53.340418][ T4509] dump_stack+0x15/0x1b [ 53.340434][ T4509] should_fail_ex+0x265/0x280 [ 53.340468][ T4509] should_fail+0xb/0x20 [ 53.340501][ T4509] should_fail_usercopy+0x1a/0x20 [ 53.340600][ T4509] _copy_to_user+0x20/0xa0 [ 53.340624][ T4509] simple_read_from_buffer+0xb5/0x130 [ 53.340650][ T4509] proc_fail_nth_read+0x100/0x140 [ 53.340705][ T4509] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 53.340743][ T4509] vfs_read+0x1a0/0x6f0 [ 53.340809][ T4509] ? __rcu_read_unlock+0x4f/0x70 [ 53.340836][ T4509] ? __fget_files+0x184/0x1c0 [ 53.340870][ T4509] ksys_read+0xda/0x1a0 [ 53.340902][ T4509] __x64_sys_read+0x40/0x50 [ 53.340938][ T4509] x64_sys_call+0x2d77/0x2fb0 [ 53.340964][ T4509] do_syscall_64+0xd0/0x1a0 [ 53.341057][ T4509] ? clear_bhb_loop+0x40/0x90 [ 53.341083][ T4509] ? clear_bhb_loop+0x40/0x90 [ 53.341248][ T4509] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 53.341268][ T4509] RIP: 0033:0x7f8c8f54d37c [ 53.341285][ T4509] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 53.341307][ T4509] RSP: 002b:00007f8c8dbb7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 53.341329][ T4509] RAX: ffffffffffffffda RBX: 00007f8c8f775fa0 RCX: 00007f8c8f54d37c [ 53.341344][ T4509] RDX: 000000000000000f RSI: 00007f8c8dbb70a0 RDI: 0000000000000006 [ 53.341402][ T4509] RBP: 00007f8c8dbb7090 R08: 0000000000000000 R09: 0000000000000000 [ 53.341413][ T4509] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 53.341498][ T4509] R13: 0000000000000000 R14: 00007f8c8f775fa0 R15: 00007fff1c267ba8 [ 53.341518][ T4509] [ 53.678293][ T4523] netlink: 4 bytes leftover after parsing attributes in process `syz.2.384'. [ 53.794487][ T4530] syz.3.386: attempt to access beyond end of device [ 53.794487][ T4530] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 53.862188][ T4532] FAULT_INJECTION: forcing a failure. [ 53.862188][ T4532] name failslab, interval 1, probability 0, space 0, times 0 [ 53.874883][ T4532] CPU: 0 UID: 0 PID: 4532 Comm: syz.2.389 Not tainted 6.15.0-rc6-syzkaller-00047-ge9565e23cd89 #0 PREEMPT(voluntary) [ 53.874908][ T4532] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 53.874918][ T4532] Call Trace: [ 53.874924][ T4532] [ 53.874931][ T4532] __dump_stack+0x1d/0x30 [ 53.874999][ T4532] dump_stack_lvl+0xe8/0x140 [ 53.875022][ T4532] dump_stack+0x15/0x1b [ 53.875040][ T4532] should_fail_ex+0x265/0x280 [ 53.875090][ T4532] should_failslab+0x8c/0xb0 [ 53.875117][ T4532] __kmalloc_noprof+0xa5/0x3e0 [ 53.875137][ T4532] ? ip_options_get+0x52/0x350 [ 53.875158][ T4532] ? cgroup_rstat_updated+0xa3/0x510 [ 53.875194][ T4532] ip_options_get+0x52/0x350 [ 53.875243][ T4532] ip_cmsg_send+0x49e/0x5f0 [ 53.875268][ T4532] udp_sendmsg+0x845/0x13a0 [ 53.875302][ T4532] ? _raw_spin_unlock_bh+0x36/0x40 [ 53.875363][ T4532] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 53.875409][ T4532] ? __rcu_read_unlock+0x4f/0x70 [ 53.875430][ T4532] ? __pfx_ip4_datagram_release_cb+0x10/0x10 [ 53.875506][ T4532] ? __pfx_udp_sendmsg+0x10/0x10 [ 53.875692][ T4532] inet_sendmsg+0xac/0xd0 [ 53.875729][ T4532] __sock_sendmsg+0x102/0x180 [ 53.875799][ T4532] ____sys_sendmsg+0x31e/0x4e0 [ 53.875823][ T4532] ___sys_sendmsg+0x17b/0x1d0 [ 53.875859][ T4532] __x64_sys_sendmsg+0xd4/0x160 [ 53.875970][ T4532] x64_sys_call+0x2999/0x2fb0 [ 53.875996][ T4532] do_syscall_64+0xd0/0x1a0 [ 53.876042][ T4532] ? clear_bhb_loop+0x40/0x90 [ 53.876108][ T4532] ? clear_bhb_loop+0x40/0x90 [ 53.876136][ T4532] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 53.876177][ T4532] RIP: 0033:0x7fb910d6e969 [ 53.876196][ T4532] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 53.876285][ T4532] RSP: 002b:00007fb90f3d7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 53.876309][ T4532] RAX: ffffffffffffffda RBX: 00007fb910f95fa0 RCX: 00007fb910d6e969 [ 53.876324][ T4532] RDX: 0000000000040010 RSI: 0000200000000a80 RDI: 0000000000000003 [ 53.876340][ T4532] RBP: 00007fb90f3d7090 R08: 0000000000000000 R09: 0000000000000000 [ 53.876366][ T4532] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 53.876381][ T4532] R13: 0000000000000000 R14: 00007fb910f95fa0 R15: 00007ffd584c1438 [ 53.876420][ T4532] [ 54.178750][ T4525] loop4: detected capacity change from 0 to 512 [ 54.203060][ T4538] syzkaller1: entered promiscuous mode [ 54.208654][ T4538] syzkaller1: entered allmulticast mode [ 54.223014][ T4525] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 54.237033][ T4530] loop3: detected capacity change from 0 to 8192 [ 54.351001][ T4549] loop2: detected capacity change from 0 to 512 [ 54.358620][ T4549] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 54.387001][ T4525] EXT4-fs (loop4): 1 truncate cleaned up [ 54.393704][ T4549] EXT4-fs error (device loop2): ext4_get_branch:178: inode #11: block 4294967295: comm syz.2.393: invalid block [ 54.417805][ T4525] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.424120][ T4549] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.393: invalid indirect mapped block 4294967295 (level 1) [ 54.486008][ T4549] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.393: invalid indirect mapped block 4294967295 (level 1) [ 54.544325][ T4558] loop0: detected capacity change from 0 to 512 [ 54.556063][ T4549] EXT4-fs (loop2): 2 truncates cleaned up [ 54.562298][ T4549] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.587722][ T4558] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 54.649289][ T4558] EXT4-fs (loop0): 1 truncate cleaned up [ 54.683775][ T4558] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.722392][ T4549] EXT4-fs error (device loop2): ext4_inlinedir_to_tree:1339: inode #12: block 7: comm syz.2.393: path /53/file0/file0: bad entry in directory: rec_len % 4 != 0 - offset=259, inode=4278190093, rec_len=255, size=60 fake=0 [ 54.746681][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.760370][ T4549] EXT4-fs error (device loop2): ext4_inlinedir_to_tree:1339: inode #12: block 7: comm syz.2.393: path /53/file0/file0: bad entry in directory: rec_len % 4 != 0 - offset=259, inode=4278190093, rec_len=255, size=60 fake=0 [ 54.831651][ T3323] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.858855][ T4575] netlink: 4 bytes leftover after parsing attributes in process `syz.4.400'. [ 54.874087][ T4577] loop2: detected capacity change from 0 to 1024 [ 54.890100][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.895622][ T4577] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 54.910061][ T4577] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 55.011291][ T4577] JBD2: no valid journal superblock found [ 55.017111][ T4577] EXT4-fs (loop2): Could not load journal inode [ 55.139230][ T4577] loop2: detected capacity change from 0 to 512 [ 55.164539][ T4577] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -13 [ 55.183421][ T4582] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 55.196930][ T4577] EXT4-fs warning (device loop2): ext4_block_to_path:107: block 3279945729 > max in inode 13 [ 55.216160][ T4577] EXT4-fs warning (device loop2): ext4_block_to_path:107: block 3279945730 > max in inode 13 [ 55.238418][ T4582] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 55.248409][ T4577] EXT4-fs (loop2): 1 truncate cleaned up [ 55.260616][ T4577] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 55.301280][ T4577] 9pnet_fd: Insufficient options for proto=fd [ 55.328968][ T4577] EXT4-fs warning (device loop2): ext4_lookup:1801: Inconsistent encryption contexts: 2/12 [ 55.354183][ T4588] loop4: detected capacity change from 0 to 1024 [ 55.453382][ T4588] EXT4-fs: Ignoring removed mblk_io_submit option [ 55.466063][ T3323] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.483089][ T4588] EXT4-fs: Ignoring removed nobh option [ 55.488703][ T4588] EXT4-fs: Ignoring removed bh option [ 55.648106][ T4587] netlink: 8 bytes leftover after parsing attributes in process `syz.4.404'. [ 55.716889][ T4601] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 55.764921][ T4602] loop4: detected capacity change from 0 to 1024 [ 55.771691][ T4602] EXT4-fs: Ignoring removed mblk_io_submit option [ 55.778355][ T4602] EXT4-fs: Ignoring removed nobh option [ 55.784066][ T4602] EXT4-fs: Ignoring removed bh option [ 55.800465][ T4607] delete_channel: no stack [ 55.809466][ T4607] delete_channel: no stack [ 55.831361][ T4610] FAULT_INJECTION: forcing a failure. [ 55.831361][ T4610] name failslab, interval 1, probability 0, space 0, times 0 [ 55.844178][ T4610] CPU: 0 UID: 0 PID: 4610 Comm: syz.2.410 Not tainted 6.15.0-rc6-syzkaller-00047-ge9565e23cd89 #0 PREEMPT(voluntary) [ 55.844212][ T4610] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 55.844227][ T4610] Call Trace: [ 55.844234][ T4610] [ 55.844242][ T4610] __dump_stack+0x1d/0x30 [ 55.844267][ T4610] dump_stack_lvl+0xe8/0x140 [ 55.844301][ T4610] dump_stack+0x15/0x1b [ 55.844321][ T4610] should_fail_ex+0x265/0x280 [ 55.844363][ T4610] should_failslab+0x8c/0xb0 [ 55.844438][ T4610] kmem_cache_alloc_node_noprof+0x57/0x320 [ 55.844458][ T4610] ? __alloc_skb+0x101/0x320 [ 55.844496][ T4610] __alloc_skb+0x101/0x320 [ 55.844643][ T4610] ? audit_log_start+0x365/0x6c0 [ 55.844681][ T4610] audit_log_start+0x380/0x6c0 [ 55.844723][ T4610] audit_seccomp+0x48/0x100 [ 55.844748][ T4610] ? __seccomp_filter+0x68c/0x10d0 [ 55.844780][ T4610] __seccomp_filter+0x69d/0x10d0 [ 55.844808][ T4610] ? update_load_avg+0x1da/0x820 [ 55.844855][ T4610] ? __list_add_valid_or_report+0x38/0xe0 [ 55.844883][ T4610] ? __set_next_task_fair+0x5b/0x150 [ 55.844977][ T4610] ? tracing_record_taskinfo_sched_switch+0x71/0x260 [ 55.845013][ T4610] ? _raw_spin_unlock+0x26/0x50 [ 55.845056][ T4610] ? finish_task_switch+0xad/0x2b0 [ 55.845182][ T4610] __secure_computing+0x82/0x150 [ 55.845208][ T4610] syscall_trace_enter+0xcf/0x1e0 [ 55.845230][ T4610] do_syscall_64+0xaa/0x1a0 [ 55.845299][ T4610] ? clear_bhb_loop+0x40/0x90 [ 55.845327][ T4610] ? clear_bhb_loop+0x40/0x90 [ 55.845353][ T4610] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 55.845438][ T4610] RIP: 0033:0x7fb910d6d37c [ 55.845454][ T4610] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 55.845474][ T4610] RSP: 002b:00007fb90f3d7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 55.845494][ T4610] RAX: ffffffffffffffda RBX: 00007fb910f95fa0 RCX: 00007fb910d6d37c [ 55.845509][ T4610] RDX: 000000000000000f RSI: 00007fb90f3d70a0 RDI: 0000000000000003 [ 55.845523][ T4610] RBP: 00007fb90f3d7090 R08: 0000000000000000 R09: 0000000000000000 [ 55.845579][ T4610] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 55.845590][ T4610] R13: 0000000000000000 R14: 00007fb910f95fa0 R15: 00007ffd584c1438 [ 55.845608][ T4610] [ 56.106790][ T4614] netlink: 4 bytes leftover after parsing attributes in process `syz.2.412'. [ 56.131830][ T4618] FAULT_INJECTION: forcing a failure. [ 56.131830][ T4618] name failslab, interval 1, probability 0, space 0, times 0 [ 56.144495][ T4618] CPU: 1 UID: 0 PID: 4618 Comm: syz.4.413 Not tainted 6.15.0-rc6-syzkaller-00047-ge9565e23cd89 #0 PREEMPT(voluntary) [ 56.144522][ T4618] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 56.144535][ T4618] Call Trace: [ 56.144543][ T4618] [ 56.144552][ T4618] __dump_stack+0x1d/0x30 [ 56.144642][ T4618] dump_stack_lvl+0xe8/0x140 [ 56.144666][ T4618] dump_stack+0x15/0x1b [ 56.144681][ T4618] should_fail_ex+0x265/0x280 [ 56.144759][ T4618] should_failslab+0x8c/0xb0 [ 56.144921][ T4618] kmem_cache_alloc_noprof+0x50/0x310 [ 56.144939][ T4618] ? sctp_get_port_local+0x420/0xab0 [ 56.145001][ T4618] sctp_get_port_local+0x420/0xab0 [ 56.145033][ T4618] sctp_do_bind+0x398/0x4b0 [ 56.145058][ T4618] sctp_connect_new_asoc+0x153/0x3a0 [ 56.145081][ T4618] sctp_sendmsg+0xf10/0x18d0 [ 56.145119][ T4618] ? selinux_socket_sendmsg+0x121/0x1b0 [ 56.145161][ T4618] ? __pfx_sctp_sendmsg+0x10/0x10 [ 56.145245][ T4618] inet_sendmsg+0xc5/0xd0 [ 56.145281][ T4618] __sock_sendmsg+0x102/0x180 [ 56.145370][ T4618] __sys_sendto+0x268/0x330 [ 56.145411][ T4618] __x64_sys_sendto+0x76/0x90 [ 56.145469][ T4618] x64_sys_call+0x2eb6/0x2fb0 [ 56.145494][ T4618] do_syscall_64+0xd0/0x1a0 [ 56.145523][ T4618] ? clear_bhb_loop+0x40/0x90 [ 56.145546][ T4618] ? clear_bhb_loop+0x40/0x90 [ 56.145641][ T4618] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 56.145666][ T4618] RIP: 0033:0x7fb26214e969 [ 56.145680][ T4618] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 56.145762][ T4618] RSP: 002b:00007fb2607b7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 56.145786][ T4618] RAX: ffffffffffffffda RBX: 00007fb262375fa0 RCX: 00007fb26214e969 [ 56.145801][ T4618] RDX: 0000000000034000 RSI: 0000200000000500 RDI: 0000000000000005 [ 56.145814][ T4618] RBP: 00007fb2607b7090 R08: 0000200000000140 R09: 000000000000001c [ 56.145824][ T4618] R10: 000000002000c851 R11: 0000000000000246 R12: 0000000000000001 [ 56.145835][ T4618] R13: 0000000000000000 R14: 00007fb262375fa0 R15: 00007ffd378e3e98 [ 56.145853][ T4618] [ 56.397270][ T4623] FAULT_INJECTION: forcing a failure. [ 56.397270][ T4623] name failslab, interval 1, probability 0, space 0, times 0 [ 56.410028][ T4623] CPU: 0 UID: 0 PID: 4623 Comm: syz.0.416 Not tainted 6.15.0-rc6-syzkaller-00047-ge9565e23cd89 #0 PREEMPT(voluntary) [ 56.410136][ T4623] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 56.410152][ T4623] Call Trace: [ 56.410159][ T4623] [ 56.410166][ T4623] __dump_stack+0x1d/0x30 [ 56.410192][ T4623] dump_stack_lvl+0xe8/0x140 [ 56.410217][ T4623] dump_stack+0x15/0x1b [ 56.410254][ T4623] should_fail_ex+0x265/0x280 [ 56.410303][ T4623] should_failslab+0x8c/0xb0 [ 56.410343][ T4623] kmem_cache_alloc_noprof+0x50/0x310 [ 56.410361][ T4623] ? security_file_alloc+0x32/0x100 [ 56.410441][ T4623] security_file_alloc+0x32/0x100 [ 56.410474][ T4623] init_file+0x5c/0x1d0 [ 56.410500][ T4623] alloc_empty_file+0x8b/0x200 [ 56.410523][ T4623] path_openat+0x68/0x2170 [ 56.410551][ T4623] ? _parse_integer_limit+0x170/0x190 [ 56.410606][ T4623] ? _parse_integer+0x27/0x40 [ 56.410641][ T4623] ? kstrtoull+0x111/0x140 [ 56.410678][ T4623] ? kstrtouint+0x76/0xc0 [ 56.410707][ T4623] do_filp_open+0x109/0x230 [ 56.410792][ T4623] do_sys_openat2+0xa6/0x110 [ 56.410865][ T4623] __x64_sys_creat+0x65/0x90 [ 56.410894][ T4623] x64_sys_call+0x114d/0x2fb0 [ 56.410922][ T4623] do_syscall_64+0xd0/0x1a0 [ 56.410991][ T4623] ? clear_bhb_loop+0x40/0x90 [ 56.411018][ T4623] ? clear_bhb_loop+0x40/0x90 [ 56.411046][ T4623] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 56.411084][ T4623] RIP: 0033:0x7f2a81cbe969 [ 56.411168][ T4623] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 56.411191][ T4623] RSP: 002b:00007f2a80327038 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 56.411215][ T4623] RAX: ffffffffffffffda RBX: 00007f2a81ee5fa0 RCX: 00007f2a81cbe969 [ 56.411230][ T4623] RDX: 0000000000000000 RSI: 00000000000000e8 RDI: 00002000000002c0 [ 56.411246][ T4623] RBP: 00007f2a80327090 R08: 0000000000000000 R09: 0000000000000000 [ 56.411261][ T4623] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 56.411273][ T4623] R13: 0000000000000000 R14: 00007f2a81ee5fa0 R15: 00007ffd16947d38 [ 56.411356][ T4623] [ 56.647192][ T4626] ================================================================== [ 56.655331][ T4626] BUG: KCSAN: data-race in mas_state_walk / mas_wmb_replace [ 56.662631][ T4626] [ 56.664953][ T4626] write to 0xffff8881090f4600 of 8 bytes by task 4624 on cpu 1: [ 56.672581][ T4626] mas_wmb_replace+0xe46/0x14a0 [ 56.677444][ T4626] mas_wr_store_entry+0x17ae/0x2b60 [ 56.682657][ T4626] mas_store_prealloc+0x74d/0x9e0 [ 56.687694][ T4626] vma_iter_store_new+0x1c5/0x200 [ 56.692742][ T4626] vma_complete+0x125/0x570 [ 56.697261][ T4626] __split_vma+0x54c/0x610 [ 56.701684][ T4626] vma_modify+0x107/0x210 [ 56.706030][ T4626] vma_modify_flags+0x101/0x130 [ 56.710897][ T4626] mprotect_fixup+0x2cc/0x570 [ 56.715577][ T4626] do_mprotect_pkey+0x6d6/0x980 [ 56.720434][ T4626] __x64_sys_mprotect+0x48/0x60 [ 56.725294][ T4626] x64_sys_call+0x2794/0x2fb0 [ 56.729980][ T4626] do_syscall_64+0xd0/0x1a0 [ 56.734492][ T4626] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 56.740396][ T4626] [ 56.742719][ T4626] read to 0xffff8881090f4600 of 8 bytes by task 4626 on cpu 0: [ 56.750264][ T4626] mas_state_walk+0x485/0x650 [ 56.754948][ T4626] mas_walk+0x30/0x120 [ 56.759022][ T4626] lock_vma_under_rcu+0xa2/0x2f0 [ 56.763973][ T4626] do_user_addr_fault+0x233/0x1090 [ 56.769114][ T4626] exc_page_fault+0x54/0xc0 [ 56.773622][ T4626] asm_exc_page_fault+0x26/0x30 [ 56.778491][ T4626] [ 56.780810][ T4626] value changed: 0xffff888104b6b60e -> 0xffff8881090f4600 [ 56.787912][ T4626] [ 56.790234][ T4626] Reported by Kernel Concurrency Sanitizer on: [ 56.796385][ T4626] CPU: 0 UID: 0 PID: 4626 Comm: syz.1.418 Not tainted 6.15.0-rc6-syzkaller-00047-ge9565e23cd89 #0 PREEMPT(voluntary) [ 56.808710][ T4626] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 56.818768][ T4626] ================================================================== [ 56.872017][ T4630] FAULT_INJECTION: forcing a failure. [ 56.872017][ T4630] name failslab, interval 1, probability 0, space 0, times 0 [ 56.884756][ T4630] CPU: 0 UID: 0 PID: 4630 Comm: syz.0.417 Not tainted 6.15.0-rc6-syzkaller-00047-ge9565e23cd89 #0 PREEMPT(voluntary) [ 56.884817][ T4630] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 56.884832][ T4630] Call Trace: [ 56.884840][ T4630] [ 56.884849][ T4630] __dump_stack+0x1d/0x30 [ 56.884874][ T4630] dump_stack_lvl+0xe8/0x140 [ 56.884907][ T4630] dump_stack+0x15/0x1b [ 56.884921][ T4630] should_fail_ex+0x265/0x280 [ 56.884961][ T4630] should_failslab+0x8c/0xb0 [ 56.885075][ T4630] kmem_cache_alloc_noprof+0x50/0x310 [ 56.885095][ T4630] ? alloc_empty_file+0x76/0x200 [ 56.885142][ T4630] alloc_empty_file+0x76/0x200 [ 56.885202][ T4630] alloc_file_pseudo+0xc6/0x160 [ 56.885223][ T4630] anon_inode_getfd+0xc1/0x150 [ 56.885262][ T4630] __se_sys_fsopen+0x193/0x1e0 [ 56.885351][ T4630] __x64_sys_fsopen+0x31/0x40 [ 56.885383][ T4630] x64_sys_call+0x2a54/0x2fb0 [ 56.885408][ T4630] do_syscall_64+0xd0/0x1a0 [ 56.885506][ T4630] ? clear_bhb_loop+0x40/0x90 [ 56.885533][ T4630] ? clear_bhb_loop+0x40/0x90 [ 56.885560][ T4630] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 56.885586][ T4630] RIP: 0033:0x7f2a81cbe969 [ 56.885669][ T4630] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 56.885685][ T4630] RSP: 002b:00007f2a80327038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 56.885703][ T4630] RAX: ffffffffffffffda RBX: 00007f2a81ee5fa0 RCX: 00007f2a81cbe969 [ 56.885715][ T4630] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000200000000080 [ 56.885729][ T4630] RBP: 00007f2a80327090 R08: 0000000000000000 R09: 0000000000000000 [ 56.885744][ T4630] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 56.885759][ T4630] R13: 0000000000000000 R14: 00007f2a81ee5fa0 R15: 00007ffd16947d38 [ 56.885864][ T4630]