last executing test programs: 4.620083625s ago: executing program 0 (id=1019): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x5, 0x9, &(0x7f00000004c0)=0x1) prctl$PR_SET_NAME(0xf, &(0x7f0000000a40)='GPL\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ffd, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) request_key(0x0, &(0x7f0000000080)={'syz', 0x0}, &(0x7f0000000140)='\\\\@[*#)\x00', 0xfffffffffffffffe) r1 = socket(0x2a, 0x2, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x78, 0x24, 0xf0b, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x5}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0xff, 0xec2, 0x5, 0x1, 0x400}, 0x10000, 0x1, 0x7ff, 0x6, 0xe, 0x14, 0x1f, 0x1b, 0x6, 0x2, {0x6, 0x19d, 0xa9, 0x8, 0x7743, 0xfd1}}}}]}, 0x78}}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000680)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f00000006c0)='kmem_cache_free\x00', r4}, 0x10) mbind(&(0x7f00005f7000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x0, 0x0) syz_clone3(&(0x7f00000007c0)={0x100002000, 0x0, 0x0, 0x0, {0xc}, 0x0, 0x0, 0x0, &(0x7f0000000540)=[0x0], 0x1}, 0x58) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000013c0)=[{{&(0x7f0000000980)=@l2tp={0x2, 0x0, @remote, 0x1}, 0x80, &(0x7f0000000d40)=[{&(0x7f0000000580)="c392f7beb535279e349efe843382c3a0c060353406cf2402bb529f3a3f19106e168d92258bcbe095e1d44d", 0x2b}, {&(0x7f0000000ac0)="0cafcb85f8038e908afd2bc1e3c7a4567ae7e04f2d069535ce9a68c2efa1062e6157c7f0a0112cf60d7d11c437808b232c10b063e51b2ba5aad6e10e56b7524299781b10f3444f06850b74acdd78f17a4142a7d4c56c965c0ddda178b7613e922030a0bedc385ec17b824ba795088efd1abc74225027e782715cdf7ceac233043ba32a54fceadfa72e5d432d2f74f533c517d633064a9cc73cd748dca01427782c", 0xa1}, {&(0x7f0000000b80)="db8a46ca9d01879ba5170c3ffdf6f4ffd377d9628619dd54f6ca52697e1c6d2723375b3cd547a441f1517d6612ec142b9f57313207245a4c415d92095b13b8959ef5a64718f6a9063e57148a4981b6a816147add485b7c4bff39cfe2874890d26578820e8921a74747aecff1fdbdc2a63e011f7d605b38bc275ef07e4c97441c2a7e3854aca75a98f545d2b70ece20387b80715c7aec", 0x96}, {&(0x7f0000000c40)="0306ea9c55e066c68cd5474cb05930c280cd40fbbca5238a56eabf2881896fa3a2c807c993ace959bf3a821fcb03acabadf01bc52738f7afad5ca6801de3f55dd1dca6d0af1cb7eeca31d8e8f3ec8fe198a0c1ac49e63b06da43515a3ad148e7a58edfd4970eba07cfbf161541e6105097463a", 0x73}, {&(0x7f0000000cc0)="2fd779e27647abb8a92f698910c51e652616def2738fc1e1dd992f2aab76ddd6d9ae54bb85c1d2ed0ddd7210ed30e28d2db77f4cfe7503bd0920af3139b27d25a9b5301e168cd04f29e470c44f52f5f64558da43204bb8da8c6b5be15fc33962b624fc8930", 0x65}], 0x5, &(0x7f0000000dc0)=[{0xc0, 0x101, 0x6, "77866ae390ddddb569ef90aa10293cdbdfb460f3e045581c28c89557cf2f566c824f965f363f9b32b31d1758b2e2738c5157b6dc2e85a7881a22d9f0c6419d2618e775bc54436d3647f942efaae3daf0eff5091c878df24db1dc51728c17d908dca4692392e11b75e8f508b7811301d3196fdcafca02424634db393ac759d97f55e0c95ccfe7aec0d91fd0227b6cd4269d2ccdf3b7ba9e728e29666b63f84267353b5ef893524eb1be66"}, {0x110, 0x119, 0x2, "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"}, {0x18, 0x113, 0x800, "df5724b44de7c2"}, {0x80, 0x113, 0x2, "5ccabdce30f46482ea97483aea7b16734267d0bd9b5ecb0176dfab6d0aa7b0a4cc8b1b06a70181693a3d520a0fdba905f932658aa0712fc6de81e770f1faa1d91f924b48fdce6c8126c8c90b5bf85098b39da6c6ccf5738005060c53cf20ae07ab50cd68ec99b56159de"}], 0x268}}, {{&(0x7f0000001100)=@generic={0x29, "d113e2c53b2d71b017f725af7ad7add2c5d5bbb771560370a2ed0d883782f7ce3dac00b5c0ba4fe93115a811985594babd083b932b45400c742ae65e3eea11b183dfe5ed659e377c11fc17dfd15d8e5374d24accd19447a854b5896a3cd226e9b01728b41c7ca57c6384942cff4e5df7fe9815961cb867eac548ef5b8513"}, 0x80, &(0x7f0000001380)=[{&(0x7f0000000740)="7ac9a8090f5c8e8dd03b260b630dc1e2e0d4f5dae9e8ba8f055d13845b41bf1ecbed4e908aa11fb6746bd5b91e6e59c56fceb02060ba080814743bc8e6a67435", 0x40}, {&(0x7f0000001180)="7025cf9cd793e8fe32830c731805cbe5967be845412aafdd72a96645f6ca6430dbca3f58f30bb0c7099c07bca535c64cfbd611015e7841d45d9ebfaa5e15dd8a3f488d297cd4b8b425e470aac0821f7f66ed05f2a1b33eb8b4cc0d0d48065bd4fbcca22314d9dfd46a7b7e6e6012cbce3195551875400374d7d28ebf9ee0f314ca88f78389c736c260dd07dbec0483180bb81b57935fafc76dfa1f9b9890a6055b55017df92a1cb2f3aa21d08013d4b04138d6debdb3821ed9b2157b6ba7f3b5a040796eaaace78f0e20c158c81770a893ee3fc6a3971b226495b4", 0xdb}, {&(0x7f0000001280)="44a35aa07d49dadb9e5477eaa7a3690e5891a8387a65fb72f0475e693efcbefdc3b7a34fe039de516d2f39e74ae6041597edb7a9d2d77c2eb89d4b19461c259273e0a7b2df20af9df46caba39ecbc7e162ac6bc64655cb35728184a5fbd2be1b1472b9057dc1a52b035cdb04a0401399532f954e24372f76061e3fc5569f709e0307f057e7a7cbc1468a00b19a798e6fcf25e057c5f2bcc777869a3670f1ef6618d82201b603202090d0dcc46c4420f8beb5b474cd6cc3c0291c1431f1eaa12731f5c822af40070d375d9932", 0xcc}, {&(0x7f0000001bc0)="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", 0x1000}], 0x4}}], 0x2, 0x14) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002d40)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = gettid() r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000005000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000001440), &(0x7f00000014c0)=0xc) r10 = syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', 0x8, &(0x7f0000000780)=ANY=[@ANYBLOB], 0xfd, 0x1bf, &(0x7f0000000300)="$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") rmdir(&(0x7f0000000100)='./file0\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r9}, 0x10) sendmsg$unix(r7, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000640)='Q', 0x1}], 0x1, &(0x7f0000001040)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r8, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32=r7, @ANYRES32=r6, @ANYRES32=r6, @ANYRES32=r7, @ANYRES32=r6, @ANYRES32=r7, @ANYRES32=r6, @ANYRES32=r7, @ANYBLOB="1c000000000000000100000402000000", @ANYRES32, @ANYRES32=0xee01, @ANYRES32=r10, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r6, @ANYBLOB="e5ffff6e18"], 0xa0}, 0x4004881) setrlimit(0x9, &(0x7f0000000000)) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000020000000000000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r11}, 0x10) io_setup(0x2004, &(0x7f0000000680)) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x160) ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x8108551b, &(0x7f0000000840)={0x4, 0x3, "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"}) 3.412673825s ago: executing program 0 (id=1039): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x1a, 0xc, &(0x7f00000003c0)=ANY=[@ANYRESOCT, @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, @void, @value}, 0x94) socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'veth1_to_hsr\x00', 0x0}) quotactl$Q_QUOTAOFF(0xe94e643b68d5d9ad, 0x0, 0x0, 0x0) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x65, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r5, &(0x7f0000000300)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) socket$packet(0x11, 0xa, 0x300) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r6}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="05000000050000000200000004"], 0x48) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000800)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x3}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_QUANTUM={0x8, 0x7, 0x300}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x3}, 0x20004004) sendto$packet(r1, &(0x7f00000000c0)="3f031c000302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) r7 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newtaction={0x54, 0x30, 0x51b, 0x0, 0x0, {}, [{0x40, 0x1, [@m_skbmod={0x3c, 0x9, 0x0, 0x0, {{0xb}, {0x10, 0x2, 0x0, 0x1, [@TCA_SKBMOD_DMAC={0xa, 0x3, @broadcast}]}, {0x4, 0x14}, {0xc}, {0xc, 0x6}}}]}]}, 0x54}}, 0x4004) 3.114979019s ago: executing program 0 (id=1042): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000bd878385506bc50f61b7697e9efb9562a47bfa7a47a0f4b84d9649b7ced97296b9e1f025a9977d7e7cdf2f5169576bf3b64e48f0cf012d3b380578114a62ecbdd745fffac872b87ebb4635d4b477d5228454770ab33867c79343d01258d63a5dfc7d2d043eacc79a9e0b4e0862d364eac2862705dd289f"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000900)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f00000002c0)='./file0\x00', 0xc80, &(0x7f0000020100)=ANY=[@ANYBLOB="00631dda01aef2456795dd9b26209f1c0f624854ea3dd5a00bd6df44035f5c3ae796fec6d633a0ffad0569794acfef7da01767fd4175f2cd82df769aa2ee7bfe3640554507d2e660c9f9e222a72e1e3e71145c480657d2864e5e276f028d64701ae31cde0ceaf408fdb05c0f4142da00e900000100000149e6d308cbe315789f4baffe39bbced9b1d421d2e290e9fc563b62225f002ee310e1fa7321000000000000d6231001a4b2d467825f3abb0c167e129cf1fa0e7854103f4bf2d3a0194983bc86cbd3d75ccef3c8ac4516dac102"], 0x1, 0x26d, &(0x7f0000000600)="$eJzs281OE1EYxvGHDwFBmCqKgjG+0Y1uJlCvoCGQGJtokBo/EpNBptp0aEmnwdQYYefW6yAu3ZkYb4CNV+DCHRuXLIxjOlOgxSaGhUy0/99m3ub0ac/pe9qcRWf34bu1cjF0i15d/X2mQWlLe1JG/RpQoq917Y/rIbXb0s3J/Ncr9x89vpPL5xeWzBZzy7eyZjZx9dPL1++vfa6PPfgw8XFYO5mnu9+z33amdqZ3fy6/KIVWCq1SrZtnK9Vq3VsJfFsthWXX7F7ge6FvpUro1zrGi0F1fb1hXmV1fHS95oeheZWGlf2G1atWrzXMe+6VKua6ro2PCn9S2F5a8nJpzwJ/V62W8+YlzUjDnSOF7bTmBAAA0sP5v5dx/u8FzfP/k9b3txPnfwAAAAAAAAAAAAAAAAAAAAAA/gV7UeREUeTsX09J8R0+UevxaUmjksYknZE0LmlCkiMpI+mspHOSJiWdl3RB0pSki5IuSZpue62014rf0f/eRv97G/3vbW037o5Ia283ChuF5JqM54oqKZCvWTn6EfeyJakXb+cXZi2W0eW1zVZ+c6Mw0Jmfk9PcMN3yc0neOvPDzX03dJDPymlusG75bNf8iG5cb3t/V46+PFNVgVbjPXmYfzNnNn83fyQ/Ez/vf+faga79c9328RFJ++NJ/hj748jnO6iZwXTXDilsvCp7QeDXKCgoKA6KtH+ZcBIOm572TAAAAAAAAAAAAAAAAAAAx3ESfydMe40AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABz1KwAA//+X4l6r") r3 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$nl_route(r0, &(0x7f0000000880)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000580)={&(0x7f00000008c0)=ANY=[@ANYRESOCT=r2, @ANYRES16=r2, @ANYRES32=r1], 0x28}, 0x1, 0x0, 0x0, 0x4c841}, 0xc004880) ioctl$sock_inet6_udp_SIOCINQ(r3, 0x541b, &(0x7f00000004c0)) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0) mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) r4 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x100) r5 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x7f, 0x0, 0x20, 0x0, 0x8000, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x2, @perf_config_ext={0xf60, 0x40ffffffff}, 0x1100, 0x5, 0x3a65, 0x5, 0x0, 0x5, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b40)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) r7 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r7, 0x40345410, &(0x7f0000000040)={{0x1, 0x3, 0x7fffffff}}) ioctl$SNDRV_TIMER_IOCTL_INFO(r7, 0x80e85411, 0x0) getdents(r4, &(0x7f0000001fc0)=""/184, 0xb8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000003c0)={r0, &(0x7f0000000300)="6b3331eb12ad677ab83d801ee024f55de55e39c0eab811e477115343a1ddefba2dce08f8332c0486bbc9db2214f2bbf6876604c9972f4a0d2e0bd730aff259cabff0432e310cb772842f93ae203b9c1d4941683636099449611d6cc3543a114f3b9f4b061aa15292a25be64597d14dcb7abc", &(0x7f00000001c0)=@tcp6=r0, 0x4}, 0x20) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x4, 0x10, &(0x7f0000000280)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000380)={r8, r2, 0x25, 0x2, @val=@tcx={@void, @value}}, 0x1c) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000a00000008"], 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r10}, 0x10) inotify_init1(0x0) r11 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r11, &(0x7f0000000200)={0x2, 0x4e24, @multicast2}, 0x10) 2.865657943s ago: executing program 0 (id=1047): r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_timeval(r0, 0x1, 0x42, &(0x7f00000002c0), &(0x7f0000000680)=0x27) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x1004408, &(0x7f0000000240), 0x1, 0x782, &(0x7f0000000b00)="$eJzs3M9rHOUbAPBnJtmkP/L9JoIH9SBCCy2UbpLm0p6MF/FSKBS81pBMQsgkW7Kb2sRCG89CbS4Kgujdo1eh1D/AmxQU/AtEay7iZWU2mzQ/dtOkTbI1/XxgMu/7zjvv8z672Zcd2JkAXlnvFH+SiL6IuBYR/c32NCJ6GqUTEffW+q0+uTNebEnU69f/SIrTYrXevzFW0tyfjsYp8UZEPCpFXPh0Z9zq4tLMWJ5n8836YG325mB1ceni9OzYVDaVzQ2PXBm6PDJyeWjkwHI9++GVkw9+en9l5efva/ff7r6YxGgj72jmdmCBNll7TUoxuq197jCCdVBSf3af7qOYCAAAuyq+53c196Xojy7f0gAAAODYqffWAQAAgGMviU7PAAAAADhc678DWL+397Dug23n9/ciYqBV/O7GPcQRJ6IUEadWky13JiRrp8ELubccEQ9HW/z/Jc3/v+c3tK2evOB4HLyHxfoz2mr9STfWn2ix/nSvPzvhBRXrX6nl+vs0fleb9e9aqwFP7mz64es3S23jL0e81d0qfrIRP2kT/6OWIy7vaLm/8tmDdvHr30aca5l/siXWYK14H9afD9G1+fkQg5PT+a4frUf/nH+8W/6ndsRPkkbUZPf8b+4WdJNPVv+aabeWFPHPn1mL37XlSLrt9e/dcrTo+3lzHmlEPGjui/rKthhnZn/5cWfk5N56/Ik2r3/r9/+Djfy/2WP+v33Xe3uPXQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKAhjYi+SNLyRjlNy+WI0xHxepxK80q1dmGysjA3URyLGIhSOjmdZ0MR0b9WT4r6cKP8tH5pW30kIl779eRa0Ok8K49X8olOJw8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMCG0xHRF0lajog0Irp37d1zZPMCAAAADtjAzqYkkk7MBAAAADgsLa7/AQAAgGPmea///UQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA2IdrV68WW331yZ3xoj5xa3FhpnLr4kRWnSnPLoyXxyvzN8tTlcpUnpXHK7PPGi+NiOErsXB7sJZVa4PVxaUbs5WFudqN6dmxqexGVjqSrAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANivvsaWpOWISBvlNC2XI/4XEQNRSian82woIv4fEY/7S71FfbjTkwYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAODAVReXZsbyPJtX+C8WIol4CabxKhXafWQi9jPO3XjZ37hOr0wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHRCdXFpZizPs/lqp2cCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAJ9Xr9XoSEcV2rv9s3/bjPcnf/Y19RHz81fUvbo/VavPDRfufG+21L5vtlzadePcoswAAAIBj7939dF6/Tl+/jgcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANir6uLSzFieZ/N7L/RGxG59eiJiS0ssdzpLAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgefwbAAD//y1pu2Y=") 2.817214684s ago: executing program 0 (id=1048): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$pppl2tp(0x18, 0x1, 0x1) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYRES8=r2, @ANYRES16=r1, @ANYRESHEX=r0], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x6, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0x4, @local, 0x4}, 0x1c) connect$pppl2tp(r4, &(0x7f00000002c0)=@pppol2tpin6={0x18, 0x1, {0x0, r6, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) writev(r4, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x34000}], 0x1) syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_TOL(r1, 0x0, 0x0) sendmsg$TIPC_CMD_DISABLE_BEARER(r0, 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, r5, {0xc42d}}, './file0\x00'}) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x2000004c, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, @fallback=0x2d, r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r9}, 0x10) r10 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) perf_event_open(&(0x7f0000001700)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x40002}, 0x806, 0x3, 0xa, 0x5, 0x2, 0x1, 0x4, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x5) r11 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNIMAP(r11, 0x4b66, &(0x7f00000000c0)={0x0, 0x0}) r12 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r13, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x4, 0x10000, 0x0, 0xffffffff}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20004815}, 0x0) 2.812753204s ago: executing program 2 (id=1050): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000027b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000e00)='kfree\x00', r1, 0x0, 0x4ab}, 0x18) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x3000490, &(0x7f0000000100)={[{@lazytime}, {@usrjquota}, {@errors_remount}, {@noauto_da_alloc}, {@auto_da_alloc}, {@mblk_io_submit}, {@grpquota}, {@barrier_val}, {@grpjquota}, {}, {}, {@usrjquota}]}, 0x45, 0x7b1, &(0x7f00000004c0)="$eJzs3c9rHNcdAPDvrFY/7VYqFFr3JCi0BuNV5ap2C4Wq9FAKNRjaUw+1xWotHK20RrsylhCJTQjkEkhCbsnF5/y8hFzz45BL8n8EGyeRTRxyCAqzP6SVtCvvOtKuHX8+MNZ7M2/2ve+82TfPmtFuAE+tyfSfTMSJiHg5iRivr08iYrCaykbM1so92NzIp0sSW1v/+Sqplrm/uZGPpn1Sx+qZX0fExy9EnMrsr7e8tr44VywWVur5qcrS1any2vrpK0tzC4WFwvLZ6ZmZM+f+dO7s4cX6zefrx++88s/fvzP73fO/evelT5KYjeP1bc1xHJbJmKwfk8H0EO7yj8OurG/ef7aDQk1nQPYoG0OX0o4ZqPfKiRiPgYP6Z7SXLQMAjspzEbHVzkDbLQDAEy2pXf//1u92AAC90vg9wP3NjXxj6e9vJHrr7t8jYqQWf+P+Zm1Ltn7PbqR6H3TsfrLrzkgSEROHUP9kRLzxwf/fSpc4ovuQAK3cuBkRlyYm94//yb5nFrr1h9arF5ozk3s2Gv+gdz5M5z9/bjX/y2zPf6LF/Ge4xXv3UTz8/Z+5fQjVtJXO//7a9Gzbg6b46yYG6rmfVed8g8nlK8VCOrb9PCJOxuBwmp8+oI6T976/125b8/zv61efeTOtP/25UyJzOzu8e5/5ucrcj4m52d2bEb/Jtoo/Hf+Hq/2ftJn/Xuiwjn/95cXX221L40/jbSz74z9aW7ciftey/5PtMsmBzydOVU+HqcZJ0cJ7szHWrv7J7E7/p0taf+P/Ar2Q9v/YwfFPJM3Pa5Y7funtp8U+uzX+UbtCzed/6/hbn/9DyX+r6aH6uutzlcrKdMRQ8u/968/s7NvIN8qn8Z/8bev3f2P8a3H+/y99/UsdHojsnS/ffvT4j1Ya/3xX/d91IkYeLA60q7+z/p/ZtU8n41+nDXzU4wYAAAAAAAAAAAAAAAAAAAAAAAAA3chExPFIMrntdCaTy9W+w/uXMZYplsqVU5dLq8vzUf2u7IkYzDQ+6nK86fNQp+ufh9/In9mT/2NE/CIiXhsereZz+VJxvt/BAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEDdsTbf/5/6YnhP4YF+tBAAOBIjLuwA8LRJstl+NwEA6LWRrkqPHlk7AIDe6e76DwD8FLj+A8DT5yHX/71/BgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADdunD+fLpsfbu5kU/z89fWVhdL107PF8qLuaXVfC5fWrmaWyiVFoqFXL601PaFbtR+FEulqzOxvHp9qlIoV6bKa+sXl0qry5WLV5bmFgoXC4M9iwwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOldeW1+cKxYLKxJ9SSx+WuuHx6U9Et0l4kat/x6X9hxeIoZ2RonR/gxOAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAE+AHwIAAP//4VQjgA==") perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x800000000003}, 0x1100, 0x5dd8, 0x0, 0x5, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r2, &(0x7f0000000140)='2', 0x1, 0x8000c61) ioctl$EXT4_IOC_MOVE_EXT(r2, 0x40305829, &(0x7f00000002c0)={0x17c04, 0xffffffffffffffff, 0x2, 0x100000001, 0x400, 0x8001}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6}]}) socket$inet(0x2, 0xa, 0xfffffff7) quotactl$Q_QUOTAON(0xffffffff80000102, &(0x7f0000000140)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) 1.946183469s ago: executing program 2 (id=1059): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000003c0)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='sched_switch\x00', r0}, 0x18) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x1, 0x800001, 0x0, 0x0, 0x0) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x3d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x62000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100000, 0x0, 0x0, 0x6, 0x3, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x80801c, &(0x7f0000000580), 0x1, 0x503, &(0x7f0000000880)="$eJzs3c9vI1cdAPDvOL+cNG3S0gMgoEspLGi1TuJto6oHWE4IoUqIHkHahsQbRbHjKHZKE/aQ/g9IVOIER/4Azj1x54LgxmU5IPEjAm1W4mA040nWm7U3ZpPYUfz5SKN5b2bs73trzXv21xu/AEbWjYg4iIjJiPgwIuby40m+xd32ll736PDB6tHhg9UkWq0P/plk59Nj0fGY1Ev5cxYj4kffi/hp8mzcxt7+5kq1WtlpV6cXmrXthcbe/u2N2sp6Zb2yVS4vLy0vvnvnnfKF9fWN2mRe+vLDPxx86+dps2bzI539uEjtrk+cxEmNR8QPLiPYEIzl/ZkcdkN4IYWIeC0i3szu/7kYy15NAOA6a7XmojXXWQcArrtClgNLCqU8FzAbhUKp1M7hvR4zhWq90bx1v767tdbOlc3HROH+RrWymOcK52MiSetLWflJvXyqficiXo2IX0xNZ/XSar26Nsw3PgAwwl46Nf//Z6o9/wMA11xx2A0AAAbO/A8Ao8f8DwCjx/wPAKPnyfx/d6jtAAAGx+d/ABg95n8AGCk/fP/9dGsd5b9/vfbR3u5m/aPba5XGZqm2u1pare9sl9br9fXsN3tqZz1ftV7fXno7dj+e//Z2o7nQ2Nu/V6vvbjXvZb/rfa8yMZBeAQDP8+obn/05iYiD96azLTrWcjBXw/VWGHYDgKEZG3YDgKGx2heMrnN8xpcegGuiyxK9TylGxPTpg61Wq3V5TQIu2c0vyP/DqOrI//tfwDBi5P9hdMn/w+hqtZJ+1/yPfi8EAK42OX6gx/f/r+X73+ZfDvxk7fQVn15mqwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOBqO17/t5SvBT4bhUKpFPFyRMzHRHJ/o1pZjIhXIuJPUxNTaX1pyG0GAM6r8LckX//r5txbs6fPTiaPp7J9RPzsVx/88uOVZnPnj+nxf50cb36aHy8Po/0AwFmO5+ls3/FB/tHhg9XjbZDt+ft3I6LYjn90OBlHJ/HHYzzbF2MiImb+neT1tqQjd3EeB59ExOe79T+J2SwH0l759HT8NPbLA41feCp+ITvX3qf/Fp+7gLbAqPksHX/udrv/CnEj23e//4vZCHV++fiXPtXqUTYGPol/PP6N9Rj/bvQb4+3ff79dmn723CcRXxyPOI591DH+HMdPesR/q8/4f/nSV97sda7164ib0T1+Z6yFZm17obG3f3ujtrJeWa9slcvLS8uL7955p7yQ5agXes8G/3jv1itZocslaf9nesQvntH/r/fZ/9/898Mff7XHuTT+N7/WLX4hXn9O/HRO/Eaf8VdmflfsdS6Nv9aj/2e9/rf6jP/wr/vPLBsOAAxPY29/c6VarewMsnD8RmKgQRX6K0zlL85Vac9ThSvbsM2V6ncGFWsy/q9HtVovFKvXiHERWTfgKji56SPi8bAbAwAAAAAAAAAAAAAAdHWpf6iUtAvD7iMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADX1/8CAAD//8jOyzo=") bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000001040)={'gre0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x2f00, 0x0, 0x4, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x4, 0x2f, 0x0, @empty, @multicast1}}}}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f00000004c0), 0x208e24b) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000ffc000/0x4000)=nil) brk(0x20001000) socket(0x2, 0x80805, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000200), &(0x7f0000000280)=0xc) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="09000000070000000000010003"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x3, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000540)='inet_sock_set_state\x00', r4}, 0x10) socket$inet(0x2, 0x1, 0x0) 1.585095724s ago: executing program 2 (id=1065): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x0, 0x4, &(0x7f0000000200)=ANY=[@ANYRESDEC=r0], 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000600)='kmem_cache_free\x00', r1}, 0x18) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ffa000/0x3000)=nil) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendto$inet(r2, &(0x7f0000000040)="0400", 0xffec, 0x0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) 1.411165958s ago: executing program 1 (id=1070): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000580)='./file1\x00', 0x40, &(0x7f0000000340), 0x1, 0x573, &(0x7f0000000ec0)="$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") prctl$PR_SET_SECUREBITS(0x1c, 0x2c) setuid(0xee00) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r0, &(0x7f0000001240)=""/102400, 0x200000, 0x0) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000040)={0x4, 0x3ff, "6beca7", 0x3, 0x81}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) fsetxattr$system_posix_acl(r1, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000640)={{}, {0x1, 0x6}, [], {0x4, 0x5}, [{0x8, 0x7}, {0x8, 0x3}], {0x10, 0x2}, {0x20, 0x7}}, 0x34, 0x1) symlink(&(0x7f0000000700)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000780)='./file0\x00') set_mempolicy(0x6, &(0x7f00000003c0)=0x8000000000000001, 0xe0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc4042, 0x1d7) sendfile(r2, r2, 0x0, 0xfffe80) 1.410629218s ago: executing program 2 (id=1071): r0 = socket(0x10, 0x80002, 0x4) setuid(0xee00) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000b00)=@newtaction={0x44, 0x13, 0x53b, 0x1, 0x0, {}, [{0x30, 0x1, [@m_ife={0x2c, 0x2, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x4004000) 1.374685708s ago: executing program 2 (id=1073): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000027b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000e00)='kfree\x00', r1, 0x0, 0x4ab}, 0x18) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x3000490, &(0x7f0000000100)={[{@lazytime}, {@usrjquota}, {@errors_remount}, {@noauto_da_alloc}, {@auto_da_alloc}, {@mblk_io_submit}, {@grpquota}, {@barrier_val}, {@grpjquota}, {}, {}, {@usrjquota}]}, 0x45, 0x7b1, &(0x7f00000004c0)="$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") perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x800000000003}, 0x1100, 0x5dd8, 0x0, 0x5, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r4 = dup(r3) ioctl$PTP_EXTTS_REQUEST2(r4, 0x43403d05, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r5, &(0x7f0000000140)='2', 0x1, 0x8000c61) ioctl$EXT4_IOC_MOVE_EXT(r5, 0x40305829, &(0x7f00000002c0)={0x17c04, 0xffffffffffffffff, 0x2, 0x100000001, 0x400, 0x8001}) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socket$inet(0x2, 0xa, 0xfffffff7) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 993.340794ms ago: executing program 1 (id=1076): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffe2e, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x200008, &(0x7f00000001c0)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@quota}]}, 0x1, 0x504, &(0x7f0000001000)="$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") r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000380)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f00000004c0)=[{0x4, 0x0, [0x40, 0x800, 0x7ff, 0x7, 0x5, 0x2, 0x5, 0x3, 0xfd7e, 0x2d73, 0x4, 0x0, 0x200, 0x3, 0x6, 0x6]}, {0x2b, 0x0, [0x7ff, 0xfffffffe, 0x3, 0x9, 0x1, 0x5d64, 0x6, 0xffffffff, 0x8, 0xd91a, 0xff, 0x7fffffff, 0x4, 0x8, 0x8001, 0x175bfffd]}], 0xffffffffffffffff, 0x1, 0x1, 0x90}}, 0x20) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002700)=""/102392, 0x18ff8) ioctl$KDFONTOP_SET(r2, 0x4b72, &(0x7f0000000040)={0x0, 0x0, 0x8, 0x10, 0x200, &(0x7f0000000080)="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"}) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f00000000000000000a000000000000000800010001000000040004"], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmmsg(r4, &(0x7f0000000000), 0x4000000000001f2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r5, 0x0) openat$sysfs(0xffffff9c, &(0x7f00000000c0)='/sys/power/wakeup_count', 0x42, 0x0) 879.084686ms ago: executing program 2 (id=1078): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000027b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000e00)='kfree\x00', r1, 0x0, 0x4ab}, 0x18) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x3000490, &(0x7f0000000100)={[{@lazytime}, {@usrjquota}, {@errors_remount}, {@noauto_da_alloc}, {@auto_da_alloc}, {@mblk_io_submit}, {@grpquota}, {@barrier_val}, {@grpjquota}, {}, {}, {@usrjquota}]}, 0x45, 0x7b1, &(0x7f00000004c0)="$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") perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x800000000003}, 0x1100, 0x5dd8, 0x0, 0x5, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r4 = dup(r3) ioctl$PTP_EXTTS_REQUEST2(r4, 0x43403d05, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r5, &(0x7f0000000140)='2', 0x1, 0x8000c61) ioctl$EXT4_IOC_MOVE_EXT(r5, 0x40305829, &(0x7f00000002c0)={0x17c04, 0xffffffffffffffff, 0x2, 0x100000001, 0x400, 0x8001}) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6}]}) socket$inet(0x2, 0xa, 0xfffffff7) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000005000000010001000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000170000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000feffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) quotactl$Q_QUOTAON(0xffffffff80000102, &(0x7f0000000140)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) r7 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_msfilter(r7, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e0000001ac1414aa0000000002000000ac"], 0x18) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000880)={{{@in=@rand_addr=0x64010102, @in6=@mcast2, 0x4e24, 0x6, 0x4e22, 0x6, 0x0, 0xa0, 0x80, 0x1d, 0x0, 0xee00}, {0x9, 0x6, 0x4, 0x1, 0x8000000000000001, 0x538, 0x4, 0xfffffffffffffffc}, {0xfffffffffffffffa, 0x7594, 0x4, 0x3}, 0xff, 0x6e6bb4, 0x0, 0x0, 0x1, 0x3}, {{@in=@broadcast, 0x4d2, 0x2b}, 0xa, @in=@loopback, 0x3504, 0x4, 0x1, 0x2, 0x7ff, 0x9, 0x101}}, 0xe8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 841.573177ms ago: executing program 3 (id=1079): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x1a, 0xc, &(0x7f00000003c0)=ANY=[@ANYRESOCT, @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, @void, @value}, 0x94) socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000300)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) socket$packet(0x11, 0xa, 0x300) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r4}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b703000000000000850000007200000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendto$packet(r1, &(0x7f00000000c0)="3f031c000302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) 746.805148ms ago: executing program 1 (id=1080): syz_mount_image$ext4(&(0x7f0000000680)='ext2\x00', &(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x18400, &(0x7f0000000240), 0x5, 0x261, &(0x7f00000006c0)="$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") accept(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x2042, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d00000085"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000180)=0xe) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd28f1aef52a5b62d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kmem_cache_free\x00', r5}, 0x10) write$nci(r4, 0x0, 0xfffffeea) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x17, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xe, '\x00', 0x0, @fallback=0x18, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000fc0)=ANY=[@ANYBLOB="12000000030000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r9}, &(0x7f0000000040), &(0x7f0000000140)=r8}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r9}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)=r8}, 0x20) close(r8) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r10 = getpid() sched_setscheduler(r10, 0x2, &(0x7f0000000200)=0x7) write$binfmt_script(r7, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x2, 0x82, 0x200000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x8}, 0x0, 0xa1, 0x0, 0x4, 0x0, 0x1, 0xfffe, 0x0, 0xfffff960, 0x0, 0xffff}, 0x0, 0x0, 0xffffffffffffffff, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000600)='kfree\x00', r6}, 0x18) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="440000001000090600"/20, @ANYRES32=0x0, @ANYBLOB="adffa888000000001c00128009000100626f6e64000000000c000280050001000600000008000a0079"], 0x44}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 697.690009ms ago: executing program 3 (id=1081): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x1000410, &(0x7f0000000300)={[{@norecovery}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000000540)="$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") quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f0000000480)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000200)={0x2000004, 0x8, 0x10002, 0x9, 0x3, 0x10000, 0xa1bc, 0x10ffff, 0x20003f}) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) 578.847591ms ago: executing program 1 (id=1083): r0 = socket(0x10, 0x80002, 0x4) setuid(0xee00) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000b00)=@newtaction={0x44, 0x13, 0x53b, 0x1, 0x0, {}, [{0x30, 0x1, [@m_ife={0x2c, 0x2, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x4004000) 526.656652ms ago: executing program 3 (id=1085): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x161) sendmsg$inet(r1, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @rand_addr=0x20}, 0x10, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="100000000000000038b5ce20f3bc2143a5ab94371d0000000007000000"], 0x10}, 0x0) 526.287762ms ago: executing program 4 (id=1086): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001700)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r1, &(0x7f0000000100)="ab", 0xffe0, 0x40048c4, &(0x7f00000000c0)={0x2, 0x4e22, @local}, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'bridge_slave_1\x00'}) 508.297112ms ago: executing program 1 (id=1087): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$vsock_stream(0x28, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xe, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xa, 0x4, 0x6, 0xff, 0x42, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000080), 0x619, r0}, 0x38) 493.626333ms ago: executing program 4 (id=1088): socket$inet_udp(0x2, 0x2, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) socket$inet_smc(0x2b, 0x1, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x2, 0x0) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000200)=0x7ffffffc) ioctl$EVIOCGRAB(r1, 0x40044590, 0x0) 449.468813ms ago: executing program 3 (id=1089): socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc90}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendto$unix(r2, 0x0, 0x803e, 0x4840, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x29c780}) r3 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x161) sendmsg$inet(r3, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @rand_addr=0x20}, 0x10, 0x0}, 0x0) 415.077674ms ago: executing program 4 (id=1090): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffe2e, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x200008, &(0x7f00000001c0)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@quota}]}, 0x1, 0x504, &(0x7f0000001000)="$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") r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000380)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f00000004c0)=[{0x4, 0x0, [0x40, 0x800, 0x7ff, 0x7, 0x5, 0x2, 0x5, 0x3, 0xfd7e, 0x2d73, 0x4, 0x0, 0x200, 0x3, 0x6, 0x6]}, {0x2b, 0x0, [0x7ff, 0xfffffffe, 0x3, 0x9, 0x1, 0x5d64, 0x6, 0xffffffff, 0x8, 0xd91a, 0xff, 0x7fffffff, 0x4, 0x8, 0x8001, 0x175bfffd]}], 0xffffffffffffffff, 0x1, 0x1, 0x90}}, 0x20) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002700)=""/102392, 0x18ff8) ioctl$KDFONTOP_SET(r2, 0x4b72, &(0x7f0000000040)={0x0, 0x0, 0x8, 0x10, 0x200, &(0x7f0000000080)="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"}) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f00000000000000000a000000000000000800010001000000040004"], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmmsg(r4, &(0x7f0000000000), 0x4000000000001f2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r5, 0x0) openat$sysfs(0xffffff9c, &(0x7f00000000c0)='/sys/power/wakeup_count', 0x42, 0x0) 414.844124ms ago: executing program 3 (id=1091): mknod$loop(&(0x7f0000000080)='./file0\x00', 0x10, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) creat(&(0x7f0000000380)='./file0\x00', 0x80) (fail_nth: 3) 127.331989ms ago: executing program 1 (id=1092): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000027b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000e00)='kfree\x00', r1, 0x0, 0x4ab}, 0x18) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x3000490, &(0x7f0000000100)={[{@lazytime}, {@usrjquota}, {@errors_remount}, {@noauto_da_alloc}, {@auto_da_alloc}, {@mblk_io_submit}, {@grpquota}, {@barrier_val}, {@grpjquota}, {}, {}, {@usrjquota}]}, 0x45, 0x7b1, &(0x7f00000004c0)="$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") perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x800000000003}, 0x1100, 0x5dd8, 0x0, 0x5, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) dup(0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r2, &(0x7f0000000140)='2', 0x1, 0x8000c61) ioctl$EXT4_IOC_MOVE_EXT(r2, 0x40305829, &(0x7f00000002c0)={0x17c04, 0xffffffffffffffff, 0x2, 0x100000001, 0x400, 0x8001}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6}]}) socket$inet(0x2, 0xa, 0xfffffff7) quotactl$Q_QUOTAON(0xffffffff80000102, &(0x7f0000000140)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) 126.675908ms ago: executing program 4 (id=1093): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r1}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000780)=0x14) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57) setsockopt$inet_mreqsrc(r3, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) r4 = socket$inet(0x2, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r5, 0x0, 0xfffffffffffffffd}, 0x18) setsockopt$inet_mreqn(r4, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) r6 = open(&(0x7f00000007c0)='./bus\x00', 0x4400, 0x3) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x3, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="660a00000000000061114c000000000085000000cf00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000800)=@bloom_filter={0x1e, 0x2, 0x9, 0x7ff, 0x1800, r0, 0xd, '\x00', r2, r6, 0x4, 0x1, 0x4, 0x7, @void, @value, @void, @value}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000000000000000ec1cf3ff841000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) write$sndseq(0xffffffffffffffff, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$sock_linger(r7, 0x1, 0xd, &(0x7f0000000000)={0x8000001, 0x1}, 0x8) close(r7) r8 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r8, 0x6, 0x13, 0x0, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r9}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000080), 0x64, 0x50a, &(0x7f0000000200)="$eJzs3VFrHFsdAPD/bHZr06Y3ueqDXvB6tZW0aHeTxrbBh1pB9Kmg1vcak00I2WRDdtM2oWiKH0AQUcEnffFF8AMIUvDFRxEK+qyoKKKtPvigncvuTtI03U227TabZn8/mMw5Z2b2f86GmZ0zc5gJYGC9FxHXI+JJmqYXImI0K89lU2y1psZ6jx/dm21MSaTpzX8mkWRl25+VZPPT2WYnI+JrX474ZvJ83NrG5tJMpVJey/Kl+vJqqbaxeXFxeWahvFBemZqavDJ9dfry9ERP2nkmIq598a8/+O7PvnTtV5+586dbfz//rUa1RrLlu9vxgvL7LWw1vdD8LnZvsPaSwY6ifLOFmeF2aww9V3L/NdcJAID2Guf4H4yIT0bEhRiNof1PZwEAAIA3UPr5kfhfEpG2d6JDOQAAAPAGyTXHwCa5YjYWYCRyuWKxNYb3w3EqV6nW6p+er66vzLXGyo5FITe/WClPZGOFx6KQNPKTzfTT/KU9+amIeDsivj863MwXZ6uVuX5f/AAAAIABcXpP//8/o63+PwAAAHDMjPW7AgAAAMBrp/8PAAAAx5/+PwAAABxrX7lxozGl2++/nru9sb5UvX1xrlxbKi6vzxZnq2urxYVqdaH5zL7lgz6vUq2ufjZW1u+W6uVavVTb2Ly1XF1fqd9afOYV2AAAAMAhevvjD/6QRMTW54abU8OJ7jbtcjXgqMrvpJJs3ma3/uNbrflfDqlSwKEY6ncFgL7J97sCQN8U+l0BoO+SA5Z3HLzz22z+id7WBwAA6L3xj3a+/5/bd8ut/RcDR56dGAaX+/8wuJr3/7sdyetkAY6VgjMAGHivfP//QGn6QhUCAAB6bqQ5JblidnlvJHK5YjHiTPO1AIVkfrFSnoiItyLi96OFDzTyk80tkwP7DAAAAAAAAAAAAAAAAAAAAAAAAABAS5omkQIAAADHWkTub8mvW8/yHx89N7L3+sCJ5L+jkb0i9M6Pb/7w7ky9vjbZKP/XTnn9R1n5pX5cwQAAAICB8EIv8N/up2/34wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACglx4/uje7PR1m3H98ISLG2sXPx8nm/GQUIuLUv5PI79ouiYihHsQfbvz5SLv4SaNaOyHbxR/uQfyt+/vGj7HsW2gX/3QP4sMge9A4/lxvt//l4r3mvP3+l494Jv+yOh//Yuf4N9Rh/z/TZYx3Hv6i1DH+/Yh38u2PP9vxkw7xz3YZ/xtf39zstCz9ScR429+f5JlYpfryaqm2sXlxcXlmobxQXpmamrwyfXX68vREaX6xUs7+to3xvY/98sl+7T/VIf7YAe0/12X7///w7qMPtZKFdvHPn20T/zc/zdZ4Pn4u++37VJZuLB/fTm+10ru9+/Pfvbtf++c6tP+g///5Ltt/4avf+XOXqwIAh6C2sbk0U6mU145totFLPwLVkDiCiW/39APTNE0b+9QrfE4SR+FraSb6fWQCAAB67elJf79rAgAAAAAAAAAAAAAAAAAAAIPrMB4ntjfm1k4q6cUjtAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeuL9AAAA//+GAdlV") 69.671599ms ago: executing program 3 (id=1094): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x0, 0x4, &(0x7f0000000200)=ANY=[@ANYRESDEC=r0], 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000600)='kmem_cache_free\x00', r1}, 0x18) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ffa000/0x3000)=nil) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendto$inet(r2, &(0x7f0000000040)="0400", 0xffec, 0x0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) 67.98555ms ago: executing program 4 (id=1095): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={0x0, r0}, 0x18) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000080), 0x64, 0x50a, &(0x7f0000000200)="$eJzs3VFrHFsdAPD/bHZr06Y3ueqDXvB6tZW0aHeTxrbBh1pB9Kmg1vcak00I2WRDdtM2oWiKH0AQUcEnffFF8AMIUvDFRxEK+qyoKKKtPvigncvuTtI03U227TabZn8/mMw5Z2b2f86GmZ0zc5gJYGC9FxHXI+JJmqYXImI0K89lU2y1psZ6jx/dm21MSaTpzX8mkWRl25+VZPPT2WYnI+JrX474ZvJ83NrG5tJMpVJey/Kl+vJqqbaxeXFxeWahvFBemZqavDJ9dfry9ERP2nkmIq598a8/+O7PvnTtV5+586dbfz//rUa1RrLlu9vxgvL7LWw1vdD8LnZvsPaSwY6ifLOFmeF2aww9V3L/NdcJAID2Guf4H4yIT0bEhRiNof1PZwEAAIA3UPr5kfhfEpG2d6JDOQAAAPAGyTXHwCa5YjYWYCRyuWKxNYb3w3EqV6nW6p+er66vzLXGyo5FITe/WClPZGOFx6KQNPKTzfTT/KU9+amIeDsivj863MwXZ6uVuX5f/AAAAIABcXpP//8/o63+PwAAAHDMjPW7AgAAAMBrp/8PAAAAx5/+PwAAABxrX7lxozGl2++/nru9sb5UvX1xrlxbKi6vzxZnq2urxYVqdaH5zL7lgz6vUq2ufjZW1u+W6uVavVTb2Ly1XF1fqd9afOYV2AAAAMAhevvjD/6QRMTW54abU8OJ7jbtcjXgqMrvpJJs3ma3/uNbrflfDqlSwKEY6ncFgL7J97sCQN8U+l0BoO+SA5Z3HLzz22z+id7WBwAA6L3xj3a+/5/bd8ut/RcDR56dGAaX+/8wuJr3/7sdyetkAY6VgjMAGHivfP//QGn6QhUCAAB6bqQ5JblidnlvJHK5YjHiTPO1AIVkfrFSnoiItyLi96OFDzTyk80tkwP7DAAAAAAAAAAAAAAAAAAAAAAAAABAS5omkQIAAADHWkTub8mvW8/yHx89N7L3+sCJ5L+jkb0i9M6Pb/7w7ky9vjbZKP/XTnn9R1n5pX5cwQAAAICB8EIv8N/up2/34wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACglx4/uje7PR1m3H98ISLG2sXPx8nm/GQUIuLUv5PI79ouiYihHsQfbvz5SLv4SaNaOyHbxR/uQfyt+/vGj7HsW2gX/3QP4sMge9A4/lxvt//l4r3mvP3+l494Jv+yOh//Yuf4N9Rh/z/TZYx3Hv6i1DH+/Yh38u2PP9vxkw7xz3YZ/xtf39zstCz9ScR429+f5JlYpfryaqm2sXlxcXlmobxQXpmamrwyfXX68vREaX6xUs7+to3xvY/98sl+7T/VIf7YAe0/12X7///w7qMPtZKFdvHPn20T/zc/zdZ4Pn4u++37VJZuLB/fTm+10ru9+/Pfvbtf++c6tP+g///5Ltt/4avf+XOXqwIAh6C2sbk0U6mU145totFLPwLVkDiCiW/39APTNE0b+9QrfE4SR+FraSb6fWQCAAB67elJf79rAgAAAAAAAAAAAAAAAAAAAIPrMB4ntjfm1k4q6cUjtAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeuL9AAAA//+GAdlV") r1 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) write$binfmt_register(r1, &(0x7f0000000440)={0x3a, 'syz1', 0x3a, 'M', 0x3a, 0x0, 0x3a, 'usrjquota=', 0x3a, '', 0x3a, './file2', 0x3a, [0x46]}, 0x32) fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0) 15.047201ms ago: executing program 4 (id=1096): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) (async) prlimit64(0x0, 0xe, 0x0, 0x0) (async) sched_setscheduler(0x0, 0x2, 0x0) (async, rerun: 32) r1 = getpid() (rerun: 32) r2 = getpid() (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r4}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x5, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r5}, 0x10) (async) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x0) (async) sendmsg$DEVLINK_CMD_RELOAD(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000880)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01000000000000000000250000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008b00", @ANYRES32=r2, @ANYBLOB="54b2a9b15beb876506306525d55393a5e1d80553a8eb118e9d7b8050a4a35b2d8fda498b3c4098bcf808ea372bee010daae22de04a830db851bee9e1a761113ec24f8c82e8ff56f971b365092a8a4d7de5f4b6acf618249755bb63d5fc2ea8ee3b3d8c9ccfa6f0dcd498b592ae7623e5bb16f0c23edb36758841e2b0ba1f200915a9b4f172dc613a1b3e7d805bf7ee98ac0f8bb2e7e3808d9f5e51dbeb1d49dfbb790d140130238ebffeeeba5aa5f3ae991906a7b74c891ba297c9543423b0b5b528016c27d74b0abd03ad443782151d6f1b0e732eb8b52b3aa4acbc953d4e40ea7c84bb"], 0x3c}, 0x1, 0x0, 0x0, 0x24040010}, 0x0) (async) sched_setaffinity(r1, 0x16, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, 0x0) (async) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) (async, rerun: 32) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) (rerun: 32) ioctl$KDSKBENT(0xffffffffffffffff, 0x4b47, &(0x7f0000000640)={0x3, 0x7}) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) (async) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000400)="580000001400192340834b80040d8c560a067fbc45ff620500000000070058000b480400945f640094272d7061d328b92d0000000000008000f0fffeffe809000000ffd9dd00000010000100050808004149004006040800", 0x58}], 0x1) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={r5, 0x112, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180), ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x6, &(0x7f00000001c0)=[0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xf6, &(0x7f0000000300)=[{}, {}], 0x10, 0x10, &(0x7f0000000340), &(0x7f00000004c0), 0x8, 0x79, 0x8, 0x8, &(0x7f0000000500)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000020b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x67735826adc128bd) (async) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000680)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000002c0)='mm_page_alloc\x00', r9}, 0x18) (async, rerun: 64) mmap(&(0x7f000050c000/0x2000)=nil, 0x2000, 0x2000000, 0x10, r6, 0x5000) (rerun: 64) 0s ago: executing program 0 (id=1097): bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xb, &(0x7f00000009c0)=ANY=[], 0x0, 0x2, 0x0, 0x0, 0x1e00, 0x0, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r0}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f00000b00000000000000", @ANYRES32, @ANYBLOB="000000000000f9f7000000467a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0xc, &(0x7f0000000440)=ANY=[@ANYRESHEX=r1, @ANYBLOB="0f7c8ba25af00d77645ef286e9fa", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0x6}, 0x18) openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/bus/input/handlers\x00', 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r2 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r2, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @rand_addr=0x20}, 0x10, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="100000000000000038b5ce20f3bc2143a5ab94371d0000000007000000"], 0x10}, 0x0) kernel console output (not intermixed with test programs): 468'. [ 65.452956][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.568002][ T4791] netlink: 8 bytes leftover after parsing attributes in process `syz.0.473'. [ 65.576968][ T4791] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 65.593570][ T4793] netlink: 4 bytes leftover after parsing attributes in process `syz.2.474'. [ 65.654264][ T4798] netlink: 20 bytes leftover after parsing attributes in process `syz.2.474'. [ 65.771980][ T4808] xt_hashlimit: size too large, truncated to 1048576 [ 66.567193][ T4832] netlink: 8 bytes leftover after parsing attributes in process `syz.3.485'. [ 66.578095][ T4832] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 66.637037][ T4834] FAULT_INJECTION: forcing a failure. [ 66.637037][ T4834] name failslab, interval 1, probability 0, space 0, times 0 [ 66.649848][ T4834] CPU: 0 UID: 0 PID: 4834 Comm: syz.2.486 Not tainted 6.15.0-rc1-syzkaller #0 PREEMPT(voluntary) [ 66.649875][ T4834] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 66.649888][ T4834] Call Trace: [ 66.649896][ T4834] [ 66.649905][ T4834] dump_stack_lvl+0xf6/0x150 [ 66.649934][ T4834] dump_stack+0x15/0x1a [ 66.650021][ T4834] should_fail_ex+0x261/0x270 [ 66.650055][ T4834] should_failslab+0x8f/0xb0 [ 66.650276][ T4834] __kmalloc_cache_noprof+0x55/0x320 [ 66.650302][ T4834] ? audit_log_d_path+0x8e/0x150 [ 66.650331][ T4834] audit_log_d_path+0x8e/0x150 [ 66.650364][ T4834] audit_log_d_path_exe+0x42/0x70 [ 66.650461][ T4834] audit_log_task+0x1f1/0x250 [ 66.650487][ T4834] audit_seccomp+0x68/0x130 [ 66.650511][ T4834] __seccomp_filter+0x694/0x10e0 [ 66.650547][ T4834] ? should_failslab+0x8f/0xb0 [ 66.650576][ T4834] ? put_pid+0x80/0xc0 [ 66.650673][ T4834] ? _raw_write_unlock_irq+0xd/0x30 [ 66.650700][ T4834] ? __f_setown+0x189/0x1e0 [ 66.650726][ T4834] ? __rcu_read_unlock+0x4e/0x70 [ 66.650760][ T4834] __secure_computing+0x7e/0x160 [ 66.650795][ T4834] syscall_trace_enter+0xcf/0x1f0 [ 66.650899][ T4834] do_syscall_64+0xaa/0x1c0 [ 66.650927][ T4834] ? clear_bhb_loop+0x25/0x80 [ 66.651017][ T4834] ? clear_bhb_loop+0x25/0x80 [ 66.651043][ T4834] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 66.651069][ T4834] RIP: 0033:0x7f3c108cbb7c [ 66.651087][ T4834] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 66.651108][ T4834] RSP: 002b:00007f3c0ef37030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 66.651191][ T4834] RAX: ffffffffffffffda RBX: 00007f3c10ae5fa0 RCX: 00007f3c108cbb7c [ 66.651203][ T4834] RDX: 000000000000000f RSI: 00007f3c0ef370a0 RDI: 0000000000000006 [ 66.651214][ T4834] RBP: 00007f3c0ef37090 R08: 0000000000000000 R09: 0000000000000000 [ 66.651225][ T4834] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 66.651237][ T4834] R13: 0000000000000000 R14: 00007f3c10ae5fa0 R15: 00007ffe674a8548 [ 66.651273][ T4834] [ 66.972115][ T4838] loop1: detected capacity change from 0 to 1024 [ 66.986315][ T4844] loop3: detected capacity change from 0 to 1024 [ 66.994088][ T4844] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 67.005087][ T4844] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 67.015623][ T4844] JBD2: no valid journal superblock found [ 67.021386][ T4844] EXT4-fs (loop3): Could not load journal inode [ 67.031444][ T4838] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 67.062641][ T4849] FAULT_INJECTION: forcing a failure. [ 67.062641][ T4849] name failslab, interval 1, probability 0, space 0, times 0 [ 67.075585][ T4849] CPU: 1 UID: 0 PID: 4849 Comm: syz.2.491 Not tainted 6.15.0-rc1-syzkaller #0 PREEMPT(voluntary) [ 67.075612][ T4849] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 67.075624][ T4849] Call Trace: [ 67.075631][ T4849] [ 67.075638][ T4849] dump_stack_lvl+0xf6/0x150 [ 67.075661][ T4849] dump_stack+0x15/0x1a [ 67.075733][ T4849] should_fail_ex+0x261/0x270 [ 67.075818][ T4849] should_failslab+0x8f/0xb0 [ 67.075856][ T4849] kmem_cache_alloc_node_noprof+0x5c/0x340 [ 67.075931][ T4849] ? __alloc_skb+0x10d/0x320 [ 67.075977][ T4849] __alloc_skb+0x10d/0x320 [ 67.076002][ T4849] ? audit_log_start+0x37f/0x6e0 [ 67.076027][ T4849] audit_log_start+0x39a/0x6e0 [ 67.076051][ T4849] audit_seccomp+0x4b/0x130 [ 67.076077][ T4849] __seccomp_filter+0x694/0x10e0 [ 67.076114][ T4849] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 67.076155][ T4849] ? vfs_read+0x4b4/0x710 [ 67.076186][ T4849] ? __rcu_read_unlock+0x4e/0x70 [ 67.076285][ T4849] __secure_computing+0x7e/0x160 [ 67.076326][ T4849] syscall_trace_enter+0xcf/0x1f0 [ 67.076361][ T4849] ? fpregs_assert_state_consistent+0x83/0xa0 [ 67.076401][ T4849] do_syscall_64+0xaa/0x1c0 [ 67.076492][ T4849] ? clear_bhb_loop+0x25/0x80 [ 67.076518][ T4849] ? clear_bhb_loop+0x25/0x80 [ 67.076570][ T4849] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 67.076592][ T4849] RIP: 0033:0x7f3c108cbc1f [ 67.076610][ T4849] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 67.076664][ T4849] RSP: 002b:00007f3c0ef37030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 67.076686][ T4849] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f3c108cbc1f [ 67.076700][ T4849] RDX: 0000000000000001 RSI: 00007f3c0ef370a0 RDI: 0000000000000004 [ 67.076713][ T4849] RBP: 00007f3c0ef37090 R08: 0000000000000000 R09: 0000000000000000 [ 67.076726][ T4849] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 67.076740][ T4849] R13: 0000000000000000 R14: 00007f3c10ae5fa0 R15: 00007ffe674a8548 [ 67.076760][ T4849] [ 67.287473][ T4844] loop3: detected capacity change from 0 to 8192 [ 67.301980][ T4850] netlink: 'syz.3.490': attribute type 10 has an invalid length. [ 67.309795][ T4850] netlink: 40 bytes leftover after parsing attributes in process `syz.3.490'. [ 67.346505][ T4852] loop2: detected capacity change from 0 to 128 [ 67.436584][ T4863] loop3: detected capacity change from 0 to 736 [ 67.475176][ T4865] syzkaller1: entered promiscuous mode [ 67.480776][ T4865] syzkaller1: entered allmulticast mode [ 67.506669][ T4863] ISOFS: Logical zone size(0) < hardware blocksize(1024) [ 67.675216][ T4873] loop3: detected capacity change from 0 to 2048 [ 67.706644][ T4873] EXT4-fs: Ignoring removed mblk_io_submit option [ 67.865975][ T3308] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.161389][ T4873] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 68.179963][ T4873] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.499: bg 0: block 234: padding at end of block bitmap is not set [ 68.185108][ T4888] netlink: 8 bytes leftover after parsing attributes in process `syz.1.501'. [ 68.194494][ T4873] EXT4-fs (loop3): Remounting filesystem read-only [ 68.213389][ T4888] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 68.479783][ T4917] loop2: detected capacity change from 0 to 128 [ 68.505852][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.518025][ T4920] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 68.771879][ T4962] xt_CT: No such helper "snmp_trap" [ 68.790383][ T4967] loop1: detected capacity change from 0 to 128 [ 68.799030][ T4969] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 68.803041][ T4965] SELinux: security_context_str_to_sid () failed with errno=-22 [ 68.838226][ T4964] rtc_cmos 00:00: Alarms can be up to one day in the future [ 69.263443][ T5034] FAULT_INJECTION: forcing a failure. [ 69.263443][ T5034] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 69.276610][ T5034] CPU: 1 UID: 0 PID: 5034 Comm: syz.1.554 Not tainted 6.15.0-rc1-syzkaller #0 PREEMPT(voluntary) [ 69.276640][ T5034] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 69.276656][ T5034] Call Trace: [ 69.276662][ T5034] [ 69.276670][ T5034] dump_stack_lvl+0xf6/0x150 [ 69.276717][ T5034] dump_stack+0x15/0x1a [ 69.276736][ T5034] should_fail_ex+0x261/0x270 [ 69.276767][ T5034] should_fail+0xb/0x10 [ 69.276792][ T5034] should_fail_usercopy+0x1a/0x20 [ 69.276900][ T5034] _copy_to_user+0x20/0xa0 [ 69.276933][ T5034] simple_read_from_buffer+0xb2/0x130 [ 69.276987][ T5034] proc_fail_nth_read+0x103/0x140 [ 69.277027][ T5034] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 69.277062][ T5034] vfs_read+0x1b2/0x710 [ 69.277106][ T5034] ? __rcu_read_unlock+0x4e/0x70 [ 69.277137][ T5034] ? __fget_files+0x186/0x1c0 [ 69.277159][ T5034] ksys_read+0xeb/0x1b0 [ 69.277209][ T5034] __x64_sys_read+0x42/0x50 [ 69.277237][ T5034] x64_sys_call+0x2a3b/0x2e10 [ 69.277307][ T5034] do_syscall_64+0xc9/0x1c0 [ 69.277342][ T5034] ? clear_bhb_loop+0x25/0x80 [ 69.277376][ T5034] ? clear_bhb_loop+0x25/0x80 [ 69.277403][ T5034] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.277427][ T5034] RIP: 0033:0x7f648a33bb7c [ 69.277452][ T5034] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 69.277525][ T5034] RSP: 002b:00007f64889a7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 69.277546][ T5034] RAX: ffffffffffffffda RBX: 00007f648a555fa0 RCX: 00007f648a33bb7c [ 69.277560][ T5034] RDX: 000000000000000f RSI: 00007f64889a70a0 RDI: 0000000000000005 [ 69.277575][ T5034] RBP: 00007f64889a7090 R08: 0000000000000000 R09: 0000000000000000 [ 69.277592][ T5034] R10: 00001000000020fe R11: 0000000000000246 R12: 0000000000000001 [ 69.277606][ T5034] R13: 0000000000000000 R14: 00007f648a555fa0 R15: 00007ffcc0dca638 [ 69.277628][ T5034] [ 69.540768][ T5042] loop1: detected capacity change from 0 to 2048 [ 69.568149][ T5042] EXT4-fs: Ignoring removed mblk_io_submit option [ 69.585984][ T5042] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.609314][ T5042] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.557: bg 0: block 234: padding at end of block bitmap is not set [ 69.650134][ T5042] EXT4-fs (loop1): Remounting filesystem read-only [ 69.658034][ T1050] rtc_cmos 00:00: Alarms can be up to one day in the future [ 69.665773][ T1050] rtc_cmos 00:00: Alarms can be up to one day in the future [ 69.673437][ T1050] rtc_cmos 00:00: Alarms can be up to one day in the future [ 69.681021][ T1050] rtc_cmos 00:00: Alarms can be up to one day in the future [ 69.686232][ T29] kauditd_printk_skb: 685 callbacks suppressed [ 69.686250][ T29] audit: type=1326 audit(1744004945.977:2297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5041 comm="syz.1.557" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f648a33d169 code=0x0 [ 69.689105][ T1050] rtc rtc0: __rtc_set_alarm: err=-22 [ 69.746123][ T29] audit: type=1326 audit(1744004946.067:2298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5062 comm="syz.0.565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7c201d169 code=0x7ffc0000 [ 69.770188][ T5063] FAULT_INJECTION: forcing a failure. [ 69.770188][ T5063] name failslab, interval 1, probability 0, space 0, times 0 [ 69.771002][ T29] audit: type=1326 audit(1744004946.067:2299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5062 comm="syz.0.565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7c201d169 code=0x7ffc0000 [ 69.783951][ T5063] CPU: 0 UID: 0 PID: 5063 Comm: syz.0.565 Not tainted 6.15.0-rc1-syzkaller #0 PREEMPT(voluntary) [ 69.783985][ T5063] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 69.784000][ T5063] Call Trace: [ 69.784008][ T5063] [ 69.784017][ T5063] dump_stack_lvl+0xf6/0x150 [ 69.784047][ T5063] dump_stack+0x15/0x1a [ 69.784070][ T5063] should_fail_ex+0x261/0x270 [ 69.784155][ T5063] should_failslab+0x8f/0xb0 [ 69.784196][ T5063] __kmalloc_node_track_caller_noprof+0xaa/0x410 [ 69.784228][ T5063] ? sidtab_sid2str_get+0xb8/0x140 [ 69.784257][ T5063] ? vsnprintf+0x84d/0x8a0 [ 69.784292][ T5063] kmemdup_noprof+0x2b/0x70 [ 69.784385][ T5063] sidtab_sid2str_get+0xb8/0x140 [ 69.784415][ T5063] security_sid_to_context_core+0x1eb/0x2f0 [ 69.784446][ T5063] security_sid_to_context+0x27/0x30 [ 69.784474][ T5063] selinux_lsmprop_to_secctx+0x6c/0xf0 [ 69.784558][ T5063] security_lsmprop_to_secctx+0x40/0x80 [ 69.784599][ T5063] audit_log_task_context+0x7a/0x180 [ 69.784633][ T5063] audit_log_task+0xfb/0x250 [ 69.784661][ T5063] audit_seccomp+0x68/0x130 [ 69.784685][ T5063] __seccomp_filter+0x694/0x10e0 [ 69.784736][ T5063] ? vfs_write+0x669/0x950 [ 69.784770][ T5063] ? putname+0xe1/0x100 [ 69.784800][ T5063] __secure_computing+0x7e/0x160 [ 69.784891][ T5063] syscall_trace_enter+0xcf/0x1f0 [ 69.784984][ T5063] ? fpregs_assert_state_consistent+0x83/0xa0 [ 69.785026][ T5063] do_syscall_64+0xaa/0x1c0 [ 69.785128][ T5063] ? clear_bhb_loop+0x25/0x80 [ 69.785155][ T5063] ? clear_bhb_loop+0x25/0x80 [ 69.785182][ T5063] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.785209][ T5063] RIP: 0033:0x7fe7c201d169 [ 69.785229][ T5063] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 69.785294][ T5063] RSP: 002b:00007fe7c067f038 EFLAGS: 00000246 ORIG_RAX: 000000000000007d [ 69.785317][ T5063] RAX: ffffffffffffffda RBX: 00007fe7c2235fa0 RCX: 00007fe7c201d169 [ 69.785333][ T5063] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000080 [ 69.785348][ T5063] RBP: 00007fe7c067f090 R08: 0000000000000000 R09: 0000000000000000 [ 69.785363][ T5063] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 69.785378][ T5063] R13: 0000000000000000 R14: 00007fe7c2235fa0 R15: 00007ffd58f0f6b8 [ 69.785503][ T5063] [ 69.785519][ T5063] audit: error in audit_log_task_context [ 69.806387][ T29] audit: type=1326 audit(1744004946.067:2300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5062 comm="syz.0.565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe7c201d169 code=0x7ffc0000 [ 69.806421][ T29] audit: type=1326 audit(1744004946.067:2301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5062 comm="syz.0.565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7c201d169 code=0x7ffc0000 [ 69.821509][ T5046] rdma_op ffff88811cffdd80 conn xmit_rdma 0000000000000000 [ 69.827202][ T29] audit: type=1326 audit(1744004946.067:2302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5062 comm="syz.0.565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7c201d169 code=0x7ffc0000 [ 69.834210][ T5063] capability: warning: `syz.0.565' uses deprecated v2 capabilities in a way that may be insecure [ 69.838091][ T29] audit: type=1326 audit(1744004946.067:2303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5062 comm="syz.0.565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe7c201d169 code=0x7ffc0000 [ 70.029417][ T5070] FAULT_INJECTION: forcing a failure. [ 70.029417][ T5070] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 70.036785][ T29] audit: type=1326 audit(1744004946.087:2304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5062 comm="syz.0.565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7c201d169 code=0x7ffc0000 [ 70.036822][ T29] audit: type=1326 audit(1744004946.087:2305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5062 comm="syz.0.565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe7c201bad0 code=0x7ffc0000 [ 70.220586][ T5070] CPU: 0 UID: 0 PID: 5070 Comm: syz.2.566 Not tainted 6.15.0-rc1-syzkaller #0 PREEMPT(voluntary) [ 70.220609][ T5070] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 70.220619][ T5070] Call Trace: [ 70.220625][ T5070] [ 70.220631][ T5070] dump_stack_lvl+0xf6/0x150 [ 70.220652][ T5070] dump_stack+0x15/0x1a [ 70.220670][ T5070] should_fail_ex+0x261/0x270 [ 70.220693][ T5070] should_fail+0xb/0x10 [ 70.220721][ T5070] should_fail_usercopy+0x1a/0x20 [ 70.220745][ T5070] _copy_from_iter+0xd8/0xd10 [ 70.220770][ T5070] ? kmalloc_reserve+0x16e/0x190 [ 70.220854][ T5070] ? __build_skb_around+0x199/0x1f0 [ 70.220874][ T5070] ? __alloc_skb+0x227/0x320 [ 70.220891][ T5070] ? __virt_addr_valid+0x1ed/0x250 [ 70.220909][ T5070] ? __check_object_size+0x367/0x510 [ 70.220984][ T5070] netlink_sendmsg+0x492/0x720 [ 70.221086][ T5070] ? __pfx_netlink_sendmsg+0x10/0x10 [ 70.221107][ T5070] __sock_sendmsg+0x140/0x180 [ 70.221141][ T5070] ____sys_sendmsg+0x350/0x4e0 [ 70.221179][ T5070] __sys_sendmsg+0x1a0/0x240 [ 70.221224][ T5070] __x64_sys_sendmsg+0x46/0x50 [ 70.221247][ T5070] x64_sys_call+0x26f3/0x2e10 [ 70.221266][ T5070] do_syscall_64+0xc9/0x1c0 [ 70.221291][ T5070] ? clear_bhb_loop+0x25/0x80 [ 70.221463][ T5070] ? clear_bhb_loop+0x25/0x80 [ 70.221534][ T5070] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 70.221609][ T5070] RIP: 0033:0x7f3c108cd169 [ 70.221623][ T5070] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 70.221685][ T5070] RSP: 002b:00007f3c0ef37038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 70.221705][ T5070] RAX: ffffffffffffffda RBX: 00007f3c10ae5fa0 RCX: 00007f3c108cd169 [ 70.221715][ T5070] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 70.221725][ T5070] RBP: 00007f3c0ef37090 R08: 0000000000000000 R09: 0000000000000000 [ 70.221762][ T5070] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 70.221772][ T5070] R13: 0000000000000000 R14: 00007f3c10ae5fa0 R15: 00007ffe674a8548 [ 70.221795][ T5070] [ 70.450894][ T5075] __nla_validate_parse: 3 callbacks suppressed [ 70.450914][ T5075] netlink: 48 bytes leftover after parsing attributes in process `syz.0.568'. [ 70.476907][ T3308] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.526215][ T5084] FAULT_INJECTION: forcing a failure. [ 70.526215][ T5084] name failslab, interval 1, probability 0, space 0, times 0 [ 70.538864][ T5084] CPU: 0 UID: 0 PID: 5084 Comm: syz.0.571 Not tainted 6.15.0-rc1-syzkaller #0 PREEMPT(voluntary) [ 70.538895][ T5084] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 70.538934][ T5084] Call Trace: [ 70.538941][ T5084] [ 70.538950][ T5084] dump_stack_lvl+0xf6/0x150 [ 70.538978][ T5084] dump_stack+0x15/0x1a [ 70.538999][ T5084] should_fail_ex+0x261/0x270 [ 70.539027][ T5084] should_failslab+0x8f/0xb0 [ 70.539058][ T5084] __kmalloc_node_track_caller_noprof+0xaa/0x410 [ 70.539143][ T5084] ? sidtab_context_to_sid+0x1cf/0x5e0 [ 70.539171][ T5084] kstrdup+0x3d/0xd0 [ 70.539197][ T5084] sidtab_context_to_sid+0x1cf/0x5e0 [ 70.539222][ T5084] ? strlen+0x19/0x30 [ 70.539308][ T5084] security_context_to_sid_core+0x29b/0x3b0 [ 70.539406][ T5084] security_context_to_sid_force+0x30/0x40 [ 70.539435][ T5084] selinux_lsm_setattr+0x336/0x670 [ 70.539461][ T5084] selinux_setprocattr+0x4e/0x70 [ 70.539497][ T5084] security_setprocattr+0x198/0x1c0 [ 70.539549][ T5084] proc_pid_attr_write+0x1e7/0x220 [ 70.539586][ T5084] ? __pfx_proc_pid_attr_write+0x10/0x10 [ 70.539689][ T5084] vfs_write+0x295/0x950 [ 70.539722][ T5084] ? putname+0xe1/0x100 [ 70.539751][ T5084] ? __fget_files+0x186/0x1c0 [ 70.539777][ T5084] ksys_write+0xeb/0x1b0 [ 70.539930][ T5084] __x64_sys_write+0x42/0x50 [ 70.539963][ T5084] x64_sys_call+0x2a45/0x2e10 [ 70.539990][ T5084] do_syscall_64+0xc9/0x1c0 [ 70.540021][ T5084] ? clear_bhb_loop+0x25/0x80 [ 70.540086][ T5084] ? clear_bhb_loop+0x25/0x80 [ 70.540113][ T5084] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 70.540138][ T5084] RIP: 0033:0x7fe7c201d169 [ 70.540156][ T5084] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 70.540174][ T5084] RSP: 002b:00007fe7c067f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 70.540192][ T5084] RAX: ffffffffffffffda RBX: 00007fe7c2235fa0 RCX: 00007fe7c201d169 [ 70.540276][ T5084] RDX: 0000000000000ff1 RSI: 0000200000001800 RDI: 0000000000000003 [ 70.540291][ T5084] RBP: 00007fe7c067f090 R08: 0000000000000000 R09: 0000000000000000 [ 70.540305][ T5084] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 70.540319][ T5084] R13: 0000000000000000 R14: 00007fe7c2235fa0 R15: 00007ffd58f0f6b8 [ 70.540340][ T5084] [ 70.997566][ T5105] loop3: detected capacity change from 0 to 128 [ 71.004650][ T5105] EXT4-fs: Ignoring removed nobh option [ 71.014721][ T5105] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 71.027475][ T5105] ext4 filesystem being mounted at /119/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 71.137280][ T5105] EXT4-fs warning (device loop3): ext4_dirblock_csum_verify:376: inode #2: comm syz.3.577: No space for directory leaf checksum. Please run e2fsck -D. [ 71.152677][ T5105] EXT4-fs error (device loop3): __ext4_find_entry:1628: inode #2: comm syz.3.577: checksumming directory block 0 [ 71.275088][ T5105] EXT4-fs warning (device loop3): ext4_dirblock_csum_verify:376: inode #2: comm syz.3.577: No space for directory leaf checksum. Please run e2fsck -D. [ 71.290434][ T5105] EXT4-fs error (device loop3): __ext4_find_entry:1628: inode #2: comm syz.3.577: checksumming directory block 0 [ 71.329054][ T3304] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 71.348784][ T5112] netlink: 'syz.0.580': attribute type 13 has an invalid length. [ 71.423731][ T5123] netlink: 8 bytes leftover after parsing attributes in process `syz.1.586'. [ 71.444407][ T5121] 9pnet_fd: Insufficient options for proto=fd [ 71.451041][ T5121] IPv6: addrconf: prefix option has invalid lifetime [ 71.489840][ T5129] loop2: detected capacity change from 0 to 512 [ 71.496517][ T5126] loop3: detected capacity change from 0 to 512 [ 71.503887][ T5130] netlink: 8 bytes leftover after parsing attributes in process `syz.4.588'. [ 71.511575][ T5126] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 71.536927][ T5112] bridge0: port 3(batadv0) entered disabled state [ 71.543537][ T5112] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.550745][ T5112] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.551578][ T5126] EXT4-fs (loop3): orphan cleanup on readonly fs [ 71.576036][ T5126] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.587: bg 0: block 248: padding at end of block bitmap is not set [ 71.592263][ T5129] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 71.602381][ T5126] EXT4-fs error (device loop3): ext4_acquire_dquot:6935: comm syz.3.587: Failed to acquire dquot type 1 [ 71.611403][ T5129] EXT4-fs (loop2): 1 truncate cleaned up [ 71.621023][ T5129] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.636081][ T5126] EXT4-fs (loop3): 1 truncate cleaned up [ 71.646474][ T5126] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 71.663397][ T5126] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.683498][ T5129] EXT4-fs error (device loop2): ext4_append:79: inode #2: comm syz.2.589: Logical block already allocated [ 71.708677][ T5126] syz.3.587 (5126) used greatest stack depth: 9216 bytes left [ 71.720471][ T5129] EXT4-fs (loop2): Remounting filesystem read-only [ 71.741216][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.814311][ T5112] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 71.855070][ T5112] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 71.865380][ T5146] loop2: detected capacity change from 0 to 1024 [ 71.879556][ T5146] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 71.890523][ T5146] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 71.900642][ T5146] JBD2: no valid journal superblock found [ 71.906432][ T5146] EXT4-fs (loop2): Could not load journal inode [ 71.936837][ T5112] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.945393][ T5112] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.954000][ T5112] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.962496][ T5112] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.974029][ T5146] loop2: detected capacity change from 0 to 8192 [ 71.988193][ T5123] netlink: 40 bytes leftover after parsing attributes in process `syz.1.586'. [ 71.998059][ T5130] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 72.055449][ T5146] netlink: 'syz.2.594': attribute type 10 has an invalid length. [ 72.063357][ T5146] netlink: 40 bytes leftover after parsing attributes in process `syz.2.594'. [ 72.072341][ T5146] batadv0: entered promiscuous mode [ 72.077844][ T5146] batadv0: entered allmulticast mode [ 72.103467][ T5146] bridge0: port 3(batadv0) entered blocking state [ 72.108605][ T5158] loop1: detected capacity change from 0 to 2048 [ 72.109980][ T5146] bridge0: port 3(batadv0) entered disabled state [ 72.118434][ T5158] EXT4-fs: Ignoring removed mblk_io_submit option [ 72.142531][ T51] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 72.151836][ T51] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 72.152577][ T5146] bridge0: port 3(batadv0) entered blocking state [ 72.167522][ T5146] bridge0: port 3(batadv0) entered forwarding state [ 72.181708][ T5158] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.207877][ T5158] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.600: bg 0: block 234: padding at end of block bitmap is not set [ 72.223755][ T5158] EXT4-fs (loop1): Remounting filesystem read-only [ 72.262161][ T5159] netlink: 'syz.0.599': attribute type 10 has an invalid length. [ 72.267045][ T5164] bond_slave_1: entered promiscuous mode [ 72.270884][ T5159] netlink: 40 bytes leftover after parsing attributes in process `syz.0.599'. [ 72.278748][ T5164] netlink: 4 bytes leftover after parsing attributes in process `syz.2.601'. [ 72.288446][ T5159] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.308428][ T5164] bond0: (slave bond_slave_1): Releasing backup interface [ 72.317096][ T5164] bond_slave_1 (unregistering): left promiscuous mode [ 72.400445][ T5173] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 72.412048][ T5173] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 72.438948][ T5171] netlink: 'syz.0.603': attribute type 10 has an invalid length. [ 72.446891][ T5171] netlink: 40 bytes leftover after parsing attributes in process `syz.0.603'. [ 72.781796][ T5185] netlink: 8 bytes leftover after parsing attributes in process `syz.3.609'. [ 72.790768][ T5185] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 72.849839][ T5189] loop3: detected capacity change from 0 to 1024 [ 72.857073][ T5189] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 72.868105][ T5189] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 72.879051][ T5189] JBD2: no valid journal superblock found [ 72.885547][ T5189] EXT4-fs (loop3): Could not load journal inode [ 72.923226][ T5189] loop3: detected capacity change from 0 to 8192 [ 72.944890][ T3308] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.983460][ T5189] netlink: 'syz.3.611': attribute type 10 has an invalid length. [ 72.991285][ T5189] netlink: 40 bytes leftover after parsing attributes in process `syz.3.611'. [ 73.110131][ T5202] loop3: detected capacity change from 0 to 2048 [ 73.133914][ T5202] EXT4-fs: Ignoring removed mblk_io_submit option [ 73.186630][ T5202] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.239026][ T5202] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.617: bg 0: block 234: padding at end of block bitmap is not set [ 73.280565][ T5202] EXT4-fs (loop3): Remounting filesystem read-only [ 73.297006][ T5217] hub 9-0:1.0: USB hub found [ 73.302239][ T5217] hub 9-0:1.0: 8 ports detected [ 73.345056][ T5219] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 73.356186][ T5219] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 73.417435][ T5222] loop1: detected capacity change from 0 to 2048 [ 73.428499][ T5222] EXT4-fs: Ignoring removed mblk_io_submit option [ 73.445632][ T5222] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.462453][ T5222] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.624: bg 0: block 234: padding at end of block bitmap is not set [ 73.478144][ T5222] EXT4-fs (loop1): Remounting filesystem read-only [ 73.529028][ T5233] 9pnet_fd: p9_fd_create_tcp (5233): problem connecting socket to 127.0.0.1 [ 73.711472][ T5242] futex_wake_op: syz.2.632 tries to shift op by -1; fix this program [ 73.818183][ T5245] loop2: detected capacity change from 0 to 128 [ 73.825933][ T5245] vfat: Unknown parameter '00000000000000000006' [ 73.933675][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.960178][ T5249] netlink: 'syz.4.635': attribute type 10 has an invalid length. [ 73.988539][ T5256] syz.3.638 uses obsolete (PF_INET,SOCK_PACKET) [ 74.173887][ T5272] loop3: detected capacity change from 0 to 2048 [ 74.180764][ T5272] EXT4-fs: Ignoring removed mblk_io_submit option [ 74.194616][ T5272] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.213780][ T5272] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.644: bg 0: block 234: padding at end of block bitmap is not set [ 74.229087][ T5272] EXT4-fs (loop3): Remounting filesystem read-only [ 74.252146][ T3308] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.336067][ T5280] FAULT_INJECTION: forcing a failure. [ 74.336067][ T5280] name failslab, interval 1, probability 0, space 0, times 0 [ 74.349112][ T5280] CPU: 0 UID: 0 PID: 5280 Comm: gtp Not tainted 6.15.0-rc1-syzkaller #0 PREEMPT(voluntary) [ 74.349142][ T5280] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 74.349204][ T5280] Call Trace: [ 74.349281][ T5280] [ 74.349289][ T5280] dump_stack_lvl+0xf6/0x150 [ 74.349313][ T5280] dump_stack+0x15/0x1a [ 74.349330][ T5280] should_fail_ex+0x261/0x270 [ 74.349375][ T5280] should_failslab+0x8f/0xb0 [ 74.349412][ T5280] kmem_cache_alloc_node_noprof+0x5c/0x340 [ 74.349435][ T5280] ? __alloc_skb+0x10d/0x320 [ 74.349530][ T5280] __alloc_skb+0x10d/0x320 [ 74.349553][ T5280] ? avc_has_perm+0xd6/0x150 [ 74.349587][ T5280] alloc_skb_with_frags+0x80/0x460 [ 74.349618][ T5280] ? selinux_file_open+0x356/0x3c0 [ 74.349648][ T5280] sock_alloc_send_pskb+0x437/0x500 [ 74.349680][ T5280] ? mntput+0x49/0x70 [ 74.349763][ T5280] tun_get_user+0x9b8/0x2640 [ 74.349791][ T5280] ? avc_has_perm+0xd6/0x150 [ 74.349818][ T5280] ? ref_tracker_alloc+0x1ff/0x310 [ 74.349920][ T5280] tun_chr_write_iter+0x188/0x240 [ 74.349957][ T5280] vfs_write+0x79b/0x950 [ 74.349999][ T5280] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 74.350060][ T5280] ksys_write+0xeb/0x1b0 [ 74.350095][ T5280] __x64_sys_write+0x42/0x50 [ 74.350129][ T5280] x64_sys_call+0x2a45/0x2e10 [ 74.350170][ T5280] do_syscall_64+0xc9/0x1c0 [ 74.350240][ T5280] ? clear_bhb_loop+0x25/0x80 [ 74.350266][ T5280] ? clear_bhb_loop+0x25/0x80 [ 74.350293][ T5280] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.350374][ T5280] RIP: 0033:0x7f648a33bc1f [ 74.350388][ T5280] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 74.350470][ T5280] RSP: 002b:00007f64889a7000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 74.350489][ T5280] RAX: ffffffffffffffda RBX: 00007f648a555fa0 RCX: 00007f648a33bc1f [ 74.350501][ T5280] RDX: 000000000000fdef RSI: 0000200000000180 RDI: 00000000000000c8 [ 74.350520][ T5280] RBP: 00007f64889a7090 R08: 0000000000000000 R09: 0000000000000000 [ 74.350532][ T5280] R10: 000000000000fdef R11: 0000000000000293 R12: 0000000000000001 [ 74.350545][ T5280] R13: 0000000000000000 R14: 00007f648a555fa0 R15: 00007ffcc0dca638 [ 74.350614][ T5280] [ 74.647093][ T5285] loop2: detected capacity change from 0 to 256 [ 74.653890][ T5286] loop1: detected capacity change from 0 to 1024 [ 74.656393][ T5285] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 74.660880][ T5286] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 74.684197][ T5286] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 74.694186][ T5286] JBD2: no valid journal superblock found [ 74.699998][ T5286] EXT4-fs (loop1): Could not load journal inode [ 74.757608][ T5286] loop1: detected capacity change from 0 to 8192 [ 74.800394][ T5293] loop2: detected capacity change from 0 to 128 [ 74.810615][ T5293] ext4: Unknown parameter 'hash' [ 74.811817][ T5286] netlink: 'syz.1.649': attribute type 10 has an invalid length. [ 74.862335][ T29] kauditd_printk_skb: 334 callbacks suppressed [ 74.862354][ T29] audit: type=1326 audit(1744004951.157:2638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5296 comm="syz.4.655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faeb42fd169 code=0x7ffc0000 [ 74.893038][ T29] audit: type=1326 audit(1744004951.157:2639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5296 comm="syz.4.655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faeb42fd169 code=0x7ffc0000 [ 74.916656][ T29] audit: type=1326 audit(1744004951.157:2640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5296 comm="syz.4.655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7faeb42fd169 code=0x7ffc0000 [ 74.940796][ T29] audit: type=1326 audit(1744004951.167:2641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5296 comm="syz.4.655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faeb42fd169 code=0x7ffc0000 [ 74.965032][ T29] audit: type=1326 audit(1744004951.167:2642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5296 comm="syz.4.655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faeb42fd169 code=0x7ffc0000 [ 74.988555][ T29] audit: type=1326 audit(1744004951.167:2643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5296 comm="syz.4.655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7faeb42fd169 code=0x7ffc0000 [ 75.012622][ T29] audit: type=1326 audit(1744004951.167:2644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5296 comm="syz.4.655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faeb42fd169 code=0x7ffc0000 [ 75.036150][ T29] audit: type=1326 audit(1744004951.167:2645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5296 comm="syz.4.655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faeb42fd169 code=0x7ffc0000 [ 75.060208][ T29] audit: type=1326 audit(1744004951.167:2646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5296 comm="syz.4.655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7faeb42fd169 code=0x7ffc0000 [ 75.084509][ T29] audit: type=1326 audit(1744004951.167:2647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5296 comm="syz.4.655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faeb42fd169 code=0x7ffc0000 [ 75.195976][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.267011][ T5311] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 75.277194][ T5311] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 75.404865][ T5323] can: request_module (can-proto-3) failed. [ 75.467132][ T5329] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 75.478230][ T5329] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.536619][ T5329] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 75.547108][ T5329] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.626760][ T5329] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 75.637158][ T5329] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.695594][ T5329] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 75.706002][ T5329] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.792220][ T5329] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 75.801164][ T5329] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.843827][ T5329] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 75.852117][ T5329] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.861746][ T5339] loop1: detected capacity change from 0 to 1024 [ 75.889844][ T5329] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 75.898160][ T5329] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.907647][ T5339] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 75.918756][ T5339] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 75.930908][ T5329] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 75.939284][ T5329] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.965722][ T5339] JBD2: no valid journal superblock found [ 75.971519][ T5339] EXT4-fs (loop1): Could not load journal inode [ 76.047497][ T5343] loop2: detected capacity change from 0 to 2048 [ 76.067260][ T5343] EXT4-fs: Ignoring removed mblk_io_submit option [ 76.104594][ T5339] loop1: detected capacity change from 0 to 8192 [ 76.112225][ T5343] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.130180][ T5349] __nla_validate_parse: 7 callbacks suppressed [ 76.130196][ T5349] netlink: 4 bytes leftover after parsing attributes in process `syz.4.672'. [ 76.150892][ T5345] infiniband syz0: set active [ 76.155659][ T5345] infiniband syz0: added bond0 [ 76.169566][ T5343] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.671: bg 0: block 234: padding at end of block bitmap is not set [ 76.185324][ T5343] EXT4-fs (loop2): Remounting filesystem read-only [ 76.198327][ T5349] netlink: 8 bytes leftover after parsing attributes in process `syz.4.672'. [ 76.234430][ T5345] RDS/IB: syz0: added [ 76.238527][ T5345] smc: adding ib device syz0 with port count 1 [ 76.246242][ T5345] smc: ib device syz0 port 1 has pnetid [ 76.334102][ T5339] netlink: 'syz.1.670': attribute type 10 has an invalid length. [ 76.341878][ T5339] netlink: 40 bytes leftover after parsing attributes in process `syz.1.670'. [ 76.455104][ T5370] netlink: 8 bytes leftover after parsing attributes in process `syz.3.680'. [ 76.494893][ T5370] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 76.510782][ T5374] loop1: detected capacity change from 0 to 256 [ 76.511975][ T5372] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 76.517893][ T5374] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 76.544214][ T5372] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 76.767775][ T5384] hub 9-0:1.0: USB hub found [ 76.772864][ T5384] hub 9-0:1.0: 8 ports detected [ 76.887780][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.977940][ T5396] loop1: detected capacity change from 0 to 2048 [ 76.987286][ T5396] EXT4-fs: Ignoring removed mblk_io_submit option [ 77.024143][ T5396] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.047497][ T5406] netlink: 32 bytes leftover after parsing attributes in process `syz.3.691'. [ 77.060455][ T5400] loop2: detected capacity change from 0 to 512 [ 77.078328][ T5408] netlink: 20 bytes leftover after parsing attributes in process `syz.3.692'. [ 77.090154][ T5396] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.690: bg 0: block 234: padding at end of block bitmap is not set [ 77.118576][ T5396] EXT4-fs (loop1): Remounting filesystem read-only [ 77.127209][ T5400] EXT4-fs (loop2): orphan cleanup on readonly fs [ 77.137828][ T5413] netlink: 8 bytes leftover after parsing attributes in process `syz.3.694'. [ 77.138813][ T5400] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.689: bg 0: block 248: padding at end of block bitmap is not set [ 77.152819][ T5413] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 77.164620][ T5400] EXT4-fs error (device loop2): ext4_acquire_dquot:6935: comm syz.2.689: Failed to acquire dquot type 1 [ 77.196615][ T5400] EXT4-fs (loop2): 1 truncate cleaned up [ 77.204620][ T5400] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 77.243101][ T5400] lo: entered promiscuous mode [ 77.248147][ T5400] lo: entered allmulticast mode [ 77.254710][ T5400] lo: left allmulticast mode [ 77.259345][ T5400] lo: left promiscuous mode [ 77.291179][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.369120][ T5429] loop3: detected capacity change from 0 to 2048 [ 77.378999][ T5429] EXT4-fs: Ignoring removed i_version option [ 77.396911][ T5429] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 77.466326][ T5445] netlink: 8 bytes leftover after parsing attributes in process `syz.2.708'. [ 77.476301][ T5445] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 77.623634][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.647361][ T5456] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.687156][ T5456] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.724937][ T5456] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.785232][ T5456] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.809581][ T3308] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.834158][ T5463] netlink: 20 bytes leftover after parsing attributes in process `syz.1.714'. [ 77.843437][ T5463] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 77.859395][ T5456] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.878517][ T5456] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.890912][ T5456] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.899948][ T5465] loop1: detected capacity change from 0 to 512 [ 77.920881][ T5456] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.934709][ T5465] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.949094][ T5465] ext4 filesystem being mounted at /134/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 77.994562][ T3308] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.059128][ T5480] netlink: 8 bytes leftover after parsing attributes in process `syz.4.722'. [ 78.071141][ T5480] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.203511][ T5503] FAULT_INJECTION: forcing a failure. [ 78.203511][ T5503] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 78.205091][ T5501] loop1: detected capacity change from 0 to 256 [ 78.217459][ T5503] CPU: 0 UID: 0 PID: 5503 Comm: syz.2.731 Not tainted 6.15.0-rc1-syzkaller #0 PREEMPT(voluntary) [ 78.217490][ T5503] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 78.217527][ T5503] Call Trace: [ 78.217609][ T5503] [ 78.217617][ T5503] dump_stack_lvl+0xf6/0x150 [ 78.217646][ T5503] dump_stack+0x15/0x1a [ 78.217668][ T5503] should_fail_ex+0x261/0x270 [ 78.217817][ T5503] should_fail+0xb/0x10 [ 78.217845][ T5503] should_fail_usercopy+0x1a/0x20 [ 78.217913][ T5503] _copy_to_user+0x20/0xa0 [ 78.217958][ T5503] simple_read_from_buffer+0xb2/0x130 [ 78.218043][ T5503] proc_fail_nth_read+0x103/0x140 [ 78.218166][ T5503] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 78.218211][ T5503] vfs_read+0x1b2/0x710 [ 78.218246][ T5503] ? __rcu_read_unlock+0x4e/0x70 [ 78.218284][ T5503] ? __fget_files+0x186/0x1c0 [ 78.218343][ T5503] ksys_read+0xeb/0x1b0 [ 78.218379][ T5503] __x64_sys_read+0x42/0x50 [ 78.218420][ T5503] x64_sys_call+0x2a3b/0x2e10 [ 78.218473][ T5503] do_syscall_64+0xc9/0x1c0 [ 78.218510][ T5503] ? clear_bhb_loop+0x25/0x80 [ 78.218567][ T5503] ? clear_bhb_loop+0x25/0x80 [ 78.218594][ T5503] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 78.218621][ T5503] RIP: 0033:0x7f3c108cbb7c [ 78.218642][ T5503] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 78.218664][ T5503] RSP: 002b:00007f3c0ef37030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 78.218682][ T5503] RAX: ffffffffffffffda RBX: 00007f3c10ae5fa0 RCX: 00007f3c108cbb7c [ 78.218761][ T5503] RDX: 000000000000000f RSI: 00007f3c0ef370a0 RDI: 0000000000000007 [ 78.218776][ T5503] RBP: 00007f3c0ef37090 R08: 0000000000000000 R09: 0000000000000000 [ 78.218792][ T5503] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 78.218807][ T5503] R13: 0000000000000000 R14: 00007f3c10ae5fa0 R15: 00007ffe674a8548 [ 78.218830][ T5503] [ 78.429150][ T5501] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 78.666872][ T5538] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 78.667562][ T5540] loop3: detected capacity change from 0 to 256 [ 78.690502][ T5540] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 78.797836][ T5551] FAULT_INJECTION: forcing a failure. [ 78.797836][ T5551] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 78.812498][ T5551] CPU: 1 UID: 0 PID: 5551 Comm: syz.0.749 Not tainted 6.15.0-rc1-syzkaller #0 PREEMPT(voluntary) [ 78.812529][ T5551] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 78.812542][ T5551] Call Trace: [ 78.812549][ T5551] [ 78.812557][ T5551] dump_stack_lvl+0xf6/0x150 [ 78.812634][ T5551] dump_stack+0x15/0x1a [ 78.812654][ T5551] should_fail_ex+0x261/0x270 [ 78.812687][ T5551] should_fail+0xb/0x10 [ 78.812712][ T5551] should_fail_usercopy+0x1a/0x20 [ 78.812744][ T5551] _copy_from_user+0x1c/0xa0 [ 78.812806][ T5551] get_user_ifreq+0x8c/0x160 [ 78.812843][ T5551] sock_ioctl+0x56d/0x630 [ 78.812963][ T5551] ? __pfx_sock_ioctl+0x10/0x10 [ 78.812999][ T5551] __se_sys_ioctl+0xc9/0x140 [ 78.813040][ T5551] __x64_sys_ioctl+0x43/0x50 [ 78.813064][ T5551] x64_sys_call+0x168d/0x2e10 [ 78.813086][ T5551] do_syscall_64+0xc9/0x1c0 [ 78.813160][ T5551] ? clear_bhb_loop+0x25/0x80 [ 78.813182][ T5551] ? clear_bhb_loop+0x25/0x80 [ 78.813203][ T5551] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 78.813224][ T5551] RIP: 0033:0x7fe7c201d169 [ 78.813248][ T5551] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 78.813265][ T5551] RSP: 002b:00007fe7c067f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 78.813283][ T5551] RAX: ffffffffffffffda RBX: 00007fe7c2235fa0 RCX: 00007fe7c201d169 [ 78.813295][ T5551] RDX: 0000200000000040 RSI: 00000000000089f0 RDI: 0000000000000003 [ 78.813306][ T5551] RBP: 00007fe7c067f090 R08: 0000000000000000 R09: 0000000000000000 [ 78.813317][ T5551] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 78.813330][ T5551] R13: 0000000000000000 R14: 00007fe7c2235fa0 R15: 00007ffd58f0f6b8 [ 78.813353][ T5551] [ 79.000594][ T5553] loop3: detected capacity change from 0 to 128 [ 79.158979][ T5573] random: crng reseeded on system resumption [ 79.358460][ T5582] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 79.380888][ T5584] xt_SECMARK: invalid mode: 2 [ 79.457466][ T5582] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 79.539375][ T5588] smc: net device bond0 applied user defined pnetid SYZ0 [ 79.566234][ T5588] smc: net device bond0 erased user defined pnetid SYZ0 [ 79.865792][ T5596] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 79.978310][ T29] kauditd_printk_skb: 308 callbacks suppressed [ 79.978325][ T29] audit: type=1326 audit(1744004956.297:2954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5595 comm="syz.0.766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7c201d169 code=0x7ffc0000 [ 80.041778][ T29] audit: type=1326 audit(1744004956.347:2955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5595 comm="syz.0.766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7c201d169 code=0x7ffc0000 [ 80.115476][ T29] audit: type=1400 audit(1744004956.437:2956): avc: denied { ioctl } for pid=5603 comm="syz.1.769" path="socket:[12400]" dev="sockfs" ino=12400 ioctlcmd=0x48e1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 80.154235][ T5602] batadv1: entered promiscuous mode [ 80.177414][ T5608] FAULT_INJECTION: forcing a failure. [ 80.177414][ T5608] name failslab, interval 1, probability 0, space 0, times 0 [ 80.191434][ T5608] CPU: 0 UID: 0 PID: 5608 Comm: syz.3.771 Not tainted 6.15.0-rc1-syzkaller #0 PREEMPT(voluntary) [ 80.191460][ T5608] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 80.191472][ T5608] Call Trace: [ 80.191479][ T5608] [ 80.191518][ T5608] dump_stack_lvl+0xf6/0x150 [ 80.191545][ T5608] dump_stack+0x15/0x1a [ 80.191562][ T5608] should_fail_ex+0x261/0x270 [ 80.191590][ T5608] should_failslab+0x8f/0xb0 [ 80.191660][ T5608] kmem_cache_alloc_noprof+0x59/0x340 [ 80.191684][ T5608] ? skb_clone+0x154/0x1f0 [ 80.191741][ T5608] skb_clone+0x154/0x1f0 [ 80.191769][ T5608] __netlink_deliver_tap+0x2bd/0x4f0 [ 80.191801][ T5608] netlink_unicast+0x69e/0x6c0 [ 80.191824][ T5608] netlink_sendmsg+0x609/0x720 [ 80.191853][ T5608] ? __pfx_netlink_sendmsg+0x10/0x10 [ 80.191878][ T5608] __sock_sendmsg+0x140/0x180 [ 80.191968][ T5608] ____sys_sendmsg+0x350/0x4e0 [ 80.192010][ T5608] __sys_sendmsg+0x1a0/0x240 [ 80.192052][ T5608] __x64_sys_sendmsg+0x46/0x50 [ 80.192077][ T5608] x64_sys_call+0x26f3/0x2e10 [ 80.192129][ T5608] do_syscall_64+0xc9/0x1c0 [ 80.192178][ T5608] ? clear_bhb_loop+0x25/0x80 [ 80.192202][ T5608] ? clear_bhb_loop+0x25/0x80 [ 80.192224][ T5608] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 80.192248][ T5608] RIP: 0033:0x7f614c26d169 [ 80.192264][ T5608] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 80.192288][ T5608] RSP: 002b:00007f614a8d7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 80.192350][ T5608] RAX: ffffffffffffffda RBX: 00007f614c485fa0 RCX: 00007f614c26d169 [ 80.192362][ T5608] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000004 [ 80.192373][ T5608] RBP: 00007f614a8d7090 R08: 0000000000000000 R09: 0000000000000000 [ 80.192385][ T5608] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 80.192396][ T5608] R13: 0000000000000000 R14: 00007f614c485fa0 R15: 00007ffe6e49d1c8 [ 80.192414][ T5608] [ 80.409465][ T5608] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 80.418298][ T5608] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 80.428441][ T5608] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 80.437281][ T5608] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 80.476173][ T5608] vxlan0: entered promiscuous mode [ 80.481368][ T5608] vxlan0: entered allmulticast mode [ 80.565618][ T5608] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 80.574602][ T5608] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 80.583582][ T5608] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 80.594630][ T5608] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 80.791742][ T5622] loop2: detected capacity change from 0 to 2048 [ 80.819309][ T5622] EXT4-fs: Ignoring removed mblk_io_submit option [ 80.988217][ T5622] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.005562][ T5622] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.776: bg 0: block 234: padding at end of block bitmap is not set [ 81.021415][ T5622] EXT4-fs (loop2): Remounting filesystem read-only [ 81.031715][ T29] audit: type=1326 audit(1744004957.347:2957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5621 comm="syz.2.776" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3c108cd169 code=0x0 [ 81.393361][ T29] audit: type=1326 audit(1744004957.717:2958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5637 comm="syz.4.780" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7faeb42fd169 code=0x0 [ 81.434989][ T5641] __nla_validate_parse: 8 callbacks suppressed [ 81.435006][ T5641] netlink: 8 bytes leftover after parsing attributes in process `syz.3.781'. [ 81.453649][ T5641] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 81.490384][ T29] audit: type=1400 audit(1744004957.807:2959): avc: denied { connect } for pid=5642 comm="syz.1.782" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 81.548172][ T29] audit: type=1326 audit(1744004957.827:2960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5640 comm="syz.3.781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f614c26d169 code=0x7ffc0000 [ 81.571752][ T29] audit: type=1326 audit(1744004957.827:2961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5640 comm="syz.3.781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f614c26d169 code=0x7ffc0000 [ 81.691137][ T5649] loop1: detected capacity change from 0 to 2048 [ 81.706635][ T5649] EXT4-fs: Ignoring removed mblk_io_submit option [ 81.712674][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.747737][ T5649] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.761237][ T29] audit: type=1400 audit(1744004958.077:2962): avc: denied { write } for pid=5651 comm="syz.2.785" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 81.793075][ T29] audit: type=1326 audit(1744004958.107:2963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5647 comm="syz.3.784" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f614c26d169 code=0x0 [ 81.795731][ T5652] netlink: 36 bytes leftover after parsing attributes in process `syz.2.785'. [ 81.835505][ T5646] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.783: bg 0: block 234: padding at end of block bitmap is not set [ 81.849984][ T5652] loop2: detected capacity change from 0 to 512 [ 81.874644][ T5646] EXT4-fs (loop1): Remounting filesystem read-only [ 81.901464][ T5660] loop2: detected capacity change from 0 to 128 [ 81.959525][ T5671] loop2: detected capacity change from 0 to 256 [ 81.966431][ T5671] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 82.089234][ T5679] netlink: 'syz.0.794': attribute type 10 has an invalid length. [ 82.097859][ T5679] netlink: 40 bytes leftover after parsing attributes in process `syz.0.794'. [ 82.406292][ T3308] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.528489][ T5697] netlink: 36 bytes leftover after parsing attributes in process `syz.3.801'. [ 82.537954][ T5697] netlink: 4 bytes leftover after parsing attributes in process `syz.3.801'. [ 82.575041][ T5701] netlink: 360 bytes leftover after parsing attributes in process `syz.3.803'. [ 82.584424][ T5701] netlink: 24 bytes leftover after parsing attributes in process `syz.3.803'. [ 82.629222][ T5703] xt_l2tp: invalid flags combination: 8 [ 82.635196][ T5706] loop3: detected capacity change from 0 to 1024 [ 82.645502][ T5706] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 82.656505][ T5706] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 82.670384][ T5703] veth0_macvtap: left promiscuous mode [ 82.671021][ T5706] JBD2: no valid journal superblock found [ 82.683287][ T5706] EXT4-fs (loop3): Could not load journal inode [ 82.700973][ T5703] macvtap0: refused to change device tx_queue_len [ 82.759045][ T5708] loop1: detected capacity change from 0 to 2048 [ 82.765965][ T5708] EXT4-fs: Ignoring removed mblk_io_submit option [ 82.794578][ T5708] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.800309][ T5706] loop3: detected capacity change from 0 to 8192 [ 82.817030][ T5708] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.806: bg 0: block 234: padding at end of block bitmap is not set [ 82.834574][ T5708] EXT4-fs (loop1): Remounting filesystem read-only [ 82.872074][ T5706] netlink: 'syz.3.805': attribute type 10 has an invalid length. [ 82.881592][ T5706] netlink: 40 bytes leftover after parsing attributes in process `syz.3.805'. [ 83.109018][ T3308] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.215864][ T5728] loop1: detected capacity change from 0 to 512 [ 83.254438][ T5728] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 83.285288][ T5728] EXT4-fs (loop1): 1 truncate cleaned up [ 83.301865][ T5728] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 83.737870][ T3308] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.789013][ T5742] loop1: detected capacity change from 0 to 256 [ 83.798185][ T5742] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 83.885811][ T5749] netlink: 8 bytes leftover after parsing attributes in process `syz.2.821'. [ 83.894812][ T5749] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 84.212053][ T5754] loop3: detected capacity change from 0 to 2048 [ 84.235645][ T5754] EXT4-fs (loop3): failed to initialize system zone (-117) [ 84.246251][ T5754] EXT4-fs (loop3): mount failed [ 84.349274][ T5775] loop3: detected capacity change from 0 to 2048 [ 84.369097][ T5775] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 84.399971][ T5776] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 84.456281][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.467220][ T5787] loop1: detected capacity change from 0 to 2048 [ 84.534181][ T5787] loop1: p1 p3 < > p4 < p5 > [ 84.538932][ T5787] loop1: partition table partially beyond EOD, truncated [ 84.547733][ T5787] loop1: p1 size 33024 extends beyond EOD, truncated [ 84.564870][ T5787] loop1: p3 start 4284289 is beyond EOD, truncated [ 84.589623][ T5792] netlink: 8 bytes leftover after parsing attributes in process `syz.3.834'. [ 84.592634][ T5787] loop1: p5 size 33024 extends beyond EOD, truncated [ 84.605912][ T5792] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 84.835517][ T5807] FAULT_INJECTION: forcing a failure. [ 84.835517][ T5807] name failslab, interval 1, probability 0, space 0, times 0 [ 84.848290][ T5807] CPU: 1 UID: 0 PID: 5807 Comm: syz.0.840 Not tainted 6.15.0-rc1-syzkaller #0 PREEMPT(voluntary) [ 84.848439][ T5807] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 84.848455][ T5807] Call Trace: [ 84.848462][ T5807] [ 84.848471][ T5807] dump_stack_lvl+0xf6/0x150 [ 84.848502][ T5807] dump_stack+0x15/0x1a [ 84.848523][ T5807] should_fail_ex+0x261/0x270 [ 84.848556][ T5807] should_failslab+0x8f/0xb0 [ 84.848644][ T5807] __kmalloc_cache_noprof+0x55/0x320 [ 84.848670][ T5807] ? nfnetlink_rcv+0x9cf/0x1610 [ 84.848707][ T5807] nfnetlink_rcv+0x9cf/0x1610 [ 84.848741][ T5807] ? xas_load+0x3ba/0x3d0 [ 84.848798][ T5807] netlink_unicast+0x605/0x6c0 [ 84.848821][ T5807] netlink_sendmsg+0x609/0x720 [ 84.848935][ T5807] ? __pfx_netlink_sendmsg+0x10/0x10 [ 84.848965][ T5807] __sock_sendmsg+0x140/0x180 [ 84.849006][ T5807] ____sys_sendmsg+0x350/0x4e0 [ 84.849118][ T5807] __sys_sendmsg+0x1a0/0x240 [ 84.849165][ T5807] __x64_sys_sendmsg+0x46/0x50 [ 84.849254][ T5807] x64_sys_call+0x26f3/0x2e10 [ 84.849281][ T5807] do_syscall_64+0xc9/0x1c0 [ 84.849316][ T5807] ? clear_bhb_loop+0x25/0x80 [ 84.849338][ T5807] ? clear_bhb_loop+0x25/0x80 [ 84.849369][ T5807] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.849393][ T5807] RIP: 0033:0x7fe7c201d169 [ 84.849411][ T5807] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 84.849430][ T5807] RSP: 002b:00007fe7c067f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 84.849448][ T5807] RAX: ffffffffffffffda RBX: 00007fe7c2235fa0 RCX: 00007fe7c201d169 [ 84.849460][ T5807] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 84.849503][ T5807] RBP: 00007fe7c067f090 R08: 0000000000000000 R09: 0000000000000000 [ 84.849515][ T5807] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 84.849526][ T5807] R13: 0000000000000000 R14: 00007fe7c2235fa0 R15: 00007ffd58f0f6b8 [ 84.849544][ T5807] [ 85.068094][ T5805] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 85.092019][ T5805] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 85.116551][ T29] kauditd_printk_skb: 254 callbacks suppressed [ 85.116566][ T29] audit: type=1400 audit(1744004961.437:3218): avc: denied { setopt } for pid=5813 comm="syz.0.843" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 85.149191][ T3294] udevd[3294]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 85.149790][ T3645] udevd[3645]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 85.163809][ T3380] udevd[3380]: inotify_add_watch(7, /dev/loop1p5, 10) failed: No such file or directory [ 85.183828][ T5805] rdma_op ffff8881250dcd80 conn xmit_rdma 0000000000000000 [ 85.203029][ T3377] udevd[3377]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 85.204375][ T3294] udevd[3294]: inotify_add_watch(7, /dev/loop1p5, 10) failed: No such file or directory [ 85.230619][ T3645] udevd[3645]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 85.248735][ T3377] udevd[3377]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 85.262346][ T3645] udevd[3645]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 85.276688][ T3294] udevd[3294]: inotify_add_watch(7, /dev/loop1p5, 10) failed: No such file or directory [ 85.314669][ T5829] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 85.328400][ T5829] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 85.406975][ T29] audit: type=1400 audit(1744004961.727:3219): avc: denied { cpu } for pid=5836 comm="syz.4.852" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 85.411006][ T5837] vlan2: entered allmulticast mode [ 85.776851][ T5848] FAULT_INJECTION: forcing a failure. [ 85.776851][ T5848] name failslab, interval 1, probability 0, space 0, times 0 [ 85.789554][ T5848] CPU: 1 UID: 0 PID: 5848 Comm: syz.1.857 Not tainted 6.15.0-rc1-syzkaller #0 PREEMPT(voluntary) [ 85.789632][ T5848] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 85.789645][ T5848] Call Trace: [ 85.789651][ T5848] [ 85.789658][ T5848] dump_stack_lvl+0xf6/0x150 [ 85.789684][ T5848] dump_stack+0x15/0x1a [ 85.789705][ T5848] should_fail_ex+0x261/0x270 [ 85.789786][ T5848] should_failslab+0x8f/0xb0 [ 85.789820][ T5848] __kmalloc_noprof+0xad/0x410 [ 85.789845][ T5848] ? kobject_get_path+0x91/0x1c0 [ 85.789882][ T5848] kobject_get_path+0x91/0x1c0 [ 85.789980][ T5848] ? __kmalloc_cache_noprof+0x18d/0x320 [ 85.790038][ T5848] kobject_uevent_env+0x1b9/0x550 [ 85.790121][ T5848] ? _raw_spin_unlock_irqrestore+0x2b/0x60 [ 85.790144][ T5848] ? device_pm_check_callbacks+0x632/0x650 [ 85.790172][ T5848] kobject_uevent+0x1c/0x30 [ 85.790270][ T5848] device_del+0x6fc/0x780 [ 85.790291][ T5848] ? mntput+0x49/0x70 [ 85.790317][ T5848] device_unregister+0x15/0x40 [ 85.790335][ T5848] bdi_unregister+0x309/0x3a0 [ 85.790430][ T5848] del_gendisk+0x2f6/0x5f0 [ 85.790467][ T5848] loop_control_ioctl+0x3c1/0x450 [ 85.790507][ T5848] ? __pfx_loop_control_ioctl+0x10/0x10 [ 85.790533][ T5848] __se_sys_ioctl+0xc9/0x140 [ 85.790567][ T5848] __x64_sys_ioctl+0x43/0x50 [ 85.790629][ T5848] x64_sys_call+0x168d/0x2e10 [ 85.790654][ T5848] do_syscall_64+0xc9/0x1c0 [ 85.790683][ T5848] ? clear_bhb_loop+0x25/0x80 [ 85.790704][ T5848] ? clear_bhb_loop+0x25/0x80 [ 85.790760][ T5848] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.790814][ T5848] RIP: 0033:0x7f648a33d169 [ 85.790828][ T5848] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 85.790905][ T5848] RSP: 002b:00007f64889a7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 85.790923][ T5848] RAX: ffffffffffffffda RBX: 00007f648a555fa0 RCX: 00007f648a33d169 [ 85.790943][ T5848] RDX: 0000000000000001 RSI: 0000000000004c81 RDI: 0000000000000007 [ 85.790955][ T5848] RBP: 00007f64889a7090 R08: 0000000000000000 R09: 0000000000000000 [ 85.790967][ T5848] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 85.791050][ T5848] R13: 0000000000000000 R14: 00007f648a555fa0 R15: 00007ffcc0dca638 [ 85.791106][ T5848] [ 86.077337][ T5856] FAULT_INJECTION: forcing a failure. [ 86.077337][ T5856] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 86.091864][ T5856] CPU: 0 UID: 0 PID: 5856 Comm: syz.3.860 Not tainted 6.15.0-rc1-syzkaller #0 PREEMPT(voluntary) [ 86.091894][ T5856] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 86.091910][ T5856] Call Trace: [ 86.091918][ T5856] [ 86.091927][ T5856] dump_stack_lvl+0xf6/0x150 [ 86.091989][ T5856] dump_stack+0x15/0x1a [ 86.092010][ T5856] should_fail_ex+0x261/0x270 [ 86.092105][ T5856] should_fail+0xb/0x10 [ 86.092129][ T5856] should_fail_usercopy+0x1a/0x20 [ 86.092158][ T5856] _copy_from_user+0x1c/0xa0 [ 86.092190][ T5856] copy_from_sockptr+0x65/0xb0 [ 86.092271][ T5856] packet_setsockopt+0x78f/0xfe0 [ 86.092297][ T5856] ? __pfx_packet_setsockopt+0x10/0x10 [ 86.092335][ T5856] __sys_setsockopt+0x187/0x200 [ 86.092368][ T5856] __x64_sys_setsockopt+0x66/0x80 [ 86.092398][ T5856] x64_sys_call+0x2a09/0x2e10 [ 86.092423][ T5856] do_syscall_64+0xc9/0x1c0 [ 86.092459][ T5856] ? clear_bhb_loop+0x25/0x80 [ 86.092493][ T5856] ? clear_bhb_loop+0x25/0x80 [ 86.092514][ T5856] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.092540][ T5856] RIP: 0033:0x7f614c26d169 [ 86.092558][ T5856] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 86.092577][ T5856] RSP: 002b:00007f614a8d7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 86.092595][ T5856] RAX: ffffffffffffffda RBX: 00007f614c485fa0 RCX: 00007f614c26d169 [ 86.092663][ T5856] RDX: 0000000000000005 RSI: 0000000000000107 RDI: 0000000000000005 [ 86.092751][ T5856] RBP: 00007f614a8d7090 R08: 0000000000000010 R09: 0000000000000000 [ 86.092766][ T5856] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000001 [ 86.092781][ T5856] R13: 0000000000000000 R14: 00007f614c485fa0 R15: 00007ffe6e49d1c8 [ 86.092835][ T5856] [ 86.335311][ T29] audit: type=1400 audit(1744004962.597:3220): avc: denied { recv } for pid=5855 comm="syz.3.860" saddr=10.128.0.163 src=30030 daddr=10.128.0.156 dest=33340 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 86.361341][ T29] audit: type=1400 audit(1744004962.657:3221): avc: denied { write } for pid=5857 comm="syz.1.861" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 86.415289][ T29] audit: type=1326 audit(1744004962.707:3222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5857 comm="syz.1.861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f648a33d169 code=0x7ffc0000 [ 86.440297][ T29] audit: type=1326 audit(1744004962.707:3223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5857 comm="syz.1.861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f648a33d169 code=0x7ffc0000 [ 86.463588][ T29] audit: type=1326 audit(1744004962.707:3224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5857 comm="syz.1.861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f648a33d169 code=0x7ffc0000 [ 86.489143][ T29] audit: type=1326 audit(1744004962.707:3225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5857 comm="syz.1.861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f648a33d169 code=0x7ffc0000 [ 86.512365][ T29] audit: type=1326 audit(1744004962.707:3226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5857 comm="syz.1.861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f648a33d169 code=0x7ffc0000 [ 86.538246][ T29] audit: type=1326 audit(1744004962.707:3227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5857 comm="syz.1.861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f648a33d169 code=0x7ffc0000 [ 86.650132][ T5883] FAULT_INJECTION: forcing a failure. [ 86.650132][ T5883] name failslab, interval 1, probability 0, space 0, times 0 [ 86.664412][ T5883] CPU: 1 UID: 0 PID: 5883 Comm: syz.3.867 Not tainted 6.15.0-rc1-syzkaller #0 PREEMPT(voluntary) [ 86.664446][ T5883] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 86.664459][ T5883] Call Trace: [ 86.664464][ T5883] [ 86.664471][ T5883] dump_stack_lvl+0xf6/0x150 [ 86.664495][ T5883] dump_stack+0x15/0x1a [ 86.664515][ T5883] should_fail_ex+0x261/0x270 [ 86.664647][ T5883] should_failslab+0x8f/0xb0 [ 86.664722][ T5883] __kmalloc_noprof+0xad/0x410 [ 86.664748][ T5883] ? security_prepare_creds+0x53/0x120 [ 86.664778][ T5883] security_prepare_creds+0x53/0x120 [ 86.664803][ T5883] prepare_creds+0x368/0x4e0 [ 86.664843][ T5883] copy_creds+0x90/0x3f0 [ 86.664877][ T5883] copy_process+0x63f/0x1f60 [ 86.664924][ T5883] ? __rcu_read_unlock+0x4e/0x70 [ 86.664993][ T5883] kernel_clone+0x168/0x5d0 [ 86.665029][ T5883] __x64_sys_clone+0xe9/0x120 [ 86.665072][ T5883] x64_sys_call+0x2dc9/0x2e10 [ 86.665096][ T5883] do_syscall_64+0xc9/0x1c0 [ 86.665139][ T5883] ? clear_bhb_loop+0x25/0x80 [ 86.665165][ T5883] ? clear_bhb_loop+0x25/0x80 [ 86.665190][ T5883] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.665293][ T5883] RIP: 0033:0x7f614c26d169 [ 86.665310][ T5883] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 86.665329][ T5883] RSP: 002b:00007f614a8d6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 86.665376][ T5883] RAX: ffffffffffffffda RBX: 00007f614c485fa0 RCX: 00007f614c26d169 [ 86.665390][ T5883] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 86.665405][ T5883] RBP: 00007f614a8d7090 R08: 0000000000000000 R09: 0000000000000000 [ 86.665418][ T5883] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 86.665432][ T5883] R13: 0000000000000000 R14: 00007f614c485fa0 R15: 00007ffe6e49d1c8 [ 86.665461][ T5883] [ 86.902501][ T5898] __nla_validate_parse: 2 callbacks suppressed [ 86.902583][ T5898] netlink: 20 bytes leftover after parsing attributes in process `syz.4.869'. [ 86.940294][ T5902] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 86.965891][ T5898] netlink: 4 bytes leftover after parsing attributes in process `syz.4.869'. [ 86.984611][ T5902] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 87.086208][ T5928] netlink: 4 bytes leftover after parsing attributes in process `syz.4.874'. [ 87.099235][ T5927] loop3: detected capacity change from 0 to 1024 [ 87.106783][ T5927] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 87.135601][ T5928] netlink: 4 bytes leftover after parsing attributes in process `syz.4.874'. [ 87.434621][ T5976] netlink: 'syz.4.878': attribute type 10 has an invalid length. [ 87.442550][ T5976] netlink: 40 bytes leftover after parsing attributes in process `syz.4.878'. [ 87.481157][ T5988] 9pnet_fd: Insufficient options for proto=fd [ 87.715893][ T6031] netlink: 360 bytes leftover after parsing attributes in process `syz.0.885'. [ 87.730292][ T6031] netlink: 24 bytes leftover after parsing attributes in process `syz.0.885'. [ 87.785022][ T6041] Invalid ELF header magic: != ELF [ 88.010874][ T6076] FAULT_INJECTION: forcing a failure. [ 88.010874][ T6076] name failslab, interval 1, probability 0, space 0, times 0 [ 88.024871][ T6076] CPU: 1 UID: 0 PID: 6076 Comm: syz.2.894 Not tainted 6.15.0-rc1-syzkaller #0 PREEMPT(voluntary) [ 88.024971][ T6076] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 88.024983][ T6076] Call Trace: [ 88.024989][ T6076] [ 88.024997][ T6076] dump_stack_lvl+0xf6/0x150 [ 88.025024][ T6076] dump_stack+0x15/0x1a [ 88.025041][ T6076] should_fail_ex+0x261/0x270 [ 88.025069][ T6076] should_failslab+0x8f/0xb0 [ 88.025122][ T6076] kmem_cache_alloc_lru_noprof+0x5e/0x330 [ 88.025151][ T6076] ? __d_alloc+0x3d/0x350 [ 88.025182][ T6076] __d_alloc+0x3d/0x350 [ 88.025245][ T6076] ? mpol_shared_policy_init+0xd2/0x510 [ 88.025278][ T6076] d_alloc_pseudo+0x1e/0x80 [ 88.025307][ T6076] alloc_file_pseudo+0x75/0x160 [ 88.025332][ T6076] __shmem_file_setup+0x1bb/0x1f0 [ 88.025431][ T6076] shmem_file_setup+0x3b/0x50 [ 88.025462][ T6076] __se_sys_memfd_create+0x2e1/0x5a0 [ 88.025503][ T6076] __x64_sys_memfd_create+0x31/0x40 [ 88.025583][ T6076] x64_sys_call+0x1163/0x2e10 [ 88.025625][ T6076] do_syscall_64+0xc9/0x1c0 [ 88.025655][ T6076] ? clear_bhb_loop+0x25/0x80 [ 88.025676][ T6076] ? clear_bhb_loop+0x25/0x80 [ 88.025702][ T6076] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.025739][ T6076] RIP: 0033:0x7f3c108cd169 [ 88.025757][ T6076] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 88.025779][ T6076] RSP: 002b:00007f3c0ef36d68 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 88.025874][ T6076] RAX: ffffffffffffffda RBX: 0000000000001059 RCX: 00007f3c108cd169 [ 88.025887][ T6076] RDX: 00007f3c0ef36dec RSI: 0000000000000000 RDI: 00007f3c1094ec3c [ 88.025924][ T6076] RBP: 0000200000000000 R08: 00007f3c0ef36b07 R09: 0000000000000000 [ 88.025939][ T6076] R10: 000000000000000a R11: 0000000000000202 R12: 0000000000000001 [ 88.025953][ T6076] R13: 00007f3c0ef36dec R14: 00007f3c0ef36df0 R15: 00007ffe674a8548 [ 88.025977][ T6076] [ 88.242540][ T6078] netlink: 'syz.0.890': attribute type 10 has an invalid length. [ 88.250503][ T6078] netlink: 40 bytes leftover after parsing attributes in process `syz.0.890'. [ 88.310230][ T6085] netlink: 4 bytes leftover after parsing attributes in process `syz.0.897'. [ 88.361889][ T6091] FAULT_INJECTION: forcing a failure. [ 88.361889][ T6091] name failslab, interval 1, probability 0, space 0, times 0 [ 88.376700][ T6091] CPU: 0 UID: 0 PID: 6091 Comm: syz.0.899 Not tainted 6.15.0-rc1-syzkaller #0 PREEMPT(voluntary) [ 88.376729][ T6091] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 88.376741][ T6091] Call Trace: [ 88.376748][ T6091] [ 88.376755][ T6091] dump_stack_lvl+0xf6/0x150 [ 88.376931][ T6091] dump_stack+0x15/0x1a [ 88.376949][ T6091] should_fail_ex+0x261/0x270 [ 88.376982][ T6091] should_failslab+0x8f/0xb0 [ 88.377054][ T6091] kmem_cache_alloc_node_noprof+0x5c/0x340 [ 88.377088][ T6091] ? __alloc_skb+0x10d/0x320 [ 88.377117][ T6091] __alloc_skb+0x10d/0x320 [ 88.377145][ T6091] netlink_alloc_large_skb+0xad/0xe0 [ 88.377171][ T6091] netlink_sendmsg+0x3da/0x720 [ 88.377248][ T6091] ? __pfx_netlink_sendmsg+0x10/0x10 [ 88.377276][ T6091] __sock_sendmsg+0x140/0x180 [ 88.377312][ T6091] ____sys_sendmsg+0x350/0x4e0 [ 88.377346][ T6091] __sys_sendmsg+0x1a0/0x240 [ 88.377444][ T6091] __x64_sys_sendmsg+0x46/0x50 [ 88.377474][ T6091] x64_sys_call+0x26f3/0x2e10 [ 88.377500][ T6091] do_syscall_64+0xc9/0x1c0 [ 88.377596][ T6091] ? clear_bhb_loop+0x25/0x80 [ 88.377621][ T6091] ? clear_bhb_loop+0x25/0x80 [ 88.377644][ T6091] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.377682][ T6091] RIP: 0033:0x7fe7c201d169 [ 88.377699][ T6091] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 88.377720][ T6091] RSP: 002b:00007fe7c067f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 88.377818][ T6091] RAX: ffffffffffffffda RBX: 00007fe7c2235fa0 RCX: 00007fe7c201d169 [ 88.377831][ T6091] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003 [ 88.377844][ T6091] RBP: 00007fe7c067f090 R08: 0000000000000000 R09: 0000000000000000 [ 88.377857][ T6091] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 88.377870][ T6091] R13: 0000000000000000 R14: 00007fe7c2235fa0 R15: 00007ffd58f0f6b8 [ 88.377890][ T6091] [ 88.630198][ T6097] FAULT_INJECTION: forcing a failure. [ 88.630198][ T6097] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 88.645456][ T6097] CPU: 0 UID: 0 PID: 6097 Comm: syz.0.902 Not tainted 6.15.0-rc1-syzkaller #0 PREEMPT(voluntary) [ 88.645490][ T6097] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 88.645504][ T6097] Call Trace: [ 88.645511][ T6097] [ 88.645519][ T6097] dump_stack_lvl+0xf6/0x150 [ 88.645548][ T6097] dump_stack+0x15/0x1a [ 88.645569][ T6097] should_fail_ex+0x261/0x270 [ 88.645612][ T6097] should_fail+0xb/0x10 [ 88.645722][ T6097] should_fail_usercopy+0x1a/0x20 [ 88.645823][ T6097] _copy_from_user+0x1c/0xa0 [ 88.645855][ T6097] vmemdup_user+0x66/0xd0 [ 88.645885][ T6097] map_get_next_key+0x140/0x320 [ 88.645912][ T6097] ? __sys_bpf+0x75b/0x800 [ 88.645966][ T6097] __sys_bpf+0x765/0x800 [ 88.645995][ T6097] __x64_sys_bpf+0x43/0x50 [ 88.646013][ T6097] x64_sys_call+0x23da/0x2e10 [ 88.646034][ T6097] do_syscall_64+0xc9/0x1c0 [ 88.646080][ T6097] ? clear_bhb_loop+0x25/0x80 [ 88.646101][ T6097] ? clear_bhb_loop+0x25/0x80 [ 88.646126][ T6097] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.646157][ T6097] RIP: 0033:0x7fe7c201d169 [ 88.646199][ T6097] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 88.646218][ T6097] RSP: 002b:00007fe7c067f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 88.646317][ T6097] RAX: ffffffffffffffda RBX: 00007fe7c2235fa0 RCX: 00007fe7c201d169 [ 88.646329][ T6097] RDX: 0000000000000010 RSI: 0000200000000880 RDI: 0000000000000004 [ 88.646341][ T6097] RBP: 00007fe7c067f090 R08: 0000000000000000 R09: 0000000000000000 [ 88.646356][ T6097] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 88.646370][ T6097] R13: 0000000000000000 R14: 00007fe7c2235fa0 R15: 00007ffd58f0f6b8 [ 88.646391][ T6097] [ 88.658821][ T6103] loop3: detected capacity change from 0 to 1024 [ 88.722215][ T6108] FAULT_INJECTION: forcing a failure. [ 88.722215][ T6108] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 88.726996][ T6103] EXT4-fs (loop3): orphan cleanup on readonly fs [ 88.727919][ T6108] CPU: 0 UID: 0 PID: 6108 Comm: syz.0.906 Not tainted 6.15.0-rc1-syzkaller #0 PREEMPT(voluntary) [ 88.728013][ T6108] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 88.728029][ T6108] Call Trace: [ 88.728056][ T6108] [ 88.728069][ T6108] dump_stack_lvl+0xf6/0x150 [ 88.728101][ T6108] dump_stack+0x15/0x1a [ 88.728121][ T6108] should_fail_ex+0x261/0x270 [ 88.728156][ T6108] should_fail+0xb/0x10 [ 88.728204][ T6108] should_fail_usercopy+0x1a/0x20 [ 88.728236][ T6108] _copy_from_user+0x1c/0xa0 [ 88.728277][ T6108] do_sock_getsockopt+0xde/0x290 [ 88.728314][ T6108] __x64_sys_getsockopt+0x191/0x210 [ 88.728430][ T6108] x64_sys_call+0x128f/0x2e10 [ 88.728459][ T6108] do_syscall_64+0xc9/0x1c0 [ 88.728524][ T6108] ? clear_bhb_loop+0x25/0x80 [ 88.728550][ T6108] ? clear_bhb_loop+0x25/0x80 [ 88.728578][ T6108] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.728604][ T6108] RIP: 0033:0x7fe7c201d169 [ 88.728624][ T6108] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 88.728674][ T6108] RSP: 002b:00007fe7c067f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 88.728697][ T6108] RAX: ffffffffffffffda RBX: 00007fe7c2235fa0 RCX: 00007fe7c201d169 [ 88.728713][ T6108] RDX: 000000000000271e RSI: 0000200000000114 RDI: 0000000000000004 [ 88.728728][ T6108] RBP: 00007fe7c067f090 R08: 0000200000000040 R09: 0000000000000000 [ 88.728743][ T6108] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 88.728758][ T6108] R13: 0000000000000000 R14: 00007fe7c2235fa0 R15: 00007ffd58f0f6b8 [ 88.728781][ T6108] [ 89.037002][ T6103] EXT4-fs error (device loop3): ext4_orphan_get:1416: comm syz.3.904: bad orphan inode 8 [ 89.037671][ T6103] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 89.091701][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.160824][ T6130] FAULT_INJECTION: forcing a failure. [ 89.160824][ T6130] name failslab, interval 1, probability 0, space 0, times 0 [ 89.174883][ T6130] CPU: 1 UID: 0 PID: 6130 Comm: syz.0.914 Not tainted 6.15.0-rc1-syzkaller #0 PREEMPT(voluntary) [ 89.174962][ T6130] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 89.174973][ T6130] Call Trace: [ 89.174978][ T6130] [ 89.174984][ T6130] dump_stack_lvl+0xf6/0x150 [ 89.175005][ T6130] dump_stack+0x15/0x1a [ 89.175019][ T6130] should_fail_ex+0x261/0x270 [ 89.175043][ T6130] should_failslab+0x8f/0xb0 [ 89.175140][ T6130] kmem_cache_alloc_noprof+0x59/0x340 [ 89.175195][ T6130] ? getname_flags+0x81/0x3b0 [ 89.175214][ T6130] getname_flags+0x81/0x3b0 [ 89.175281][ T6130] user_path_at+0x26/0x140 [ 89.175303][ T6130] __x64_sys_fchmodat+0x78/0x130 [ 89.175366][ T6130] x64_sys_call+0x871/0x2e10 [ 89.175385][ T6130] do_syscall_64+0xc9/0x1c0 [ 89.175456][ T6130] ? clear_bhb_loop+0x25/0x80 [ 89.175474][ T6130] ? clear_bhb_loop+0x25/0x80 [ 89.175492][ T6130] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 89.175510][ T6130] RIP: 0033:0x7fe7c201d169 [ 89.175523][ T6130] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 89.175551][ T6130] RSP: 002b:00007fe7c067f038 EFLAGS: 00000246 ORIG_RAX: 000000000000010c [ 89.175566][ T6130] RAX: ffffffffffffffda RBX: 00007fe7c2235fa0 RCX: 00007fe7c201d169 [ 89.175651][ T6130] RDX: 00000000000001ff RSI: 0000200000000300 RDI: ffffffffffffff9c [ 89.175661][ T6130] RBP: 00007fe7c067f090 R08: 0000000000000000 R09: 0000000000000000 [ 89.175671][ T6130] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 89.175681][ T6130] R13: 0000000000000000 R14: 00007fe7c2235fa0 R15: 00007ffd58f0f6b8 [ 89.175698][ T6130] [ 89.358591][ T6116] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 89.366027][ T6135] netlink: 28 bytes leftover after parsing attributes in process `syz.4.916'. [ 89.369286][ T6116] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 89.396525][ T6116] rdma_op ffff88812815a180 conn xmit_rdma 0000000000000000 [ 90.088464][ T6155] vlan2: entered allmulticast mode [ 90.100824][ T6159] FAULT_INJECTION: forcing a failure. [ 90.100824][ T6159] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 90.115323][ T6159] CPU: 0 UID: 0 PID: 6159 Comm: syz.1.924 Not tainted 6.15.0-rc1-syzkaller #0 PREEMPT(voluntary) [ 90.115354][ T6159] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 90.115375][ T6159] Call Trace: [ 90.115384][ T6159] [ 90.115391][ T6159] dump_stack_lvl+0xf6/0x150 [ 90.115449][ T6159] dump_stack+0x15/0x1a [ 90.115469][ T6159] should_fail_ex+0x261/0x270 [ 90.115502][ T6159] should_fail+0xb/0x10 [ 90.115530][ T6159] should_fail_usercopy+0x1a/0x20 [ 90.115570][ T6159] strncpy_from_user+0x25/0x230 [ 90.115595][ T6159] ? getname_flags+0x81/0x3b0 [ 90.115621][ T6159] getname_flags+0xb0/0x3b0 [ 90.115645][ T6159] user_path_at+0x26/0x140 [ 90.115671][ T6159] __se_sys_chroot+0x50/0x190 [ 90.115726][ T6159] __x64_sys_chroot+0x1f/0x30 [ 90.115761][ T6159] x64_sys_call+0x2bd5/0x2e10 [ 90.115788][ T6159] do_syscall_64+0xc9/0x1c0 [ 90.115875][ T6159] ? clear_bhb_loop+0x25/0x80 [ 90.115901][ T6159] ? clear_bhb_loop+0x25/0x80 [ 90.115923][ T6159] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.115944][ T6159] RIP: 0033:0x7f648a33d169 [ 90.116111][ T6159] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 90.116139][ T6159] RSP: 002b:00007f64889a7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a1 [ 90.116161][ T6159] RAX: ffffffffffffffda RBX: 00007f648a555fa0 RCX: 00007f648a33d169 [ 90.116175][ T6159] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 90.116190][ T6159] RBP: 00007f64889a7090 R08: 0000000000000000 R09: 0000000000000000 [ 90.116278][ T6159] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 90.116292][ T6159] R13: 0000000000000000 R14: 00007f648a555fa0 R15: 00007ffcc0dca638 [ 90.116312][ T6159] [ 90.312409][ T29] kauditd_printk_skb: 232 callbacks suppressed [ 90.312425][ T29] audit: type=1326 audit(1744004966.497:3460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6158 comm="syz.1.924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f648a33bb7c code=0x7ffc0000 [ 90.343237][ T29] audit: type=1326 audit(1744004966.497:3461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6158 comm="syz.1.924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f648a33bc1f code=0x7ffc0000 [ 90.366568][ T29] audit: type=1326 audit(1744004966.497:3462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6158 comm="syz.1.924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f648a33bdca code=0x7ffc0000 [ 90.391258][ T29] audit: type=1326 audit(1744004966.497:3463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6158 comm="syz.1.924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f648a33d169 code=0x7ffc0000 [ 90.414656][ T29] audit: type=1326 audit(1744004966.497:3464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6158 comm="syz.1.924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f648a33d169 code=0x7ffc0000 [ 90.552033][ T6175] FAULT_INJECTION: forcing a failure. [ 90.552033][ T6175] name failslab, interval 1, probability 0, space 0, times 0 [ 90.566200][ T6175] CPU: 1 UID: 0 PID: 6175 Comm: syz.3.931 Not tainted 6.15.0-rc1-syzkaller #0 PREEMPT(voluntary) [ 90.566238][ T6175] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 90.566252][ T6175] Call Trace: [ 90.566259][ T6175] [ 90.566266][ T6175] dump_stack_lvl+0xf6/0x150 [ 90.566293][ T6175] dump_stack+0x15/0x1a [ 90.566312][ T6175] should_fail_ex+0x261/0x270 [ 90.566398][ T6175] should_failslab+0x8f/0xb0 [ 90.566433][ T6175] kmem_cache_alloc_noprof+0x59/0x340 [ 90.566473][ T6175] ? getname_flags+0x81/0x3b0 [ 90.566499][ T6175] getname_flags+0x81/0x3b0 [ 90.566540][ T6175] user_path_at+0x26/0x140 [ 90.566566][ T6175] __x64_sys_fchmodat+0x78/0x130 [ 90.566606][ T6175] x64_sys_call+0x871/0x2e10 [ 90.566650][ T6175] do_syscall_64+0xc9/0x1c0 [ 90.566687][ T6175] ? clear_bhb_loop+0x25/0x80 [ 90.566759][ T6175] ? clear_bhb_loop+0x25/0x80 [ 90.566832][ T6175] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.566856][ T6175] RIP: 0033:0x7f614c26d169 [ 90.566872][ T6175] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 90.566969][ T6175] RSP: 002b:00007f614a8d7038 EFLAGS: 00000246 ORIG_RAX: 000000000000010c [ 90.566993][ T6175] RAX: ffffffffffffffda RBX: 00007f614c485fa0 RCX: 00007f614c26d169 [ 90.567008][ T6175] RDX: 00000000000001ff RSI: 0000200000000300 RDI: ffffffffffffff9c [ 90.567022][ T6175] RBP: 00007f614a8d7090 R08: 0000000000000000 R09: 0000000000000000 [ 90.567037][ T6175] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 90.567080][ T6175] R13: 0000000000000000 R14: 00007f614c485fa0 R15: 00007ffe6e49d1c8 [ 90.567109][ T6175] [ 90.764211][ T29] audit: type=1326 audit(1744004967.067:3465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6177 comm="syz.0.934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7c201d169 code=0x7ffc0000 [ 90.787609][ T29] audit: type=1326 audit(1744004967.067:3466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6177 comm="syz.0.934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe7c201d169 code=0x7ffc0000 [ 90.812415][ T29] audit: type=1326 audit(1744004967.067:3467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6177 comm="syz.0.934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7c201d169 code=0x7ffc0000 [ 90.837236][ T29] audit: type=1326 audit(1744004967.067:3468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6177 comm="syz.0.934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe7c201d169 code=0x7ffc0000 [ 90.860581][ T29] audit: type=1326 audit(1744004967.067:3469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6177 comm="syz.0.934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7c201d169 code=0x7ffc0000 [ 90.949156][ T6195] geneve2: entered promiscuous mode [ 90.954477][ T6195] geneve2: entered allmulticast mode [ 91.068997][ T6211] SELinux: Context system_u:object_r:hwdata_t:s0 is not valid (left unmapped). [ 91.171144][ T6208] No such timeout policy "syz0" [ 91.299648][ T6218] netlink: 'syz.2.947': attribute type 10 has an invalid length. [ 91.386033][ T6225] FAULT_INJECTION: forcing a failure. [ 91.386033][ T6225] name failslab, interval 1, probability 0, space 0, times 0 [ 91.398923][ T6225] CPU: 0 UID: 0 PID: 6225 Comm: syz.2.951 Not tainted 6.15.0-rc1-syzkaller #0 PREEMPT(voluntary) [ 91.398948][ T6225] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 91.398969][ T6225] Call Trace: [ 91.398976][ T6225] [ 91.399041][ T6225] dump_stack_lvl+0xf6/0x150 [ 91.399072][ T6225] dump_stack+0x15/0x1a [ 91.399093][ T6225] should_fail_ex+0x261/0x270 [ 91.399124][ T6225] should_failslab+0x8f/0xb0 [ 91.399158][ T6225] kmem_cache_alloc_noprof+0x59/0x340 [ 91.399216][ T6225] ? security_inode_alloc+0x37/0x100 [ 91.399305][ T6225] security_inode_alloc+0x37/0x100 [ 91.399347][ T6225] inode_init_always_gfp+0x4a2/0x4f0 [ 91.399437][ T6225] ? __pfx_sock_alloc_inode+0x10/0x10 [ 91.399547][ T6225] alloc_inode+0x86/0x170 [ 91.399585][ T6225] __sock_create+0x12b/0x5a0 [ 91.399604][ T6225] ? __memcg_slab_free_hook+0xc9/0x1e0 [ 91.399631][ T6225] ? copy_from_kernel_nofault_allowed+0x82/0xa0 [ 91.399663][ T6225] sock_create_kern+0x38/0x50 [ 91.399764][ T6225] udp_sock_create4+0x6c/0x2a0 [ 91.399803][ T6225] wg_socket_init+0x246/0x630 [ 91.399837][ T6225] ? __pfx_wg_receive+0x10/0x10 [ 91.399907][ T6225] wg_set_device+0x377/0x1230 [ 91.399942][ T6225] ? __nla_parse+0x40/0x60 [ 91.399990][ T6225] ? genl_family_rcv_msg_attrs_parse+0x14b/0x1a0 [ 91.400024][ T6225] ? genl_family_rcv_msg_attrs_parse+0x185/0x1a0 [ 91.400131][ T6225] genl_rcv_msg+0x69b/0x6f0 [ 91.400217][ T6225] ? __pfx_wg_set_device+0x10/0x10 [ 91.400254][ T6225] ? __dev_queue_xmit+0xb76/0x20b0 [ 91.400340][ T6225] netlink_rcv_skb+0x12f/0x230 [ 91.400361][ T6225] ? __pfx_genl_rcv_msg+0x10/0x10 [ 91.400428][ T6225] genl_rcv+0x28/0x40 [ 91.400469][ T6225] netlink_unicast+0x605/0x6c0 [ 91.400497][ T6225] netlink_sendmsg+0x609/0x720 [ 91.400531][ T6225] ? __pfx_netlink_sendmsg+0x10/0x10 [ 91.400611][ T6225] __sock_sendmsg+0x140/0x180 [ 91.400709][ T6225] ____sys_sendmsg+0x350/0x4e0 [ 91.400746][ T6225] __sys_sendmsg+0x1a0/0x240 [ 91.400817][ T6225] __x64_sys_sendmsg+0x46/0x50 [ 91.400850][ T6225] x64_sys_call+0x26f3/0x2e10 [ 91.400877][ T6225] do_syscall_64+0xc9/0x1c0 [ 91.400911][ T6225] ? clear_bhb_loop+0x25/0x80 [ 91.400977][ T6225] ? clear_bhb_loop+0x25/0x80 [ 91.400999][ T6225] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.401020][ T6225] RIP: 0033:0x7f3c108cd169 [ 91.401035][ T6225] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 91.401052][ T6225] RSP: 002b:00007f3c0ef37038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 91.401072][ T6225] RAX: ffffffffffffffda RBX: 00007f3c10ae5fa0 RCX: 00007f3c108cd169 [ 91.401087][ T6225] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000007 [ 91.401167][ T6225] RBP: 00007f3c0ef37090 R08: 0000000000000000 R09: 0000000000000000 [ 91.401182][ T6225] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 91.401196][ T6225] R13: 0000000000000000 R14: 00007f3c10ae5fa0 R15: 00007ffe674a8548 [ 91.401220][ T6225] [ 91.401231][ T6225] socket: no more sockets [ 91.725615][ T6225] wireguard: wg0: Could not create IPv4 socket [ 91.968576][ T6248] __nla_validate_parse: 5 callbacks suppressed [ 91.968595][ T6248] netlink: 4 bytes leftover after parsing attributes in process `syz.4.959'. [ 92.030586][ T6248] netlink: 4 bytes leftover after parsing attributes in process `syz.4.959'. [ 92.193530][ T6262] netlink: 132 bytes leftover after parsing attributes in process `syz.2.966'. [ 92.209311][ T6250] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 92.220452][ T6250] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 92.243670][ T6250] rdma_op ffff88813d7c3980 conn xmit_rdma 0000000000000000 [ 92.346525][ T6272] loop3: detected capacity change from 0 to 128 [ 92.436003][ T6282] loop3: detected capacity change from 0 to 2048 [ 92.445004][ T6282] EXT4-fs: Ignoring removed mblk_io_submit option [ 92.464244][ T6282] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 92.480642][ T6282] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.971: bg 0: block 234: padding at end of block bitmap is not set [ 92.495419][ T6282] EXT4-fs (loop3): Remounting filesystem read-only [ 92.923217][ T6292] FAULT_INJECTION: forcing a failure. [ 92.923217][ T6292] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 92.937605][ T6292] CPU: 1 UID: 0 PID: 6292 Comm: +}[@ Not tainted 6.15.0-rc1-syzkaller #0 PREEMPT(voluntary) [ 92.937651][ T6292] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 92.937666][ T6292] Call Trace: [ 92.937673][ T6292] [ 92.937683][ T6292] dump_stack_lvl+0xf6/0x150 [ 92.937712][ T6292] dump_stack+0x15/0x1a [ 92.937733][ T6292] should_fail_ex+0x261/0x270 [ 92.937763][ T6292] should_fail+0xb/0x10 [ 92.937786][ T6292] should_fail_usercopy+0x1a/0x20 [ 92.937886][ T6292] _copy_from_iter+0xd8/0xd10 [ 92.937917][ T6292] ? kmalloc_reserve+0x16e/0x190 [ 92.937940][ T6292] ? __build_skb_around+0x199/0x1f0 [ 92.938026][ T6292] ? __alloc_skb+0x227/0x320 [ 92.938050][ T6292] ? __virt_addr_valid+0x1ed/0x250 [ 92.938131][ T6292] ? __check_object_size+0x367/0x510 [ 92.938159][ T6292] netlink_sendmsg+0x492/0x720 [ 92.938192][ T6292] ? __pfx_netlink_sendmsg+0x10/0x10 [ 92.938216][ T6292] __sock_sendmsg+0x140/0x180 [ 92.938326][ T6292] ____sys_sendmsg+0x350/0x4e0 [ 92.938367][ T6292] __sys_sendmsg+0x1a0/0x240 [ 92.938417][ T6292] __x64_sys_sendmsg+0x46/0x50 [ 92.938499][ T6292] x64_sys_call+0x26f3/0x2e10 [ 92.938525][ T6292] do_syscall_64+0xc9/0x1c0 [ 92.938554][ T6292] ? clear_bhb_loop+0x25/0x80 [ 92.938581][ T6292] ? clear_bhb_loop+0x25/0x80 [ 92.938628][ T6292] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 92.938650][ T6292] RIP: 0033:0x7fe7c201d169 [ 92.938665][ T6292] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 92.938751][ T6292] RSP: 002b:00007fe7c067f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 92.938773][ T6292] RAX: ffffffffffffffda RBX: 00007fe7c2235fa0 RCX: 00007fe7c201d169 [ 92.938788][ T6292] RDX: 0000000000000000 RSI: 0000200000000540 RDI: 0000000000000007 [ 92.938802][ T6292] RBP: 00007fe7c067f090 R08: 0000000000000000 R09: 0000000000000000 [ 92.938815][ T6292] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 92.938829][ T6292] R13: 0000000000000000 R14: 00007fe7c2235fa0 R15: 00007ffd58f0f6b8 [ 92.938859][ T6292] [ 93.270520][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.565324][ T6313] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 93.577825][ T6313] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 93.612951][ T6313] rdma_op ffff88813d7c3580 conn xmit_rdma 0000000000000000 [ 93.637825][ T6318] loop3: detected capacity change from 0 to 2048 [ 93.644979][ T6318] EXT4-fs: Ignoring removed mblk_io_submit option [ 93.652178][ T6311] Process accounting resumed [ 93.665583][ T6318] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 93.685452][ T6318] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.983: bg 0: block 234: padding at end of block bitmap is not set [ 93.700835][ T6318] EXT4-fs (loop3): Remounting filesystem read-only [ 93.885398][ T6338] FAULT_INJECTION: forcing a failure. [ 93.885398][ T6338] name failslab, interval 1, probability 0, space 0, times 0 [ 93.899951][ T6338] CPU: 0 UID: 0 PID: 6338 Comm: syz.0.989 Not tainted 6.15.0-rc1-syzkaller #0 PREEMPT(voluntary) [ 93.899974][ T6338] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 93.900000][ T6338] Call Trace: [ 93.900012][ T6338] [ 93.900019][ T6338] dump_stack_lvl+0xf6/0x150 [ 93.900039][ T6338] dump_stack+0x15/0x1a [ 93.900053][ T6338] should_fail_ex+0x261/0x270 [ 93.900077][ T6338] should_failslab+0x8f/0xb0 [ 93.900103][ T6338] kmem_cache_alloc_node_noprof+0x5c/0x340 [ 93.900162][ T6338] ? __alloc_skb+0x10d/0x320 [ 93.900192][ T6338] __alloc_skb+0x10d/0x320 [ 93.900265][ T6338] ? avc_has_perm+0xd6/0x150 [ 93.900360][ T6338] alloc_skb_with_frags+0x80/0x460 [ 93.900382][ T6338] ? selinux_file_open+0x356/0x3c0 [ 93.900446][ T6338] ? cmp_ex_search+0x56/0x70 [ 93.900473][ T6338] ? should_fail_ex+0xd7/0x270 [ 93.900495][ T6338] sock_alloc_send_pskb+0x437/0x500 [ 93.900593][ T6338] tun_get_user+0x9b8/0x2640 [ 93.900615][ T6338] ? exc_page_fault+0x527/0x6a0 [ 93.900678][ T6338] ? ref_tracker_alloc+0x1ff/0x310 [ 93.900706][ T6338] tun_chr_write_iter+0x188/0x240 [ 93.900725][ T6338] vfs_write+0x79b/0x950 [ 93.900812][ T6338] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 93.900836][ T6338] ksys_write+0xeb/0x1b0 [ 93.900861][ T6338] __x64_sys_write+0x42/0x50 [ 93.900884][ T6338] x64_sys_call+0x2a45/0x2e10 [ 93.900908][ T6338] do_syscall_64+0xc9/0x1c0 [ 93.900992][ T6338] ? clear_bhb_loop+0x25/0x80 [ 93.901016][ T6338] ? clear_bhb_loop+0x25/0x80 [ 93.901035][ T6338] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.901071][ T6338] RIP: 0033:0x7fe7c201d169 [ 93.901084][ T6338] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 93.901099][ T6338] RSP: 002b:00007fe7c067f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 93.901154][ T6338] RAX: ffffffffffffffda RBX: 00007fe7c2235fa0 RCX: 00007fe7c201d169 [ 93.901210][ T6338] RDX: 000000000000fdef RSI: 00002000000003c0 RDI: 0000000000000004 [ 93.901220][ T6338] RBP: 00007fe7c067f090 R08: 0000000000000000 R09: 0000000000000000 [ 93.901230][ T6338] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 93.901240][ T6338] R13: 0000000000000000 R14: 00007fe7c2235fa0 R15: 00007ffd58f0f6b8 [ 93.901258][ T6338] [ 94.424184][ T6357] netlink: 96 bytes leftover after parsing attributes in process `syz.4.993'. [ 94.502064][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.713351][ T6360] futex_wake_op: syz.2.998 tries to shift op by -1; fix this program [ 94.885165][ T6364] netlink: 16 bytes leftover after parsing attributes in process `syz.3.997'. [ 94.894213][ T6364] netlink: 8 bytes leftover after parsing attributes in process `syz.3.997'. [ 95.442776][ T29] kauditd_printk_skb: 202 callbacks suppressed [ 95.442794][ T29] audit: type=1326 audit(1744004971.767:3672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6374 comm="syz.1.1001" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f648a33d169 code=0x0 [ 95.672555][ T29] audit: type=1326 audit(1744004971.997:3673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6386 comm="syz.2.1007" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3c108cd169 code=0x0 [ 95.714084][ T6392] FAULT_INJECTION: forcing a failure. [ 95.714084][ T6392] name failslab, interval 1, probability 0, space 0, times 0 [ 95.728127][ T6392] CPU: 1 UID: 0 PID: 6392 Comm: syz.3.1009 Not tainted 6.15.0-rc1-syzkaller #0 PREEMPT(voluntary) [ 95.728152][ T6392] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 95.728167][ T6392] Call Trace: [ 95.728174][ T6392] [ 95.728183][ T6392] dump_stack_lvl+0xf6/0x150 [ 95.728212][ T6392] dump_stack+0x15/0x1a [ 95.728233][ T6392] should_fail_ex+0x261/0x270 [ 95.728269][ T6392] should_failslab+0x8f/0xb0 [ 95.728308][ T6392] kmem_cache_alloc_node_noprof+0x5c/0x340 [ 95.728332][ T6392] ? __alloc_skb+0x10d/0x320 [ 95.728356][ T6392] __alloc_skb+0x10d/0x320 [ 95.728376][ T6392] ? avc_has_perm+0xd6/0x150 [ 95.728443][ T6392] alloc_skb_with_frags+0x80/0x460 [ 95.728558][ T6392] ? selinux_file_open+0x356/0x3c0 [ 95.728587][ T6392] ? cmp_ex_search+0x56/0x70 [ 95.728627][ T6392] sock_alloc_send_pskb+0x437/0x500 [ 95.728660][ T6392] ? fixup_exception+0x814/0xd30 [ 95.728713][ T6392] tun_get_user+0x9b8/0x2640 [ 95.728759][ T6392] ? avc_has_perm+0xd6/0x150 [ 95.728786][ T6392] ? ref_tracker_alloc+0x1ff/0x310 [ 95.728821][ T6392] tun_chr_write_iter+0x188/0x240 [ 95.728849][ T6392] vfs_write+0x79b/0x950 [ 95.728902][ T6392] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 95.728969][ T6392] ksys_write+0xeb/0x1b0 [ 95.729002][ T6392] __x64_sys_write+0x42/0x50 [ 95.729029][ T6392] x64_sys_call+0x2a45/0x2e10 [ 95.729060][ T6392] do_syscall_64+0xc9/0x1c0 [ 95.729094][ T6392] ? clear_bhb_loop+0x25/0x80 [ 95.729121][ T6392] ? clear_bhb_loop+0x25/0x80 [ 95.729215][ T6392] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.729238][ T6392] RIP: 0033:0x7f614c26d169 [ 95.729253][ T6392] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 95.729271][ T6392] RSP: 002b:00007f614a8d7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 95.729289][ T6392] RAX: ffffffffffffffda RBX: 00007f614c485fa0 RCX: 00007f614c26d169 [ 95.729305][ T6392] RDX: 000000000000fdef RSI: 0000200000000540 RDI: 00000000000000c8 [ 95.729320][ T6392] RBP: 00007f614a8d7090 R08: 0000000000000000 R09: 0000000000000000 [ 95.729334][ T6392] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 95.729348][ T6392] R13: 0000000000000000 R14: 00007f614c485fa0 R15: 00007ffe6e49d1c8 [ 95.729370][ T6392] [ 95.962989][ T6385] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 95.976663][ T6385] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 95.995889][ T6385] rdma_op ffff8881250dcd80 conn xmit_rdma 0000000000000000 [ 96.055423][ T29] audit: type=1326 audit(1744004972.377:3674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6397 comm="syz.4.1011" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7faeb42fd169 code=0x0 [ 96.471368][ T6415] FAULT_INJECTION: forcing a failure. [ 96.471368][ T6415] name failslab, interval 1, probability 0, space 0, times 0 [ 96.485874][ T6415] CPU: 1 UID: 0 PID: 6415 Comm: syz.3.1017 Not tainted 6.15.0-rc1-syzkaller #0 PREEMPT(voluntary) [ 96.485942][ T6415] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 96.485956][ T6415] Call Trace: [ 96.485963][ T6415] [ 96.485972][ T6415] dump_stack_lvl+0xf6/0x150 [ 96.486004][ T6415] dump_stack+0x15/0x1a [ 96.486024][ T6415] should_fail_ex+0x261/0x270 [ 96.486055][ T6415] should_failslab+0x8f/0xb0 [ 96.486090][ T6415] __kmalloc_cache_noprof+0x55/0x320 [ 96.486167][ T6415] ? resv_map_alloc+0x32/0x190 [ 96.486190][ T6415] ? vfs_write+0x669/0x950 [ 96.486303][ T6415] resv_map_alloc+0x32/0x190 [ 96.486326][ T6415] hugetlbfs_get_inode+0x64/0x380 [ 96.486364][ T6415] hugetlb_file_setup+0x188/0x3c0 [ 96.486428][ T6415] ksys_mmap_pgoff+0x174/0x340 [ 96.486460][ T6415] x64_sys_call+0x1945/0x2e10 [ 96.486483][ T6415] do_syscall_64+0xc9/0x1c0 [ 96.486529][ T6415] ? clear_bhb_loop+0x25/0x80 [ 96.486551][ T6415] ? clear_bhb_loop+0x25/0x80 [ 96.486634][ T6415] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.486668][ T6415] RIP: 0033:0x7f614c26d169 [ 96.486686][ T6415] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 96.486707][ T6415] RSP: 002b:00007f614a8d7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 96.486728][ T6415] RAX: ffffffffffffffda RBX: 00007f614c485fa0 RCX: 00007f614c26d169 [ 96.486742][ T6415] RDX: 0000000000000000 RSI: 0000000001400000 RDI: 0000200000000000 [ 96.486753][ T6415] RBP: 00007f614a8d7090 R08: ffffffffffffffff R09: 0000000000000000 [ 96.486805][ T6415] R10: 00000000000c3072 R11: 0000000000000246 R12: 0000000000000001 [ 96.486818][ T6415] R13: 0000000000000000 R14: 00007f614c485fa0 R15: 00007ffe6e49d1c8 [ 96.486851][ T6415] [ 96.675124][ T29] audit: type=1400 audit(1744004972.997:3675): avc: denied { execute } for pid=6416 comm="syz.2.1018" path="/206/cpu.stat" dev="tmpfs" ino=1123 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 96.763304][ T6424] loop3: detected capacity change from 0 to 512 [ 96.776812][ T6424] EXT4-fs: Ignoring removed oldalloc option [ 96.794338][ T6424] ext4: Unknown parameter 'fsuuid' [ 96.964414][ T29] audit: type=1326 audit(1744004973.247:3676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6431 comm="syz.3.1024" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f614c26d169 code=0x0 [ 97.208842][ T29] audit: type=1326 audit(1744004973.527:3677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6444 comm="syz.4.1028" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7faeb42fd169 code=0x0 [ 97.278690][ T29] audit: type=1400 audit(1744004973.597:3678): avc: denied { getopt } for pid=6448 comm="syz.2.1030" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 97.324334][ T6452] netlink: 'syz.2.1031': attribute type 3 has an invalid length. [ 97.365749][ T6454] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1032'. [ 97.375487][ T6454] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1032'. [ 97.384598][ T6454] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1032'. [ 97.402043][ T6454] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1032'. [ 97.415455][ T29] audit: type=1400 audit(1744004973.727:3679): avc: denied { ioctl } for pid=6453 comm="syz.2.1032" path="socket:[14625]" dev="sockfs" ino=14625 ioctlcmd=0x8990 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 97.442149][ T6454] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.465188][ T6454] bond0: (slave sit0): The slave device specified does not support setting the MAC address [ 97.470187][ T6447] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 97.491089][ T6447] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 97.501245][ T29] audit: type=1400 audit(1744004973.737:3680): avc: denied { search } for pid=6455 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 97.513192][ T6454] bond0: (slave sit0): Error -95 calling set_mac_address [ 97.525717][ T29] audit: type=1400 audit(1744004973.737:3681): avc: denied { read } for pid=6456 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=415 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 97.566042][ T6447] rdma_op ffff8881250dcd80 conn xmit_rdma 0000000000000000 [ 97.661244][ T6480] tipc: Enabled bearer , priority 10 [ 97.954885][ T6512] loop5: detected capacity change from 0 to 15903 [ 98.175482][ T6526] FAULT_INJECTION: forcing a failure. [ 98.175482][ T6526] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 98.188625][ T6526] CPU: 1 UID: 0 PID: 6526 Comm: syz.1.1044 Not tainted 6.15.0-rc1-syzkaller #0 PREEMPT(voluntary) [ 98.188651][ T6526] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 98.188725][ T6526] Call Trace: [ 98.188733][ T6526] [ 98.188742][ T6526] dump_stack_lvl+0xf6/0x150 [ 98.188772][ T6526] dump_stack+0x15/0x1a [ 98.188792][ T6526] should_fail_ex+0x261/0x270 [ 98.188857][ T6526] should_fail+0xb/0x10 [ 98.188879][ T6526] should_fail_usercopy+0x1a/0x20 [ 98.188907][ T6526] _copy_from_user+0x1c/0xa0 [ 98.188945][ T6526] copy_msghdr_from_user+0x54/0x2b0 [ 98.189022][ T6526] ? __fget_files+0x186/0x1c0 [ 98.189046][ T6526] __sys_sendmsg+0x141/0x240 [ 98.189093][ T6526] __x64_sys_sendmsg+0x46/0x50 [ 98.189119][ T6526] x64_sys_call+0x26f3/0x2e10 [ 98.189141][ T6526] do_syscall_64+0xc9/0x1c0 [ 98.189190][ T6526] ? clear_bhb_loop+0x25/0x80 [ 98.189211][ T6526] ? clear_bhb_loop+0x25/0x80 [ 98.189235][ T6526] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.189260][ T6526] RIP: 0033:0x7f648a33d169 [ 98.189303][ T6526] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 98.189325][ T6526] RSP: 002b:00007f64889a7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 98.189347][ T6526] RAX: ffffffffffffffda RBX: 00007f648a555fa0 RCX: 00007f648a33d169 [ 98.189361][ T6526] RDX: 0000000000000000 RSI: 0000200000000380 RDI: 0000000000000006 [ 98.189373][ T6526] RBP: 00007f64889a7090 R08: 0000000000000000 R09: 0000000000000000 [ 98.189386][ T6526] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 98.189400][ T6526] R13: 0000000000000000 R14: 00007f648a555fa0 R15: 00007ffcc0dca638 [ 98.189421][ T6526] [ 98.645704][ T6553] netlink: 'syz.1.1054': attribute type 15 has an invalid length. [ 98.746526][ T6557] FAULT_INJECTION: forcing a failure. [ 98.746526][ T6557] name failslab, interval 1, probability 0, space 0, times 0 [ 98.759238][ T6557] CPU: 1 UID: 0 PID: 6557 Comm: syz.1.1055 Not tainted 6.15.0-rc1-syzkaller #0 PREEMPT(voluntary) [ 98.759267][ T6557] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 98.759361][ T6557] Call Trace: [ 98.759369][ T6557] [ 98.759378][ T6557] dump_stack_lvl+0xf6/0x150 [ 98.759428][ T6557] dump_stack+0x15/0x1a [ 98.759449][ T6557] should_fail_ex+0x261/0x270 [ 98.759492][ T6557] should_failslab+0x8f/0xb0 [ 98.759576][ T6557] kmem_cache_alloc_noprof+0x59/0x340 [ 98.759600][ T6557] ? getname_flags+0x81/0x3b0 [ 98.759629][ T6557] getname_flags+0x81/0x3b0 [ 98.759649][ T6557] __x64_sys_symlinkat+0x50/0x70 [ 98.759696][ T6557] x64_sys_call+0x14dc/0x2e10 [ 98.759739][ T6557] do_syscall_64+0xc9/0x1c0 [ 98.759770][ T6557] ? clear_bhb_loop+0x25/0x80 [ 98.759792][ T6557] ? clear_bhb_loop+0x25/0x80 [ 98.759871][ T6557] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.759893][ T6557] RIP: 0033:0x7f648a33d169 [ 98.759909][ T6557] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 98.759991][ T6557] RSP: 002b:00007f64889a7038 EFLAGS: 00000246 ORIG_RAX: 000000000000010a [ 98.760064][ T6557] RAX: ffffffffffffffda RBX: 00007f648a555fa0 RCX: 00007f648a33d169 [ 98.760078][ T6557] RDX: 0000200000000000 RSI: ffffffffffffff9c RDI: 0000200000001040 [ 98.760092][ T6557] RBP: 00007f64889a7090 R08: 0000000000000000 R09: 0000000000000000 [ 98.760103][ T6557] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 98.760158][ T6557] R13: 0000000000000000 R14: 00007f648a555fa0 R15: 00007ffcc0dca638 [ 98.760178][ T6557] [ 99.542028][ T6572] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 99.757116][ C1] IPv4: Oversized IP packet from 127.0.0.1 [ 99.847304][ T6584] set match dimension is over the limit! [ 99.985992][ T6598] FAULT_INJECTION: forcing a failure. [ 99.985992][ T6598] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 99.999304][ T6598] CPU: 0 UID: 0 PID: 6598 Comm: syz.3.1074 Not tainted 6.15.0-rc1-syzkaller #0 PREEMPT(voluntary) [ 99.999373][ T6598] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 99.999386][ T6598] Call Trace: [ 99.999394][ T6598] [ 99.999403][ T6598] dump_stack_lvl+0xf6/0x150 [ 99.999432][ T6598] dump_stack+0x15/0x1a [ 99.999452][ T6598] should_fail_ex+0x261/0x270 [ 99.999556][ T6598] should_fail+0xb/0x10 [ 99.999579][ T6598] should_fail_usercopy+0x1a/0x20 [ 99.999658][ T6598] _copy_from_iter+0xd8/0xd10 [ 99.999686][ T6598] ? __alloc_skb+0x1bd/0x320 [ 99.999710][ T6598] ? kmalloc_reserve+0x16e/0x190 [ 99.999735][ T6598] ? __build_skb_around+0x199/0x1f0 [ 99.999810][ T6598] ? __alloc_skb+0x227/0x320 [ 99.999850][ T6598] ? __virt_addr_valid+0x1ed/0x250 [ 99.999950][ T6598] ? __check_object_size+0x367/0x510 [ 100.000025][ T6598] netlink_sendmsg+0x492/0x720 [ 100.000054][ T6598] ? __pfx_netlink_sendmsg+0x10/0x10 [ 100.000082][ T6598] __sock_sendmsg+0x140/0x180 [ 100.000122][ T6598] ____sys_sendmsg+0x350/0x4e0 [ 100.000169][ T6598] __sys_sendmsg+0x1a0/0x240 [ 100.000213][ T6598] __x64_sys_sendmsg+0x46/0x50 [ 100.000245][ T6598] x64_sys_call+0x26f3/0x2e10 [ 100.000271][ T6598] do_syscall_64+0xc9/0x1c0 [ 100.000303][ T6598] ? clear_bhb_loop+0x25/0x80 [ 100.000366][ T6598] ? clear_bhb_loop+0x25/0x80 [ 100.000392][ T6598] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.000417][ T6598] RIP: 0033:0x7f614c26d169 [ 100.000435][ T6598] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 100.000456][ T6598] RSP: 002b:00007f614a8d7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 100.000482][ T6598] RAX: ffffffffffffffda RBX: 00007f614c485fa0 RCX: 00007f614c26d169 [ 100.000516][ T6598] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000005 [ 100.000528][ T6598] RBP: 00007f614a8d7090 R08: 0000000000000000 R09: 0000000000000000 [ 100.000539][ T6598] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 100.000550][ T6598] R13: 0000000000000000 R14: 00007f614c485fa0 R15: 00007ffe6e49d1c8 [ 100.000571][ T6598] [ 100.522906][ T29] kauditd_printk_skb: 98 callbacks suppressed [ 100.522923][ T29] audit: type=1326 audit(1744004976.847:3780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6608 comm="syz.2.1078" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3c108cd169 code=0x0 [ 100.589152][ T6614] loop3: detected capacity change from 0 to 512 [ 100.643563][ T6616] bond1: entered promiscuous mode [ 100.648704][ T6616] bond1: entered allmulticast mode [ 100.654160][ T6616] 8021q: adding VLAN 0 to HW filter on device bond1 [ 100.666619][ T6616] bond1 (unregistering): Released all slaves [ 100.691549][ T6614] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.712773][ T6614] ext4 filesystem being mounted at /226/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 100.795151][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.943566][ T29] audit: type=1400 audit(1744004977.267:3781): avc: denied { mount } for pid=6644 comm="syz.3.1091" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 100.943744][ T6645] FAULT_INJECTION: forcing a failure. [ 100.943744][ T6645] name failslab, interval 1, probability 0, space 0, times 0 [ 100.980632][ T6645] CPU: 0 UID: 0 PID: 6645 Comm: syz.3.1091 Not tainted 6.15.0-rc1-syzkaller #0 PREEMPT(voluntary) [ 100.980668][ T6645] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 100.980680][ T6645] Call Trace: [ 100.980685][ T6645] [ 100.980692][ T6645] dump_stack_lvl+0xf6/0x150 [ 100.980715][ T6645] dump_stack+0x15/0x1a [ 100.980774][ T6645] should_fail_ex+0x261/0x270 [ 100.980807][ T6645] should_failslab+0x8f/0xb0 [ 100.980843][ T6645] kmem_cache_alloc_noprof+0x59/0x340 [ 100.980922][ T6645] ? alloc_empty_file+0x78/0x200 [ 100.981001][ T6645] alloc_empty_file+0x78/0x200 [ 100.981022][ T6645] path_openat+0x6f/0x2000 [ 100.981113][ T6645] ? _parse_integer_limit+0x167/0x180 [ 100.981151][ T6645] ? _parse_integer+0x27/0x30 [ 100.981194][ T6645] ? kstrtoull+0x115/0x140 [ 100.981220][ T6645] ? kstrtouint+0x7b/0xc0 [ 100.981242][ T6645] ? kstrtouint_from_user+0xbf/0x100 [ 100.981268][ T6645] do_filp_open+0x115/0x240 [ 100.981380][ T6645] do_sys_openat2+0xaa/0x110 [ 100.981406][ T6645] __x64_sys_creat+0x6a/0x90 [ 100.981435][ T6645] x64_sys_call+0x10b4/0x2e10 [ 100.981461][ T6645] do_syscall_64+0xc9/0x1c0 [ 100.981522][ T6645] ? clear_bhb_loop+0x25/0x80 [ 100.981545][ T6645] ? clear_bhb_loop+0x25/0x80 [ 100.981571][ T6645] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.981596][ T6645] RIP: 0033:0x7f614c26d169 [ 100.981656][ T6645] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 100.981675][ T6645] RSP: 002b:00007f614a8d7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 100.981696][ T6645] RAX: ffffffffffffffda RBX: 00007f614c485fa0 RCX: 00007f614c26d169 [ 100.981710][ T6645] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 0000200000000380 [ 100.981724][ T6645] RBP: 00007f614a8d7090 R08: 0000000000000000 R09: 0000000000000000 [ 100.981736][ T6645] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 100.981747][ T6645] R13: 0000000000000000 R14: 00007f614c485fa0 R15: 00007ffe6e49d1c8 [ 100.981836][ T6645] [ 101.196663][ T29] audit: type=1400 audit(1744004977.517:3782): avc: denied { unmount } for pid=3304 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 101.258920][ T29] audit: type=1326 audit(1744004977.577:3783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6647 comm="syz.1.1092" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f648a33d169 code=0x0 [ 101.311860][ T6655] ================================================================== [ 101.320001][ T6655] BUG: KCSAN: data-race in mas_wr_store_entry / mtree_range_walk [ 101.327769][ T6655] [ 101.330099][ T6655] write to 0xffff888104345460 of 8 bytes by task 6653 on cpu 0: [ 101.337747][ T6655] mas_wr_store_entry+0x1266/0x2460 [ 101.342964][ T6655] mas_store_prealloc+0x6d5/0x960 [ 101.348002][ T6655] commit_merge+0x685/0x710 [ 101.352523][ T6655] vma_expand+0x241/0x320 [ 101.356870][ T6655] vma_merge_new_range+0x2c2/0x340 [ 101.362000][ T6655] mmap_region+0x805/0x1490 [ 101.366511][ T6655] do_mmap+0x9ef/0xc80 [ 101.370593][ T6655] vm_mmap_pgoff+0x16d/0x2d0 [ 101.375199][ T6655] ksys_mmap_pgoff+0xd0/0x340 [ 101.379893][ T6655] x64_sys_call+0x1945/0x2e10 [ 101.384579][ T6655] do_syscall_64+0xc9/0x1c0 [ 101.389102][ T6655] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.395009][ T6655] [ 101.397334][ T6655] read to 0xffff888104345460 of 8 bytes by task 6655 on cpu 1: [ 101.404878][ T6655] mtree_range_walk+0x1b3/0x460 [ 101.409763][ T6655] mas_walk+0x16e/0x320 [ 101.413932][ T6655] lock_vma_under_rcu+0xa7/0x340 [ 101.418891][ T6655] exc_page_fault+0x150/0x6a0 [ 101.423584][ T6655] asm_exc_page_fault+0x26/0x30 [ 101.428451][ T6655] [ 101.430774][ T6655] value changed: 0x00007faeb2904fff -> 0x00007faeb28e3fff [ 101.437879][ T6655] [ 101.440202][ T6655] Reported by Kernel Concurrency Sanitizer on: [ 101.446447][ T6655] CPU: 1 UID: 0 PID: 6655 Comm: syz.4.1096 Not tainted 6.15.0-rc1-syzkaller #0 PREEMPT(voluntary) [ 101.457133][ T6655] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 101.467212][ T6655] ==================================================================