last executing test programs: 1m42.462278756s ago: executing program 1 (id=1667): bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xe, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000040)={[{@norecovery}, {@grpquota}, {@debug}, {@discard}]}, 0xee, 0x498, &(0x7f0000001b40)="$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") bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001000)=ANY=[@ANYBLOB="6c00000010001fff010000000000000000060000", @ANYRES32=0x0, @ANYBLOB="81ffffff00000000440012800b00010067656e6576650000340002800500090000000000050009000100000005000a000000000005000300f90000000500040040000000050004000800000008000a00", @ANYBLOB="b5"], 0x6c}}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r4, 0x400454d9, &(0x7f0000000100)={'vlan0\x00', 0x400}) 1m41.955645244s ago: executing program 1 (id=1675): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000f00)='kfree\x00', r0}, 0x18) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='attr/exec\x00') r2 = syz_open_procfs(0x0, &(0x7f0000000100)='sched\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180200001a00000000000000000000008500000036000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000cd00000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) mount$9p_fd(0x0, &(0x7f0000000380)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB="2cec"]) 1m41.873734055s ago: executing program 1 (id=1676): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = gettid() rt_sigqueueinfo(r1, 0x32, &(0x7f0000001040)={0x1f, 0xfffffffe, 0x8}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYRESHEX, @ANYRESOCT=0x0, @ANYRES32, @ANYRESHEX=r1, @ANYRESOCT, @ANYRES64=r0], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000640)="97693c38651f9ea8dec15986356d257a3f00005aa4fa9059be89e226fb376c808fe31400f27292df2808000000000000000000000000000000b592474cc156d52276ad15a7", &(0x7f0000000340)="845f23e5600877261870d63e6cb45da6f44298b79f00bb460996a9d6e30b2151d2b8b6285f665d03680e32", 0x1, r2}, 0x38) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYRESDEC=r2], &(0x7f0000000040)='syzkaller\x00', 0xe, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_open_dev$tty20(0xc, 0x4, 0x0) r4 = dup(r0) r5 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSW(r5, 0x5403, &(0x7f0000010280)={0x8, 0x0, 0x100, 0x1, 0xd, "90897f0000030000000000f4ff1d277fffffeb"}) r6 = dup(r5) ioctl$TCSETAF(r6, 0x5408, &(0x7f0000000200)={0x9, 0x6, 0x0, 0x9bd1, 0x1a, "43000000c7d800"}) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000240)=0x2) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000100)=0xff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) r7 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r7, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) sendmsg$inet(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001600)}, 0x48093) shutdown(r7, 0x0) ioctl$TIOCNOTTY(r6, 0x5422) r8 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) flock(r8, 0x5) setgroups(0x0, 0x0) 1m41.800026636s ago: executing program 1 (id=1678): r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='westwood\x00', 0x9) r1 = syz_io_uring_setup(0x1606b, &(0x7f0000000300)={0x0, 0x86a0, 0x80, 0x0, 0x21e}, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = dup(r4) write$UHID_INPUT(r5, &(0x7f0000000180)={0x9, {"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", 0x1000}}, 0x1006) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r6, 0x0, 0x7}, 0x18) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x6, 0x11, r5, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008bd6000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000011c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180100000000000000000000ffff0000850000006d"], 0x0, 0x10000000, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x400c84, &(0x7f0000000340), 0x1, 0x786, &(0x7f0000001900)="$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") chmod(&(0x7f0000000380)='./file0\x00', 0x100) creat(&(0x7f0000000000)='./file0\x00', 0xecf86c37d53049cc) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r7}, 0x10) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x7, 0x0, 0x0, 0x200, 0x0, 0x1}) io_uring_enter(r1, 0x47fa, 0x0, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) r9 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r9, 0x10e, 0xc, &(0x7f0000000340)=0x6, 0x4) sendmsg$nl_route(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000001a0001000000ff7f0000000080"], 0x24}}, 0x8040) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x2, r8, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0, 0x0, 0x1}) 1m41.54695155s ago: executing program 1 (id=1685): bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xe, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000040)={[{@norecovery}, {@grpquota}, {@debug}, {@discard}]}, 0xee, 0x498, &(0x7f0000001b40)="$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") bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001000)=ANY=[@ANYBLOB="6c00000010001fff010000000000000000060000", @ANYRES32=0x0, @ANYBLOB="81ffffff00000000440012800b00010067656e6576650000340002800500090000000000050009000100000005000a000000000005000300f90000000500040040000000050004000800000008000a00", @ANYBLOB="b5"], 0x6c}}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r4, 0x400454d9, &(0x7f0000000100)={'vlan0\x00', 0x400}) 1m41.386629201s ago: executing program 1 (id=1691): pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$tcp_congestion(r0, &(0x7f0000000040)='bic\x00', 0x4) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x8000, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x2, @perf_config_ext={0xf60, 0x40ffffffff}, 0x11008, 0x5, 0x3a65, 0x5, 0x0, 0x5, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b40)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x80, 0x1, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x2}, 0x823a, 0x2, 0x8, 0x6, 0x0, 0x1, 0x0, 0x0, 0xfffffffd, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, r1, 0x2) r3 = getpid() syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2008002, &(0x7f0000001e80)={[{@inlinecrypt}]}, 0x1, 0x549, &(0x7f0000001800)="$eJzs3c9vI1cdAPDvTH65222zCz1ABewChQWt1t5421XVS8sFhKpKiIoD4rANiTcKseMQO6UJkUj/BpBA4gR/AgckDkg9ceDGEYkDQpQDUoEItEHiYDRjJ+smNmtqx+7Gn480O/Pmzcz3PWdn3vNz4hfA1LoeEQcRMR8Rb0TEYmd/0lnilfaSHffgcH/l6HB/JYlW6/W/J3l+ti+6zsk82blmISK+/pWIbydn4zZ29zaWq9XKdiddata2So3dvVvrteW1ylpls1y+u3T39ot3XiiPrK7Xar9478vrr37j17/65Lu/O/ji97NiXe7kdddjlNpVnzuJk5mNiFfPI9gEzHTW8xMuBx9MGhEfiYjP5Pf/Yszk/zsBgIus1VqM1mJ3GgC46NJ8DCxJixGRpp1OQLE9hvdMXEqr9Ubz5v36zuZqe6zsSsyl99erldtXF/7w3fzguSRLL+V5eX6eLp9K34mIqxHxo4Un8nRxpV5dnUyXBwCm3pPd7X9E/GshTYvFgU7t8akeAPDYKEy6AADA2Gn/AWD6aP8BYPoM0P53Puw/OPeyAADj4f0/AEwf7T8ATB/tPwBMla+99lq2tI4633+9+ubuzkb9zVurlcZGsbazUlypb28V1+r1tfw7e2qPul61Xt9aej523io1K41mqbG7d69W39ls3su/1/teZW4stQIA/per1975fRIRBy89kS/RNZeDthoutnSERwGPl5lhTtZBgMea2b5geg3UhOedhN+ee1mAyej5Zd6Fnpvv95P/I4jfM4IPlRsfH3z83xzPcLEY2Yfp9cHG/18eeTmA8TP+D9Or1UpOz/k/f5IFAFxIQ/wKX+sHo+qEABP1qMm8R/L5PwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFwwlyPiO5GkxXwu8DT7Ny0WI56KiCsxl9xfr1ZuR8TTcS0i5hay9NKkCw0ADCn9a9KZ/+vG4nOXT+fOJ/9eyNcR8b2fvv7jt5abze2lbP8/TvYvHE8fVn543hDzCgIAg/vzIAfl7Xe5s+56I//gcH/leDnHMp7x3pdOJh9dOTrcz5d2zmy0Wq1WRCHvS1z6ZxKznXMKEfFsRMyMIP7B2xHxsV71T/KxkSudmU+740cn9lNjjZ++L36a57XX2cv30RGUBabNO9nz55Ve918a1/N17/u/kD+hhpc//woRx8++o674s51IMz3iZ/f89UFjPP+br57Z2Vps570d8exsr/jJSfykT/znBoz/x0986ocv98lr/SziRvSO3x2r1KxtlRq7e7fWa8trlbXKZrl8d+nu7RfvvFAu5WPUpeOR6rP+9tLNp/uVLav/pT7xCz3rP39y7ucGrP/P//PGtz79MLlwOv4XPtv75/9Mz/htWZv4+QHjL1/6Zd/pu7P4q33q/6if/80B47/7l73VAQ8FAMagsbu3sVytVraH2sjehY7iOmc2siIOdvBxd3G4oH+KfGNEL0ufjawzNsjBc+f1qp77xuxJX3G0V/5mdsUxVycdeS2G2ngwrliTeyYB4/Hwpp90SQAAAAAAAAAAAAAAgH7G8adLk64jAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAF9d/AwAA//8+JMPM") syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0xa19754, &(0x7f00000001c0)={[{@jqfmt_vfsold}, {@errors_continue}, {@nombcache}, {@prjquota}, {@usrquota}, {@data_writeback}, {@usrjquota, 0x5}, {@min_batch_time={'min_batch_time', 0x3d, 0xffffffff}}, {@dioread_nolock}, {@usrjquota}]}, 0xff, 0x46e, &(0x7f0000000540)="$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") syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0xe1, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, &(0x7f0000000000)) r4 = syz_pidfd_open(r3, 0x0) setns(r4, 0x24020000) syz_clone(0xf5982500, 0x0, 0x0, 0x0, 0x0, 0x0) 1m41.386342572s ago: executing program 32 (id=1691): pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$tcp_congestion(r0, &(0x7f0000000040)='bic\x00', 0x4) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x8000, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x2, @perf_config_ext={0xf60, 0x40ffffffff}, 0x11008, 0x5, 0x3a65, 0x5, 0x0, 0x5, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b40)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x80, 0x1, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x2}, 0x823a, 0x2, 0x8, 0x6, 0x0, 0x1, 0x0, 0x0, 0xfffffffd, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, r1, 0x2) r3 = getpid() syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2008002, &(0x7f0000001e80)={[{@inlinecrypt}]}, 0x1, 0x549, &(0x7f0000001800)="$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") syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0xa19754, &(0x7f00000001c0)={[{@jqfmt_vfsold}, {@errors_continue}, {@nombcache}, {@prjquota}, {@usrquota}, {@data_writeback}, {@usrjquota, 0x5}, {@min_batch_time={'min_batch_time', 0x3d, 0xffffffff}}, {@dioread_nolock}, {@usrjquota}]}, 0xff, 0x46e, &(0x7f0000000540)="$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") syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0xe1, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, &(0x7f0000000000)) r4 = syz_pidfd_open(r3, 0x0) setns(r4, 0x24020000) syz_clone(0xf5982500, 0x0, 0x0, 0x0, 0x0, 0x0) 1m13.378777971s ago: executing program 3 (id=2462): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff03, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) add_key$user(0x0, 0x0, &(0x7f0000000080)="bc", 0x1, 0xfffffffffffffffe) (async) r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000800), 0x8000, 0x0) r5 = dup(r4) ioctl$GIO_UNISCRNMAP(r5, 0x43403d0e, &(0x7f0000000080)=""/96) (async) r6 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$inet6_IPV6_RTHDR(r6, 0x29, 0x39, &(0x7f0000001f40)=ANY=[@ANYRES8=r2, @ANYRESHEX=r6, @ANYBLOB="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", @ANYRESHEX=r3, @ANYBLOB="8efac722978de2ed9a7d5f127ea5765b8966e988edaee554e69fe6246717f5e5d0977dd2335a4ddf1e51d9ab0c95bdef5f2193e1a741181e1e0aff0fa9534ddff31f5968d4ee5a852834c2652154c3e207f10e77c4af6304a1c871a20974345dd6ee1beb56bc921e561d0a4224885b0775cd96964abf7c6e4709c49cbb7cb7eab39d8549eeb46f1a1368783a5c2c262a6e7a76b0ef4ac4c736df9849b35acd0176a2e74d4c65f89f75563e15c66a74cc8bdd79542778dc4dc41f7fd3eb052544c315ea9f8a57b3912c193cb4ff64cbdf722707f52442553c5f5971cf8331fe6faa8142240502753e0d6f272d3aa463a33d", @ANYRES32=r2], 0x18) (async) r7 = socket(0x1e, 0xa, 0x0) (async, rerun: 32) io_setup(0x7, &(0x7f0000000280)=0x0) (rerun: 32) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=@newqdisc={0x40, 0x24, 0x400, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {}, {0xffff, 0xffff}, {0x7}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_FLOW_REFILL_DELAY={0x8, 0x9, 0xfffff7fc}, @TCA_FQ_RATE_ENABLE={0x8, 0x5, 0x1}]}}]}, 0x40}}, 0x0) (async) io_submit(r8, 0x1, &(0x7f0000000080)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0xffdd, r7, 0x0}]) (async) r12 = socket$pppl2tp(0x18, 0x1, 0x1) (async) r13 = socket$inet6_udp(0xa, 0x2, 0x0) (async) r14 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) (async) r15 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="020001000000800000000000000000000000000001f00d945811125c0d3d8bbf9897a025e09cc1acff2305114728f215ee8e65b839f64e1b9b22a8f6de6d1218e7077cac703f6c1a45444e6c4f598a95eaf30050f04c69d15bb613c8284a26cc6d59e948c135910f2afcedde5fdf18d4a0b094aebb66321b0007ec26a16bdcaf3e744c3365bc4545b941dc37cbf6ea7cda6ed38f463bd9b52d0b", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r15, @ANYBLOB="0000000000000000b704000008000000850000009500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) r16 = bpf$PROG_LOAD(0x5, &(0x7f0000001680)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000001640)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000002c0)='sys_enter\x00', r16}, 0x10) fdatasync(r14) (async) connect$inet6(r13, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) (async, rerun: 32) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000002600000007"], 0x48) (async, rerun: 32) r17 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x1a8615ef8bf22177, 0xd, &(0x7f0000000a00)=ANY=[@ANYRES64=r0, @ANYRES16=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff000000d1ce825841db2400bfa200000000000007020000f8bd51ffb703000008000000b7040000000000008500"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x7, '\x00', r11, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r17}, 0x10) connect$pppl2tp(r12, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r13, 0x9, 0x0, 0x4, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) (async, rerun: 32) socket$inet_udp(0x2, 0x2, 0x0) (rerun: 32) 1m13.324709862s ago: executing program 3 (id=2465): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[], 0x48) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000080008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000400000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) memfd_create(&(0x7f0000000bc0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00x0}) sendto$packet(0xffffffffffffffff, &(0x7f00000002c0)="1441c05465f0006fc8afa8e40800", 0xe, 0x4000000, &(0x7f00000000c0)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000300)={'tunl0\x00', &(0x7f0000000240)={'gre0\x00', 0x0, 0x8000, 0x40, 0x1ff, 0x1, {{0x1e, 0x4, 0x3, 0x3, 0x78, 0x65, 0x0, 0x4, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x12}, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@end, @cipso={0x86, 0x1f, 0x2, [{0x0, 0x11, "d5eb81640abbf802c83fb39417efd8"}, {0x5, 0x8, "0575d0e06fa1"}]}, @timestamp_addr={0x44, 0x44, 0x8c, 0x1, 0x2, [{@loopback, 0x7}, {@local, 0x4e4}, {@empty, 0x200}, {@dev={0xac, 0x14, 0x14, 0x36}, 0x7ff}, {@multicast2, 0x3}, {@multicast1}, {@broadcast, 0x5}, {@multicast2}]}]}}}}}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r3) r5 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendmsg$ETHTOOL_MSG_WOL_GET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000fddbdf251b0000000c00018008000100", @ANYRES32=r6], 0x20}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000400)={'syztnl2\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r9, {0x0, 0x4}, {0xffff, 0xffff}, {0x1, 0x9}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_RTT={0x8, 0x7, 0xb}, @TCA_CAKE_MPU={0x8, 0xe, 0x8a}]}}]}, 0x44}}, 0x4000000) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000540)={0xffffffffffffffff, 0x58, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000600)={'ip6tnl0\x00', &(0x7f0000000580)={'syztnl2\x00', 0x0, 0x4, 0x3, 0xb, 0x1, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}, @private0, 0x10, 0x0, 0x5, 0x555}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000006c0)={'ip6gre0\x00', &(0x7f0000000640)={'syztnl0\x00', 0x0, 0x29, 0x38, 0x35, 0x93, 0x44, @ipv4={'\x00', '\xff\xff', @loopback}, @private2, 0x80, 0x7, 0x10000, 0x3807}}) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000700)={&(0x7f0000000c00)={0x3c0, 0x0, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [{{0x8, 0x1, r1}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}]}}, {{0x8, 0x1, r2}, {0x134, 0x2, 0x0, 0x1, [{0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}, {{0x8, 0x1, r7}, {0x128, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}]}}, {{0x8, 0x1, r9}, {0xf4, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r10}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r11}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x200}}, {0x8, 0x6, r12}}}]}}]}, 0x3c0}, 0x1, 0x0, 0x0, 0x62d0fbfafaf784cb}, 0x8000) 1.600267157s ago: executing program 5 (id=4499): ppoll(0x0, 0x0, 0x0, 0x0, 0x0) 1.536690069s ago: executing program 2 (id=4501): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000002480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000040000000160a03000000000000000000010000000900010073797a30000000000900020073797a300000000014000380080001400000000008000240000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c0003801400010076657468305f746f5f68737200000000140001007465616d30"], 0xe4}}, 0x0) 1.530000789s ago: executing program 6 (id=4503): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000700000045000000a000020095"], &(0x7f0000000800)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000003c0)='kfree\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[], 0x7c}}, 0x0) setsockopt$SO_BINDTODEVICE_wg(r1, 0x1, 0x19, &(0x7f0000000080)='wg0\x00', 0x4) sendmsg$NFT_BATCH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a50000000060a0b040000000000000000020000002400048020000180070001006374000014000280080002400000001108000440000000020900010073797a30000000000900020073797a32"], 0x78}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x69, 0x7ffc0005}]}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x13, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000040000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000180)='sys_enter\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='mm_page_alloc\x00', r3}, 0x18) r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$USBDEVFS_SUBMITURB(r5, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) 1.258896852s ago: executing program 2 (id=4505): syz_clone(0x8d002240, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0xa, &(0x7f0000000100)=0x100, 0x4) getsockopt$inet_mptcp_buf(0xffffffffffffffff, 0x11c, 0x2, &(0x7f0000000c40)=""/173, &(0x7f0000000200)=0xad) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x41, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x3, 0x800000000001}, 0x1180, 0x5dd8, 0x0, 0x8, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) bind$qrtr(0xffffffffffffffff, 0x0, 0x0) getsockopt$SO_COOKIE(0xffffffffffffffff, 0x1, 0x39, 0x0, 0x0) syz_read_part_table(0x5cb, &(0x7f0000000600)="$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") syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x8, &(0x7f0000000080)={[{@sb={'sb', 0x3d, 0x1}}, {@nodioread_nolock}]}, 0x4, 0x511, &(0x7f0000000540)="$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") r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) socket$kcm(0x10, 0x3, 0x10) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x1, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) syz_read_part_table(0x106d, &(0x7f0000001080)="$eJzsz7FNw0AYBeB3trFNR0VD44qaGdiBFiExiBENDSPQ0rAIG7AAI6SOLjpFyQhJiu8r7p6eTvfrD2d2M+UlQ0peP/okJbW8JXVbpyRdUoav9uy2HUvmtPo6ufp/f75v3WNfxvwefhv3V5+7tZaWNnN3HNXSw3dZaq1rks+/p5+TrwsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAF2gXAAD//wCmE1Q=") timerfd_create(0x0, 0x0) 1.212649903s ago: executing program 6 (id=4506): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x8) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x127081) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x2d) timerfd_create(0x7, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000840)=ANY=[@ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r3, 0x930, 0x0) ptrace$poke(0x21, r3, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x5, 0x7ffc0001}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) (fail_nth: 2) 801.968889ms ago: executing program 0 (id=4514): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat(r0, &(0x7f0000000200)='./file0\x00', 0x20200, 0x102) connect$nfc_raw(r1, &(0x7f0000000340)={0x27, 0x0, 0xffffffffffffffff, 0x3}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x403, 0xfffffffc, 0x3f, {0x0, 0x0, 0x0, 0x0, 0x88adfda5}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_GROUP_FWD_MASK={0x6, 0x9, 0x8001}, @IFLA_BR_VLAN_STATS_PER_PORT={0x5, 0x2d, 0x1}]}}}]}, 0x44}, 0x1, 0x300000000000000, 0x0, 0x4004}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) r3 = socket$key(0xf, 0x3, 0x2) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r5}, 0x10) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) sendmsg$key(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="020900000700000000000000000000000500", @ANYRES32], 0x38}}, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x2) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0xc, &(0x7f0000000080)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x65, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r7}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x3f) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8002, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r8, 0x0, 0x40003}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000070080000000000000000000850000006d00000095"], 0x0, 0x2, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7, @void, @value}, 0x94) io_uring_setup(0x1694, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1}) socket$netlink(0x10, 0x3, 0xf) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) get_robust_list(0x0, 0x0, 0x0) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000140)='kmem_cache_free\x00', r10}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) 800.813959ms ago: executing program 4 (id=4515): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000002480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000040000000160a03000000000000000000010000000900010073797a30000000000900020073797a300000000014000380080001400000000008000240000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c0003801400010076657468305f746f5f68737200000000140001007465616d30"], 0xe4}}, 0x0) 783.935929ms ago: executing program 2 (id=4516): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x50) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000200), 0x4) r2 = socket$netlink(0x10, 0x3, 0x3) sendmsg$netlink(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000580)=ANY=[], 0x18}], 0x1, 0x0, 0x0, 0xc045}, 0x40) semctl$SEM_STAT(0xffffffffffffffff, 0x3, 0x12, &(0x7f0000000d80)=""/4096) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001e00)=ANY=[@ANYBLOB="4400006ecd7b43a668ef5600002a18007a00000040fd241d93f222a49b023b1f4a3b61bc96c49a0962663783c4ca023f9c8220b160bdba402aa2fc1e22848885b8d94ae1f7d314e4ff5f6ee1b68cd1e7ded95a0502cd9f6b790f7a9892d6115277ae5f52406540bd8db8e0f1e77aa81d0aae62f17f4eec91519db384ebd3385045e6ff05e366b74742a68fae4400704843272df4e93f1cc432089fa03d88", @ANYRES8=r0, @ANYRES8=r3], 0x44}, 0x1, 0x0, 0x0, 0x4040000}, 0x80) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = gettid() fcntl$lock(r0, 0x24, &(0x7f0000002380)={0x1, 0x2, 0xa3, 0x9, r5}) openat$cgroup_procs(r4, &(0x7f0000000180)='cgroup.threads\x00', 0x2, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x1f, 0xc, &(0x7f0000000340)=ANY=[@ANYRES16=0x0, @ANYRES32=r0, @ANYRES8=r3, @ANYRES64=r0, @ANYRESHEX=r1], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r6}, 0x10) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x802, &(0x7f0000000140), 0x9, 0x62b, &(0x7f0000002c40)="$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") ioctl$AUTOFS_DEV_IOCTL_FAIL(r6, 0xc0189377, &(0x7f0000000280)={{0x1, 0x1, 0x18, r6, {0x1, 0xffffffff}}, './file0\x00'}) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x400000, 0x0) r8 = syz_io_uring_setup(0x1f5a, &(0x7f0000002240)={0x0, 0x61f0, 0x1, 0x3, 0x33b, 0x0, r7}, &(0x7f0000000700), &(0x7f0000002300)) io_uring_enter(r8, 0x4e6f, 0xb03f, 0xc, &(0x7f0000002340)={[0x7]}, 0x8) r9 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) sendmsg$NFT_BATCH(r7, &(0x7f0000000740)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000440)={&(0x7f0000002800)=ANY=[@ANYBLOB="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"], 0x40c}, 0x1, 0x0, 0x0, 0x24008084}, 0x14) keyctl$KEYCTL_MOVE(0x1e, r9, 0xfffffffffffffffe, r9, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f00000004c0)=0x3, 0x8, 0x0) set_mempolicy_home_node(&(0x7f0000349000/0xa000)=nil, 0xa000, 0x0, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x0) r10 = add_key$fscrypt_v1(&(0x7f0000000300), &(0x7f00000005c0)={'fscrypt:', @desc3}, &(0x7f0000000600)={0x0, "15f8420a6601447f0245f943ad67ae1ac86b9c5ac68b4212f1dd49d604ce6163455b40a966dd4d6a28e10b13aa0247952612bc12e544ad230cd5cb77c733720a", 0x2d}, 0x48, 0xfffffffffffffff9) keyctl$KEYCTL_MOVE(0x1e, r9, 0x0, r10, 0x1) 783.48969ms ago: executing program 4 (id=4517): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000700000045000000a000020095"], &(0x7f0000000800)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000003c0)='kfree\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[], 0x7c}}, 0x0) setsockopt$SO_BINDTODEVICE_wg(r1, 0x1, 0x19, &(0x7f0000000080)='wg0\x00', 0x4) sendmsg$NFT_BATCH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a50000000060a0b040000000000000000020000002400048020000180070001006374000014000280080002400000001108000440000000020900010073797a30000000000900020073797a32"], 0x78}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x69, 0x7ffc0005}]}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x13, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000040000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000180)='sys_enter\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='mm_page_alloc\x00', r3}, 0x18) r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$USBDEVFS_SUBMITURB(r5, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) 746.17595ms ago: executing program 4 (id=4518): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000840), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=r0, @ANYBLOB="8f9f02000000000000000400000000000180000003000300000000000100", @ANYRES32, @ANYBLOB="0000018000000100", @ANYRES32, @ANYBLOB="000000000100", @ANYRES32], 0x14}}, 0x2000c090) 725.28713ms ago: executing program 4 (id=4519): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x12020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x3, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r2, @ANYRES8=r0], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sys_enter\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x49, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r8 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0xe1002) r9 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r8, 0x1, &(0x7f0000000040)=ANY=[@ANYRES64=r7]) r10 = socket$vsock_stream(0x28, 0x1, 0x0) sendmmsg(r7, &(0x7f0000001f80)=[{{&(0x7f00000003c0)=@pppol2tp={0x18, 0x1, {0x0, r10, {0x2, 0x4e23, @remote}, 0x2, 0x1, 0x3, 0x3}}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000a00)="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", 0x1000}, {&(0x7f00000004c0)="06e1f386ca1e4921fbbccf24aa87f9fc31cb355918b9f4ab093560d9c2f7a2c9e2f105a47c18203cfed79dad4bbe81f74ecd0659a8499726ca77b368ec4bb75ab31e8436f8ae89999e20fb977136fcf0e600a2f9c5ccb0b6013520f7643568fd711bd4ef3a5f715e9d54bb81a6b4b8cdf53e10855801eb9cdb0b2421b8f8732853606f60e440914037c87c1624d95ffd3a4a116903bbf106fcd8ba611059bfd9b0fca0943c8b14be3196532ab96ec337aa699f63a8f8812197bab729e7872042ba90a9afaad4a075935a60eef062e85b51a0f2941521dced8b8bc140295cae80", 0xe0}], 0x2, &(0x7f00000005c0)=[{0x20, 0x108, 0x6, "a9cea009cd1063eca0"}, {0x80, 0x108, 0xffffffff, "cbac134ec7e5f25e7bd06b205fd42f255c364de59d088f67a092dfaefcfa30cdf2f682f295ef490273288c56eca34cac5ed4527b3cce4e6c9cac5eca7536f54d85108fb5a7505eab0562c331e3158ade90de35d942a69bdcaf2ba974cb4a2cceee9b2b07ba51296a83d385"}, {0x50, 0x113, 0x9, "022b292e7e46fe895ddb62dc3fc6af9909f4ae654cd01a05f7ef65cebb110dc38f78a441961fd994a47d0e0ce71d1b49d35113c4e1682d84dbdbb166fbec080f"}], 0xf0}}, {{&(0x7f00000006c0)=@un=@abs={0x0, 0x0, 0x4e24}, 0x80, &(0x7f0000000940)=[{&(0x7f0000000740)="9ff0e31a81f0d290d0ce53613b20e165b2e3200a48dba05fd18b7908cf3d31356956ddbf02df8d415f1bce72b19d8c05f70d0c1cd45e30614d0ea40afc372a7b4d5bee18ffe6b0211023274a36f21b33fa63670b63f275785e6df83014c1ce1a84f01841525b97db504d2bb6d6e64f2c43f4716185adee86f0016966d4879d50f4136a30f99d22a9983027e79ebd3e36b6ca42ca12d69c", 0x97}, {&(0x7f0000000800)="ff319612ca4563a827da3f00a34587e246353c1a2aec61269d688ab10716fd4aa2c24cdeaf77e7af7694cc90b784ac746591274d71e1f91ca783388a2ee8135754af2dbe27e9db3e8606d9369d42dabd9e1e5069cab5482cdfda4958ca1511d7598a5dcaf9b977fcb2c436fc33d4b16242cdfce11f59901318367af051b7d0610f8b2ab736063e11e15a555944a31bc29176e08a9f418e282f8dbca374c9cd73d9ff0904c74674bb44b68673c2d859ce303cc4b46012026d9ea9a9a8955bf5b198bba596e00b95e2beb9ac55878a993b5a83bcd502f7773371", 0xd9}, {&(0x7f0000001a00)="dde4d087c86640cd978be14d9e40018f7bfeeadca2e2c15e2853885d1bfd3df008ed55ab7eefcc901cb90721eba29e42fcf98a4abf9c3925796ad8435724d570cd963c0ad5dc24861c9d15ee7d8a0bd65e65eb50c6de919b4a4c23467aebcbc1dd3c943b290de185f97743bd4d8a99c368bec649309655c99bd71484b2525006048cde06c4596f7ad44e89cdc58b3de23ef47bd44d9a8c88f32837bdfb3c21125e0f147712dcd6f18f84a5602d1e2e6a552072e16fd21aa25c789c5deb75fed267518b39dddb49319d6323f756b4689754dac4b97ce8781cc70b2b43b330640223387f4cc0ed39654c", 0xe9}], 0x3, &(0x7f00000029c0)=ANY=[@ANYBLOB="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"], 0x248}}, {{&(0x7f0000001d40)=@pppol2tpv3={0x18, 0x1, {0x0, r7, {0x2, 0x4e24, @private=0xa010100}, 0x0, 0x0, 0x4, 0x2}}, 0x80, &(0x7f0000001dc0)=[{&(0x7f0000000980)="b12bc2162045d63f8bff0d09f30a9a8996582a05119f7a00c26a6bba9bfcdf7351dd7d16224654", 0x27}], 0x1, &(0x7f0000001e00)=ANY=[@ANYBLOB="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"], 0x148}}], 0x3, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={r4, 0xe0, &(0x7f0000002480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000002140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, &(0x7f0000002180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000002200), 0x0, 0x80094, &(0x7f00000002c0)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000002280), &(0x7f00000022c0), 0x8, 0x8d, 0x8, 0x8, &(0x7f0000002300)}}, 0x10) r12 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002580)='/proc/asound/timers\x00', 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000002640)={{r2, 0xffffffffffffffff}, &(0x7f00000025c0), &(0x7f0000002600)='%pS \x00'}, 0x20) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000002700)=@bpf_ext={0x1c, 0x12, &(0x7f0000002040)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd949, 0x0, 0x0, 0x0, 0x4}, [@btf_id={0x18, 0x5, 0x3, 0x0, 0x1}, @printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @call={0x85, 0x0, 0x0, 0x44}, @cb_func={0x18, 0x8, 0x4, 0x0, 0xfffffffffffffffb}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}]}, &(0x7f0000002100)='syzkaller\x00', 0xd, 0x0, 0x0, 0x41100, 0x5, '\x00', r11, 0x0, r9, 0x8, &(0x7f0000002380)={0x2, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x29da0, r12, 0x2, &(0x7f0000002680)=[r1, r5, 0x1, r13, 0x1], &(0x7f00000026c0)=[{0x2, 0x3, 0x5}, {0x3, 0x3, 0x4, 0x5}], 0x10, 0x64, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000002940)=@base={0x1b, 0xc78, 0x0, 0x8000, 0x0, 0x1, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'ip6tnl0\x00'}) r14 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x590, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x4c58, 0x5, 0x0, 0x1, 0x8, 0x20002, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r15 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002080)={&(0x7f0000000300)='kfree\x00', r15, 0x0, 0xfffffffffffffffc}, 0x18) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000003, 0x13, r14, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x0, &(0x7f0000000240)={[{@dioread_lock}, {@min_batch_time={'min_batch_time', 0x3d, 0xfff}}, {@journal_dev={'journal_dev', 0x3d, 0x5}}, {@user_xattr}, {@grpid}, {@sysvgroups}]}, 0x0, 0x43a, &(0x7f0000000340)="$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") 681.376971ms ago: executing program 5 (id=4520): r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/kcm\x00') prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ioprio_set$uid(0x3, 0x0, 0x0) preadv(r0, &(0x7f00000014c0)=[{&(0x7f0000000340)=""/191, 0xfffffd90}], 0x1, 0x182, 0x0) 679.694291ms ago: executing program 0 (id=4521): bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='module_request\x00', r0}, 0x10) r1 = socket$rds(0x15, 0x5, 0x0) sendmsg$inet(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000080)="c1b6be25123db5dd2d5e5cc7d163b15e7d70b12bd17a755bef2c9afb50f088d4564375a213bc77c6fcbe606e296bfd6208d859e62eb2a8869b894936d4ad07d8627bed2a1e651698d31d1844", 0x4c}], 0x1}, 0x0) mount_setattr(0xffffffffffffffff, 0x0, 0x100, 0x0, 0x2000) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x7, &(0x7f0000000f80)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000001c0)='kfree\x00', r4, 0x0, 0xbed}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$kcm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000002c0)="d80000001c0081064e81f782db44b9040a1d08040e00000000000aa1180002000600142603600e1208000f0000810401a8001605200001400200000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a985162756aa5e8d7ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x48090) 658.353161ms ago: executing program 5 (id=4522): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005a40)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRESOCT], 0xb4}}, 0x0) 588.309322ms ago: executing program 0 (id=4523): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffffff8500000004000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x58e, &(0x7f0000000180)={[{@oldalloc}, {@errors_remount}, {@init_itable}, {@block_validity}, {@block_validity}, {@quota}]}, 0x1, 0x451, &(0x7f0000000780)="$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") ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'geneve1\x00', 0x0}) sendto$packet(0xffffffffffffffff, &(0x7f00000002c0)="1441c05465f0006fc8afa8e40800", 0xe, 0x4000000, &(0x7f00000000c0)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000300)={'tunl0\x00', &(0x7f0000000240)={'gre0\x00', 0x0, 0x8000, 0x40, 0x1ff, 0x1, {{0x1e, 0x4, 0x3, 0x3, 0x78, 0x65, 0x0, 0x4, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x12}, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@end, @cipso={0x86, 0x1f, 0x2, [{0x0, 0x11, "d5eb81640abbf802c83fb39417efd8"}, {0x5, 0x8, "0575d0e06fa1"}]}, @timestamp_addr={0x44, 0x44, 0x8c, 0x1, 0x2, [{@loopback, 0x7}, {@local, 0x4e4}, {@empty, 0x200}, {@dev={0xac, 0x14, 0x14, 0x36}, 0x7ff}, {@multicast2, 0x3}, {@multicast1}, {@broadcast, 0x5}, {@multicast2}]}]}}}}}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r3) r5 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendmsg$ETHTOOL_MSG_WOL_GET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000fddbdf251b0000000c00018008000100", @ANYRES32=r6], 0x20}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000400)={'syztnl2\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r9, {0x0, 0x4}, {0xffff, 0xffff}, {0x1, 0x9}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_RTT={0x8, 0x7, 0xb}, @TCA_CAKE_MPU={0x8, 0xe, 0x8a}]}}]}, 0x44}}, 0x4000000) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000540)={0xffffffffffffffff, 0x58, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000600)={'ip6tnl0\x00', &(0x7f0000000580)={'syztnl2\x00', 0x0, 0x4, 0x3, 0xb, 0x1, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}, @private0, 0x10, 0x0, 0x5, 0x555}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000006c0)={'ip6gre0\x00', &(0x7f0000000640)={'syztnl0\x00', 0x0, 0x29, 0x38, 0x35, 0x93, 0x44, @ipv4={'\x00', '\xff\xff', @loopback}, @private2, 0x80, 0x7, 0x10000, 0x3807}}) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000700)={&(0x7f0000000c00)={0x3c0, 0x0, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [{{0x8, 0x1, r1}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}]}}, {{0x8, 0x1, r2}, {0x134, 0x2, 0x0, 0x1, [{0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}, {{0x8, 0x1, r7}, {0x128, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}]}}, {{0x8, 0x1, r9}, {0xf4, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r10}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r11}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x200}}, {0x8, 0x6, r12}}}]}}]}, 0x3c0}, 0x1, 0x0, 0x0, 0x62d0fbfafaf784cb}, 0x8000) 482.785463ms ago: executing program 5 (id=4524): mkdir(&(0x7f00000000c0)='./control\x00', 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) mount(0x0, &(0x7f0000000040)='./file0/../file0/../file0\x00', &(0x7f00000004c0)='cgroup2\x00', 0x200000, 0x0) mount$bind(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='./control\x00', 0x0, 0x2000, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) getresuid(&(0x7f00000004c0)=0x0, 0x0, &(0x7f0000000f80)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000580)={0x0, 0x0, 0x0}, &(0x7f00000005c0)=0xc) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x7, &(0x7f0000000040)={&(0x7f0000007040)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x17}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}}, 0x0) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="38000000031401002abd7000fedbdf250900020073727a3100000000080041007369770014003300626f6e643000000000"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) bpf$TOKEN_CREATE(0x24, &(0x7f0000000180)={0x0, r8}, 0x8) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x5452, &(0x7f0000000400)='lo\x00\x96o\xd6Q\xb4Y\xa9\xc87,%\x81\xfe\x00\xd2\xd1|\x00\x00\x00\x00\x00\x00\xe3\xd8Yk\xdf\x85\xaac{\x8c\x8ffp`-\xcd\xd9\xd5\xf4\xe68\xe6O\xc2\xf1V0\x8b\t\xed\x13q2\xdd\xcc\xeeR\xf2/\xba\fE>k\a\xe7>t7\x8e(\xf0\x87d\xaf\x93\xfa`\xa6,o\x81.\x1cR\xa5\t\x00\x00\x00\x00\x00\x00\x00|pT\x15\xbc\f*d\xcb\xc2\xcd\x8f\x98\xdf\x00\x00\x1cM\x9c\xa5\xe0\xa8\x00\x00\x00\x80V\xf6\x80\x86\x1b\x05\xe6\"\x1d\f\xaey\x06\xd9$H!w\xa6m\xd8\x7f\xc6\x837\x83/\x9a\xdf\x01\xf2\x9e\xbb\xca\x04\x00\x05\xeb\xb8{7[\xf9\xe9\x15\xdc0]\x89\x9b~\x04\xb4\xa5\xad\v.\xd0*%`\xb0\x03\x00\x00\x00\x00\x00\x00\x00\xab\xf4\xa7\x83r\xa4\x80|\x03C\x9c\x00\xac\xba\xcb\xa4h\x86w_Eu\xbfy%,\xe5\n\xc1\xb3\xa4g\xa3P\x0f\x11\x93\xc7\xf3\xcf\x17\xf5\x86%\x7f\xec\xb2\xc5E\x00\xb2e\xa8\xf1<\xb2\xc82\xbf=o\x00\x00\x00\x00E\x00\xc6X\x92\x0e[\x19\xaa?\x06\xe5\x9d\xd1\x87\x922A\x95\x8e\xbc\xc80xffffffffffffffff, @ANYRES8=r2], &(0x7f0000000ac0)=""/211, 0x34, 0xd3, 0x1, 0x722, 0x0, @void, @value}, 0x28) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r12, &(0x7f0000000100), 0xfffffd9d) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r12, 0xc0502100, &(0x7f00000008c0)) sendfile(r8, r12, 0x0, 0x8000002b) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000bc0)={&(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000400)=[{&(0x7f0000000240)='\x00\x00\x00\x00\x00', 0x5}, {&(0x7f00000003c0)="e2bb1ed63a57576cc2dcd86b8604be154e8a7600393346db8d", 0x19}], 0x2, &(0x7f0000001180)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES16, @ANYRES32=0x0, @ANYRES64=r8, @ANYRES32, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRESOCT=r11, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c0000000000000001000000", @ANYRES32=r4, @ANYRES32=r6, @ANYBLOB="000000001c00e2000000000001000000010000008b8722516d64bb68a43838d5b3cb49cd6c54db3020c0f424d6e2d5edfb5f9c3d20f563cfa04553467acb0b682a62902bc5ea1be813a38945fe61f3c26cda9fd866f42b5165a1eac8fb14d7469da8298af9efb4796561899e9a904e84", @ANYRES32, @ANYBLOB="0000000010000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000001c0000000000000652293c4028848c00", @ANYRES32=r5, @ANYRES16=r3, @ANYRES32=r6, @ANYRES32=r8], 0xd8, 0x200400d1}, 0x80) 460.731124ms ago: executing program 0 (id=4525): mkdir(&(0x7f00000000c0)='./control\x00', 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) mount(0x0, &(0x7f0000000040)='./file0/../file0/../file0\x00', &(0x7f00000004c0)='cgroup2\x00', 0x200000, 0x0) mount$bind(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='./control\x00', 0x0, 0x2000, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) getresuid(&(0x7f00000004c0)=0x0, 0x0, &(0x7f0000000f80)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000580)={0x0, 0x0, 0x0}, &(0x7f00000005c0)=0xc) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x7, &(0x7f0000000040)={&(0x7f0000007040)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x17}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}}, 0x0) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="38000000031401002abd7000fedbdf250900020073727a3100000000080041007369770014003300626f6e643000000000"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) bpf$TOKEN_CREATE(0x24, &(0x7f0000000180)={0x0, r8}, 0x8) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x5452, &(0x7f0000000400)='lo\x00\x96o\xd6Q\xb4Y\xa9\xc87,%\x81\xfe\x00\xd2\xd1|\x00\x00\x00\x00\x00\x00\xe3\xd8Yk\xdf\x85\xaac{\x8c\x8ffp`-\xcd\xd9\xd5\xf4\xe68\xe6O\xc2\xf1V0\x8b\t\xed\x13q2\xdd\xcc\xeeR\xf2/\xba\fE>k\a\xe7>t7\x8e(\xf0\x87d\xaf\x93\xfa`\xa6,o\x81.\x1cR\xa5\t\x00\x00\x00\x00\x00\x00\x00|pT\x15\xbc\f*d\xcb\xc2\xcd\x8f\x98\xdf\x00\x00\x1cM\x9c\xa5\xe0\xa8\x00\x00\x00\x80V\xf6\x80\x86\x1b\x05\xe6\"\x1d\f\xaey\x06\xd9$H!w\xa6m\xd8\x7f\xc6\x837\x83/\x9a\xdf\x01\xf2\x9e\xbb\xca\x04\x00\x05\xeb\xb8{7[\xf9\xe9\x15\xdc0]\x89\x9b~\x04\xb4\xa5\xad\v.\xd0*%`\xb0\x03\x00\x00\x00\x00\x00\x00\x00\xab\xf4\xa7\x83r\xa4\x80|\x03C\x9c\x00\xac\xba\xcb\xa4h\x86w_Eu\xbfy%,\xe5\n\xc1\xb3\xa4g\xa3P\x0f\x11\x93\xc7\xf3\xcf\x17\xf5\x86%\x7f\xec\xb2\xc5E\x00\xb2e\xa8\xf1<\xb2\xc82\xbf=o\x00\x00\x00\x00E\x00\xc6X\x92\x0e[\x19\xaa?\x06\xe5\x9d\xd1\x87\x922A\x95\x8e\xbc\xc80xffffffffffffffff, @ANYRES8=r2], &(0x7f0000000ac0)=""/211, 0x34, 0xd3, 0x1, 0x722, 0x0, @void, @value}, 0x28) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r12, &(0x7f0000000100), 0xfffffd9d) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r12, 0xc0502100, &(0x7f00000008c0)) sendfile(r8, r12, 0x0, 0x8000002b) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000bc0)={&(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000400)=[{&(0x7f0000000240)='\x00\x00\x00\x00\x00', 0x5}, {&(0x7f00000003c0)="e2bb1ed63a57576cc2dcd86b8604be154e8a7600393346db8d", 0x19}], 0x2, &(0x7f0000001180)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES16, @ANYRES32=0x0, @ANYRES64=r8, @ANYRES32, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRESOCT=r11, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c0000000000000001000000", @ANYRES32=r4, @ANYRES32=r6, @ANYBLOB="000000001c00e2000000000001000000010000008b8722516d64bb68a43838d5b3cb49cd6c54db3020c0f424d6e2d5edfb5f9c3d20f563cfa04553467acb0b682a62902bc5ea1be813a38945fe61f3c26cda9fd866f42b5165a1eac8fb14d7469da8298af9efb4796561899e9a904e84", @ANYRES32, @ANYBLOB="0000000010000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000001c0000000000000652293c4028848c00", @ANYRES32=r5, @ANYRES16=r3, @ANYRES32=r6, @ANYRES32=r8], 0xd8, 0x200400d1}, 0x80) 441.485974ms ago: executing program 2 (id=4526): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000002700)=@delchain={0x88, 0x65, 0x2, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x8}, {0x0, 0x9}, {0x0, 0xb}}, [@filter_kind_options=@f_bpf={{0x8}, {0x4}}, @filter_kind_options=@f_route={{0xa}, {0x14, 0x2, [@TCA_ROUTE4_IIF={0x8}, @TCA_ROUTE4_TO={0x8, 0x2, 0x44}]}}, @TCA_RATE={0x6, 0x5, {0x6, 0x22}}, @filter_kind_options=@f_route={{0xa}, {0x1c, 0x2, [@TCA_ROUTE4_FROM={0x8}, @TCA_ROUTE4_TO={0x8, 0x2, 0xca}, @TCA_ROUTE4_IIF={0x8}]}}, @TCA_CHAIN={0x8, 0xb, 0x200}]}, 0x88}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, 0x0, {0x9, 0xfff2}, {}, {0xb, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x84}, 0x20000000) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {0x0}], 0x8, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x0, &(0x7f0000003700)={0x77359400}) 398.226884ms ago: executing program 2 (id=4527): mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x3) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'sit0\x00'}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r1, 0x0, &(0x7f0000001700)=""/44}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800080000000000000000001a00000000020000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x6, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000940)={0x0, 0xe, &(0x7f0000000000)=[{&(0x7f00000001c0)="d8000000180081054e81f782db44b904021d005c06007c09e8fe55a10a0015400600142603600e1208000b0000000401a8001600a400014009000200036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360d070100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x12, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r3}, 0x10) r4 = syz_open_dev$tty1(0xc, 0x4, 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000100)={0x11, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e22, 0x3, 'dh\x00', 0x1, 0x20000007, 0x10000049}, 0x2c) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') syz_usb_connect$hid(0x2, 0x3f, &(0x7f0000000740)=ANY=[@ANYBLOB="1201100100000010ac05600240000102030109022d000101c0800709040001020301030509210c00020122100f090581030004000102090502031000030902d97b0c6a2e9cafa8f810e03a8170c5a65bfa97"], &(0x7f0000000680)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x250, 0x9, 0x0, 0xef, 0x8, 0x2}, 0x19a, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], 0x7, [{0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x2c09}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x280a}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x500a}}, {0xdc, &(0x7f0000000ec0)=ANY=[@ANYBLOB="dc0375c783f33f9470c42da2e8f2aaa6329c2b87e87cc267af24248b439bc5e6bd6c66a7e970fbc715a6555bcb9b1abee6d99062a4e4e781a9183446231bd175714bfd8ce94375eef9cd410394cd78af480c5a15e8a3f59017ee40a949b6a3d5695ee2317196d8b49add8d31ce4bf1e2ff0501521d3f16c0bf6960f396c2669ba73bbe13ee27188bdea2f47f47054b7486751e581cba8548875639420c379623e49d331d56b627b06fb16c56a1424bf51ad6cbac7dcdceb9438818177b59239419ced8a98f431e9babba54bacd6a1e000000000000000030a5238f3a0a7a73539f9e86bb71643e81"]}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x3c01}}, {0x76, &(0x7f00000003c0)=ANY=[@ANYBLOB="7603b1a555c50d7b9b284b9b0ae9538b1514e2cf7da9069945518bc66be4a4955a03a1e275d93928ae18523fa7bcaf37225b59d39f9b383fcee7afdd07c4873ae20a749a39e09e98eb241bbb47dcba7a02fa268f1b00d45cb71ea74524a0343b778ed39c3776c638a11982133810bc5e4e6c3b691f0d"]}, {0x6e, &(0x7f0000000500)=@string={0x6e, 0x3, "b806f17f7ed9e4ed76b2b5f00ff26683e77f467d14e35b5c152adb99f350afde7a6ee314fbf5c80bf052ce542f79c93fa5460045fcbad6cc9aeb7567aa98988098f5683e04d6a4cf8345948a26d9dc05837c208b1faf2bafc74e0abbab34791a31b25ecd8cd8fc705c861a39"}}]}) writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000040)="dc", 0x1}], 0x8) arch_prctl$ARCH_FORCE_TAGGED_SVA(0x4004) ioctl$VT_RESIZE(r4, 0x5609, &(0x7f0000000700)={0x80, 0x400, 0x2}) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="18010000bc0000000000000000030000850000007b00"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x6, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad433ec50000000f00008095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='netlink_extack\x00', r8}, 0x10) r9 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r9, 0x890b, &(0x7f0000000300)={@mcast1, @mcast2, @private2, 0x2, 0x2, 0x6, 0x0, 0x7, 0xc80167, r10}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) sendmsg$NL80211_CMD_SET_POWER_SAVE(r5, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x1c, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_PS_STATE={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x4008800) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kfree\x00', r7, 0x0, 0x3}, 0x18) memfd_secret(0x80000) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r6, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) 301.789516ms ago: executing program 6 (id=4528): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000024000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000440)={r0, &(0x7f00000007c0)="c8047ef71c3bd03a1891c6ac85fa91a7a053bc1c09176c445f052fe466bd327fc2a718df7baa4b8deaec9c9349602d375618308f0d0a26a5723c563b169bf1fcc3ff176a992f757a33d792949f7dec7503a7b2ed06af10a63dc03306639ed9b6ea97756edbbaf2bcce6b8032ec8a99854ed741fd6f2533045e4254a4479ff753e1018890534f2504f1055fb517f219ea2864173c8c4f8aea67852478e0f81505444ecec7013a39876b48a4515002709e", &(0x7f0000000880)=""/218}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000700000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = creat(&(0x7f00000002c0)='./file0\x00', 0x6) write$tun(r2, &(0x7f0000000d40)=ANY=[], 0x36) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r1}, 0x10) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x1c8, 0x320, 0x25, 0x148, 0x320, 0x60, 0x418, 0x2a8, 0x2a8, 0x418, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0x98, 0x0, {0x200003ae, 0x7f00}}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x321f, 0x7cee}}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'veth1_to_bond\x00', 'veth0\x00', {0xff}}, 0x0, 0x70, 0x98}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x9, 0x8001}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x228) 301.174436ms ago: executing program 6 (id=4529): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f00000002c0)='.\x00', 0x600010c) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r1], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) r3 = mq_open(&(0x7f0000001140)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\xe0\x9d\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xdf\x15\f]\x15\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb', 0x42, 0x108, 0x0) close(r3) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) setxattr$incfs_metadata(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, 0x0, 0x1) 193.264457ms ago: executing program 6 (id=4530): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) writev(r0, &(0x7f0000000200)=[{&(0x7f0000000100)="2e9b3d0007e03dd65193dfb6c575963f86ddf06712e90009118db0049d90491ceaebfd26ceeef2324800", 0x2a}, {&(0x7f0000000080)="fcd2c377111757974e80", 0xa}], 0x2) 116.495648ms ago: executing program 6 (id=4531): ppoll(0x0, 0x0, 0x0, 0x0, 0x0) 79.599179ms ago: executing program 0 (id=4532): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="10000000003fe0000000000c88655ed0"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket(0x10, 0x3, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x1, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000072000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x10) rt_sigpending(0x0, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001400b59500000000000000000a000000", @ANYRES32=r2, @ANYBLOB="140001000040000000000000000000000000000014000200fe8000"/38], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) socket$igmp(0x2, 0x3, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000001380)={0x11, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0xf2cccc7fae7881b8, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sys_enter\x00', r3}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) socket$inet6(0xa, 0x80002, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x20, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x73cea2d47785b264, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r5}, 0x18) io_uring_setup(0x1de0, &(0x7f00000000c0)={0x0, 0x45d6}) socket$can_raw(0x1d, 0x3, 0x1) socket$can_raw(0x1d, 0x3, 0x1) socket$can_raw(0x1d, 0x3, 0x1) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240000000", @ANYRES16=r6], 0xc4}}, 0x0) 61.549349ms ago: executing program 5 (id=4533): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000002300810000000000000000850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/20, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xb, 0x5, 0x408, 0xcd, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000080000000000000000000001811", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r2}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) 55.979139ms ago: executing program 4 (id=4534): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000840), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=r0, @ANYBLOB="8f9f02000000000000000400000000000180000003000300000000000100", @ANYRES32, @ANYBLOB="0000018000000100", @ANYRES32, @ANYBLOB="000000000100", @ANYRES32, @ANYBLOB="0000030002000000000002006d6163766c616e30000000000000000000000100"], 0x14}}, 0x2000c090) 2.306ms ago: executing program 4 (id=4535): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'pim6reg1\x00', 0x2}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r2}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @broadcast}) 0s ago: executing program 0 (id=4536): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000080000000600000000"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000a40000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r2, &(0x7f0000000400)={&(0x7f00000008c0), 0x58, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x20) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r5}, 0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70500001000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r6}, 0x10) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000200)=@o_path={&(0x7f0000000000)='./file0\x00', r6, 0x4000, r3}, 0x18) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) munlock(&(0x7f0000fef000/0xe000)=nil, 0xe000) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000a80)='kfree\x00', r10}, 0x18) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x1c, 0x3, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24040800}, 0x8d0) sendmsg$nl_route_sched(r8, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtaction={0x88, 0x30, 0xb, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x6a00}, [{0x74, 0x1, [@m_mirred={0x70, 0x1, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0xffffffff, 0x6, 0x10000000, 0x0, 0xffe0000}}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0xff, 0x4, 0x6, 0x6}, 0x4, r7}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x88}}, 0x2000a804) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r7, @ANYBLOB], 0x20}, 0x1, 0x0, 0x0, 0x80d5}, 0x0) kernel console output (not intermixed with test programs): cated SCSI ioctl, please convert it to SG_IO [ 179.119087][T14748] loop4: detected capacity change from 0 to 527 [ 179.126398][T14748] EXT4-fs (loop4): failed to parse options in superblock:  [ 179.139378][T14748] EXT4-fs (loop4): Unsupported encryption level 4 [ 179.252550][T14765] loop4: detected capacity change from 0 to 764 [ 179.260109][T14765] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 179.334321][T14773] netlink: 60 bytes leftover after parsing attributes in process `syz.6.3667'. [ 179.364897][T14777] loop4: detected capacity change from 0 to 1024 [ 179.376876][T14777] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 179.403371][T13288] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 179.424501][T14783] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3670'. [ 179.443883][T14785] vhci_hcd: default hub control req: 0000 v0000 i0000 l31125 [ 179.461199][T14787] pim6reg1: entered promiscuous mode [ 179.466767][T14787] pim6reg1: entered allmulticast mode [ 179.508518][T14791] loop6: detected capacity change from 0 to 764 [ 179.522906][T14791] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 179.723931][T14824] netlink: 11 bytes leftover after parsing attributes in process `syz.6.3682'. [ 179.733039][T14824] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3682'. [ 179.748016][T14824] netlink: 11 bytes leftover after parsing attributes in process `syz.6.3682'. [ 179.767729][T14829] pim6reg1: entered promiscuous mode [ 179.773103][T14829] pim6reg1: entered allmulticast mode [ 179.774653][T14823] loop0: detected capacity change from 0 to 8192 [ 179.787732][T14824] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3682'. [ 179.823138][T14835] loop4: detected capacity change from 0 to 764 [ 179.831697][T14835] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 179.866143][T14840] loop4: detected capacity change from 0 to 1024 [ 179.873298][T14840] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 179.884305][T14840] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 179.895919][T14840] JBD2: no valid journal superblock found [ 179.901686][T14840] EXT4-fs (loop4): Could not load journal inode [ 179.964440][T14847] netlink: 'syz.4.3689': attribute type 13 has an invalid length. [ 179.975487][T14849] netlink: 5144 bytes leftover after parsing attributes in process `syz.2.3693'. [ 180.042631][T14859] pim6reg1: entered promiscuous mode [ 180.048179][T14859] pim6reg1: entered allmulticast mode [ 180.084539][T14866] loop5: detected capacity change from 0 to 128 [ 180.089373][T14867] loop0: detected capacity change from 0 to 1024 [ 180.098032][T14867] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 180.109013][T14867] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 180.119562][T14867] JBD2: no valid journal superblock found [ 180.125285][T14867] EXT4-fs (loop0): Could not load journal inode [ 180.171046][T14872] pim6reg1: entered promiscuous mode [ 180.171236][T14870] loop6: detected capacity change from 0 to 2048 [ 180.176644][T14872] pim6reg1: entered allmulticast mode [ 180.216106][T14870] loop6: p1 < > p4 [ 180.220656][T14870] loop6: p4 size 8388608 extends beyond EOD, truncated [ 180.252761][T14875] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.261730][T14875] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.270532][T14875] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.279312][T14875] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.288301][T14875] geneve2: entered promiscuous mode [ 180.293717][T14875] geneve2: entered allmulticast mode [ 180.299978][T14875] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.308920][T14875] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.317987][T14875] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.327082][T14875] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.532318][T14886] siw: device registration error -23 [ 180.813689][T14902] vhci_hcd: default hub control req: 0000 v0000 i0000 l31125 [ 181.039759][T14927] loop2: detected capacity change from 0 to 512 [ 181.052581][T14927] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 181.061404][T14927] EXT4-fs (loop2): couldn't mount as ext2 due to feature incompatibilities [ 181.081027][T14932] vhci_hcd: default hub control req: 0000 v0000 i0000 l31125 [ 181.171001][T14943] loop0: detected capacity change from 0 to 764 [ 181.180087][T14943] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 181.212439][T14945] loop2: detected capacity change from 0 to 1024 [ 181.222245][T14948] FAULT_INJECTION: forcing a failure. [ 181.222245][T14948] name failslab, interval 1, probability 0, space 0, times 0 [ 181.235079][T14948] CPU: 1 UID: 0 PID: 14948 Comm: syz.4.3736 Not tainted 6.15.0-rc5-syzkaller-00022-g01f95500a162 #0 PREEMPT(voluntary) [ 181.235111][T14948] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 181.235124][T14948] Call Trace: [ 181.235130][T14948] [ 181.235141][T14948] __dump_stack+0x1d/0x30 [ 181.235162][T14948] dump_stack_lvl+0xe8/0x140 [ 181.235237][T14948] dump_stack+0x15/0x1b [ 181.235253][T14948] should_fail_ex+0x265/0x280 [ 181.235286][T14948] should_failslab+0x8c/0xb0 [ 181.235361][T14948] kmem_cache_alloc_node_noprof+0x57/0x320 [ 181.235397][T14948] ? __alloc_skb+0x101/0x320 [ 181.235428][T14948] __alloc_skb+0x101/0x320 [ 181.235472][T14948] netlink_alloc_large_skb+0xba/0xf0 [ 181.235554][T14948] netlink_sendmsg+0x3cf/0x6b0 [ 181.235588][T14948] ? __pfx_netlink_sendmsg+0x10/0x10 [ 181.235678][T14948] __sock_sendmsg+0x142/0x180 [ 181.235705][T14948] ____sys_sendmsg+0x31e/0x4e0 [ 181.235806][T14948] ___sys_sendmsg+0x17b/0x1d0 [ 181.235844][T14948] __x64_sys_sendmsg+0xd4/0x160 [ 181.235910][T14948] x64_sys_call+0x2999/0x2fb0 [ 181.235948][T14948] do_syscall_64+0xd0/0x1a0 [ 181.235970][T14948] ? clear_bhb_loop+0x25/0x80 [ 181.235992][T14948] ? clear_bhb_loop+0x25/0x80 [ 181.236014][T14948] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 181.236034][T14948] RIP: 0033:0x7ff15e5ce969 [ 181.236165][T14948] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 181.236251][T14948] RSP: 002b:00007ff15cc37038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 181.236270][T14948] RAX: ffffffffffffffda RBX: 00007ff15e7f5fa0 RCX: 00007ff15e5ce969 [ 181.236282][T14948] RDX: 0000000020000010 RSI: 0000200000001000 RDI: 0000000000000004 [ 181.236294][T14948] RBP: 00007ff15cc37090 R08: 0000000000000000 R09: 0000000000000000 [ 181.236347][T14948] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 181.236359][T14948] R13: 0000000000000000 R14: 00007ff15e7f5fa0 R15: 00007ffc13161428 [ 181.236377][T14948] [ 181.464737][T14953] loop6: detected capacity change from 0 to 764 [ 181.491146][T14945] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 181.491224][T14953] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 181.531252][T14964] FAULT_INJECTION: forcing a failure. [ 181.531252][T14964] name failslab, interval 1, probability 0, space 0, times 0 [ 181.533527][T14945] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, [ 181.543991][T14964] CPU: 0 UID: 0 PID: 14964 Comm: syz.6.3742 Not tainted 6.15.0-rc5-syzkaller-00022-g01f95500a162 #0 PREEMPT(voluntary) [ 181.544023][T14964] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 181.544045][T14964] Call Trace: [ 181.544052][T14964] [ 181.544060][T14964] __dump_stack+0x1d/0x30 [ 181.544089][T14964] dump_stack_lvl+0xe8/0x140 [ 181.544153][T14964] dump_stack+0x15/0x1b [ 181.544177][T14964] should_fail_ex+0x265/0x280 [ 181.544219][T14964] should_failslab+0x8c/0xb0 [ 181.544326][T14964] kmem_cache_alloc_noprof+0x50/0x310 [ 181.544368][T14964] ? mm_alloc+0x2b/0xa0 [ 181.544397][T14964] mm_alloc+0x2b/0xa0 [ 181.544424][T14964] alloc_bprm+0x20a/0x660 [ 181.544452][T14964] ? should_fail+0xb/0x20 [ 181.544541][T14964] do_execveat_common+0x12e/0x750 [ 181.544574][T14964] ? getname_flags+0x154/0x3b0 [ 181.544613][T14964] __x64_sys_execveat+0x73/0x90 [ 181.544645][T14964] x64_sys_call+0x2dae/0x2fb0 [ 181.544763][T14964] do_syscall_64+0xd0/0x1a0 [ 181.544791][T14964] ? clear_bhb_loop+0x25/0x80 [ 181.544819][T14964] ? clear_bhb_loop+0x25/0x80 [ 181.544846][T14964] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 181.544874][T14964] RIP: 0033:0x7fa6d72ae969 [ 181.544921][T14964] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 181.544944][T14964] RSP: 002b:00007fa6d5917038 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 181.544967][T14964] RAX: ffffffffffffffda RBX: 00007fa6d74d5fa0 RCX: 00007fa6d72ae969 [ 181.545039][T14964] RDX: 0000000000000000 RSI: 0000200000000140 RDI: ffffffffffffff9c [ 181.545055][T14964] RBP: 00007fa6d5917090 R08: 0000000000000000 R09: 0000000000000000 [ 181.545070][T14964] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 181.545086][T14964] R13: 0000000000000000 R14: 00007fa6d74d5fa0 R15: 00007ffcabc8d078 [ 181.545110][T14964] [ 181.551369][T14964] loop6: detected capacity change from 0 to 1024 [ 181.552309][T14945] block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 181.566740][T14964] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 181.650670][T14945] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 319 with max blocks 1 with error 28 [ 181.657125][T14964] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 181.660124][T14945] EXT4-fs (loop2): This should not happen!! Data will be lost [ 181.660124][T14945] [ 181.668109][T14964] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 181.670365][T14945] EXT4-fs (loop2): Total free blocks count 0 [ 181.691301][T14964] EXT4-fs (loop6): orphan cleanup on readonly fs [ 181.698479][T14945] EXT4-fs (loop2): Free/Dirty block details [ 181.708869][T14964] EXT4-fs warning (device loop6): ext4_enable_quotas:7170: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix. [ 181.714614][T14945] EXT4-fs (loop2): free_blocks=68451041280 [ 181.722609][T14964] EXT4-fs (loop6): Cannot turn on quotas: error -22 [ 181.730624][T14945] EXT4-fs (loop2): dirty_blocks=32 [ 181.739940][T14964] EXT4-fs error (device loop6): ext4_free_blocks:6587: comm syz.6.3742: Freeing blocks not in datazone - block = 0, count = 4096 [ 181.741621][T14945] EXT4-fs (loop2): Block reservation details [ 181.741635][T14945] EXT4-fs (loop2): i_reserved_data_blocks=2 [ 181.748256][T14964] EXT4-fs (loop6): 1 orphan inode deleted [ 181.891026][T14964] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 181.904065][T14964] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 181.914619][T14970] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3735'. [ 181.965062][T14982] loop6: detected capacity change from 0 to 512 [ 181.971889][T10156] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 181.997178][T14982] EXT4-fs warning (device loop6): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 182.017301][T14982] EXT4-fs (loop6): mount failed [ 182.056581][T14988] loop0: detected capacity change from 0 to 512 [ 182.063136][T14988] EXT4-fs: Ignoring removed oldalloc option [ 182.071682][T14988] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 182.096556][T14994] serio: Serial port ptm0 [ 182.126406][T14988] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #16: comm syz.0.3750: invalid indirect mapped block 4294967295 (level 0) [ 182.147138][T14988] EXT4-fs (loop0): Remounting filesystem read-only [ 182.167972][T15004] loop5: detected capacity change from 0 to 1024 [ 182.175023][T14988] EXT4-fs (loop0): 1 orphan inode deleted [ 182.180928][T14988] EXT4-fs (loop0): 1 truncate cleaned up [ 182.187597][T14988] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 182.201117][T15009] FAULT_INJECTION: forcing a failure. [ 182.201117][T15009] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 182.203789][T15004] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 182.214357][T15009] CPU: 0 UID: 0 PID: 15009 Comm: syz.2.3759 Not tainted 6.15.0-rc5-syzkaller-00022-g01f95500a162 #0 PREEMPT(voluntary) [ 182.214396][T15009] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 182.214415][T15009] Call Trace: [ 182.214425][T15009] [ 182.214435][T15009] __dump_stack+0x1d/0x30 [ 182.214487][T15009] dump_stack_lvl+0xe8/0x140 [ 182.214512][T15009] dump_stack+0x15/0x1b [ 182.214534][T15009] should_fail_ex+0x265/0x280 [ 182.214588][T15009] should_fail+0xb/0x20 [ 182.214666][T15009] should_fail_usercopy+0x1a/0x20 [ 182.214690][T15009] _copy_from_iter+0xcf/0xdd0 [ 182.214717][T15009] ? mntput+0x4b/0x80 [ 182.214810][T15009] ? terminate_walk+0x27f/0x2a0 [ 182.214849][T15009] tun_get_user+0x14c/0x24d0 [ 182.214887][T15009] ? ref_tracker_alloc+0x1f2/0x2f0 [ 182.214944][T15009] ? avc_policy_seqno+0x15/0x30 [ 182.214988][T15009] tun_chr_write_iter+0x15e/0x210 [ 182.215020][T15009] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 182.215049][T15009] vfs_write+0x49d/0x8d0 [ 182.215107][T15009] ksys_write+0xda/0x1a0 [ 182.215141][T15009] __x64_sys_write+0x40/0x50 [ 182.215173][T15009] x64_sys_call+0x2cdd/0x2fb0 [ 182.215201][T15009] do_syscall_64+0xd0/0x1a0 [ 182.215287][T15009] ? clear_bhb_loop+0x25/0x80 [ 182.215316][T15009] ? clear_bhb_loop+0x25/0x80 [ 182.215343][T15009] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.215403][T15009] RIP: 0033:0x7f5f792ce969 [ 182.215422][T15009] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 182.215472][T15009] RSP: 002b:00007f5f77937038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 182.215496][T15009] RAX: ffffffffffffffda RBX: 00007f5f794f5fa0 RCX: 00007f5f792ce969 [ 182.215513][T15009] RDX: 0000000000000ffe RSI: 00002000000000c0 RDI: 0000000000000003 [ 182.215529][T15009] RBP: 00007f5f77937090 R08: 0000000000000000 R09: 0000000000000000 [ 182.215545][T15009] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 182.215561][T15009] R13: 0000000000000000 R14: 00007f5f794f5fa0 R15: 00007ffc93fe2058 [ 182.215585][T15009] [ 182.433329][T15004] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 182.444399][T15004] JBD2: no valid journal superblock found [ 182.444591][T13027] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 182.450209][T15004] EXT4-fs (loop5): Could not load journal inode [ 182.546215][T15032] vhci_hcd: default hub control req: 0000 v0000 i0000 l31125 [ 182.558642][T15029] netlink: 'syz.5.3757': attribute type 13 has an invalid length. [ 182.629114][T15044] loop4: detected capacity change from 0 to 512 [ 182.636008][T15044] EXT4-fs: Ignoring removed oldalloc option [ 182.642308][T15044] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 182.708276][T15044] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #16: comm syz.4.3773: invalid indirect mapped block 4294967295 (level 0) [ 182.723508][T15044] EXT4-fs (loop4): Remounting filesystem read-only [ 182.734304][T15044] EXT4-fs (loop4): 1 orphan inode deleted [ 182.740103][T15044] EXT4-fs (loop4): 1 truncate cleaned up [ 182.775910][T15044] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 182.820902][T13288] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 182.858134][T15067] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3780'. [ 182.871933][T15065] vhci_hcd: default hub control req: 0000 v0000 i0000 l31125 [ 182.909401][T15073] loop0: detected capacity change from 0 to 1024 [ 182.927821][T15075] loop2: detected capacity change from 0 to 128 [ 182.928621][T15073] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 182.957335][T15075] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 182.973337][T13027] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 182.986933][T15075] ext4 filesystem being mounted at /189/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 183.027621][T15075] EXT4-fs error (device loop2): htree_dirblock_to_tree:1082: inode #2: block 4: comm syz.2.3785: bad entry in directory: inode out of bounds - offset=1012, inode=128, rec_len=12, size=1024 fake=1 [ 183.062835][T15075] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 183.110502][T15089] vhci_hcd: default hub control req: 0000 v0000 i0000 l31125 [ 183.128680][ T29] kauditd_printk_skb: 341 callbacks suppressed [ 183.128707][ T29] audit: type=1326 audit(1746512590.911:5339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15092 comm="syz.6.3792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6d72ae969 code=0x7ffc0000 [ 183.158590][ T29] audit: type=1326 audit(1746512590.911:5340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15092 comm="syz.6.3792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6d72ae969 code=0x7ffc0000 [ 183.182205][ T29] audit: type=1326 audit(1746512590.911:5341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15092 comm="syz.6.3792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa6d72ae969 code=0x7ffc0000 [ 183.211053][ T29] audit: type=1326 audit(1746512590.911:5342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15092 comm="syz.6.3792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6d72ae969 code=0x7ffc0000 [ 183.234700][ T29] audit: type=1326 audit(1746512590.911:5343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15092 comm="syz.6.3792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6d72ae969 code=0x7ffc0000 [ 183.258342][ T29] audit: type=1326 audit(1746512590.941:5344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15092 comm="syz.6.3792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa6d72ae969 code=0x7ffc0000 [ 183.282163][ T29] audit: type=1326 audit(1746512590.941:5345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15092 comm="syz.6.3792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6d72ae969 code=0x7ffc0000 [ 183.305839][ T29] audit: type=1326 audit(1746512590.941:5346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15092 comm="syz.6.3792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6d72ae969 code=0x7ffc0000 [ 183.329496][ T29] audit: type=1326 audit(1746512590.941:5347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15092 comm="syz.6.3792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa6d72ae969 code=0x7ffc0000 [ 183.353047][ T29] audit: type=1326 audit(1746512590.941:5348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15092 comm="syz.6.3792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6d72ae969 code=0x7ffc0000 [ 183.377417][T15096] program syz.2.3793 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 183.398484][T15105] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3796'. [ 183.411272][T15103] loop6: detected capacity change from 0 to 1764 [ 183.480780][T15096] loop2: detected capacity change from 0 to 512 [ 183.492378][T15096] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 183.515109][T15107] ALSA: seq fatal error: cannot create timer (-22) [ 183.524150][T15096] EXT4-fs (loop2): 1 truncate cleaned up [ 183.533581][T15096] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 183.577481][T12840] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 183.578108][T15112] pim6reg1: entered promiscuous mode [ 183.578123][T15112] pim6reg1: entered allmulticast mode [ 183.606170][T15114] loop2: detected capacity change from 0 to 128 [ 183.679757][T15114] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 183.705852][T15114] ext4 filesystem being mounted at /192/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 183.748714][T15114] EXT4-fs error (device loop2): htree_dirblock_to_tree:1082: inode #2: block 4: comm syz.2.3800: bad entry in directory: inode out of bounds - offset=1012, inode=128, rec_len=12, size=1024 fake=1 [ 183.805837][T15126] loop0: detected capacity change from 0 to 1764 [ 183.810049][T15122] loop4: detected capacity change from 0 to 764 [ 183.822222][T15122] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 183.833376][T15114] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 183.847558][T15128] vhci_hcd: default hub control req: 0000 v0000 i0000 l31125 [ 183.855115][T15120] vhci_hcd: default hub control req: 0000 v0000 i0000 l31125 [ 183.920742][T15137] vhci_hcd: default hub control req: 0000 v0000 i0000 l31125 [ 183.952175][T15140] ip6gretap1: entered allmulticast mode [ 184.011097][T15149] loop4: detected capacity change from 0 to 764 [ 184.038727][T15149] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 184.294480][T15185] loop4: detected capacity change from 0 to 512 [ 184.311741][T15183] loop5: detected capacity change from 0 to 1024 [ 184.340928][T15183] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 184.373781][T15185] EXT4-fs warning (device loop4): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 184.401552][T15196] loop6: detected capacity change from 0 to 1024 [ 184.413324][T15196] EXT4-fs (loop6): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 184.424337][T15196] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 184.458263][T15185] EXT4-fs (loop4): mount failed [ 184.466645][ T9406] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 184.477689][T15196] JBD2: no valid journal superblock found [ 184.483470][T15196] EXT4-fs (loop6): Could not load journal inode [ 184.556968][T15207] vhci_hcd: default hub control req: 0000 v0000 i0000 l31125 [ 184.564865][T15209] netlink: 'syz.6.3834': attribute type 13 has an invalid length. [ 184.614828][T15219] loop4: detected capacity change from 0 to 512 [ 184.622098][T15219] EXT4-fs: Ignoring removed oldalloc option [ 184.634997][T15219] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 184.662213][T15219] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #16: comm syz.4.3844: invalid indirect mapped block 4294967295 (level 0) [ 184.678523][T15226] vhci_hcd: default hub control req: 0000 v0000 i0000 l31125 [ 184.685977][T15219] EXT4-fs (loop4): Remounting filesystem read-only [ 184.692773][T15219] EXT4-fs (loop4): 1 orphan inode deleted [ 184.698565][T15219] EXT4-fs (loop4): 1 truncate cleaned up [ 184.704759][T15219] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 184.736996][T13288] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 184.818771][T15243] __nla_validate_parse: 1 callbacks suppressed [ 184.818792][T15243] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3855'. [ 184.839447][T15246] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3856'. [ 185.315890][T15304] program syz.4.3879 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 185.426118][T15308] loop6: detected capacity change from 0 to 1024 [ 185.435383][T15298] loop4: detected capacity change from 0 to 527 [ 185.473464][T15298] EXT4-fs (loop4): failed to parse options in superblock:  [ 185.487812][T15298] EXT4-fs (loop4): Unsupported encryption level 4 [ 185.497016][T15308] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 185.537989][T15322] pim6reg1: entered promiscuous mode [ 185.543352][T15322] pim6reg1: entered allmulticast mode [ 185.574778][T11634] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 185.682230][T15343] vhci_hcd: default hub control req: 0000 v0000 i0000 l31125 [ 185.715139][T15348] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3899'. [ 185.739545][T15349] netlink: 11 bytes leftover after parsing attributes in process `syz.6.3896'. [ 185.748746][T15349] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3896'. [ 185.761722][T15349] netlink: 11 bytes leftover after parsing attributes in process `syz.6.3896'. [ 185.797688][T15349] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3896'. [ 185.817827][T15362] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3903'. [ 185.929058][T15373] FAULT_INJECTION: forcing a failure. [ 185.929058][T15373] name failslab, interval 1, probability 0, space 0, times 0 [ 185.941920][T15373] CPU: 0 UID: 0 PID: 15373 Comm: syz.2.3906 Not tainted 6.15.0-rc5-syzkaller-00022-g01f95500a162 #0 PREEMPT(voluntary) [ 185.941957][T15373] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 185.941972][T15373] Call Trace: [ 185.941978][T15373] [ 185.941997][T15373] __dump_stack+0x1d/0x30 [ 185.942022][T15373] dump_stack_lvl+0xe8/0x140 [ 185.942046][T15373] dump_stack+0x15/0x1b [ 185.942067][T15373] should_fail_ex+0x265/0x280 [ 185.942109][T15373] should_failslab+0x8c/0xb0 [ 185.942140][T15373] kmem_cache_alloc_node_noprof+0x57/0x320 [ 185.942180][T15373] ? __alloc_skb+0x101/0x320 [ 185.942298][T15373] __alloc_skb+0x101/0x320 [ 185.942332][T15373] ? audit_log_start+0x365/0x6c0 [ 185.942377][T15373] audit_log_start+0x380/0x6c0 [ 185.942472][T15373] audit_seccomp+0x48/0x100 [ 185.942500][T15373] ? __seccomp_filter+0x68c/0x10d0 [ 185.942526][T15373] __seccomp_filter+0x69d/0x10d0 [ 185.942553][T15373] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 185.942579][T15373] ? vfs_write+0x75e/0x8d0 [ 185.942622][T15373] ? __rcu_read_unlock+0x4f/0x70 [ 185.942648][T15373] ? __fget_files+0x184/0x1c0 [ 185.942747][T15373] __secure_computing+0x82/0x150 [ 185.942772][T15373] syscall_trace_enter+0xcf/0x1e0 [ 185.942801][T15373] do_syscall_64+0xaa/0x1a0 [ 185.942822][T15373] ? clear_bhb_loop+0x25/0x80 [ 185.942842][T15373] ? clear_bhb_loop+0x25/0x80 [ 185.942875][T15373] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.942898][T15373] RIP: 0033:0x7f5f792ce969 [ 185.942964][T15373] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 185.942985][T15373] RSP: 002b:00007f5f77937038 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 185.943002][T15373] RAX: ffffffffffffffda RBX: 00007f5f794f5fa0 RCX: 00007f5f792ce969 [ 185.943014][T15373] RDX: 0000200000000000 RSI: 0000000000000002 RDI: 0000000000000016 [ 185.943050][T15373] RBP: 00007f5f77937090 R08: 0000000000000000 R09: 0000000000000000 [ 185.943065][T15373] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 185.943081][T15373] R13: 0000000000000000 R14: 00007f5f794f5fa0 R15: 00007ffc93fe2058 [ 185.943105][T15373] [ 186.247916][T15395] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3910'. [ 186.259113][T15395] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3910'. [ 186.285700][T15399] vhci_hcd: default hub control req: 0000 v0000 i0000 l31125 [ 186.369113][T15412] loop6: detected capacity change from 0 to 512 [ 186.394053][T15418] loop5: detected capacity change from 0 to 512 [ 186.421369][T15418] EXT4-fs: Ignoring removed oldalloc option [ 186.428785][T15418] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 186.447925][T15412] EXT4-fs warning (device loop6): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 186.517068][T15418] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #16: comm syz.5.3922: invalid indirect mapped block 4294967295 (level 0) [ 186.534050][T15429] loop0: detected capacity change from 0 to 164 [ 186.545713][T15412] EXT4-fs (loop6): mount failed [ 186.556919][T15418] EXT4-fs (loop5): Remounting filesystem read-only [ 186.580724][T15418] EXT4-fs (loop5): 1 orphan inode deleted [ 186.586542][T15418] EXT4-fs (loop5): 1 truncate cleaned up [ 186.627029][T15425] syz.0.3924: attempt to access beyond end of device [ 186.627029][T15425] loop0: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 186.644898][T15425] syz.0.3924: attempt to access beyond end of device [ 186.644898][T15425] loop0: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 186.700252][T15440] loop6: detected capacity change from 0 to 1764 [ 186.740086][T15448] loop5: detected capacity change from 0 to 512 [ 186.786968][T15448] EXT4-fs warning (device loop5): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 186.810714][T15448] EXT4-fs (loop5): mount failed [ 186.845256][T15466] loop5: detected capacity change from 0 to 128 [ 186.852467][T15466] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (30846!=65535) [ 186.885831][T15466] EXT4-fs error (device loop5): htree_dirblock_to_tree:1053: inode #2: comm syz.5.3941: Directory block failed checksum [ 186.957711][T15477] loop6: detected capacity change from 0 to 1764 [ 187.025173][T15483] loop6: detected capacity change from 0 to 2048 [ 187.148932][T15492] loop6: detected capacity change from 0 to 1024 [ 187.230157][T15503] loop4: detected capacity change from 0 to 512 [ 187.237710][T15503] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 187.250307][T15503] EXT4-fs (loop4): 1 truncate cleaned up [ 187.251755][T15505] smc: net device bond0 erased user defined pnetid SYZ2 [ 187.334125][T15513] loop4: detected capacity change from 0 to 512 [ 187.339615][T15515] loop6: detected capacity change from 0 to 512 [ 187.341464][T15513] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 187.358618][T15513] EXT4-fs (loop4): 1 truncate cleaned up [ 187.376961][T15515] EXT4-fs (loop6): too many log groups per flexible block group [ 187.384836][T15515] EXT4-fs (loop6): failed to initialize mballoc (-12) [ 187.391753][T15515] EXT4-fs (loop6): mount failed [ 187.419657][T15520] FAULT_INJECTION: forcing a failure. [ 187.419657][T15520] name failslab, interval 1, probability 0, space 0, times 0 [ 187.420159][T15522] loop6: detected capacity change from 0 to 256 [ 187.432339][T15520] CPU: 1 UID: 0 PID: 15520 Comm: syz.4.3961 Not tainted 6.15.0-rc5-syzkaller-00022-g01f95500a162 #0 PREEMPT(voluntary) [ 187.432450][T15520] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 187.432468][T15520] Call Trace: [ 187.432477][T15520] [ 187.432487][T15520] __dump_stack+0x1d/0x30 [ 187.432516][T15520] dump_stack_lvl+0xe8/0x140 [ 187.432542][T15520] dump_stack+0x15/0x1b [ 187.432640][T15520] should_fail_ex+0x265/0x280 [ 187.432682][T15520] ? __se_sys_memfd_create+0x1cc/0x590 [ 187.432713][T15520] should_failslab+0x8c/0xb0 [ 187.432812][T15520] __kmalloc_cache_noprof+0x4c/0x320 [ 187.432848][T15520] ? fput+0x8f/0xc0 [ 187.432871][T15520] __se_sys_memfd_create+0x1cc/0x590 [ 187.432904][T15520] __x64_sys_memfd_create+0x31/0x40 [ 187.432935][T15520] x64_sys_call+0x122f/0x2fb0 [ 187.433048][T15520] do_syscall_64+0xd0/0x1a0 [ 187.433104][T15520] ? clear_bhb_loop+0x25/0x80 [ 187.433195][T15520] ? clear_bhb_loop+0x25/0x80 [ 187.433224][T15520] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 187.433259][T15520] RIP: 0033:0x7ff15e5ce969 [ 187.433278][T15520] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 187.433326][T15520] RSP: 002b:00007ff15cc36e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 187.433363][T15520] RAX: ffffffffffffffda RBX: 000000000000045c RCX: 00007ff15e5ce969 [ 187.433398][T15520] RDX: 00007ff15cc36ef0 RSI: 0000000000000000 RDI: 00007ff15e651444 [ 187.433488][T15520] RBP: 0000200000002400 R08: 00007ff15cc36bb7 R09: 00007ff15cc36e40 [ 187.433504][T15520] R10: 000000000000000a R11: 0000000000000202 R12: 0000200000000000 [ 187.433520][T15520] R13: 00007ff15cc36ef0 R14: 00007ff15cc36eb0 R15: 0000200000000680 [ 187.433593][T15520] [ 187.786300][T15536] program syz.0.3964 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 187.923347][T15526] loop0: detected capacity change from 0 to 527 [ 187.974628][T15526] EXT4-fs (loop0): failed to parse options in superblock:  [ 187.988696][T15526] EXT4-fs (loop0): Unsupported encryption level 4 [ 188.041528][T15561] vhci_hcd: default hub control req: 0000 v0000 i0000 l31125 [ 188.053664][T15553] loop5: detected capacity change from 0 to 1764 [ 188.099522][T15568] vhci_hcd: default hub control req: 0000 v0000 i0000 l31125 [ 188.139244][ T29] kauditd_printk_skb: 613 callbacks suppressed [ 188.139263][ T29] audit: type=1326 audit(1746512595.921:5957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15569 comm="syz.0.3980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4032e3e969 code=0x7ffc0000 [ 188.169790][ T29] audit: type=1326 audit(1746512595.931:5958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15569 comm="syz.0.3980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4032e3e969 code=0x7ffc0000 [ 188.193390][ T29] audit: type=1326 audit(1746512595.931:5959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15569 comm="syz.0.3980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4032e3e969 code=0x7ffc0000 [ 188.228365][T15578] siw: device registration error -23 [ 188.235405][ T29] audit: type=1326 audit(1746512596.011:5960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15569 comm="syz.0.3980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4032e3e969 code=0x7ffc0000 [ 188.259015][ T29] audit: type=1326 audit(1746512596.011:5961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15569 comm="syz.0.3980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4032e3e969 code=0x7ffc0000 [ 188.332432][ T29] audit: type=1326 audit(1746512596.104:5962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15569 comm="syz.0.3980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f4032e3e969 code=0x7ffc0000 [ 188.358283][ T29] audit: type=1326 audit(1746512596.135:5963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15569 comm="syz.0.3980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4032e3e969 code=0x7ffc0000 [ 188.381849][ T29] audit: type=1326 audit(1746512596.135:5964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15569 comm="syz.0.3980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4032e3e969 code=0x7ffc0000 [ 188.405438][ T29] audit: type=1326 audit(1746512596.135:5965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15569 comm="syz.0.3980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=427 compat=0 ip=0x7f4032e3e969 code=0x7ffc0000 [ 188.429139][ T29] audit: type=1326 audit(1746512596.135:5966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15569 comm="syz.0.3980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4032e3e969 code=0x7ffc0000 [ 188.517827][T15597] loop4: detected capacity change from 0 to 1024 [ 188.526116][T15597] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 188.537255][T15597] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 188.537337][T15598] loop0: detected capacity change from 0 to 512 [ 188.554480][T15598] EXT4-fs: Ignoring removed oldalloc option [ 188.560873][T15598] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 188.574160][T15597] JBD2: no valid journal superblock found [ 188.574833][T15598] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #16: comm syz.0.3991: invalid indirect mapped block 4294967295 (level 0) [ 188.579944][T15597] EXT4-fs (loop4): Could not load journal inode [ 188.595248][T15598] EXT4-fs (loop0): Remounting filesystem read-only [ 188.606858][T15598] EXT4-fs (loop0): 1 orphan inode deleted [ 188.612647][T15598] EXT4-fs (loop0): 1 truncate cleaned up [ 188.826208][T15611] vhci_hcd: default hub control req: 0000 v0000 i0000 l31125 [ 188.866375][T15617] syzkaller1: entered promiscuous mode [ 188.871984][T15617] syzkaller1: entered allmulticast mode [ 189.062349][T15628] loop6: detected capacity change from 0 to 512 [ 189.069203][T15628] EXT4-fs: Ignoring removed oldalloc option [ 189.075686][T15628] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 189.087171][T15628] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #16: comm syz.6.4003: invalid indirect mapped block 4294967295 (level 0) [ 189.101317][T15628] EXT4-fs (loop6): Remounting filesystem read-only [ 189.108223][T15628] EXT4-fs (loop6): 1 orphan inode deleted [ 189.114228][T15628] EXT4-fs (loop6): 1 truncate cleaned up [ 189.158688][T15639] vhci_hcd: default hub control req: 0000 v0000 i0000 l31125 [ 189.488324][T15673] vhci_hcd: default hub control req: 0000 v0000 i0000 l31125 [ 189.516070][T15679] loop5: detected capacity change from 0 to 1024 [ 189.533071][T15679] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 189.544132][T15679] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 189.573815][T15679] JBD2: no valid journal superblock found [ 189.579725][T15679] EXT4-fs (loop5): Could not load journal inode [ 189.653534][T15689] netlink: 'syz.5.4025': attribute type 13 has an invalid length. [ 189.726737][T15694] loop0: detected capacity change from 0 to 512 [ 189.734101][T15694] EXT4-fs: Ignoring removed oldalloc option [ 189.741417][T15694] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 189.753360][T15694] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #16: comm syz.0.4031: invalid indirect mapped block 4294967295 (level 0) [ 189.773779][T15694] EXT4-fs (loop0): Remounting filesystem read-only [ 189.781719][T15694] EXT4-fs (loop0): 1 orphan inode deleted [ 189.787534][T15694] EXT4-fs (loop0): 1 truncate cleaned up [ 189.795301][T15694] __nla_validate_parse: 2 callbacks suppressed [ 189.795319][T15694] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4031'. [ 189.867336][T15700] program syz.4.4032 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 189.890594][T15700] loop4: detected capacity change from 0 to 527 [ 189.900018][T15700] EXT4-fs (loop4): failed to parse options in superblock:  [ 189.912974][T15700] EXT4-fs (loop4): Unsupported encryption level 4 [ 190.026489][T15718] FAULT_INJECTION: forcing a failure. [ 190.026489][T15718] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 190.039700][T15718] CPU: 1 UID: 0 PID: 15718 Comm: syz.4.4040 Not tainted 6.15.0-rc5-syzkaller-00022-g01f95500a162 #0 PREEMPT(voluntary) [ 190.039741][T15718] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 190.039754][T15718] Call Trace: [ 190.039763][T15718] [ 190.039773][T15718] __dump_stack+0x1d/0x30 [ 190.039799][T15718] dump_stack_lvl+0xe8/0x140 [ 190.039824][T15718] dump_stack+0x15/0x1b [ 190.039841][T15718] should_fail_ex+0x265/0x280 [ 190.039881][T15718] should_fail+0xb/0x20 [ 190.039912][T15718] should_fail_usercopy+0x1a/0x20 [ 190.040005][T15718] _copy_from_user+0x1c/0xb0 [ 190.040026][T15718] __sys_connect+0xd0/0x2b0 [ 190.040087][T15718] __x64_sys_connect+0x3f/0x50 [ 190.040128][T15718] x64_sys_call+0x1daa/0x2fb0 [ 190.040154][T15718] do_syscall_64+0xd0/0x1a0 [ 190.040218][T15718] ? clear_bhb_loop+0x25/0x80 [ 190.040243][T15718] ? clear_bhb_loop+0x25/0x80 [ 190.040270][T15718] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 190.040321][T15718] RIP: 0033:0x7ff15e5ce969 [ 190.040335][T15718] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 190.040446][T15718] RSP: 002b:00007ff15cc37038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 190.040469][T15718] RAX: ffffffffffffffda RBX: 00007ff15e7f5fa0 RCX: 00007ff15e5ce969 [ 190.040481][T15718] RDX: 000000000000001c RSI: 0000200000000040 RDI: 0000000000000004 [ 190.040496][T15718] RBP: 00007ff15cc37090 R08: 0000000000000000 R09: 0000000000000000 [ 190.040512][T15718] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 190.040527][T15718] R13: 0000000000000000 R14: 00007ff15e7f5fa0 R15: 00007ffc13161428 [ 190.040635][T15718] [ 190.224430][T15721] netlink: 11 bytes leftover after parsing attributes in process `syz.2.4039'. [ 190.233528][T15721] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4039'. [ 190.242803][T15721] netlink: 11 bytes leftover after parsing attributes in process `syz.2.4039'. [ 190.262398][T15721] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4039'. [ 190.287465][T15732] loop4: detected capacity change from 0 to 512 [ 190.295267][T15732] EXT4-fs: Ignoring removed oldalloc option [ 190.301618][T15732] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 190.327680][T15732] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #16: comm syz.4.4044: invalid indirect mapped block 4294967295 (level 0) [ 190.343693][T15732] EXT4-fs (loop4): Remounting filesystem read-only [ 190.350518][T15732] EXT4-fs (loop4): 1 orphan inode deleted [ 190.356359][T15732] EXT4-fs (loop4): 1 truncate cleaned up [ 190.364663][T15732] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4044'. [ 190.435059][T15752] loop5: detected capacity change from 0 to 1024 [ 190.498069][T15754] vhci_hcd: default hub control req: 3f0c v08a6 i0001 l1 [ 190.568046][T15773] loop4: detected capacity change from 0 to 512 [ 190.583407][T15773] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (3832!=33349) [ 190.603770][T15777] netlink: 11 bytes leftover after parsing attributes in process `syz.0.4054'. [ 190.612850][T15777] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4054'. [ 190.622152][T15777] netlink: 11 bytes leftover after parsing attributes in process `syz.0.4054'. [ 190.642620][T15777] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4054'. [ 190.651775][T15773] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e02c, mo2=0002] [ 190.662828][T15773] System zones: 1-12 [ 190.666939][T15773] EXT4-fs (loop4): orphan cleanup on readonly fs [ 190.687784][T15773] EXT4-fs error (device loop4): ext4_read_inode_bitmap:167: comm syz.4.4049: Inode bitmap for bg 0 marked uninitialized [ 190.709971][T15773] EXT4-fs (loop4): Remounting filesystem read-only [ 190.810896][T15803] vhci_hcd: default hub control req: 0000 v0000 i0000 l31125 [ 190.913779][T15810] vhci_hcd: default hub control req: 0000 v0000 i0000 l31125 [ 190.921895][T15812] program syz.2.4062 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 190.943939][T15811] loop4: detected capacity change from 0 to 1024 [ 190.951062][T15811] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 190.962009][T15811] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 191.049046][T15820] loop6: detected capacity change from 0 to 512 [ 191.058413][T15820] EXT4-fs: Ignoring removed oldalloc option [ 191.064752][T15811] JBD2: no valid journal superblock found [ 191.070504][T15811] EXT4-fs (loop4): Could not load journal inode [ 191.078017][T15820] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 191.112361][T15820] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #16: comm syz.6.4073: invalid indirect mapped block 4294967295 (level 0) [ 191.145351][T15831] netlink: 'syz.4.4067': attribute type 13 has an invalid length. [ 191.155228][T15820] EXT4-fs (loop6): Remounting filesystem read-only [ 191.178947][T15820] EXT4-fs (loop6): 1 orphan inode deleted [ 191.184752][T15820] EXT4-fs (loop6): 1 truncate cleaned up [ 191.285903][T15858] loop6: detected capacity change from 0 to 1024 [ 191.440248][T15879] program syz.6.4086 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 191.492412][T15879] loop6: detected capacity change from 0 to 527 [ 191.502230][T15879] EXT4-fs (loop6): failed to parse options in superblock:  [ 191.515112][T15879] EXT4-fs (loop6): Unsupported encryption level 4 [ 191.612021][T15899] loop0: detected capacity change from 0 to 1024 [ 191.816511][T15937] loop4: detected capacity change from 0 to 512 [ 191.845810][T15937] ext4 filesystem being mounted at /184/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 191.989785][T15959] pim6reg1: entered promiscuous mode [ 191.995226][T15959] pim6reg1: entered allmulticast mode [ 192.040741][T15971] FAULT_INJECTION: forcing a failure. [ 192.040741][T15971] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 192.053909][T15971] CPU: 1 UID: 0 PID: 15971 Comm: syz.0.4119 Not tainted 6.15.0-rc5-syzkaller-00022-g01f95500a162 #0 PREEMPT(voluntary) [ 192.053940][T15971] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 192.053956][T15971] Call Trace: [ 192.053964][T15971] [ 192.054007][T15971] __dump_stack+0x1d/0x30 [ 192.054027][T15971] dump_stack_lvl+0xe8/0x140 [ 192.054056][T15971] dump_stack+0x15/0x1b [ 192.054077][T15971] should_fail_ex+0x265/0x280 [ 192.054146][T15971] should_fail+0xb/0x20 [ 192.054182][T15971] should_fail_usercopy+0x1a/0x20 [ 192.054310][T15971] _copy_to_user+0x20/0xa0 [ 192.054330][T15971] simple_read_from_buffer+0xb5/0x130 [ 192.054358][T15971] proc_fail_nth_read+0x100/0x140 [ 192.054392][T15971] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 192.054453][T15971] vfs_read+0x19d/0x6f0 [ 192.054548][T15971] ? __rcu_read_unlock+0x4f/0x70 [ 192.054572][T15971] ? __rcu_read_unlock+0x4f/0x70 [ 192.054604][T15971] ? __fget_files+0x184/0x1c0 [ 192.054706][T15971] ksys_read+0xda/0x1a0 [ 192.054739][T15971] __x64_sys_read+0x40/0x50 [ 192.054767][T15971] x64_sys_call+0x2d77/0x2fb0 [ 192.054794][T15971] do_syscall_64+0xd0/0x1a0 [ 192.054822][T15971] ? clear_bhb_loop+0x25/0x80 [ 192.054905][T15971] ? clear_bhb_loop+0x25/0x80 [ 192.054933][T15971] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 192.054959][T15971] RIP: 0033:0x7f4032e3d37c [ 192.054978][T15971] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 192.054999][T15971] RSP: 002b:00007f40314a7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 192.055036][T15971] RAX: ffffffffffffffda RBX: 00007f4033065fa0 RCX: 00007f4032e3d37c [ 192.055052][T15971] RDX: 000000000000000f RSI: 00007f40314a70a0 RDI: 0000000000000005 [ 192.055067][T15971] RBP: 00007f40314a7090 R08: 0000000000000000 R09: 0000000000000000 [ 192.055083][T15971] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 192.055098][T15971] R13: 0000000000000000 R14: 00007f4033065fa0 R15: 00007ffdfda6cff8 [ 192.055122][T15971] [ 192.274289][T15973] loop4: detected capacity change from 0 to 2048 [ 192.313090][T15985] loop0: detected capacity change from 0 to 128 [ 192.322115][T15985] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 1, start 00000001) [ 192.439630][T16000] loop6: detected capacity change from 0 to 1764 [ 192.456447][T16007] loop4: detected capacity change from 0 to 512 [ 192.466731][T16007] EXT4-fs: Ignoring removed oldalloc option [ 192.473226][T16007] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 192.508518][T16007] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #16: comm syz.4.4134: invalid indirect mapped block 4294967295 (level 0) [ 192.527732][T16007] EXT4-fs (loop4): Remounting filesystem read-only [ 192.545032][T16007] EXT4-fs (loop4): 1 orphan inode deleted [ 192.550826][T16007] EXT4-fs (loop4): 1 truncate cleaned up [ 192.647347][T16030] FAULT_INJECTION: forcing a failure. [ 192.647347][T16030] name failslab, interval 1, probability 0, space 0, times 0 [ 192.660228][T16030] CPU: 1 UID: 0 PID: 16030 Comm: syz.0.4144 Not tainted 6.15.0-rc5-syzkaller-00022-g01f95500a162 #0 PREEMPT(voluntary) [ 192.660302][T16030] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 192.660318][T16030] Call Trace: [ 192.660326][T16030] [ 192.660336][T16030] __dump_stack+0x1d/0x30 [ 192.660364][T16030] dump_stack_lvl+0xe8/0x140 [ 192.660388][T16030] dump_stack+0x15/0x1b [ 192.660429][T16030] should_fail_ex+0x265/0x280 [ 192.660461][T16030] should_failslab+0x8c/0xb0 [ 192.660488][T16030] kmem_cache_alloc_noprof+0x50/0x310 [ 192.660632][T16030] ? getname_flags+0x80/0x3b0 [ 192.660662][T16030] getname_flags+0x80/0x3b0 [ 192.660692][T16030] user_path_at+0x28/0x130 [ 192.660716][T16030] __se_sys_name_to_handle_at+0xfd/0x590 [ 192.660796][T16030] ? fput+0x8f/0xc0 [ 192.660860][T16030] ? ksys_write+0x16e/0x1a0 [ 192.660932][T16030] __x64_sys_name_to_handle_at+0x67/0x80 [ 192.660965][T16030] x64_sys_call+0x279f/0x2fb0 [ 192.660991][T16030] do_syscall_64+0xd0/0x1a0 [ 192.661017][T16030] ? clear_bhb_loop+0x25/0x80 [ 192.661049][T16030] ? clear_bhb_loop+0x25/0x80 [ 192.661069][T16030] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 192.661097][T16030] RIP: 0033:0x7f4032e3e969 [ 192.661116][T16030] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 192.661138][T16030] RSP: 002b:00007f40314a7038 EFLAGS: 00000246 ORIG_RAX: 000000000000012f [ 192.661159][T16030] RAX: ffffffffffffffda RBX: 00007f4033065fa0 RCX: 00007f4032e3e969 [ 192.661171][T16030] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: ffffffffffffffff [ 192.661184][T16030] RBP: 00007f40314a7090 R08: 0000000000001400 R09: 0000000000000000 [ 192.661203][T16030] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 192.661214][T16030] R13: 0000000000000000 R14: 00007f4033065fa0 R15: 00007ffdfda6cff8 [ 192.661232][T16030] [ 192.923946][T16036] IPv6: NLM_F_CREATE should be specified when creating new route [ 192.997866][T16055] loop6: detected capacity change from 0 to 1024 [ 193.005917][T16055] EXT4-fs (loop6): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 193.016972][T16055] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 193.027354][ T29] kauditd_printk_skb: 300 callbacks suppressed [ 193.027368][ T29] audit: type=1326 audit(1746512600.944:6267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16057 comm="syz.5.4153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2c44fe969 code=0x7ffc0000 [ 193.058953][T16056] FAULT_INJECTION: forcing a failure. [ 193.058953][T16056] name failslab, interval 1, probability 0, space 0, times 0 [ 193.062092][T16055] JBD2: no valid journal superblock found [ 193.071691][T16056] CPU: 0 UID: 0 PID: 16056 Comm: syz.4.4151 Not tainted 6.15.0-rc5-syzkaller-00022-g01f95500a162 #0 PREEMPT(voluntary) [ 193.071803][T16056] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 193.071898][T16056] Call Trace: [ 193.071906][T16056] [ 193.071918][T16056] __dump_stack+0x1d/0x30 [ 193.071945][T16056] dump_stack_lvl+0xe8/0x140 [ 193.071971][T16056] dump_stack+0x15/0x1b [ 193.071992][T16056] should_fail_ex+0x265/0x280 [ 193.072062][T16056] ? resv_map_alloc+0x32/0x190 [ 193.072128][T16056] should_failslab+0x8c/0xb0 [ 193.072166][T16056] __kmalloc_cache_noprof+0x4c/0x320 [ 193.072192][T16056] ? vfs_write+0x75e/0x8d0 [ 193.072224][T16056] resv_map_alloc+0x32/0x190 [ 193.072248][T16056] hugetlbfs_get_inode+0x67/0x370 [ 193.072303][T16056] hugetlb_file_setup+0x192/0x3d0 [ 193.072325][T16056] ksys_mmap_pgoff+0x157/0x310 [ 193.072379][T16056] x64_sys_call+0x1602/0x2fb0 [ 193.072406][T16056] do_syscall_64+0xd0/0x1a0 [ 193.072522][T16056] ? clear_bhb_loop+0x25/0x80 [ 193.072550][T16056] ? clear_bhb_loop+0x25/0x80 [ 193.072578][T16056] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 193.072606][T16056] RIP: 0033:0x7ff15e5ce969 [ 193.072626][T16056] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 193.072658][T16056] RSP: 002b:00007ff15cc37038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 193.072764][T16056] RAX: ffffffffffffffda RBX: 00007ff15e7f5fa0 RCX: 00007ff15e5ce969 [ 193.072780][T16056] RDX: 0000000000000000 RSI: 0000000001400000 RDI: 0000200000000000 [ 193.072797][T16056] RBP: 00007ff15cc37090 R08: ffffffffffffffff R09: 0000000000000000 [ 193.072813][T16056] R10: 00000000000c3072 R11: 0000000000000246 R12: 0000000000000001 [ 193.072860][T16056] R13: 0000000000000000 R14: 00007ff15e7f5fa0 R15: 00007ffc13161428 [ 193.072884][T16056] [ 193.100139][ T29] audit: type=1326 audit(1746512600.944:6268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16057 comm="syz.5.4153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2c44fe969 code=0x7ffc0000 [ 193.103436][T16055] EXT4-fs (loop6): Could not load journal inode [ 193.149771][T16063] loop4: detected capacity change from 0 to 512 [ 193.153320][ T29] audit: type=1326 audit(1746512600.944:6269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16057 comm="syz.5.4153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe2c44fe969 code=0x7ffc0000 [ 193.159155][T16063] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 193.163134][ T29] audit: type=1326 audit(1746512600.944:6270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16057 comm="syz.5.4153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2c44fe969 code=0x7ffc0000 [ 193.170401][T16064] netlink: 'syz.2.4156': attribute type 13 has an invalid length. [ 193.172423][ T29] audit: type=1326 audit(1746512600.944:6271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16057 comm="syz.5.4153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe2c44fe969 code=0x7ffc0000 [ 193.192662][T16063] ext4 filesystem being mounted at /193/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 193.211861][ T29] audit: type=1326 audit(1746512600.944:6272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16057 comm="syz.5.4153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2c44fe969 code=0x7ffc0000 [ 193.211901][ T29] audit: type=1326 audit(1746512600.944:6273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16057 comm="syz.5.4153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe2c44fe969 code=0x7ffc0000 [ 193.444159][ T29] audit: type=1326 audit(1746512600.944:6274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16057 comm="syz.5.4153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2c44fe969 code=0x7ffc0000 [ 193.467649][ T29] audit: type=1326 audit(1746512600.944:6275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16057 comm="syz.5.4153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe2c44fe969 code=0x7ffc0000 [ 193.494390][ T29] audit: type=1326 audit(1746512601.026:6276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16057 comm="syz.5.4153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2c44fe969 code=0x7ffc0000 [ 193.596580][T16083] FAULT_INJECTION: forcing a failure. [ 193.596580][T16083] name failslab, interval 1, probability 0, space 0, times 0 [ 193.609383][T16083] CPU: 1 UID: 0 PID: 16083 Comm: syz.5.4163 Not tainted 6.15.0-rc5-syzkaller-00022-g01f95500a162 #0 PREEMPT(voluntary) [ 193.609419][T16083] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 193.609456][T16083] Call Trace: [ 193.609462][T16083] [ 193.609469][T16083] __dump_stack+0x1d/0x30 [ 193.609489][T16083] dump_stack_lvl+0xe8/0x140 [ 193.609508][T16083] dump_stack+0x15/0x1b [ 193.609527][T16083] should_fail_ex+0x265/0x280 [ 193.609628][T16083] should_failslab+0x8c/0xb0 [ 193.609671][T16083] kmem_cache_alloc_node_noprof+0x57/0x320 [ 193.609764][T16083] ? __alloc_skb+0x101/0x320 [ 193.609801][T16083] __alloc_skb+0x101/0x320 [ 193.609831][T16083] ? audit_log_start+0x365/0x6c0 [ 193.609941][T16083] audit_log_start+0x380/0x6c0 [ 193.609994][T16083] audit_seccomp+0x48/0x100 [ 193.610025][T16083] ? __seccomp_filter+0x68c/0x10d0 [ 193.610051][T16083] __seccomp_filter+0x69d/0x10d0 [ 193.610078][T16083] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 193.610114][T16083] ? vfs_write+0x75e/0x8d0 [ 193.610144][T16083] ? __rcu_read_unlock+0x4f/0x70 [ 193.610169][T16083] ? __fget_files+0x184/0x1c0 [ 193.610264][T16083] __secure_computing+0x82/0x150 [ 193.610289][T16083] syscall_trace_enter+0xcf/0x1e0 [ 193.610318][T16083] do_syscall_64+0xaa/0x1a0 [ 193.610345][T16083] ? clear_bhb_loop+0x25/0x80 [ 193.610372][T16083] ? clear_bhb_loop+0x25/0x80 [ 193.610414][T16083] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 193.610441][T16083] RIP: 0033:0x7fe2c44fe969 [ 193.610460][T16083] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 193.610562][T16083] RSP: 002b:00007fe2c2b67038 EFLAGS: 00000246 ORIG_RAX: 0000000000000017 [ 193.610643][T16083] RAX: ffffffffffffffda RBX: 00007fe2c4725fa0 RCX: 00007fe2c44fe969 [ 193.610666][T16083] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 193.610681][T16083] RBP: 00007fe2c2b67090 R08: 0000200000000340 R09: 0000000000000000 [ 193.610697][T16083] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 193.610713][T16083] R13: 0000000000000000 R14: 00007fe2c4725fa0 R15: 00007ffe74b6f818 [ 193.610750][T16083] [ 193.932771][T16101] loop5: detected capacity change from 0 to 1764 [ 193.941437][T16105] pim6reg1: entered promiscuous mode [ 193.946835][T16105] pim6reg1: entered allmulticast mode [ 193.978629][T16111] siw: device registration error -23 [ 194.172282][T16117] xt_CT: You must specify a L4 protocol and not use inversions on it [ 194.253915][T16120] loop6: detected capacity change from 0 to 1024 [ 194.527351][T16120] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 194.548636][T16120] JBD2: no valid journal superblock found [ 194.554477][T16120] EXT4-fs (loop6): Could not load journal inode [ 194.864642][T16155] xt_hashlimit: max too large, truncated to 1048576 [ 194.913375][T16165] vhci_hcd: default hub control req: 0000 v0000 i0000 l31125 [ 194.922243][T16168] vhci_hcd: default hub control req: 0000 v0000 i0000 l31125 [ 195.005840][T16178] loop5: detected capacity change from 0 to 1024 [ 195.013481][T16178] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 195.029665][T16178] JBD2: no valid journal superblock found [ 195.035453][T16178] EXT4-fs (loop5): Could not load journal inode [ 195.182212][T16196] __nla_validate_parse: 13 callbacks suppressed [ 195.182232][T16196] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4204'. [ 195.197556][T16196] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4204'. [ 195.206730][T16196] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4204'. [ 195.231127][T16196] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4204'. [ 195.240083][T16196] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4204'. [ 195.250362][T16196] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4204'. [ 195.274157][T16203] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 195.282781][T16203] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 195.288155][T16196] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4204'. [ 195.292352][T16203] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4205'. [ 195.299449][T16196] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4204'. [ 195.308410][T16203] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4205'. [ 195.327186][T16203] FAULT_INJECTION: forcing a failure. [ 195.327186][T16203] name failslab, interval 1, probability 0, space 0, times 0 [ 195.339894][T16203] CPU: 0 UID: 0 PID: 16203 Comm: syz.5.4205 Not tainted 6.15.0-rc5-syzkaller-00022-g01f95500a162 #0 PREEMPT(voluntary) [ 195.339931][T16203] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 195.339948][T16203] Call Trace: [ 195.339956][T16203] [ 195.339967][T16203] __dump_stack+0x1d/0x30 [ 195.340054][T16203] dump_stack_lvl+0xe8/0x140 [ 195.340146][T16203] dump_stack+0x15/0x1b [ 195.340192][T16203] should_fail_ex+0x265/0x280 [ 195.340264][T16203] should_failslab+0x8c/0xb0 [ 195.340306][T16203] __kvmalloc_node_noprof+0x126/0x4d0 [ 195.340331][T16203] ? alloc_netdev_mqs+0xa1/0xab0 [ 195.340353][T16203] ? vsnprintf+0x829/0x890 [ 195.340395][T16203] alloc_netdev_mqs+0xa1/0xab0 [ 195.340417][T16203] ? __pfx_hsr_dev_setup+0x10/0x10 [ 195.340495][T16203] rtnl_create_link+0x239/0x710 [ 195.340536][T16203] rtnl_newlink_create+0x151/0x630 [ 195.340619][T16203] ? __schedule+0x6a2/0xb20 [ 195.340657][T16203] rtnl_newlink+0xf29/0x12d0 [ 195.340697][T16203] ? xas_load+0x413/0x430 [ 195.340721][T16203] ? __rcu_read_unlock+0x4f/0x70 [ 195.340801][T16203] ? xa_load+0xb1/0xe0 [ 195.340827][T16203] ? __rcu_read_unlock+0x4f/0x70 [ 195.340852][T16203] ? avc_has_perm_noaudit+0x1b1/0x200 [ 195.340895][T16203] ? selinux_capable+0x1f9/0x270 [ 195.340926][T16203] ? security_capable+0x83/0x90 [ 195.341015][T16203] ? ns_capable+0x7d/0xb0 [ 195.341039][T16203] ? __pfx_rtnl_newlink+0x10/0x10 [ 195.341068][T16203] rtnetlink_rcv_msg+0x5fb/0x6d0 [ 195.341097][T16203] ? avc_has_perm_noaudit+0x1b1/0x200 [ 195.341213][T16203] netlink_rcv_skb+0x120/0x220 [ 195.341301][T16203] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 195.341337][T16203] rtnetlink_rcv+0x1c/0x30 [ 195.341360][T16203] netlink_unicast+0x59e/0x670 [ 195.341467][T16203] netlink_sendmsg+0x58b/0x6b0 [ 195.341522][T16203] ? __pfx_netlink_sendmsg+0x10/0x10 [ 195.341562][T16203] __sock_sendmsg+0x142/0x180 [ 195.341594][T16203] ____sys_sendmsg+0x31e/0x4e0 [ 195.341673][T16203] ___sys_sendmsg+0x17b/0x1d0 [ 195.341717][T16203] __x64_sys_sendmsg+0xd4/0x160 [ 195.341747][T16203] x64_sys_call+0x2999/0x2fb0 [ 195.341813][T16203] do_syscall_64+0xd0/0x1a0 [ 195.341840][T16203] ? clear_bhb_loop+0x25/0x80 [ 195.341867][T16203] ? clear_bhb_loop+0x25/0x80 [ 195.341907][T16203] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.341934][T16203] RIP: 0033:0x7fe2c44fe969 [ 195.341953][T16203] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 195.341976][T16203] RSP: 002b:00007fe2c2b67038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 195.342036][T16203] RAX: ffffffffffffffda RBX: 00007fe2c4725fa0 RCX: 00007fe2c44fe969 [ 195.342052][T16203] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 000000000000000f [ 195.342068][T16203] RBP: 00007fe2c2b67090 R08: 0000000000000000 R09: 0000000000000000 [ 195.342084][T16203] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 195.342100][T16203] R13: 0000000000000000 R14: 00007fe2c4725fa0 R15: 00007ffe74b6f818 [ 195.342124][T16203] [ 195.672554][T16209] vhci_hcd: default hub control req: 0000 v0000 i0000 l31125 [ 195.728153][T16217] loop0: detected capacity change from 0 to 512 [ 195.765480][T16217] EXT4-fs warning (device loop0): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 195.780510][T16217] EXT4-fs (loop0): mount failed [ 195.876531][T16235] FAULT_INJECTION: forcing a failure. [ 195.876531][T16235] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 195.889682][T16235] CPU: 0 UID: 0 PID: 16235 Comm: syz.4.4218 Not tainted 6.15.0-rc5-syzkaller-00022-g01f95500a162 #0 PREEMPT(voluntary) [ 195.889718][T16235] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 195.889734][T16235] Call Trace: [ 195.889743][T16235] [ 195.889754][T16235] __dump_stack+0x1d/0x30 [ 195.889860][T16235] dump_stack_lvl+0xe8/0x140 [ 195.889885][T16235] dump_stack+0x15/0x1b [ 195.889906][T16235] should_fail_ex+0x265/0x280 [ 195.889994][T16235] should_fail+0xb/0x20 [ 195.890031][T16235] should_fail_usercopy+0x1a/0x20 [ 195.890081][T16235] _copy_to_user+0x20/0xa0 [ 195.890109][T16235] simple_read_from_buffer+0xb5/0x130 [ 195.890133][T16235] proc_fail_nth_read+0x100/0x140 [ 195.890237][T16235] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 195.890339][T16235] vfs_read+0x19d/0x6f0 [ 195.890361][T16235] ? __rcu_read_unlock+0x4f/0x70 [ 195.890455][T16235] ? __rcu_read_unlock+0x4f/0x70 [ 195.890546][T16235] ? __fget_files+0x184/0x1c0 [ 195.890584][T16235] ksys_read+0xda/0x1a0 [ 195.890614][T16235] __x64_sys_read+0x40/0x50 [ 195.890642][T16235] x64_sys_call+0x2d77/0x2fb0 [ 195.890688][T16235] do_syscall_64+0xd0/0x1a0 [ 195.890709][T16235] ? clear_bhb_loop+0x25/0x80 [ 195.890737][T16235] ? clear_bhb_loop+0x25/0x80 [ 195.890765][T16235] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.890792][T16235] RIP: 0033:0x7ff15e5cd37c [ 195.890858][T16235] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 195.890881][T16235] RSP: 002b:00007ff15cc37030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 195.890905][T16235] RAX: ffffffffffffffda RBX: 00007ff15e7f5fa0 RCX: 00007ff15e5cd37c [ 195.890952][T16235] RDX: 000000000000000f RSI: 00007ff15cc370a0 RDI: 0000000000000006 [ 195.890968][T16235] RBP: 00007ff15cc37090 R08: 0000000000000000 R09: 0000000000000000 [ 195.890983][T16235] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 195.891026][T16235] R13: 0000000000000000 R14: 00007ff15e7f5fa0 R15: 00007ffc13161428 [ 195.891051][T16235] [ 196.232077][T16258] loop4: detected capacity change from 0 to 1024 [ 196.241829][T16258] netlink: '+}[@': attribute type 7 has an invalid length. [ 196.284285][T16264] vhci_hcd: default hub control req: 0000 v0000 i0000 l31125 [ 196.329430][T16271] loop0: detected capacity change from 0 to 1024 [ 196.370113][T16279] loop5: detected capacity change from 0 to 512 [ 196.384292][T16279] EXT4-fs warning (device loop5): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 196.399525][T16279] EXT4-fs (loop5): mount failed [ 196.490392][T16297] vhci_hcd: default hub control req: 0000 v0000 i0000 l31125 [ 196.540487][T16304] FAULT_INJECTION: forcing a failure. [ 196.540487][T16304] name failslab, interval 1, probability 0, space 0, times 0 [ 196.553210][T16304] CPU: 0 UID: 0 PID: 16304 Comm: syz.0.4248 Not tainted 6.15.0-rc5-syzkaller-00022-g01f95500a162 #0 PREEMPT(voluntary) [ 196.553311][T16304] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 196.553329][T16304] Call Trace: [ 196.553341][T16304] [ 196.553378][T16304] __dump_stack+0x1d/0x30 [ 196.553400][T16304] dump_stack_lvl+0xe8/0x140 [ 196.553420][T16304] dump_stack+0x15/0x1b [ 196.553437][T16304] should_fail_ex+0x265/0x280 [ 196.553504][T16304] should_failslab+0x8c/0xb0 [ 196.553550][T16304] kmem_cache_alloc_node_noprof+0x57/0x320 [ 196.553600][T16304] ? __alloc_skb+0x101/0x320 [ 196.553631][T16304] __alloc_skb+0x101/0x320 [ 196.553659][T16304] ? audit_log_start+0x365/0x6c0 [ 196.553717][T16304] audit_log_start+0x380/0x6c0 [ 196.553760][T16304] audit_seccomp+0x48/0x100 [ 196.553784][T16304] ? __seccomp_filter+0x68c/0x10d0 [ 196.553813][T16304] __seccomp_filter+0x69d/0x10d0 [ 196.553905][T16304] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 196.553930][T16304] ? vfs_write+0x75e/0x8d0 [ 196.553960][T16304] __secure_computing+0x82/0x150 [ 196.554001][T16304] syscall_trace_enter+0xcf/0x1e0 [ 196.554025][T16304] do_syscall_64+0xaa/0x1a0 [ 196.554097][T16304] ? clear_bhb_loop+0x25/0x80 [ 196.554151][T16304] ? clear_bhb_loop+0x25/0x80 [ 196.554173][T16304] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.554224][T16304] RIP: 0033:0x7f4032e3e969 [ 196.554240][T16304] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 196.554258][T16304] RSP: 002b:00007f40314a7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000076 [ 196.554305][T16304] RAX: ffffffffffffffda RBX: 00007f4033065fa0 RCX: 00007f4032e3e969 [ 196.554318][T16304] RDX: 0000200000000440 RSI: 0000200000000500 RDI: 00002000000004c0 [ 196.554330][T16304] RBP: 00007f40314a7090 R08: 0000000000000000 R09: 0000000000000000 [ 196.554343][T16304] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 196.554355][T16304] R13: 0000000000000000 R14: 00007f4033065fa0 R15: 00007ffdfda6cff8 [ 196.554379][T16304] [ 196.788795][T16310] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 196.796072][T16310] IPv6: NLM_F_CREATE should be set when creating new route [ 196.796242][T16304] loop0: detected capacity change from 0 to 512 [ 196.803337][T16310] IPv6: NLM_F_CREATE should be set when creating new route [ 196.839284][T16304] EXT4-fs: test_dummy_encryption option not supported [ 197.051560][T16318] loop6: detected capacity change from 0 to 512 [ 197.107757][T16318] EXT4-fs: test_dummy_encryption option not supported [ 197.255075][T16327] loop5: detected capacity change from 0 to 512 [ 197.264303][T16327] EXT4-fs: test_dummy_encryption option not supported [ 197.336290][T16338] loop5: detected capacity change from 0 to 512 [ 197.336581][T16338] EXT4-fs: Ignoring removed oldalloc option [ 197.353553][T16338] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 197.367629][T16338] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #16: comm syz.5.4260: invalid indirect mapped block 4294967295 (level 0) [ 197.396633][T16330] vhci_hcd: default hub control req: 0000 v0000 i0000 l31125 [ 197.411773][T16338] EXT4-fs (loop5): Remounting filesystem read-only [ 197.422688][T16338] EXT4-fs (loop5): 1 orphan inode deleted [ 197.428526][T16338] EXT4-fs (loop5): 1 truncate cleaned up [ 197.452075][T16355] loop4: detected capacity change from 0 to 128 [ 197.476109][T16355] ext4 filesystem being mounted at /220/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 197.514356][T16355] EXT4-fs error (device loop4): htree_dirblock_to_tree:1082: inode #2: block 4: comm syz.4.4267: bad entry in directory: inode out of bounds - offset=1012, inode=128, rec_len=12, size=1024 fake=1 [ 197.610962][T16369] FAULT_INJECTION: forcing a failure. [ 197.610962][T16369] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 197.624401][T16369] CPU: 1 UID: 0 PID: 16369 Comm: syz.5.4273 Not tainted 6.15.0-rc5-syzkaller-00022-g01f95500a162 #0 PREEMPT(voluntary) [ 197.624432][T16369] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 197.624444][T16369] Call Trace: [ 197.624451][T16369] [ 197.624461][T16369] __dump_stack+0x1d/0x30 [ 197.624507][T16369] dump_stack_lvl+0xe8/0x140 [ 197.624528][T16369] dump_stack+0x15/0x1b [ 197.624544][T16369] should_fail_ex+0x265/0x280 [ 197.624672][T16369] should_fail+0xb/0x20 [ 197.624706][T16369] should_fail_usercopy+0x1a/0x20 [ 197.624765][T16369] strncpy_from_user+0x25/0x230 [ 197.624789][T16369] ? kmem_cache_alloc_noprof+0x186/0x310 [ 197.624842][T16369] ? getname_flags+0x80/0x3b0 [ 197.624872][T16369] getname_flags+0xae/0x3b0 [ 197.624900][T16369] __se_sys_acct+0x3d/0x490 [ 197.625021][T16369] ? fpregs_assert_state_consistent+0x84/0xa0 [ 197.625064][T16369] __x64_sys_acct+0x1f/0x30 [ 197.625089][T16369] x64_sys_call+0x18cf/0x2fb0 [ 197.625118][T16369] do_syscall_64+0xd0/0x1a0 [ 197.625143][T16369] ? clear_bhb_loop+0x25/0x80 [ 197.625233][T16369] ? clear_bhb_loop+0x25/0x80 [ 197.625258][T16369] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 197.625305][T16369] RIP: 0033:0x7fe2c44fe969 [ 197.625324][T16369] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 197.625342][T16369] RSP: 002b:00007fe2c2b67038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a3 [ 197.625362][T16369] RAX: ffffffffffffffda RBX: 00007fe2c4725fa0 RCX: 00007fe2c44fe969 [ 197.625377][T16369] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00002000000001c0 [ 197.625465][T16369] RBP: 00007fe2c2b67090 R08: 0000000000000000 R09: 0000000000000000 [ 197.625478][T16369] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 197.625490][T16369] R13: 0000000000000000 R14: 00007fe2c4725fa0 R15: 00007ffe74b6f818 [ 197.625508][T16369] [ 197.956326][ T29] kauditd_printk_skb: 703 callbacks suppressed [ 197.956380][ T29] audit: type=1326 audit(1746512605.962:6974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16388 comm="syz.0.4281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4032e3e969 code=0x7ffc0000 [ 197.996150][T16394] loop4: detected capacity change from 0 to 1024 [ 198.006086][ T29] audit: type=1326 audit(1746512605.962:6975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16388 comm="syz.0.4281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4032e3e969 code=0x7ffc0000 [ 198.029632][ T29] audit: type=1326 audit(1746512605.962:6976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16388 comm="syz.0.4281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=188 compat=0 ip=0x7f4032e3e969 code=0x7ffc0000 [ 198.053272][ T29] audit: type=1326 audit(1746512605.962:6977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16388 comm="syz.0.4281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4032e3e969 code=0x7ffc0000 [ 198.076971][ T29] audit: type=1326 audit(1746512605.962:6978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16388 comm="syz.0.4281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4032e3e969 code=0x7ffc0000 [ 198.147478][T16394] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 198.163848][T16394] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 198.176142][T16394] EXT4-fs (loop4): This should not happen!! Data will be lost [ 198.176142][T16394] [ 198.185866][T16394] EXT4-fs (loop4): Total free blocks count 0 [ 198.191948][T16394] EXT4-fs (loop4): Free/Dirty block details [ 198.197940][T16394] EXT4-fs (loop4): free_blocks=68451041280 [ 198.203855][T16394] EXT4-fs (loop4): dirty_blocks=80 [ 198.209052][T16394] EXT4-fs (loop4): Block reservation details [ 198.215086][T16394] EXT4-fs (loop4): i_reserved_data_blocks=5 [ 198.215268][T16401] loop5: detected capacity change from 0 to 1024 [ 198.227933][T16415] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 64 with error 28 [ 198.240312][T16415] EXT4-fs (loop4): This should not happen!! Data will be lost [ 198.240312][T16415] [ 198.287668][ T29] audit: type=1326 audit(1746512606.288:6979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16419 comm="syz.5.4290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2c44fe969 code=0x7ffc0000 [ 198.311429][ T29] audit: type=1326 audit(1746512606.288:6980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16419 comm="syz.5.4290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe2c44fe969 code=0x7ffc0000 [ 198.335045][ T29] audit: type=1326 audit(1746512606.288:6981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16419 comm="syz.5.4290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2c44fe969 code=0x7ffc0000 [ 198.360008][ T29] audit: type=1326 audit(1746512606.288:6982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16419 comm="syz.5.4290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe2c44fe969 code=0x7ffc0000 [ 198.384163][ T29] audit: type=1326 audit(1746512606.288:6983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16419 comm="syz.5.4290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2c44fe969 code=0x7ffc0000 [ 198.813123][T16469] program syz.6.4306 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 198.832601][T16469] loop6: detected capacity change from 0 to 527 [ 198.841209][T16469] EXT4-fs (loop6): failed to parse options in superblock:  [ 198.854251][T16469] EXT4-fs (loop6): Unsupported encryption level 4 [ 198.982297][T16477] vhci_hcd: default hub control req: 0000 v0000 i0000 l31125 [ 199.000690][T16479] loop6: detected capacity change from 0 to 512 [ 199.019818][T16481] loop0: detected capacity change from 0 to 1024 [ 199.026878][T16481] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 199.028723][T16479] EXT4-fs warning (device loop6): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 199.037915][T16481] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 199.054111][T16479] EXT4-fs (loop6): mount failed [ 199.063425][T16481] JBD2: no valid journal superblock found [ 199.072954][T16481] EXT4-fs (loop0): Could not load journal inode [ 199.127267][T16489] pim6reg1: entered promiscuous mode [ 199.132615][T16489] pim6reg1: entered allmulticast mode [ 199.254649][T16497] loop6: detected capacity change from 0 to 128 [ 199.274150][T16497] ext4 filesystem being mounted at /361/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 199.313545][T16497] EXT4-fs error (device loop6): htree_dirblock_to_tree:1082: inode #2: block 4: comm syz.6.4319: bad entry in directory: inode out of bounds - offset=1012, inode=128, rec_len=12, size=1024 fake=1 [ 199.453816][T16504] program syz.0.4322 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 199.544770][T16519] program syz.6.4329 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 199.583946][T16504] loop0: detected capacity change from 0 to 527 [ 199.629183][T16504] EXT4-fs (loop0): failed to parse options in superblock:  [ 199.645561][T16504] EXT4-fs (loop0): Unsupported encryption level 4 [ 199.664981][T16519] loop6: detected capacity change from 0 to 527 [ 199.690991][T16519] EXT4-fs (loop6): failed to parse options in superblock:  [ 199.705509][T16519] EXT4-fs (loop6): Unsupported encryption level 4 [ 199.773069][T16530] 8021q: adding VLAN 0 to HW filter on device bond0 [ 199.784026][T16530] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 199.881271][T16550] loop6: detected capacity change from 0 to 512 [ 199.888101][T16550] EXT4-fs: Ignoring removed oldalloc option [ 199.894639][T16550] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 199.906249][T16550] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #16: comm syz.6.4342: invalid indirect mapped block 4294967295 (level 0) [ 199.922282][T16550] EXT4-fs (loop6): Remounting filesystem read-only [ 199.929285][T16550] EXT4-fs (loop6): 1 orphan inode deleted [ 199.935245][T16550] EXT4-fs (loop6): 1 truncate cleaned up [ 199.990756][T16559] loop6: detected capacity change from 0 to 512 [ 200.022876][T16559] EXT4-fs warning (device loop6): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 200.037845][T16559] EXT4-fs (loop6): mount failed [ 200.182678][T16585] __nla_validate_parse: 27 callbacks suppressed [ 200.182692][T16585] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4354'. [ 200.239718][T16593] loop0: detected capacity change from 0 to 1024 [ 200.246818][T16593] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 200.258691][T16593] JBD2: no valid journal superblock found [ 200.264479][T16593] EXT4-fs (loop0): Could not load journal inode [ 200.271156][T16598] loop6: detected capacity change from 0 to 512 [ 200.311139][T16598] EXT4-fs warning (device loop6): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 200.328272][T16598] EXT4-fs (loop6): mount failed [ 200.428472][T16615] loop6: detected capacity change from 0 to 1024 [ 200.456198][T16615] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 200.467846][T16615] JBD2: no valid journal superblock found [ 200.473623][T16615] EXT4-fs (loop6): Could not load journal inode [ 200.599153][T16624] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4367'. [ 200.611139][T16640] pim6reg1: entered promiscuous mode [ 200.616668][T16640] pim6reg1: entered allmulticast mode [ 200.757978][T16651] loop4: detected capacity change from 0 to 1024 [ 200.765133][T16651] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 200.777511][T16651] JBD2: no valid journal superblock found [ 200.783289][T16651] EXT4-fs (loop4): Could not load journal inode [ 200.793771][T16656] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4380'. [ 200.844897][T16654] FAULT_INJECTION: forcing a failure. [ 200.844897][T16654] name failslab, interval 1, probability 0, space 0, times 0 [ 200.844932][T16654] CPU: 1 UID: 0 PID: 16654 Comm: syz.2.4378 Not tainted 6.15.0-rc5-syzkaller-00022-g01f95500a162 #0 PREEMPT(voluntary) [ 200.844962][T16654] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 200.845056][T16654] Call Trace: [ 200.845064][T16654] [ 200.845072][T16654] __dump_stack+0x1d/0x30 [ 200.845097][T16654] dump_stack_lvl+0xe8/0x140 [ 200.845125][T16654] dump_stack+0x15/0x1b [ 200.845146][T16654] should_fail_ex+0x265/0x280 [ 200.845256][T16654] should_failslab+0x8c/0xb0 [ 200.845286][T16654] kmem_cache_alloc_noprof+0x50/0x310 [ 200.845327][T16654] ? dst_alloc+0xbd/0x100 [ 200.845412][T16654] dst_alloc+0xbd/0x100 [ 200.845445][T16654] ip_route_output_key_hash_rcu+0xebb/0x13d0 [ 200.845481][T16654] ip_route_output_flow+0x7b/0x130 [ 200.845544][T16654] udp_sendmsg+0x118b/0x13a0 [ 200.845590][T16654] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 200.845616][T16654] ? avc_has_perm+0xd3/0x150 [ 200.845660][T16654] ? __pfx_udp_sendmsg+0x10/0x10 [ 200.845750][T16654] inet_sendmsg+0xac/0xd0 [ 200.845841][T16654] __sock_sendmsg+0x102/0x180 [ 200.845875][T16654] ____sys_sendmsg+0x345/0x4e0 [ 200.845905][T16654] ___sys_sendmsg+0x17b/0x1d0 [ 200.846011][T16654] __sys_sendmmsg+0x178/0x300 [ 200.846051][T16654] __x64_sys_sendmmsg+0x57/0x70 [ 200.846077][T16654] x64_sys_call+0x2f2f/0x2fb0 [ 200.846104][T16654] do_syscall_64+0xd0/0x1a0 [ 200.846148][T16654] ? clear_bhb_loop+0x25/0x80 [ 200.846177][T16654] ? clear_bhb_loop+0x25/0x80 [ 200.846204][T16654] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 200.846232][T16654] RIP: 0033:0x7f5f792ce969 [ 200.846251][T16654] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 200.846329][T16654] RSP: 002b:00007f5f77937038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 200.846354][T16654] RAX: ffffffffffffffda RBX: 00007f5f794f5fa0 RCX: 00007f5f792ce969 [ 200.846446][T16654] RDX: 000000000800001d RSI: 0000200000007fc0 RDI: 0000000000000008 [ 200.846462][T16654] RBP: 00007f5f77937090 R08: 0000000000000000 R09: 0000000000000000 [ 200.846478][T16654] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 200.846494][T16654] R13: 0000000000000000 R14: 00007f5f794f5fa0 R15: 00007ffc93fe2058 [ 200.846520][T16654] [ 200.939204][T16669] loop0: detected capacity change from 0 to 512 [ 200.939404][T16669] EXT4-fs: Ignoring removed oldalloc option [ 200.939993][T16669] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 200.945699][T16669] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #16: comm syz.0.4385: invalid indirect mapped block 4294967295 (level 0) [ 201.172221][T16680] pim6reg1: entered promiscuous mode [ 201.199742][T16680] pim6reg1: entered allmulticast mode [ 201.214204][T16669] EXT4-fs (loop0): Remounting filesystem read-only [ 201.220945][T16669] EXT4-fs (loop0): 1 orphan inode deleted [ 201.226769][T16669] EXT4-fs (loop0): 1 truncate cleaned up [ 201.241223][T16684] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4391'. [ 201.297467][T16688] loop0: detected capacity change from 0 to 1024 [ 201.304774][T16688] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 201.315775][T16688] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 201.335543][T16692] FAULT_INJECTION: forcing a failure. [ 201.335543][T16692] name failslab, interval 1, probability 0, space 0, times 0 [ 201.348264][T16692] CPU: 0 UID: 0 PID: 16692 Comm: syz.5.4394 Not tainted 6.15.0-rc5-syzkaller-00022-g01f95500a162 #0 PREEMPT(voluntary) [ 201.348297][T16692] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 201.348350][T16692] Call Trace: [ 201.348357][T16692] [ 201.348367][T16692] __dump_stack+0x1d/0x30 [ 201.348393][T16692] dump_stack_lvl+0xe8/0x140 [ 201.348416][T16692] dump_stack+0x15/0x1b [ 201.348437][T16692] should_fail_ex+0x265/0x280 [ 201.348479][T16692] should_failslab+0x8c/0xb0 [ 201.348514][T16692] kmem_cache_alloc_node_noprof+0x57/0x320 [ 201.348608][T16692] ? __alloc_skb+0x101/0x320 [ 201.348756][T16692] __alloc_skb+0x101/0x320 [ 201.348784][T16692] ? audit_log_start+0x365/0x6c0 [ 201.348813][T16692] audit_log_start+0x380/0x6c0 [ 201.349016][T16692] audit_seccomp+0x48/0x100 [ 201.349084][T16692] ? __seccomp_filter+0x68c/0x10d0 [ 201.349129][T16692] __seccomp_filter+0x69d/0x10d0 [ 201.349154][T16692] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 201.349232][T16692] ? vfs_write+0x75e/0x8d0 [ 201.349255][T16692] ? __rcu_read_unlock+0x4f/0x70 [ 201.349333][T16692] ? __fget_files+0x184/0x1c0 [ 201.349365][T16692] __secure_computing+0x82/0x150 [ 201.349419][T16692] syscall_trace_enter+0xcf/0x1e0 [ 201.349449][T16692] do_syscall_64+0xaa/0x1a0 [ 201.349470][T16692] ? clear_bhb_loop+0x25/0x80 [ 201.349510][T16692] ? clear_bhb_loop+0x25/0x80 [ 201.349536][T16692] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 201.349563][T16692] RIP: 0033:0x7fe2c44fe969 [ 201.349582][T16692] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 201.349634][T16692] RSP: 002b:00007fe2c2b67038 EFLAGS: 00000246 ORIG_RAX: 0000000000000065 [ 201.349656][T16692] RAX: ffffffffffffffda RBX: 00007fe2c4725fa0 RCX: 00007fe2c44fe969 [ 201.349672][T16692] RDX: 0000000000000000 RSI: 000000000000049d RDI: 0000000000000021 [ 201.349697][T16692] RBP: 00007fe2c2b67090 R08: 0000000000000000 R09: 0000000000000000 [ 201.349713][T16692] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 201.349798][T16692] R13: 0000000000000000 R14: 00007fe2c4725fa0 R15: 00007ffe74b6f818 [ 201.349815][T16692] [ 201.578000][T16688] JBD2: no valid journal superblock found [ 201.584010][T16688] EXT4-fs (loop0): Could not load journal inode [ 201.670465][T16706] netlink: 'syz.0.4392': attribute type 13 has an invalid length. [ 201.674094][T16703] FAULT_INJECTION: forcing a failure. [ 201.674094][T16703] name failslab, interval 1, probability 0, space 0, times 0 [ 201.691224][T16703] CPU: 0 UID: 0 PID: 16703 Comm: syz.5.4398 Not tainted 6.15.0-rc5-syzkaller-00022-g01f95500a162 #0 PREEMPT(voluntary) [ 201.691340][T16703] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 201.691356][T16703] Call Trace: [ 201.691364][T16703] [ 201.691373][T16703] __dump_stack+0x1d/0x30 [ 201.691398][T16703] dump_stack_lvl+0xe8/0x140 [ 201.691422][T16703] dump_stack+0x15/0x1b [ 201.691443][T16703] should_fail_ex+0x265/0x280 [ 201.691558][T16703] should_failslab+0x8c/0xb0 [ 201.691590][T16703] kmem_cache_alloc_node_noprof+0x57/0x320 [ 201.691654][T16703] ? __alloc_skb+0x101/0x320 [ 201.691688][T16703] __alloc_skb+0x101/0x320 [ 201.691722][T16703] ? audit_log_start+0x365/0x6c0 [ 201.691833][T16703] audit_log_start+0x380/0x6c0 [ 201.691873][T16703] audit_seccomp+0x48/0x100 [ 201.691903][T16703] ? __seccomp_filter+0x68c/0x10d0 [ 201.691931][T16703] __seccomp_filter+0x69d/0x10d0 [ 201.691976][T16703] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 201.692011][T16703] ? vfs_write+0x75e/0x8d0 [ 201.692077][T16703] ? __rcu_read_unlock+0x4f/0x70 [ 201.692104][T16703] ? __fget_files+0x184/0x1c0 [ 201.692161][T16703] __secure_computing+0x82/0x150 [ 201.692188][T16703] syscall_trace_enter+0xcf/0x1e0 [ 201.692328][T16703] do_syscall_64+0xaa/0x1a0 [ 201.692354][T16703] ? clear_bhb_loop+0x25/0x80 [ 201.692376][T16703] ? clear_bhb_loop+0x25/0x80 [ 201.692396][T16703] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 201.692415][T16703] RIP: 0033:0x7fe2c44fe969 [ 201.692429][T16703] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 201.692525][T16703] RSP: 002b:00007fe2c2b67038 EFLAGS: 00000246 ORIG_RAX: 0000000000000130 [ 201.692544][T16703] RAX: ffffffffffffffda RBX: 00007fe2c4725fa0 RCX: 00007fe2c44fe969 [ 201.692602][T16703] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: ffffffffffffff9c [ 201.692619][T16703] RBP: 00007fe2c2b67090 R08: 0000000000000000 R09: 0000000000000000 [ 201.692633][T16703] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 201.692649][T16703] R13: 0000000000000000 R14: 00007fe2c4725fa0 R15: 00007ffe74b6f818 [ 201.692712][T16703] [ 201.750507][T16712] loop4: detected capacity change from 0 to 512 [ 201.750788][T16712] EXT4-fs: Ignoring removed oldalloc option [ 201.751232][T16712] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 201.777075][T16712] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #16: comm syz.4.4402: invalid indirect mapped block 4294967295 (level 0) [ 201.777306][T16712] EXT4-fs (loop4): Remounting filesystem read-only [ 201.777384][T16712] EXT4-fs (loop4): 1 orphan inode deleted [ 201.777398][T16712] EXT4-fs (loop4): 1 truncate cleaned up [ 201.819203][T16722] pim6reg1: entered promiscuous mode [ 201.819242][T16722] pim6reg1: entered allmulticast mode [ 201.839337][T16727] loop4: detected capacity change from 0 to 512 [ 201.839991][T16727] EXT4-fs: test_dummy_encryption option not supported [ 202.152576][T16750] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4414'. [ 202.156807][T16752] FAULT_INJECTION: forcing a failure. [ 202.156807][T16752] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 202.156842][T16752] CPU: 1 UID: 0 PID: 16752 Comm: syz.5.4415 Not tainted 6.15.0-rc5-syzkaller-00022-g01f95500a162 #0 PREEMPT(voluntary) [ 202.156880][T16752] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 202.156922][T16752] Call Trace: [ 202.156929][T16752] [ 202.156936][T16752] __dump_stack+0x1d/0x30 [ 202.156956][T16752] dump_stack_lvl+0xe8/0x140 [ 202.156975][T16752] dump_stack+0x15/0x1b [ 202.156990][T16752] should_fail_ex+0x265/0x280 [ 202.157071][T16752] should_fail+0xb/0x20 [ 202.157164][T16752] should_fail_usercopy+0x1a/0x20 [ 202.157189][T16752] _copy_from_user+0x1c/0xb0 [ 202.157230][T16752] ___sys_sendmsg+0xc1/0x1d0 [ 202.157275][T16752] __sys_sendmmsg+0x178/0x300 [ 202.157332][T16752] __x64_sys_sendmmsg+0x57/0x70 [ 202.157358][T16752] x64_sys_call+0x2f2f/0x2fb0 [ 202.157385][T16752] do_syscall_64+0xd0/0x1a0 [ 202.157414][T16752] ? clear_bhb_loop+0x25/0x80 [ 202.157442][T16752] ? clear_bhb_loop+0x25/0x80 [ 202.157553][T16752] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 202.157580][T16752] RIP: 0033:0x7fe2c44fe969 [ 202.157646][T16752] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 202.157670][T16752] RSP: 002b:00007fe2c2b67038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 202.157694][T16752] RAX: ffffffffffffffda RBX: 00007fe2c4725fa0 RCX: 00007fe2c44fe969 [ 202.157711][T16752] RDX: 000000000800001d RSI: 0000200000007fc0 RDI: 0000000000000005 [ 202.157727][T16752] RBP: 00007fe2c2b67090 R08: 0000000000000000 R09: 0000000000000000 [ 202.157754][T16752] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 202.157768][T16752] R13: 0000000000000000 R14: 00007fe2c4725fa0 R15: 00007ffe74b6f818 [ 202.157792][T16752] [ 202.183892][T16754] loop5: detected capacity change from 0 to 512 [ 202.184115][T16754] EXT4-fs: Ignoring removed oldalloc option [ 202.184363][T16754] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 202.200153][T16754] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #16: comm syz.5.4416: invalid indirect mapped block 4294967295 (level 0) [ 202.200490][T16754] EXT4-fs (loop5): Remounting filesystem read-only [ 202.200676][T16754] EXT4-fs (loop5): 1 orphan inode deleted [ 202.200697][T16754] EXT4-fs (loop5): 1 truncate cleaned up [ 202.362851][T16767] program syz.0.4421 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 202.370080][T16767] loop0: detected capacity change from 0 to 527 [ 202.371870][T16767] EXT4-fs (loop0): failed to parse options in superblock:  [ 202.372020][T16767] EXT4-fs (loop0): Unsupported encryption level 4 [ 202.598793][T16777] netlink: 'syz.0.4425': attribute type 4 has an invalid length. [ 202.610501][T16777] netlink: 'syz.0.4425': attribute type 4 has an invalid length. [ 202.621300][T16777] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4425'. [ 202.651173][T16779] loop0: detected capacity change from 0 to 1024 [ 202.658309][T16779] EXT4-fs: Ignoring removed oldalloc option [ 202.665933][T16779] EXT4-fs (loop0): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 202.713816][T16787] FAULT_INJECTION: forcing a failure. [ 202.713816][T16787] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 202.727023][T16787] CPU: 1 UID: 0 PID: 16787 Comm: syz.2.4429 Not tainted 6.15.0-rc5-syzkaller-00022-g01f95500a162 #0 PREEMPT(voluntary) [ 202.727052][T16787] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 202.727065][T16787] Call Trace: [ 202.727070][T16787] [ 202.727077][T16787] __dump_stack+0x1d/0x30 [ 202.727111][T16787] dump_stack_lvl+0xe8/0x140 [ 202.727134][T16787] dump_stack+0x15/0x1b [ 202.727155][T16787] should_fail_ex+0x265/0x280 [ 202.727238][T16787] should_fail+0xb/0x20 [ 202.727269][T16787] should_fail_usercopy+0x1a/0x20 [ 202.727290][T16787] _copy_from_user+0x1c/0xb0 [ 202.727389][T16787] memdup_sockptr_noprof+0x70/0xd0 [ 202.727425][T16787] raw_setsockopt+0x34e/0xbf0 [ 202.727532][T16787] ? __pfx_raw_setsockopt+0x10/0x10 [ 202.727625][T16787] __sys_setsockopt+0x181/0x200 [ 202.727661][T16787] __x64_sys_setsockopt+0x64/0x80 [ 202.727702][T16787] x64_sys_call+0x2bd5/0x2fb0 [ 202.727783][T16787] do_syscall_64+0xd0/0x1a0 [ 202.727812][T16787] ? clear_bhb_loop+0x25/0x80 [ 202.727839][T16787] ? clear_bhb_loop+0x25/0x80 [ 202.727860][T16787] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 202.727880][T16787] RIP: 0033:0x7f5f792ce969 [ 202.727899][T16787] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 202.727985][T16787] RSP: 002b:00007f5f77937038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 202.728009][T16787] RAX: ffffffffffffffda RBX: 00007f5f794f5fa0 RCX: 00007f5f792ce969 [ 202.728023][T16787] RDX: 0000000000000001 RSI: 0000000000000065 RDI: 0000000000000006 [ 202.728038][T16787] RBP: 00007f5f77937090 R08: 0000000000000f00 R09: 0000000000000000 [ 202.728053][T16787] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 202.728068][T16787] R13: 0000000000000000 R14: 00007f5f794f5fa0 R15: 00007ffc93fe2058 [ 202.728152][T16787] [ 202.927256][T16789] loop6: detected capacity change from 0 to 512 [ 202.934276][T16789] EXT4-fs: Ignoring removed oldalloc option [ 202.940303][ T29] kauditd_printk_skb: 497 callbacks suppressed [ 202.940316][ T29] audit: type=1326 audit(1746512611.015:7474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16790 comm="syz.2.4431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f792ce969 code=0x7ffc0000 [ 202.970326][ T29] audit: type=1326 audit(1746512611.015:7475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16790 comm="syz.2.4431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f792ce969 code=0x7ffc0000 [ 202.972125][T16789] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 202.994047][ T29] audit: type=1326 audit(1746512611.015:7476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16790 comm="syz.2.4431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5f792ce969 code=0x7ffc0000 [ 202.994105][ T29] audit: type=1326 audit(1746512611.015:7477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16790 comm="syz.2.4431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f792ce969 code=0x7ffc0000 [ 202.994136][ T29] audit: type=1326 audit(1746512611.015:7478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16790 comm="syz.2.4431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f792ce969 code=0x7ffc0000 [ 203.051701][T16789] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #16: comm syz.6.4430: invalid indirect mapped block 4294967295 (level 0) [ 203.075105][ T29] audit: type=1326 audit(1746512611.015:7479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16790 comm="syz.2.4431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5f792ce969 code=0x7ffc0000 [ 203.090967][T16789] EXT4-fs (loop6): Remounting filesystem read-only [ 203.112537][ T29] audit: type=1326 audit(1746512611.015:7480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16790 comm="syz.2.4431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f792ce969 code=0x7ffc0000 [ 203.120157][T16789] EXT4-fs (loop6): 1 orphan inode deleted [ 203.142437][ T29] audit: type=1326 audit(1746512611.015:7481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16790 comm="syz.2.4431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5f792ce969 code=0x7ffc0000 [ 203.148152][T16789] EXT4-fs (loop6): 1 truncate cleaned up [ 203.177861][ T29] audit: type=1326 audit(1746512611.015:7482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16790 comm="syz.2.4431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f792ce969 code=0x7ffc0000 [ 203.201439][ T29] audit: type=1326 audit(1746512611.015:7483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16790 comm="syz.2.4431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5f792ce969 code=0x7ffc0000 [ 203.235841][T16794] vhci_hcd: default hub control req: 0000 v0000 i0000 l31125 [ 203.330352][T16806] loop0: detected capacity change from 0 to 128 [ 203.369089][T16806] ext4 filesystem being mounted at /247/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 203.401932][T16808] program syz.6.4433 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 203.427488][T16806] EXT4-fs error (device loop0): htree_dirblock_to_tree:1082: inode #2: block 4: comm syz.0.4438: bad entry in directory: inode out of bounds - offset=1012, inode=128, rec_len=12, size=1024 fake=1 [ 203.499665][T16800] loop6: detected capacity change from 0 to 527 [ 203.521575][T16800] EXT4-fs (loop6): failed to parse options in superblock:  [ 203.536803][T16800] EXT4-fs (loop6): Unsupported encryption level 4 [ 203.579503][T13027] EXT4-fs unmount: 59 callbacks suppressed [ 203.579522][T13027] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 203.745743][T16846] FAULT_INJECTION: forcing a failure. [ 203.745743][T16846] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 203.758871][T16846] CPU: 1 UID: 0 PID: 16846 Comm: syz.4.4455 Not tainted 6.15.0-rc5-syzkaller-00022-g01f95500a162 #0 PREEMPT(voluntary) [ 203.758975][T16846] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 203.758991][T16846] Call Trace: [ 203.758999][T16846] [ 203.759008][T16846] __dump_stack+0x1d/0x30 [ 203.759029][T16846] dump_stack_lvl+0xe8/0x140 [ 203.759048][T16846] dump_stack+0x15/0x1b [ 203.759065][T16846] should_fail_ex+0x265/0x280 [ 203.759141][T16846] should_fail+0xb/0x20 [ 203.759178][T16846] should_fail_usercopy+0x1a/0x20 [ 203.759202][T16846] _copy_from_user+0x1c/0xb0 [ 203.759229][T16846] ___sys_sendmsg+0xc1/0x1d0 [ 203.759335][T16846] __x64_sys_sendmsg+0xd4/0x160 [ 203.759366][T16846] x64_sys_call+0x2999/0x2fb0 [ 203.759404][T16846] do_syscall_64+0xd0/0x1a0 [ 203.759506][T16846] ? clear_bhb_loop+0x25/0x80 [ 203.759531][T16846] ? clear_bhb_loop+0x25/0x80 [ 203.759558][T16846] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 203.759607][T16846] RIP: 0033:0x7ff15e5ce969 [ 203.759621][T16846] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 203.759638][T16846] RSP: 002b:00007ff15cc37038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 203.759661][T16846] RAX: ffffffffffffffda RBX: 00007ff15e7f5fa0 RCX: 00007ff15e5ce969 [ 203.759683][T16846] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000000000000003 [ 203.759699][T16846] RBP: 00007ff15cc37090 R08: 0000000000000000 R09: 0000000000000000 [ 203.759712][T16846] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 203.759727][T16846] R13: 0000000000000000 R14: 00007ff15e7f5fa0 R15: 00007ffc13161428 [ 203.759748][T16846] [ 203.763992][T16848] syz.6.4456: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 203.882326][T16849] loop6: detected capacity change from 0 to 512 [ 203.890309][T16848] ,cpuset=/,mems_allowed=0 [ 203.890343][T16848] CPU: 0 UID: 0 PID: 16848 Comm: syz.6.4456 Not tainted 6.15.0-rc5-syzkaller-00022-g01f95500a162 #0 PREEMPT(voluntary) [ 203.890375][T16848] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 203.890392][T16848] Call Trace: [ 203.890401][T16848] [ 203.890429][T16848] __dump_stack+0x1d/0x30 [ 203.890458][T16848] dump_stack_lvl+0xe8/0x140 [ 203.890485][T16848] dump_stack+0x15/0x1b [ 203.890506][T16848] warn_alloc+0x12b/0x1a0 [ 203.890538][T16848] ? ring_buffer_unlock_commit+0x324/0x370 [ 203.890625][T16848] ? trace_buffer_unlock_commit_regs+0x111/0x310 [ 203.890669][T16848] __vmalloc_node_range_noprof+0x9c/0xdf0 [ 203.890709][T16848] ? trace_event_buffer_commit+0x196/0x5d0 [ 203.890740][T16848] ? __rcu_read_unlock+0x4f/0x70 [ 203.890768][T16848] ? avc_has_perm_noaudit+0x1b1/0x200 [ 203.890851][T16848] ? xskq_create+0x36/0xe0 [ 203.890912][T16848] vmalloc_user_noprof+0x59/0x70 [ 203.890974][T16848] ? xskq_create+0x80/0xe0 [ 203.891061][T16848] xskq_create+0x80/0xe0 [ 203.891137][T16848] xsk_init_queue+0x95/0xf0 [ 203.891172][T16848] xsk_setsockopt+0x35c/0x510 [ 203.891204][T16848] ? __pfx_xsk_setsockopt+0x10/0x10 [ 203.891302][T16848] __sys_setsockopt+0x181/0x200 [ 203.891347][T16848] __x64_sys_setsockopt+0x64/0x80 [ 203.891390][T16848] x64_sys_call+0x2bd5/0x2fb0 [ 203.891566][T16848] do_syscall_64+0xd0/0x1a0 [ 203.891629][T16848] ? clear_bhb_loop+0x25/0x80 [ 203.891658][T16848] ? clear_bhb_loop+0x25/0x80 [ 203.891691][T16848] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 203.891761][T16848] RIP: 0033:0x7fa6d72ae969 [ 203.891781][T16848] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 203.891852][T16848] RSP: 002b:00007fa6d5917038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 203.891877][T16848] RAX: ffffffffffffffda RBX: 00007fa6d74d5fa0 RCX: 00007fa6d72ae969 [ 203.891895][T16848] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000007 [ 203.891912][T16848] RBP: 00007fa6d7330ab1 R08: 0000000000000004 R09: 0000000000000000 [ 203.891928][T16848] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 203.891981][T16848] R13: 0000000000000000 R14: 00007fa6d74d5fa0 R15: 00007ffcabc8d078 [ 203.892006][T16848] [ 203.892052][T16848] Mem-Info: [ 204.007855][T16849] EXT4-fs (loop6): 1 orphan inode deleted [ 204.009285][T16848] active_anon:23520 inactive_anon:14349 isolated_anon:0 [ 204.009285][T16848] active_file:12302 inactive_file:12963 isolated_file:0 [ 204.009285][T16848] unevictable:0 dirty:305 writeback:0 [ 204.009285][T16848] slab_reclaimable:3244 slab_unreclaimable:97961 [ 204.009285][T16848] mapped:29537 shmem:34591 pagetables:868 [ 204.009285][T16848] sec_pagetables:0 bounce:0 [ 204.009285][T16848] kernel_misc_reclaimable:0 [ 204.009285][T16848] free:1762134 free_pcp:13448 free_cma:0 [ 204.017790][T16849] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 204.021343][T16848] Node 0 active_anon:94080kB inactive_anon:57396kB active_file:49208kB inactive_file:51852kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:118148kB dirty:1220kB writeback:0kB shmem:138364kB writeback_tmp:0kB kernel_stack:3504kB pagetables:3472kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 204.027634][T16849] ext4 filesystem being mounted at /389/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 204.032089][T16848] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 204.313483][T16848] lowmem_reserve[]: 0 2884 7863 7863 [ 204.318838][T16848] Node 0 DMA32 free:2950036kB boost:0kB min:4132kB low:7064kB high:9996kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2953568kB mlocked:0kB bounce:0kB free_pcp:3532kB local_pcp:3532kB free_cma:0kB [ 204.347401][T16848] lowmem_reserve[]: 0 0 4978 4978 [ 204.352526][T16848] Node 0 Normal free:4083140kB boost:0kB min:7184kB low:12280kB high:17376kB reserved_highatomic:0KB active_anon:94136kB inactive_anon:57396kB active_file:49208kB inactive_file:51972kB unevictable:0kB writepending:1284kB present:5242880kB managed:5098244kB mlocked:0kB bounce:0kB free_pcp:50168kB local_pcp:25516kB free_cma:0kB [ 204.383282][T16848] lowmem_reserve[]: 0 0 0 0 [ 204.387920][T16848] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 204.400749][T16848] Node 0 DMA32: 5*4kB (M) 2*8kB (M) 3*16kB (M) 4*32kB (M) 3*64kB (M) 2*128kB (M) 3*256kB (M) 3*512kB (M) 4*1024kB (M) 3*2048kB (M) 717*4096kB (M) = 2950036kB [ 204.416960][T16848] Node 0 Normal: 527*4kB (UME) 193*8kB (UME) 348*16kB (UM) 640*32kB (UM) 457*64kB (UME) 307*128kB (UME) 176*256kB (UME) 137*512kB (UM) 95*1024kB (UME) 52*2048kB (UME) 895*4096kB (UM) = 4083140kB [ 204.436434][T16848] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 204.445747][T16848] 59810 total pagecache pages [ 204.450416][T16848] 5 pages in swap cache [ 204.454605][T16848] Free swap = 103484kB [ 204.458755][T16848] Total swap = 124996kB [ 204.462911][T16848] 2097051 pages RAM [ 204.466740][T16848] 0 pages HighMem/MovableOnly [ 204.471405][T16848] 80258 pages reserved [ 204.497070][T11634] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 204.507606][T16861] netlink: 132 bytes leftover after parsing attributes in process `syz.5.4460'. [ 204.628599][T16869] vlan2: entered allmulticast mode [ 204.635687][T16869] erspan0: entered allmulticast mode [ 204.676268][T16872] program syz.0.4463 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 204.723286][T16872] loop0: detected capacity change from 0 to 512 [ 204.743621][T16872] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 204.759458][T16872] EXT4-fs (loop0): 1 truncate cleaned up [ 204.766890][T16872] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 204.869265][T13027] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 204.888124][T16890] netlink: 132 bytes leftover after parsing attributes in process `syz.6.4471'. [ 205.004558][T16905] FAULT_INJECTION: forcing a failure. [ 205.004558][T16905] name failslab, interval 1, probability 0, space 0, times 0 [ 205.005535][T16911] loop0: detected capacity change from 0 to 128 [ 205.017304][T16905] CPU: 0 UID: 0 PID: 16905 Comm: syz.4.4477 Not tainted 6.15.0-rc5-syzkaller-00022-g01f95500a162 #0 PREEMPT(voluntary) [ 205.017417][T16905] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 205.017434][T16905] Call Trace: [ 205.017451][T16905] [ 205.017463][T16905] __dump_stack+0x1d/0x30 [ 205.017491][T16905] dump_stack_lvl+0xe8/0x140 [ 205.017517][T16905] dump_stack+0x15/0x1b [ 205.017539][T16905] should_fail_ex+0x265/0x280 [ 205.017624][T16905] should_failslab+0x8c/0xb0 [ 205.017735][T16905] __kvmalloc_node_noprof+0x126/0x4d0 [ 205.017762][T16905] ? xt_alloc_table_info+0x3b/0x80 [ 205.017871][T16905] ? should_fail_ex+0xdb/0x280 [ 205.017948][T16905] xt_alloc_table_info+0x3b/0x80 [ 205.017984][T16905] do_ip6t_set_ctl+0x5a5/0x840 [ 205.018043][T16905] nf_setsockopt+0x196/0x1b0 [ 205.018134][T16905] ipv6_setsockopt+0x11a/0x130 [ 205.018237][T16905] udpv6_setsockopt+0x99/0xb0 [ 205.018336][T16905] sock_common_setsockopt+0x66/0x80 [ 205.018396][T16905] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 205.018433][T16905] __sys_setsockopt+0x181/0x200 [ 205.018505][T16905] __x64_sys_setsockopt+0x64/0x80 [ 205.018548][T16905] x64_sys_call+0x2bd5/0x2fb0 [ 205.018575][T16905] do_syscall_64+0xd0/0x1a0 [ 205.018608][T16905] ? clear_bhb_loop+0x25/0x80 [ 205.018636][T16905] ? clear_bhb_loop+0x25/0x80 [ 205.018715][T16905] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 205.018742][T16905] RIP: 0033:0x7ff15e5ce969 [ 205.018762][T16905] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 205.018786][T16905] RSP: 002b:00007ff15cc37038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 205.018825][T16905] RAX: ffffffffffffffda RBX: 00007ff15e7f5fa0 RCX: 00007ff15e5ce969 [ 205.018842][T16905] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000006 [ 205.018858][T16905] RBP: 00007ff15cc37090 R08: 00000000000004b8 R09: 0000000000000000 [ 205.018874][T16905] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 205.018954][T16905] R13: 0000000000000000 R14: 00007ff15e7f5fa0 R15: 00007ffc13161428 [ 205.018979][T16905] [ 205.020783][T16896] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4473'. [ 205.029901][T16911] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 205.144356][T16920] netlink: 96 bytes leftover after parsing attributes in process `syz.6.4483'. [ 205.164766][T16915] infiniband syz!: set down [ 205.270694][T16915] infiniband syz!: added team_slave_0 [ 205.278295][T16911] ext4 filesystem being mounted at /254/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 205.307825][T16925] loop6: detected capacity change from 0 to 1024 [ 205.328988][T16925] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 205.343064][T16925] JBD2: no valid journal superblock found [ 205.348998][T16925] EXT4-fs (loop6): Could not load journal inode [ 205.357850][T16915] RDS/IB: syz!: added [ 205.361887][T16915] smc: adding ib device syz! with port count 1 [ 205.368415][T16915] smc: ib device syz! port 1 has pnetid [ 205.375752][T16923] vlan2: entered allmulticast mode [ 205.378880][T13027] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 205.381245][T16923] erspan0: entered allmulticast mode [ 205.440512][T16928] netlink: 132 bytes leftover after parsing attributes in process `syz.5.4485'. [ 205.441518][T16931] vhci_hcd: default hub control req: 0000 v0000 i0000 l31125 [ 205.577134][T16940] loop0: detected capacity change from 0 to 1024 [ 205.593848][T16940] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 205.619335][T16940] JBD2: no valid journal superblock found [ 205.621240][T16944] xt_policy: too many policy elements [ 205.625238][T16940] EXT4-fs (loop0): Could not load journal inode [ 205.650598][T16942] vlan2: entered allmulticast mode [ 205.784696][T16953] loop5: detected capacity change from 0 to 512 [ 205.791628][T16953] EXT4-fs: Ignoring removed oldalloc option [ 205.798381][T16953] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 205.821080][T16953] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #16: comm syz.5.4497: invalid indirect mapped block 4294967295 (level 0) [ 205.835769][T16953] EXT4-fs (loop5): Remounting filesystem read-only [ 205.845096][T16953] EXT4-fs (loop5): 1 orphan inode deleted [ 205.850923][T16953] EXT4-fs (loop5): 1 truncate cleaned up [ 205.857680][T16953] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 205.897333][ T9406] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 205.971599][T16968] FAULT_INJECTION: forcing a failure. [ 205.971599][T16968] name failslab, interval 1, probability 0, space 0, times 0 [ 205.984329][T16968] CPU: 0 UID: 0 PID: 16968 Comm: syz.4.4502 Not tainted 6.15.0-rc5-syzkaller-00022-g01f95500a162 #0 PREEMPT(voluntary) [ 205.984360][T16968] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 205.984374][T16968] Call Trace: [ 205.984382][T16968] [ 205.984391][T16968] __dump_stack+0x1d/0x30 [ 205.984416][T16968] dump_stack_lvl+0xe8/0x140 [ 205.984507][T16968] dump_stack+0x15/0x1b [ 205.984524][T16968] should_fail_ex+0x265/0x280 [ 205.984639][T16968] should_failslab+0x8c/0xb0 [ 205.984670][T16968] __kvmalloc_node_noprof+0x126/0x4d0 [ 205.984691][T16968] ? xt_alloc_table_info+0x3b/0x80 [ 205.984750][T16968] ? should_fail_ex+0xdb/0x280 [ 205.984782][T16968] xt_alloc_table_info+0x3b/0x80 [ 205.984810][T16968] do_ipt_set_ctl+0x59c/0x820 [ 205.984880][T16968] ? _raw_spin_unlock_bh+0x36/0x40 [ 205.984918][T16968] ? lock_sock_nested+0x112/0x140 [ 205.984943][T16968] ? __rcu_read_unlock+0x4f/0x70 [ 205.984969][T16968] nf_setsockopt+0x196/0x1b0 [ 205.985075][T16968] ip_setsockopt+0x102/0x110 [ 205.985101][T16968] udp_setsockopt+0x99/0xb0 [ 205.985124][T16968] sock_common_setsockopt+0x66/0x80 [ 205.985173][T16968] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 205.985200][T16968] __sys_setsockopt+0x181/0x200 [ 205.985286][T16968] __x64_sys_setsockopt+0x64/0x80 [ 205.985450][T16968] x64_sys_call+0x2bd5/0x2fb0 [ 205.985471][T16968] do_syscall_64+0xd0/0x1a0 [ 205.985571][T16968] ? clear_bhb_loop+0x25/0x80 [ 205.985669][T16968] ? clear_bhb_loop+0x25/0x80 [ 205.985691][T16968] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 205.985712][T16968] RIP: 0033:0x7ff15e5ce969 [ 205.985726][T16968] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 205.985818][T16968] RSP: 002b:00007ff15cc37038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 205.985836][T16968] RAX: ffffffffffffffda RBX: 00007ff15e7f5fa0 RCX: 00007ff15e5ce969 [ 205.985849][T16968] RDX: 0000000000000040 RSI: 0004000000000000 RDI: 0000000000000005 [ 205.985861][T16968] RBP: 00007ff15cc37090 R08: 00000000000003d0 R09: 0000000000000000 [ 205.985913][T16968] R10: 0000200000000400 R11: 0000000000000246 R12: 0000000000000001 [ 205.985925][T16968] R13: 0000000000000000 R14: 00007ff15e7f5fa0 R15: 00007ffc13161428 [ 205.985944][T16968] [ 205.989452][T16965] vhci_hcd: default hub control req: 0000 v0000 i0000 l31125 [ 206.355263][T16983] FAULT_INJECTION: forcing a failure. [ 206.355263][T16983] name failslab, interval 1, probability 0, space 0, times 0 [ 206.368073][T16983] CPU: 1 UID: 0 PID: 16983 Comm: syz.6.4506 Not tainted 6.15.0-rc5-syzkaller-00022-g01f95500a162 #0 PREEMPT(voluntary) [ 206.368103][T16983] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 206.368116][T16983] Call Trace: [ 206.368123][T16983] [ 206.368176][T16983] __dump_stack+0x1d/0x30 [ 206.368199][T16983] dump_stack_lvl+0xe8/0x140 [ 206.368220][T16983] dump_stack+0x15/0x1b [ 206.368237][T16983] should_fail_ex+0x265/0x280 [ 206.368282][T16983] should_failslab+0x8c/0xb0 [ 206.368313][T16983] kmem_cache_alloc_node_noprof+0x57/0x320 [ 206.368356][T16983] ? __alloc_skb+0x101/0x320 [ 206.368521][T16983] __alloc_skb+0x101/0x320 [ 206.368549][T16983] ? audit_log_start+0x365/0x6c0 [ 206.368582][T16983] audit_log_start+0x380/0x6c0 [ 206.368650][T16983] audit_seccomp+0x48/0x100 [ 206.368680][T16983] ? __seccomp_filter+0x68c/0x10d0 [ 206.368763][T16983] __seccomp_filter+0x69d/0x10d0 [ 206.368791][T16983] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 206.368824][T16983] ? vfs_write+0x75e/0x8d0 [ 206.368854][T16983] ? __rcu_read_unlock+0x4f/0x70 [ 206.368910][T16983] ? __fget_files+0x184/0x1c0 [ 206.368998][T16983] __secure_computing+0x82/0x150 [ 206.369024][T16983] syscall_trace_enter+0xcf/0x1e0 [ 206.369125][T16983] do_syscall_64+0xaa/0x1a0 [ 206.369150][T16983] ? clear_bhb_loop+0x25/0x80 [ 206.369205][T16983] ? clear_bhb_loop+0x25/0x80 [ 206.369229][T16983] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 206.369273][T16983] RIP: 0033:0x7fa6d72ae969 [ 206.369291][T16983] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 206.369310][T16983] RSP: 002b:00007fa6d58f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 206.369336][T16983] RAX: ffffffffffffffda RBX: 00007fa6d74d6080 RCX: 00007fa6d72ae969 [ 206.369409][T16983] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000000 [ 206.369422][T16983] RBP: 00007fa6d58f6090 R08: 0000000000000000 R09: 0000000000000000 [ 206.369452][T16983] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 206.369464][T16983] R13: 0000000000000000 R14: 00007fa6d74d6080 R15: 00007ffcabc8d078 [ 206.369492][T16983] [ 206.620810][T16990] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4512'. [ 206.723696][T17006] vhci_hcd: default hub control req: 0000 v0000 i0000 l31125 [ 206.819379][T17014] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4521'. [ 206.923074][T17020] loop0: detected capacity change from 0 to 512 [ 206.929870][T17020] EXT4-fs: Ignoring removed oldalloc option [ 206.936091][T17020] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 206.947825][T17018] 8021q: VLANs not supported on gre0 [ 206.948094][T17020] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #16: comm syz.0.4523: invalid indirect mapped block 4294967295 (level 0) [ 206.967233][T17019] program syz.4.4519 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 206.976771][T17020] EXT4-fs (loop0): Remounting filesystem read-only [ 206.984589][T17020] EXT4-fs (loop0): 1 orphan inode deleted [ 206.990410][T17020] EXT4-fs (loop0): 1 truncate cleaned up [ 206.997026][T17020] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 207.021690][T17024] siw: device registration error -23 [ 207.031232][T13027] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 207.085351][T17029] siw: device registration error -23 [ 207.096767][T17011] loop4: detected capacity change from 0 to 512 [ 207.118528][T17031] netlink: 'syz.2.4527': attribute type 21 has an invalid length. [ 207.119565][T17011] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 207.159447][T17031] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 207.204643][T17011] EXT4-fs (loop4): 1 truncate cleaned up [ 207.235149][T17031] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 207.267324][T17011] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 207.438465][T13288] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 207.510701][T17052] pim6reg1: entered promiscuous mode [ 207.516085][T17052] pim6reg1: entered allmulticast mode [ 207.521842][T17054] ================================================================== [ 207.529939][T17054] BUG: KCSAN: data-race in kick_pool / wq_worker_running [ 207.536982][T17054] [ 207.539332][T17054] read-write to 0xffff888237c299e4 of 4 bytes by task 2970 on cpu 0: [ 207.547394][T17054] wq_worker_running+0x95/0x120 [ 207.552250][T17054] schedule_preempt_disabled+0x10/0x20 [ 207.557748][T17054] __mutex_lock+0x414/0xa50 [ 207.562253][T17054] __mutex_lock_slowpath+0xa/0x10 [ 207.567292][T17054] mutex_lock+0x27/0x30 [ 207.571457][T17054] pcpu_balance_workfn+0x4a/0xc00 [ 207.576572][T17054] process_scheduled_works+0x4cb/0x9d0 [ 207.582043][T17054] worker_thread+0x582/0x770 [ 207.586650][T17054] kthread+0x486/0x510 [ 207.590754][T17054] ret_from_fork+0x4b/0x60 [ 207.595207][T17054] ret_from_fork_asm+0x1a/0x30 [ 207.599987][T17054] [ 207.602315][T17054] read to 0xffff888237c299e4 of 4 bytes by task 17054 on cpu 1: [ 207.609951][T17054] kick_pool+0x49/0x2d0 [ 207.614131][T17054] __queue_work+0x8d6/0xb60 [ 207.618634][T17054] queue_work_on+0xd1/0x160 [ 207.623142][T17054] pcpu_alloc_noprof+0x9a4/0x1210 [ 207.628173][T17054] bpf_map_alloc_percpu+0xb3/0x200 [ 207.633284][T17054] prealloc_init+0x19d/0x490 [ 207.637880][T17054] htab_map_alloc+0x4b6/0x6b0 [ 207.642551][T17054] map_create+0x840/0xb90 [ 207.646884][T17054] __sys_bpf+0x5ab/0x790 [ 207.651140][T17054] __x64_sys_bpf+0x41/0x50 [ 207.655602][T17054] x64_sys_call+0x2478/0x2fb0 [ 207.660284][T17054] do_syscall_64+0xd0/0x1a0 [ 207.664791][T17054] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 207.670689][T17054] [ 207.673008][T17054] value changed: 0x00000000 -> 0x00000001 [ 207.678720][T17054] [ 207.681037][T17054] Reported by Kernel Concurrency Sanitizer on: [ 207.687185][T17054] CPU: 1 UID: 0 PID: 17054 Comm: syz.5.4533 Not tainted 6.15.0-rc5-syzkaller-00022-g01f95500a162 #0 PREEMPT(voluntary) [ 207.699679][T17054] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 207.709741][T17054] ==================================================================