last executing test programs: 1m4.214752894s ago: executing program 3 (id=40): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000300)={0x3, 0x1}, 0x4) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x14) 1m4.142551295s ago: executing program 3 (id=42): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000004, 0x0, {0x0, 0x0, 0x0, 0x0, {0x5}, {}, {0xfff3, 0x8}}}, 0x24}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000800)={'syztnl2\x00', &(0x7f0000000900)={'ip6tnl0\x00', 0x0, 0x2f, 0x4, 0x4, 0xc, 0x2, @mcast2, @private0={0xfc, 0x0, '\x00', 0x1}, 0x10, 0x40, 0x3, 0xed1a}}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r5, 0x400, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000cc0)={r1, 0xe0, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x7, &(0x7f0000000a40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000a80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x5b, &(0x7f0000000ac0)=[{}, {}, {}], 0x18, 0x0, 0x0, &(0x7f0000000b40), 0x8, 0x86, 0x8, 0x8, &(0x7f0000000b80)}}, 0x10) r7 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) ftruncate(r7, 0x2007ffc) sendfile(r7, r7, 0x0, 0x800000009) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000e00)=@bpf_lsm={0x1d, 0x12, &(0x7f0000001d40)=ANY=[@ANYBLOB="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", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000a50000009500000000000000"], &(0x7f0000000700)='GPL\x00', 0x2, 0x63, &(0x7f0000000740)=""/99, 0x41000, 0x4a, '\x00', r4, 0x1b, r5, 0x8, &(0x7f00000009c0)={0x8, 0x1}, 0x8, 0x10, 0x0, 0x0, r6, 0x0, 0x9, &(0x7f0000000d00)=[r7], &(0x7f0000000d40)=[{0x2, 0x1, 0x8, 0x9}, {0x4, 0x3, 0x10, 0x2}, {0x4, 0x1, 0xe, 0x2}, {0x4, 0x3, 0x8, 0x5}, {0x5, 0x5, 0x6, 0x4}, {0x0, 0x4, 0xc, 0x1}, {0x5, 0x2, 0xc, 0x9}, {0x4, 0x2, 0x7, 0x1}, {0x4, 0x4, 0xc}], 0x10, 0x40, @void, @value}, 0x94) socket$nl_xfrm(0x10, 0x3, 0x6) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x29, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) r9 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x18) prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='\x00') sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r10 = getegid() getresuid(&(0x7f00000004c0)=0x0, &(0x7f0000000500), &(0x7f0000000540)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000580)={0x0, 0x0, 0x0}, &(0x7f00000005c0)=0xc) r13 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r13, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="38000000031401002abd7000fedbdf250900020073727a3100000000080041007369770014003300626f6e643000"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) (fail_nth: 3) r14 = syz_init_net_socket$x25(0x9, 0x5, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000bc0)={&(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000400)=[{&(0x7f0000000240)="a50769f9b1", 0x5}, {&(0x7f00000003c0)="e2bb1ed63a57576cc2dcd86b8604be154e8a7600393346db8d", 0x19}], 0x2, &(0x7f0000001c00)=ANY=[@ANYBLOB="1c000000000000000000026c7e0b3c827481f494da84010000fa25a333ac7dffe90f2783c21b6febea2e0e58516d39ce493e1473d295314afc6e2ea4c382c7e67a68124d80a56bcdca4d793f8c0cfcd6940c58168c9cff8ff04a01690676af6d09", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=r10, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=r11, @ANYRES32=r12, @ANYBLOB="000000001c0000000000", @ANYRES32, @ANYRES32=r13, @ANYRES32, @ANYRES32, @ANYRES32=r14, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000000010000000000000000100000001000000"], 0xe8, 0x200400d1}, 0x80) mount$9p_fd(0x0, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', &(0x7f00000003c0), 0x200000, &(0x7f0000001ec0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB="07000000388815b88af940c0388f", @ANYRESHEX=r9, @ANYBLOB=',loose,access=client,access=any,version=9p2000,version=9p2000.L,fscontext=staff_u,smackfsfloor=%\x00,obj_user=keyring\x00,smackfsdef=,', @ANYRESDEC=r11, @ANYBLOB=',fsmagic=0x0000000000000004,\x00']) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x48a, &(0x7f0000000000)={[{@jqfmt_vfsold}, {@usrjquota, 0x22}, {@errors_continue}, {@noload}, {@data_err_ignore}, {@usrjquota, 0x22}, {@errors_continue}, {@errors_remount}, {@noblock_validity}]}, 0x1, 0x44e, &(0x7f0000000900)="$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") write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, 0x0, 0x0) 1m3.201668477s ago: executing program 3 (id=68): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='\x00') pipe2(&(0x7f0000001440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) splice(r2, 0x0, r1, 0x0, 0x6, 0x0) sendmsg$NFNL_MSG_CTHELPER_GET(r2, 0x0, 0x0) 1m0.117944568s ago: executing program 3 (id=117): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x200000, &(0x7f0000000a00)={[{@grpid}, {@auto_da_alloc}, {@min_batch_time={'min_batch_time', 0x3d, 0x1}}, {@nogrpid}, {@oldalloc}, {@stripe={'stripe', 0x3d, 0x3ff}}, {@errors_remount}, {@acl}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x343}}, {@jqfmt_vfsold}, {@barrier_val={'barrier', 0x3d, 0x6}}, {@nombcache}]}, 0xfd, 0x573, &(0x7f0000000cc0)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000600)={0x23e3, 0x2, 0xd, 0x2}) renameat2(r0, &(0x7f0000000080)='./file0/file0\x00', r0, &(0x7f0000001240)='./file1\x00', 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{r1, 0xffffffffffffffff}, &(0x7f00000004c0), &(0x7f0000000500)='%pK \x00'}, 0x20) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) r4 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000a00)=@generic={&(0x7f0000000980)='./file0\x00', 0x0, 0x8}, 0x18) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000b40)={@fallback, 0x8, 0x1, 0x9, &(0x7f0000000a40)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, &(0x7f0000000a80)=[0x0, 0x0], &(0x7f0000000ac0)=[0x0, 0x0, 0x0], &(0x7f0000000b00)=[0x0, 0x0, 0x0], 0x0}, 0x40) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x600}, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000c00)={r3, 0xffffffffffffffff, 0x0, 0x5, &(0x7f0000000bc0)='cp437', 0x0}, 0x30) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000b80)={@ifindex=r8, r4, 0x2f, 0x1030, 0x0, @void, @void, @void, @value=r9, r5}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x5, 0xb, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6, @void, @value}, 0x94) ptrace$getregset(0x4205, r3, 0x202, &(0x7f0000000240)={&(0x7f0000000180)=""/120, 0xffffffffffffff28}) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r11}, 0x10) r12 = socket$inet6(0xa, 0x800000000000002, 0x0) sendto$inet6(r12, 0x0, 0x5c4, 0x404c844, &(0x7f0000000540)={0xa, 0x4e24, 0x0, @local}, 0x1c) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r1}, &(0x7f0000000200), &(0x7f00000002c0)=r10}, 0x20) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000780)={'syztnl2\x00', &(0x7f0000000380)={'syztnl0\x00', 0x0, 0x7, 0x1, 0x0, 0x3, {{0x1c, 0x4, 0x2, 0x1, 0x70, 0x65, 0x0, 0x3, 0x6, 0x0, @local, @local, {[@generic={0x82, 0x8, "18004b3786ce"}, @timestamp={0x44, 0x2c, 0xc3, 0x0, 0x5, [0x2, 0x5, 0x3, 0x2, 0x1, 0x1, 0x401, 0x7, 0x9, 0x7f]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0xb, 0x3e, [@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2]}, @noop, @timestamp={0x44, 0x8, 0x4f, 0x0, 0xd, [0xe000000]}, @rr={0x7, 0xf, 0x2d, [@multicast2, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}]}]}}}}}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000008c0)=@bpf_ext={0x1c, 0x13, &(0x7f0000000640)=@raw=[@ldst={0x1, 0x3, 0x4, 0x5, 0x0, 0xfffffffffffffff4, 0xfffffffffffffffc}, @printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}}, @cb_func={0x18, 0x7, 0x4, 0x0, 0xfffffffffffffffd}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x54c4deca}}], &(0x7f0000000340)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x3c, '\x00', r13, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000007c0)={0x3, 0x4}, 0x8, 0x10, &(0x7f0000000800)={0x5, 0x5, 0x5, 0x100}, 0x10, 0x6c33, r10, 0x3, &(0x7f0000000840)=[r2, r1], &(0x7f0000000880)=[{0x5, 0x5, 0x2, 0x1}, {0x2, 0x2, 0xe, 0x3}, {0x1, 0x4, 0x10, 0xc}], 0x10, 0x3, @void, @value}, 0x94) r14 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r14, &(0x7f00000000c0), &(0x7f0000000000)=""/10, 0x2}, 0x20) syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000540)='./file0\x00', 0x204818, &(0x7f000001fa80)={[{@overriderock}, {@nocompress}, {@hide}, {@session={'session', 0x3d, 0x5a}}, {@gid}, {@iocharset={'iocharset', 0x3d, 'cp437'}}, {@nojoliet}, {@block={'block', 0x3d, 0x400}}]}, 0x1, 0x544, &(0x7f0000001000)="$eJzs3V9v01YfwPGfS/sQ5ZGqRw8TQlWBQ9mkIpXgJBAUceU5J+mBxI5sB7VXqKIpqkhhokxae8O4YZu0vQh2uRexd4T2EjbZTvqHJjHQv6u+nwjOiX3s8zup5Z/cxscCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADEcmu2XbSkabzOkhrNrQV+a/dtf+sDC+TWvmJMvyJW/E9yObmSLrry1e7qy/F/czKbvpuVXFzkZPu/l//34NLkxGD7MQF/lt+/cE+bW9vPV3q97qujCuQMunpx9LqG9kzom5bT0MqEvqpWKvadxXqo6qapw+Uw0i3lBtqJ/EDNu7dUsVotK11Y9jteo+Y09WDh/dsl266oh4W2doLQ9+48LITuomk2jddI2sSr4zb34wPxkYlUpJ2WUmvrvW45awBxo+KnNCplNSrZpVKxWCoVK/eq9+7b9uSBBfZH5ECLozto8e90hGdv4HAm+vlfmmLEk44siRr6cqUmgfjSGrG+b5D/v7mjx/a7N/8PsvyV3dUzkuT/a+m7a6Py/4hYTu61KVuyLc9lRXrSk668OvWITvbVEC2eGAnFFyMtcZIlqr9ESVUqUhFbnsii1CUUJXUx0hQtoSxLKJHo5IhyJRAtjkTiSyBK5sWVW6KkKFWpSlmUaCnIsvjSEU8aUhMn2cuarCefe1mUNSrGnUbFkcPID467rpTGjJb8j8M70vM3cBh/D/I/AAAAAAA4t6zkt+/x9f+UXE1qddPU9mmHBQAAAAAAjlDyl//ZuJiKa1fF4vofAAAAAIDzxkrusbNEJC/X09qaWMntUvwSAAAAAACAcyL5+/+1uEjmQLku1s50KVz/AwAAAABwTvycOcd+2L5o/fmXBMGU9ba99LW1kczN62xcSLe78PEeo/qMNd3fSVJU0mJy0tWzVi5ttDMJ5od+sZYVh7UbgLMTwI+fE8ClSflVbqRtbqym5epgTdpLvm6auuD6zQdFcZzpiUgvRd+/WP9BkuH/4rWmrZys97qFpy97q0ksb+O9vN3oT6B4YB7FMbG8TuZbSO65GDriqeRGjH6/eUvW1ntde+/4J9LNJ/b3+GZ6TJ/vZC5tNdef8Ta/f/y5uM9iYdTo+1EUDznyd3IzbXNz/mZaDImilBVFaW8Uwz+Lw0dRzoqifMgoAOC0rGVkIUsO5N0vOMt9WXaXz8zu72Q+bTM/k5xYJ2eGnNHtrDO6fcjs9seBZyCNyrFxv799lFXfxxu8H9lv2CxZ8Ud44fXGd3J5c2v79vrGyrPus+6LUqlcse/a9r2STCXD6BfkHgDAEHufsWMNzf+ZT+Gx7mZcVf9/5ysFBXkqL6Unq7KQ3G2QfONg6F7ze76GsJBx1ZpP0mT6hJeFMVd1/0nuchjstzS27f4YyifwkwAA4OTMZeThT8n/CxnX3ftz+fir4/yep7UBAIDjoYMPVj76yQoC035SrFaLTrSoVeC7j1Rgag2tjBfpwF10vIZW7cCPfNdvxpXHpqZDFXbabT+IVN0PVNsPzVIyfaDqP/o91C3Hi4wbtpvaCbVyfS9y3EjVTOiqdufbpgkXdZBsHLa1a+rGdSLjeyr0O4GrC0qFWu9paGrai0zdxFVPtQPTcoKceuw3Oy2tajp0A9OO/HSHg76MV/eDVrLbwml/2AAAnBGbW9vPV3q97qtjrAztOHfiQwUAAH0ZWRoAAAAAAAAAAAAAAAAAAAAAAJwBJ3H/H5VzXhlMBX1W4qFyBJXMU8ebYz85AThW/wQAAP//rVVPjw==") openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) 59.558361666s ago: executing program 3 (id=124): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r2, @ANYBLOB="00000000000000002400128009000100626f6e64000000001400028008000000000000000800090001"], 0x44}}, 0x0) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x12c, 0x12c, 0x8, [@func_proto={0x0, 0x6, 0x0, 0xd, 0x0, [{0x8, 0x2}, {0x6, 0x4}, {0x6}, {0x6, 0x5}, {0xf, 0x4}, {0x10}]}, @ptr={0x10, 0x0, 0x0, 0x2, 0x1}, @var={0x2, 0x0, 0x0, 0xe, 0x1}, @enum={0x5, 0x2, 0x0, 0x6, 0x4, [{0x10, 0x80}, {0xa, 0x30}]}, @enum64={0xe, 0xa, 0x0, 0x13, 0x0, 0x8, [{0x6, 0x1, 0x8000}, {0x2, 0x800, 0xc000000}, {0xc, 0x4, 0x7}, {0x7, 0x9, 0x7}, {0xe, 0x8001, 0x8}, {0x7, 0x8, 0x9}, {0x9, 0x4, 0xe}, {0x9, 0x4, 0x7fff}, {0xe, 0x1, 0x800}, {0x10, 0x3, 0x200}]}, @enum={0x1, 0x5, 0x0, 0x6, 0x4, [{0x8, 0x1}, {0x7, 0x1a60fb55}, {0xc, 0x4}, {0x10, 0x1}, {0x7, 0xc9cc}]}]}, {0x0, [0x0, 0x2e, 0x61, 0x0, 0x61, 0x61]}}, &(0x7f0000000340)=""/119, 0x14c, 0x77, 0x0, 0xff, 0x10000, @value}, 0x28) syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) dup(r4) (async) r5 = dup(r4) mount$9p_fd(0x0, &(0x7f0000000180)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r4}}) (async) mount$9p_fd(0x0, &(0x7f0000000180)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r4}}) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000480)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x1ff, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x3, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{0x1, 0xffffffffffffffff}, &(0x7f0000000500), &(0x7f0000000540)}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000640)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000005c0), &(0x7f0000000600)='%ps \x00'}, 0x20) openat(0xffffffffffffff9c, 0x0, 0x2c41, 0x0) (async) r9 = openat(0xffffffffffffff9c, 0x0, 0x2c41, 0x0) flock(r9, 0x5) accept$packet(r9, 0x0, &(0x7f0000000380)) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) (async) r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x11, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x83}]}, &(0x7f0000000080)='syzkaller\x00', 0xfffffc00, 0xd1, &(0x7f00000000c0)=""/209, 0x40f00, 0x50, '\x00', r2, 0x0, r3, 0x8, &(0x7f0000000400)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000000440)={0x4, 0x5, 0x8, 0x7fffffff}, 0x10, 0x0, 0x0, 0xa, &(0x7f0000000680)=[r5, 0x1, r6, r7, r8, r9, r10], &(0x7f00000006c0)=[{0x0, 0x5, 0x10, 0x2}, {0x4, 0x5, 0x5, 0x6}, {0x4, 0x4, 0xa, 0x7}, {0x2, 0x4, 0x0, 0x3}, {0x3, 0x3, 0x8, 0x2}, {0x5, 0x2, 0x10, 0x7}, {0x1, 0x1, 0xe, 0x9}, {0x2, 0x2, 0x3, 0x5}, {0x0, 0x4, 0x4, 0xb}, {0x3, 0x4, 0x8, 0x9}], 0x10, 0x4f, @void, @value}, 0x94) r11 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$UHID_INPUT(r12, &(0x7f0000000940)={0x8, {"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", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r12, 0x0) (async) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r12, 0x0) connect$bt_l2cap(r11, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) 58.436715081s ago: executing program 3 (id=128): bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x1a, &(0x7f0000000240)={0x1, 'veth0_to_team\x00'}, 0x18) syz_emit_ethernet(0xbe, &(0x7f0000000340)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x40, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x24, 0x0, {0x24, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @local, @rand_addr=0x64010100, {[@cipso={0x86, 0x6d, 0x0, [{0x0, 0xc, "e256b28c59881681fb52"}, {0x0, 0x9, "020007651442eb"}, {0x5, 0xe, "7434954373561de584b703c8"}, {0x0, 0x9, "e706d30bd224f8"}, {0x0, 0x7, "cfa11cab1a"}, {0x2, 0x10, "8475be675de6a70a05a0dc91e5c6"}, {0x0, 0xa, "6580a5e97612fe86"}, {0x0, 0xe, "73bc2300ad9d19a300000000"}, {0x0, 0xc, "c8f46976e79e56c7a95e"}]}, @cipso={0x86, 0xc, 0x0, [{0x0, 0x6, "7f36c525"}]}]}}, '\x00\x00\x00\x00'}}}}}, 0x0) 58.334051002s ago: executing program 32 (id=128): bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x1a, &(0x7f0000000240)={0x1, 'veth0_to_team\x00'}, 0x18) syz_emit_ethernet(0xbe, &(0x7f0000000340)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x40, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x24, 0x0, {0x24, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @local, @rand_addr=0x64010100, {[@cipso={0x86, 0x6d, 0x0, [{0x0, 0xc, "e256b28c59881681fb52"}, {0x0, 0x9, "020007651442eb"}, {0x5, 0xe, "7434954373561de584b703c8"}, {0x0, 0x9, "e706d30bd224f8"}, {0x0, 0x7, "cfa11cab1a"}, {0x2, 0x10, "8475be675de6a70a05a0dc91e5c6"}, {0x0, 0xa, "6580a5e97612fe86"}, {0x0, 0xe, "73bc2300ad9d19a300000000"}, {0x0, 0xc, "c8f46976e79e56c7a95e"}]}, @cipso={0x86, 0xc, 0x0, [{0x0, 0x6, "7f36c525"}]}]}}, '\x00\x00\x00\x00'}}}}}, 0x0) 14.134509831s ago: executing program 2 (id=701): r0 = socket$inet6(0xa, 0x3, 0xff) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x7, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x4, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x16, &(0x7f0000fcb000), 0x4) setsockopt$inet6_int(r0, 0x29, 0x16, &(0x7f0000fcb000)=0x80, 0x4) 14.068545062s ago: executing program 2 (id=703): r0 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000000)) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1310, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x1, @perf_bp={0x0, 0x13}, 0x2, 0xffffffff, 0x1, 0x6, 0x4, 0x1, 0xfff9, 0x0, 0x0, 0x0, 0x6}, r0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) setuid(0xee00) setregid(0x0, 0xee01) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x1c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000001}, 0x14) r3 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) write$tcp_congestion(r3, 0x0, 0x0) setsockopt$bt_BT_VOICE(r1, 0x112, 0xb, &(0x7f0000000040)=0x60, 0x2) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r4, 0x0, 0xfffffffffffffffd}, 0x18) socket$nl_netfilter(0x10, 0x3, 0xc) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x124) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000072000000"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r5}, 0x10) request_key(&(0x7f0000000000)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x2, 0x11}, &(0x7f0000001fee)='R\brust\xe3c*sgrVex:D0', 0x0) 13.993971663s ago: executing program 2 (id=706): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x10) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000280)={0xfffffffe, 0x9, 0x0, 'queue1\x00', 0xfffffffe}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r1, 0x404c534a, &(0x7f0000000040)) 13.907082844s ago: executing program 2 (id=709): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = getpgrp(0xffffffffffffffff) ptrace$getsig(0x4202, r2, 0x80000000, &(0x7f00000002c0)) r3 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x4, @perf_bp={0x0, 0x13}, 0x400, 0xffffffff, 0xd15, 0x6, 0x0, 0x1, 0xfff9, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x9) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000000020"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="6000000002060103000000000000000000000004050001000700000013000300686173683a6e65742c696661636500000900020073797a30000000000500040000000000050005000a00000014000780050015000000000008001240"], 0x60}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="180800001bc81a000000000000000001851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000101180000000000000000000000000000009500000000000000360a000000000000180100002020782500000000002020207b1af8ff00000000bfa10000000000000701000000ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) creat(&(0x7f0000000040)='./file0/file0\x00', 0x80) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x18d811, 0x0) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='mountinfo\x00') sendfile(r6, r6, 0x0, 0x1000) 13.811066926s ago: executing program 2 (id=712): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x9, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x2, @perf_config_ext={0xf60, 0xffffffff}, 0x1100, 0x5dd8, 0x3a65, 0x9, 0x0, 0x8, 0x8, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000580)={0x2c, r2, 0x1, 0x70bd2d, 0x0, {0x22}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}]}]}, 0x2c}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r3}, 0x10) geteuid() 13.543150089s ago: executing program 2 (id=717): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18090000002300810000000000000000850000007b00"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWSET={0x1c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa}, [@NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x10}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0xa, 0x84}}}, 0x44}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000000) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="7800000010000305000000000000000000cf0100", @ANYRES32=0x0, @ANYBLOB="83000000000000002000128008000100677265001400028008000700e0"], 0x78}}, 0x0) 13.534403079s ago: executing program 33 (id=717): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18090000002300810000000000000000850000007b00"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWSET={0x1c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa}, [@NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x10}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0xa, 0x84}}}, 0x44}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000000) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="7800000010000305000000000000000000cf0100", @ANYRES32=0x0, @ANYBLOB="83000000000000002000128008000100677265001400028008000700e0"], 0x78}}, 0x0) 6.642821841s ago: executing program 5 (id=844): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x74, 0x101301) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00"/13], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) ioctl$USBDEVFS_CONTROL(r0, 0xc0105500, &(0x7f0000000000)={0x80, 0x6, 0x2fe, 0x0, 0xe0, 0x2, 0x0}) 6.578520412s ago: executing program 5 (id=845): r0 = gettid() socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000b28000)=0x3) fcntl$setsig(0xffffffffffffffff, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{}], 0x2c, 0xffffffffffbffff8) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1) fcntl$setown(0xffffffffffffffff, 0x8, r0) tkill(r0, 0x13) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f00000002c0), 0x0) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r1, 0x84, 0x78, 0x0, 0x0) 3.515188723s ago: executing program 5 (id=898): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x14, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000780)='mm_page_free\x00', r0}, 0x18) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 3.161439848s ago: executing program 5 (id=906): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB='\t\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={0x0, r1}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NODES(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={0x1c, r3, 0x1, 0x0, 0x0, {{}, {0x0, 0x6}}}, 0x1c}}, 0x0) openat(0xffffffffffffff9c, 0x0, 0x105042, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x2, 0x12062, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x15bd}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) statx(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x800, 0xc20, &(0x7f0000000200)) r4 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xa) setresuid(0x0, r5, 0x0) r7 = socket$kcm(0x10, 0x2, 0x4) close(r7) r8 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r8, &(0x7f0000000000)={0x0, 0xf00, &(0x7f0000000040)=[{&(0x7f00000000c0)="5c00000014006b02c84e21100af32c6e0a0675f8d34460400000000000005c1e6182949a36c23d3b48dfd8cdbf9367b498fa51f60a64c9f4d493803792684b71bdd70000b6c0504bb9183132be471b93c91b5d7870743719b4b53cf2", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) sendmsg$inet(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="e03f030013006bcd9e3fe3dc6e48aa31086b8700350000007ea60264160af3653c002e000d000af08bc3a0e69ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg(r8, 0x0, 0x10000) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000340)={{0x0, 0x0, r6, r5, r6, 0xdc, 0x100d}, 0x6, 0x94c, 0x0, 0x0, 0x0, 0x0, 0xf932}) stat(&(0x7f0000000100)='./file0/file0\x00', &(0x7f00000003c0)) fstat(r0, &(0x7f0000000440)) statx(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x800, 0x4, &(0x7f0000000680)) r9 = getegid() bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000e80)={&(0x7f0000000300)=ANY=[@ANYRES16=r9, @ANYRESHEX=r9], &(0x7f0000000ac0)=""/211, 0x34, 0xd3, 0x1, 0x722, 0x0, @void, @value}, 0x28) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000bc0)={&(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000400)=[{&(0x7f0000000240)='\x00\x00\x00\x00\x00', 0x5}, {&(0x7f00000003c0)="e2bb1ed63a57576cc2dcd86b8604be154e8a76003933", 0x16}], 0x2, &(0x7f0000001180)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES16, @ANYRES32=0x0, @ANYRES64, @ANYRES32=r9, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRESOCT=r10, @ANYRES32, @ANYRES32=r9, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c0000000000000001000000", @ANYRES32, @ANYRES32, @ANYBLOB="000000001c00e2000000000001000000010000008b8722516d64bb68a43838d5b3cb49cd6c54db3020c0f424d6e2d5edfb5f9c3d20f563cfa04553467acb0b682a62902bc5ea1be813a38945fe61f3c2", @ANYRES32, @ANYBLOB="000000001c0000000000000652293c4028848c00", @ANYRES32, @ANYRES16, @ANYRES32, @ANYRES32], 0xd8, 0x200400d1}, 0x80) 3.099827578s ago: executing program 5 (id=908): r0 = gettid() socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000b28000)=0x3) fcntl$setsig(0xffffffffffffffff, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{}], 0x2c, 0xffffffffffbffff8) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1) fcntl$setown(0xffffffffffffffff, 0x8, r0) tkill(r0, 0x13) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f00000002c0), 0x0) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r1, 0x84, 0x78, 0x0, 0x0) 2.25518112s ago: executing program 0 (id=926): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r0, 0x0, 0xffffffff}, 0x18) syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000100)='./file0\x00', 0x10, &(0x7f0000000280), 0xf6, 0x452, &(0x7f0000000440)="$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") r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=r3, @ANYBLOB="00000000000000002800128009000100766574680000000018000280140001000000", @ANYRES32=r3], 0x48}}, 0x0) (fail_nth: 12) 1.848685695s ago: executing program 0 (id=928): ioperm(0x0, 0x1, 0x1) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1900000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r0, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000800)={r0, &(0x7f0000000780)}, 0x20) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x1) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="0300000040000000000000000059503ac2000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_int(r4, 0x0, 0x17, &(0x7f0000000040)=0x8000, 0x4) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$SMC_PNETID_ADD(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x40, r1, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'bond0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}]}, 0x40}}, 0xc800) sendmsg$SMC_PNETID_DEL(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x14, r1, 0xe27, 0x0, 0x0, {0x4, 0x7, 0x2}}, 0x14}, 0x1, 0x40030000000000}, 0x0) rename(&(0x7f0000000000)='\x00', &(0x7f0000000040)='./file0\x00') 1.719493867s ago: executing program 0 (id=936): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000700000045000000a000020095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000003c0)='kfree\x00', r0}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0xa0}, 0x1, 0x0, 0x0, 0x2005c013}, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f000000000000000002000000000000000800010001000000040004"], 0x24}, 0x1, 0x0, 0x0, 0x2400c001}, 0x800) sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0x0) 1.591526689s ago: executing program 0 (id=940): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000080), 0x1c) getsockopt$SO_COOKIE(r0, 0x1, 0x39, &(0x7f0000000000), &(0x7f00000000c0)=0x8) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000180)=@gcm_256={{0x304}, "7817765dc56e4c3d", "c0a9b92b592a8e91a6934cb6bfb18f7a7a6eaa9cbd8ef3b0fbc326100136e976", "58a1b0f0", "2a11001bdc0800"}, 0x38) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000280)=@gcm_256={{0x304}, "54164ace389ff5c0", "faad50724acb18aba4e3bc654d684ad9c694f3dd3689727968e900", "5cb6d054", "29a78ab9b0a4e857"}, 0x38) 1.50787082s ago: executing program 0 (id=944): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB='\t\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={0x0, r1}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NODES(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={0x1c, r3, 0x1, 0x0, 0x0, {{}, {0x0, 0x6}}}, 0x1c}}, 0x0) openat(0xffffffffffffff9c, 0x0, 0x105042, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x2, 0x12062, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x15bd}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) statx(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x800, 0xc20, &(0x7f0000000200)) r4 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xa) setresuid(0x0, r5, 0x0) r6 = socket$kcm(0x10, 0x2, 0x4) close(r6) r7 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r7, &(0x7f0000000000)={0x0, 0xf00, &(0x7f0000000040)=[{&(0x7f00000000c0)="5c00000014006b02c84e21100af32c6e0a0675f8d34460400000000000005c1e6182949a36c23d3b48dfd8cdbf9367b498fa51f60a64c9f4d493803792684b71bdd70000b6c0504bb9183132be471b93c91b5d7870743719b4b53cf2", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) sendmsg$inet(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="e03f030013006bcd9e3fe3dc6e48aa31086b8700350000007ea60264160af3653c002e000d000af08bc3a0e69ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg(r7, &(0x7f0000000500)={0x0, 0x300, 0x0, 0x0, 0x0, 0x0, 0xa00}, 0x10000) semctl$IPC_SET(0x0, 0x0, 0x1, 0x0) stat(&(0x7f0000000100)='./file0/file0\x00', &(0x7f00000003c0)) fstat(r0, &(0x7f0000000440)) statx(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x800, 0x4, &(0x7f0000000680)) r8 = getegid() bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000e80)={&(0x7f0000000300)=ANY=[@ANYRES16=r8, @ANYRESHEX=r8], &(0x7f0000000ac0)=""/211, 0x34, 0xd3, 0x1, 0x722, 0x0, @void, @value}, 0x28) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000bc0)={&(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000400)=[{&(0x7f0000000240)='\x00\x00\x00\x00\x00', 0x5}, {&(0x7f00000003c0)="e2bb1ed63a57576cc2dcd86b8604be154e8a76003933", 0x16}], 0x2, &(0x7f0000001180)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES16, @ANYRES32=0x0, @ANYRES64, @ANYRES32=r8, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRESOCT=r9, @ANYRES32, @ANYRES32=r8, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c0000000000000001000000", @ANYRES32, @ANYRES32, @ANYBLOB="000000001c00e2000000000001000000010000008b8722516d64bb68a43838d5b3cb49cd6c54db3020c0f424d6e2d5edfb5f9c3d20f563cfa04553467acb0b682a62902bc5ea1be813a38945fe61f3c2", @ANYRES32, @ANYBLOB="000000001c0000000000000652293c4028848c00", @ANYRES32, @ANYRES16, @ANYRES32, @ANYRES32], 0xd8, 0x200400d1}, 0x80) 1.425778491s ago: executing program 0 (id=947): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000900)={0xe4, 0x0, 0x0, 0x10000}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="240000004a00611400000000000000000a"], 0x24}}, 0x0) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f00000008c0)=0x4, 0x4) r1 = creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f00000000c0)={r4, 0x1a0}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000940)=@assoc_value={r4, 0x40000}, 0x8) fsetxattr$security_capability(r1, &(0x7f0000000600), &(0x7f0000000880)=@v1={0x1000000, [{0x7ff, 0x9}]}, 0xc, 0x1) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x19, 0xc, &(0x7f0000000040)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r6}, 0x10) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f00000005c0)='./file1\x00', 0x1818ad8, &(0x7f0000000a00)={[], [{@euid_eq}, {@uid_lt}, {@uid_gt}, {@appraise_type}, {@flag='ro'}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}]}, 0x1, 0x656, &(0x7f00000024c0)="$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") pipe2$9p(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000000)={0x4, &(0x7f0000000280)=[{0x4, 0x0, 0x3, 0xffffffff}, {0x7, 0x40, 0x4, 0x7}, {0x97f0, 0x81, 0xd, 0xf3ba}, {0x3, 0xb, 0x2, 0x80}]}) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kmem_cache_free\x00', r9, 0x0, 0x9}, 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r11, &(0x7f0000004cc0)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000380)="a1", 0x1}], 0x1, &(0x7f0000000a40)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r10, @ANYBLOB="0000000014"], 0x30, 0x40400d1}}], 0x1, 0x10) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r7, 0x89f3, &(0x7f0000000340)={'erspan0\x00', &(0x7f00000003c0)={'tunl0\x00', 0x0, 0x10, 0x1, 0x0, 0x8, {{0xb, 0x4, 0x2, 0x9, 0x2c, 0x66, 0x0, 0xe7, 0x29, 0x0, @loopback, @local, {[@lsrr={0x83, 0x17, 0xd4, [@remote, @private=0xa010101, @multicast2, @remote, @rand_addr=0x64010100]}, @end]}}}}}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000680)={0x1b, 0x0, 0x0, 0x1, 0x0, r1, 0x5, '\x00', r12, r1, 0x3, 0x0, 0x1, 0x0, @void, @value, @void, @value}, 0x50) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r10, 0x0, r13, 0x0, 0x400000, 0x0) mount$9p_fd(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000040), 0x48c41, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r8}, 0x2c, {[{@cachetag={'cachetag', 0x3d, 'kmem_cache_free\x00'}}]}}) 1.173012494s ago: executing program 6 (id=949): r0 = socket$inet6_dccp(0xa, 0x6, 0x0) r1 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'gretap0\x00'}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYRESOCT=r0, @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c00010005000000030000000800", @ANYRESDEC, @ANYRES32=r1], 0xb4}}, 0x0) close(r3) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0x12, &(0x7f00000008c0)=r6, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r7, &(0x7f0000000240)=@file={0x1, './file0/file0/file0\x00'}, 0x6e) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00'}) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040), 0x1a1240, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a500850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r10 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r10, 0x400, 0x0) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='leases_conflict\x00', r11}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='leases_conflict\x00', r9}, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r12}, 0x10) r13 = gettid() process_vm_writev(r13, 0x0, 0x0, 0x0, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4ea1, 0xffff, @private0, 0x3ff}, 0x1c) 591.693242ms ago: executing program 6 (id=955): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, r0, 0x0, 0x4, 0x0) (async, rerun: 64) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000027c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000f000000970000005000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (rerun: 64) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000840)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r3}, 0x10) (async, rerun: 64) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x300000c, 0x51031, 0xffffffffffffffff, 0x0) (async, rerun: 64) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='sys_enter\x00', r1}, 0x18) epoll_create(0x2) (async, rerun: 32) r4 = syz_pidfd_open(r0, 0x0) (async, rerun: 32) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000004c0)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='io_uring_cqring_wait\x00', r5, 0x0, 0x5}, 0x18) (async) pidfd_send_signal(r4, 0x2, 0x0, 0x0) 450.818514ms ago: executing program 6 (id=961): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket(0x10, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r3, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000340)=@gcm_128={{0x304}, "a6341a1a379332f5", "1fd33cb95d66a1781f31bf07fd2ae874", "62266bd8", "d1b29b99d21d88a2"}, 0x28) write$binfmt_script(r3, &(0x7f0000000780)={'#! ', './file0'}, 0xb) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000000280)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0}, &(0x7f0000000180)=0x40) writev(r3, &(0x7f00000030c0)=[{&(0x7f0000000a40)="fb", 0x1}], 0x1) close_range(r2, r3, 0x0) 443.317754ms ago: executing program 4 (id=962): ioperm(0x0, 0x1, 0x1) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1900000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/14], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r0, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000800)={r0, &(0x7f0000000780)}, 0x20) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x1) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="0300000040000000000000000059503ac2000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_int(r4, 0x0, 0x17, &(0x7f0000000040)=0x8000, 0x4) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$SMC_PNETID_ADD(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x40, r1, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'bond0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}]}, 0x40}}, 0xc800) sendmsg$SMC_PNETID_DEL(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x14, r1, 0xe27, 0x0, 0x0, {0x4, 0x7, 0x2}}, 0x14}, 0x1, 0x40030000000000}, 0x0) rename(&(0x7f0000000000)='\x00', &(0x7f0000000040)='./file0\x00') 428.957004ms ago: executing program 6 (id=963): r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000780)='xen_cpu_load_idt\x00', r0}, 0x18) listen(r0, 0x800) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xffffffffffffff31) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r1}, &(0x7f0000000040), &(0x7f0000000280)='%pS \x00'}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="200000001000010700000200000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000002000000ff00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000cbd54add9ed0000000000000"], 0x50) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000740)={'ip6gre0\x00', &(0x7f00000006c0)={'ip6gre0\x00', 0x0, 0x29, 0x5, 0xfe, 0x4, 0x2, @ipv4={'\x00', '\xff\xff', @remote}, @remote, 0x7, 0x20, 0x0, 0x3ff}}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000a40)={0x1b, 0x0, 0x0, 0x3, 0x0, r1, 0x6, '\x00', r4, r0, 0x0, 0x3, 0x4, 0x0, @void, @value, @void, @value}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000840)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r5}, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="440000001000090600"/20, @ANYRES32=0x0, @ANYBLOB="adffa888000000001c00128009000100626f6e64000000000c000280050001000600000008000a0079"], 0x44}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f00000008c0), 0xffffffffffffffff) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000004000000e27f00000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r7, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000001c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r9}, 0x10) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1088d8b8588d72ec29c48f0af5f2d9f51c4b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68af2ad0810000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465ad32b77a74e802a0dc6bf25cca242bc6099ad2300000480006ef6c1ff0900000000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767042361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b6c7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae645ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48fc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1fb8f72cd317902f19e385be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa7956488bef241875f3b4b6ab7929a57affe760e797724f4fce1093b62d7e8c7123d890decacec55bf404e4e1f74b7eed82571be54c72d978cf906df0042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f870b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a998de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f154772f514216bdf57d2a40d40b51ab67903ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1594e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270bb29b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214d00000000d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f68df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c471c784ae7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec30cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd63bed8d31c31c37a373d4efd89f0000377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f0059161c5e0000000000000000000057d77480e0345effff6413258d1f6eb190aa28cbb4bafe34124172e436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fa03b84f63e022fe755f4007a4a899eaf52c4f491d8e97c862e29e457060000007ac691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104ebc1581848f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c716357d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c24936615ee68538e8fddd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426ca85e82ccf821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ad6acf5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba1c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63c41cbde2ba66ad81168070c8c6e18a6e452a31bdc4a60d637545ed4c8a1c649c3ce54ad3e16304d06a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c5140200000054d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c7340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a3bc38613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b9e6626f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f14eafe4b28ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1bfeef448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae0040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483f02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e9180100000000000000654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732e74dd690c57bdfdc1f069f9491bca7a8c59363799be70018c25ece5ad7307dc7a95c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2cdfb7fea73ca18874664d60a4b9423f3297bc8eb91b4ee1d73272ab28a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece98c077b358e752b439132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae2676384ff799783f55d7e5a1a092a01b965dc99cb7a9d98440c355927629f2bcf9dc2396eb2f5d25829715b24327642ac48f1201014a95e0e65e12cdf27e19043e3c5d3e798375cead35b9a93190a52cdecaaccc854a1d41ef365303f0e9b4fc969c9dab6df5e8a795b140fcc09e8a7b694d12932917facd8ceaa4e2d0d16bb0b95387fcd5ff136d8abddf94daf442bbff744591931872a36cf921ad69f2127386e8b0f9afee4da8d3fbec809fbb3ca0fded2859cf25d4c6155d396c5b9bd1a928923123f63f4c40688eae69990a9419456247bbaeb7948de84d2ff875414883bb1e503d4bfebc01bc12a53ea06bf38e571157bd642dac25dbee7832c58378374a39483d6721eec96c28911db21c0c006b42afc90000000000000000000000700000000000000000008ce4ea442c1a207108b35511186c5e860278f6463f52f3990ce08b1bfccc3cff4b5ae27b610aa9ba11b47d4f94c439e055cdbb2b12c983885c93ea4ab4ca1e02d831ae162ee104"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='task_newtask\x00', r10, 0x0, 0xfffffffffffffffc}, 0x10) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) 349.706835ms ago: executing program 1 (id=966): r0 = openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/kernel/uevent_helper', 0x42, 0x0) pwritev(r0, &(0x7f0000000500)=[{0x0}, {&(0x7f0000000100)="3c98", 0x2}], 0x2, 0xffffff01, 0x2) 333.793165ms ago: executing program 4 (id=967): openat$tun(0xffffffffffffff9c, 0x0, 0x20702, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0xfe, 0x0, 0x7ffc9ffe}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) getpgid(0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000300)={0x0, &(0x7f00000002c0)}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000400)='kfree\x00'}, 0x18) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x0) close(0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000d80)={&(0x7f0000000d40)='mmap_lock_acquire_returned\x00'}, 0x10) prctl$PR_SET_THP_DISABLE(0x29, 0x1) 283.393206ms ago: executing program 1 (id=968): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB='\t\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={0x0, r1}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NODES(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={0x1c, r3, 0x1, 0x0, 0x0, {{}, {0x0, 0x6}}}, 0x1c}}, 0x0) openat(0xffffffffffffff9c, 0x0, 0x105042, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x2, 0x12062, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x15bd}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) statx(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x800, 0xc20, &(0x7f0000000200)) r4 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xa) setresuid(0x0, r5, 0x0) r6 = socket$kcm(0x10, 0x2, 0x4) close(r6) r7 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r7, &(0x7f0000000000)={0x0, 0xf00, &(0x7f0000000040)=[{&(0x7f00000000c0)="5c00000014006b02c84e21100af32c6e0a0675f8d34460400000000000005c1e6182949a36c23d3b48dfd8cdbf9367b498fa51f60a64c9f4d493803792684b71bdd70000b6c0504bb9183132be471b93c91b5d7870743719b4b53cf2", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) sendmsg$inet(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="e03f030013006bcd9e3fe3dc6e48aa31086b8700350000007ea60264160af3653c002e000d000af08bc3a0e69ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg(r7, &(0x7f0000000500)={0x0, 0x300, 0x0, 0x0, 0x0, 0x0, 0xa00}, 0x10000) semctl$IPC_SET(0x0, 0x0, 0x1, 0x0) stat(&(0x7f0000000100)='./file0/file0\x00', &(0x7f00000003c0)) fstat(r0, &(0x7f0000000440)) statx(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x800, 0x4, &(0x7f0000000680)) r8 = getegid() bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000e80)={&(0x7f0000000300)=ANY=[@ANYRES16=r8, @ANYRESHEX=r8], &(0x7f0000000ac0)=""/211, 0x34, 0xd3, 0x1, 0x722, 0x0, @void, @value}, 0x28) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000bc0)={&(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000400)=[{&(0x7f0000000240)='\x00\x00\x00\x00\x00', 0x5}, {&(0x7f00000003c0)="e2bb1ed63a57576cc2dcd86b8604be154e8a76003933", 0x16}], 0x2, &(0x7f0000001180)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES16, @ANYRES32=0x0, @ANYRES64, @ANYRES32=r8, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRESOCT=r9, @ANYRES32, @ANYRES32=r8, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c0000000000000001000000", @ANYRES32, @ANYRES32, @ANYBLOB="000000001c00e2000000000001000000010000008b8722516d64bb68a43838d5b3cb49cd6c54db3020c0f424d6e2d5edfb5f9c3d20f563cfa04553467acb0b682a62902bc5ea1be813a38945fe61f3c2", @ANYRES32, @ANYBLOB="000000001c0000000000000652293c4028848c00", @ANYRES32, @ANYRES16, @ANYRES32, @ANYRES32], 0xd8, 0x200400d1}, 0x80) 282.640056ms ago: executing program 4 (id=969): openat$tun(0xffffffffffffff9c, 0x0, 0x20702, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0xfe, 0x0, 0x7ffc9ffe}]}) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000040)=0x0) getpgid(r0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000300)={0x4, &(0x7f00000002c0)=[{0xe49, 0x6, 0x0, 0x3}, {0x3, 0x87, 0xa, 0x2}, {0x1, 0x7, 0x8, 0x2}, {0x80, 0xb, 0xcc, 0xc}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000400)='kfree\x00'}, 0x18) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x0) close(0xffffffffffffffff) prctl$PR_SET_THP_DISABLE(0x29, 0x1) 263.662096ms ago: executing program 1 (id=970): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000002c0)='kfree\x00', r1}, 0x18) socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r4}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, &(0x7f00000001c0)={0x1, 0x10, 0xfa00, {&(0x7f0000000140), r4}}, 0x18) 225.026397ms ago: executing program 4 (id=971): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000240)='./file2\x00', 0x2000090, &(0x7f0000000540), 0x81, 0x7a5, &(0x7f0000000f80)="$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") (async) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') (async, rerun: 32) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000193c0)={0x11, 0x13, &(0x7f0000019300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000206a932500000000002000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000100000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (rerun: 32) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000000)='sys_enter\x00', r1, 0x0, 0x91}, 0x18) (async) iopl(0x3) (async) munlockall() (async, rerun: 32) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) (rerun: 32) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f00000004c0), 0x208e24b) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0b00000007000000d7c900000900000001"], 0x48) r3 = socket$kcm(0x10, 0x2, 0x0) (async) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async, rerun: 32) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x70, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0xfff, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a, @void, @value}, 0x94) (async, rerun: 32) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='kmem_cache_free\x00', r6, 0x0, 0x2}, 0x18) (async) r7 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r7, &(0x7f0000000200)={0x10, 0x0, 0x25dfdbff, 0x2ffffffff}, 0xc) setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f0000000000), 0x4) (async) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r7, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r7) (async, rerun: 32) r8 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) r9 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)={0x5c, r9, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={'\x00', '\xff\xff', @remote}}]}, 0x5c}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000001c00010001000000fbdbdf2507000000", @ANYRES32=r10, @ANYBLOB="400000060aaaaaaa0c0200"], 0x28}, 0x1, 0x0, 0x0, 0x40051}, 0x40c0) (async) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140604000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) 179.171987ms ago: executing program 1 (id=972): r0 = socket$inet6(0xa, 0x3, 0xff) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x7, &(0x7f0000000000)=ANY=[@ANYRES32=r1, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r2}, 0x10) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x4, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x16, &(0x7f0000fcb000), 0x4) setsockopt$inet6_int(r0, 0x29, 0x16, &(0x7f0000fcb000)=0x80, 0x4) 178.729738ms ago: executing program 4 (id=973): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket(0x10, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r3, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000340)=@gcm_128={{0x304}, "a6341a1a379332f5", "1fd33cb95d66a1781f31bf07fd2ae874", "62266bd8", "d1b29b99d21d88a2"}, 0x28) write$binfmt_script(r3, &(0x7f0000000780)={'#! ', './file0'}, 0xb) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000000280)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0}, &(0x7f0000000180)=0x40) writev(r3, &(0x7f00000030c0)=[{&(0x7f0000000a40)="fb", 0x1}], 0x1) close_range(r2, r3, 0x0) 178.539867ms ago: executing program 1 (id=974): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0a00000001010000ff7f0000cc00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000400000000000000000000000000000000000000000000000e81077b78a6d3ab9c9e4c4ee7d9c64b373178fb013f7e783f0fd4c60a81d1a2f8530535c60ad6369a0297d8b393230309cafeece4423bff07616c2d375ba129c4b7af47117d12fb3bbe63837bd0a3956fa39904eb9ffa8b3df7b3c10af71a7485be9fa719c2e25cc9eb8c5850bbebfd30bd7bfdc0a8ba6a69a9953db789f582d5fb020719210cfcb08771e2f9727a1f9dd6efbe3e8e873cfa950c7233a7fad7ecd57fd9d7ce9a1f54c0784cf28a49a7d0b01600"/221], 0x50) (fail_nth: 4) 155.243228ms ago: executing program 1 (id=975): r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000780)='xen_cpu_load_idt\x00', r0}, 0x18) listen(r0, 0x800) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xffffffffffffff31) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r1}, &(0x7f0000000040), &(0x7f0000000280)='%pS \x00'}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="200000001000010700000200000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000002000000ff00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000cbd54add9ed0000000000000"], 0x50) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000740)={'ip6gre0\x00', &(0x7f00000006c0)={'ip6gre0\x00', 0x0, 0x29, 0x5, 0xfe, 0x4, 0x2, @ipv4={'\x00', '\xff\xff', @remote}, @remote, 0x7, 0x20, 0x0, 0x3ff}}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000a40)={0x1b, 0x0, 0x0, 0x3, 0x0, r1, 0x6, '\x00', r4, r0, 0x0, 0x3, 0x4, 0x0, @void, @value, @void, @value}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000840)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r5}, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="440000001000090600"/20, @ANYRES32=0x0, @ANYBLOB="adffa888000000001c00128009000100626f6e64000000000c000280050001000600000008000a0079"], 0x44}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f00000008c0), 0xffffffffffffffff) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000004000000e27f00000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r7, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000001c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r9}, 0x10) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='task_newtask\x00', r10, 0x0, 0xfffffffffffffffc}, 0x10) 125.857128ms ago: executing program 4 (id=976): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) ioctl$SG_IO(r1, 0x2285, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c00000013000100000000000000000000000002", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32, @ANYBLOB="1400350064756d6d7930"], 0x3c}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.state\x00', 0x275a, 0x0) sendmsg$nl_route(r4, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)=@ipv6_getnetconf={0x64, 0x52, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@NETCONFA_FORWARDING={0x8, 0x2, 0xb}, @NETCONFA_FORWARDING={0x8}, @NETCONFA_PROXY_NEIGH={0x8, 0x5, 0x9}, @NETCONFA_PROXY_NEIGH={0x8, 0x5, 0x3}, @NETCONFA_IFINDEX={0x8}, @NETCONFA_RP_FILTER={0x8, 0x3, 0x6}, @NETCONFA_FORWARDING={0x8, 0x2, 0x6}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x4}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x6000}, @NETCONFA_IFINDEX={0x8}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x2004880) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000240)={@private2, 0x0}, &(0x7f0000000300)=0x14) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000001d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES64=r6, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000001cc0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r8}, 0x10) getpeername$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000300)=0x14) r10 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000580)={&(0x7f0000001e00)=ANY=[@ANYBLOB="9feb01001800000000000000440000004400000004000000060000000000001008000000090000000000000100000000530006040200000000000001000000007f0080000b000000000000080500000001000bdcfa18af6c17780000002e00004e388bc96695c6cf6bfadfe0c09994f8d3c63b7f21b6580bc40cd23018584efcae26da1db7f29b8bd996ac9b326ae334e0efe3ef7ac75c837175247527f22e8b0cd525e597e250ec311688c8d2cbdd5080213c18ea721615755b085dcc58eb21dad5f75e5eca7df4134153d33e8752c92e9e7e61079a0416b0a994d91e65d8014800"/236], &(0x7f00000004c0)=""/190, 0x60, 0xbe, 0x1, 0x7ff, 0x10000, @value}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000007c0)={0xffffffffffffffff, 0x20, &(0x7f0000000780)={&(0x7f0000000680)=""/103, 0x67, 0x0, &(0x7f0000000700)=""/87, 0x57}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x13, 0xe, &(0x7f0000002000)=ANY=[@ANYRES8=r9, @ANYRES32, @ANYRES32=r7, @ANYRES32=r6, @ANYBLOB="000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010040f8ffffffb702000008000000b703000002000000850000000600000035f1eebf9ca951345aa6df9c0c96cef6206968bc7f0f5a5fd919686126e04919fb861a0ed256cc3d9461a9b4a5b23ca7bb0d1bf55b01d17a9dd0e85b8553058ab30d4b72e1a9a712df5869cffbd2f6da7d0a62883bed82cade31238b4fee208801f685cc708a3c6042ce0c513b3735bcda09ca6645123c2badf9a80f24fecf8c963dfb532b300fea98438fec9cdb"], &(0x7f0000000000)='GPL\x00', 0x7, 0x31, &(0x7f0000000200)=""/49, 0x41000, 0x9, '\x00', r9, @fallback=0x15, r10, 0x8, &(0x7f0000000600)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000000640)={0x2, 0x2, 0x0, 0x4}, 0x10, r11, r8, 0x2, &(0x7f0000000800)=[r6, r6, r6, r6, 0xffffffffffffffff, r6, r6], &(0x7f0000000840)=[{0x0, 0x1, 0x9, 0xa}, {0x5, 0x2, 0x10, 0x4}], 0x10, 0x0, @void, @value}, 0x94) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000500)={'erspan0\x00', &(0x7f0000000680)={'syztnl0\x00', 0x0, 0x1, 0x782f, 0x7, 0x3, {{0x1e, 0x4, 0x3, 0x1, 0x78, 0x65, 0x0, 0x4, 0x29, 0x0, @remote, @empty, {[@lsrr={0x83, 0x13, 0x68, [@loopback, @dev={0xac, 0x14, 0x14, 0x11}, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @cipso={0x86, 0xc, 0x2, [{0x5, 0x6, "051f65ae"}]}, @timestamp_addr={0x44, 0x14, 0x7e, 0x1, 0x2, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x5}, {@private=0xa010100}]}, @timestamp_prespec={0x44, 0x14, 0x49, 0x3, 0x1, [{@private=0xa010100}, {@loopback, 0x7}]}, @rr={0x7, 0x1b, 0x54, [@loopback, @multicast2, @multicast2, @multicast1, @broadcast, @rand_addr=0x64010102]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000580)={'sit0\x00', &(0x7f0000000740)={'syztnl0\x00', 0x0, 0x20, 0x1, 0x75, 0xcb64, {{0x1d, 0x4, 0x2, 0x8, 0x74, 0x65, 0x0, 0xb, 0x2f, 0x0, @loopback, @empty, {[@cipso={0x86, 0x5f, 0x3, [{0x5, 0x2}, {0x5, 0x9, "4a2a3bf0f453e8"}, {0x1, 0x6, "5c1a1121"}, {0x7, 0x2}, {0x2, 0xc, "7a1200a43023b0dbddfa"}, {0x1, 0xe, "82a93663fcf291c5ff657d96"}, {0x7, 0x6, "eb08421b"}, {0x6, 0x7, "e0e512c2a4"}, {0x7, 0xf, "5e274c5f196c2fe5002cd228b5"}, {0x5, 0x10, "3b42dce691071be439501dbc733a"}]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000800)={'team0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000008c0)={'sit0\x00', &(0x7f0000000840)={'gre0\x00', 0x0, 0x10, 0x20, 0x3, 0xffffffff, {{0xf, 0x4, 0x2, 0x2, 0x3c, 0x65, 0x0, 0x31, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x27}, @dev={0xac, 0x14, 0x14, 0x1a}, {[@end, @rr={0x7, 0x27, 0xf0, [@remote, @private=0xa010102, @loopback, @loopback, @multicast1, @loopback, @broadcast, @empty, @empty]}]}}}}}) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000900)={&(0x7f0000000bc0)={0x2e0, 0x0, 0x14, 0x70bd29, 0x25dfdbfd, {}, [{{0x8}, {0x240, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x200}}, {0x8, 0x6, r9}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r12}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xa}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r13}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}, {{0x8, 0x1, r14}, {0x7c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x10}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r15}}}]}}]}, 0x2e0}, 0x1, 0x0, 0x0, 0x2400c810}, 0x4100) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2, 0x0, 0xfffffffffffffffe}, 0x18) writev(r1, &(0x7f0000000400)=[{&(0x7f0000000080)="aefdda9d240300005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb010052f436dd2a", 0x2a}, {&(0x7f0000000040)="aa1d484ea0000000f7fc08fcd111fbdf23ea32db0e8f21d5bc27bd49eb067a0689fff2a41cfbf0e9d85e44", 0x2b}], 0x2) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000040), &(0x7f0000000280)}, 0x20) r16 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r16}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000000006600020000000000180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 103.038298ms ago: executing program 6 (id=977): r0 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000000)) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1310, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x1, @perf_bp={0x0, 0x13}, 0x2, 0xffffffff, 0x1, 0x6, 0x4, 0x1, 0xfff9, 0x0, 0x0, 0x0, 0x6}, r0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) setuid(0xee00) setregid(0x0, 0xee01) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x1c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000001}, 0x14) r3 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) write$tcp_congestion(r3, 0x0, 0x0) setsockopt$bt_BT_VOICE(r1, 0x112, 0xb, &(0x7f0000000040)=0x60, 0x2) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r4, 0x0, 0xfffffffffffffffd}, 0x18) socket$nl_netfilter(0x10, 0x3, 0xc) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x124) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r5}, 0x18) request_key(&(0x7f0000000000)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x2, 0x11}, &(0x7f0000001fee)='R\brust\xe3c*sgrVex:D0', 0x0) 23.253609ms ago: executing program 5 (id=978): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000070000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r0}, 0x18) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0x14, 0x30, 0x871a15abc695fa3d, 0x70bd27, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{}, 0x93}, [{0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x0, 0x8000000}, {0x1, 0x0, 0x0, 0x0, 0x7, 0x80000}, {0x8, 0x5, 0x0, 0xfffffffc, 0x5}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x0, 0xc3}, {0x0, 0x5}, {0x5}, {}, {0x0, 0x10}, {0x0, 0x4, 0x0, 0x8000000}, {}, {0x2, 0x0, 0x0, 0x0, 0x6}, {}, {}, {0x0, 0x5}, {0x0, 0x0, 0x0, 0x8000000}, {0x0, 0x5}, {}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffc}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x0, 0x7, 0x0, 0x0, 0x8}, {0x0, 0x0, 0x0, 0x2, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x5}, {0xffffffff}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {0xffffffff, 0x0, 0x4}, {}, {}, {}, {0xffffffff}, {}, {0x0, 0x0, 0x0, 0x0, 0x8000}, {0x0, 0x9, 0x0, 0x0, 0x7ff, 0x2}, {}, {}, {0x80}, {0x0, 0x0, 0x0, 0x5}, {0x0, 0x0, 0x0, 0x0, 0x1000}, {0x0, 0x0, 0x8}, {0x0, 0x0, 0x0, 0x0, 0x9, 0x80}, {0x0, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x0, 0xfffffff3}, {0x0, 0x0, 0x0, 0x0, 0x80000001}, {0x0, 0x0, 0x0, 0x8510}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {0x0, 0xfffefffd}, {0x0, 0x0, 0x0, 0x1}, {}, {0x5}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, {0x0, 0x0, 0x200}, {}, {}, {0x5}, {}, {}, {}, {0x0, 0x103, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {0x0, 0x0, 0x0, 0x4, 0x9}, {}, {0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x2, 0x0, 0x0, 0x0, 0xa4a}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x56}, {0x0, 0x0, 0xfffffffc}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x2}, {0x20000000, 0xfffffffd}, {0x6}, {0x7f, 0x0, 0x3}, {}, {}, {0x0, 0x2, 0x0, 0x0, 0xa, 0xfffffffe}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {0x2, 0x0, 0x20000000}, {0x0, 0xfffffffd, 0x5}, {}, {}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x292}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {0xf5, 0x0, 0x0, 0x0, 0x0, 0x101}, {0x0, 0x5, 0x0, 0x0, 0x1}, {0x0, 0x5}, {0x0, 0x0, 0x0, 0x0, 0x80}, {0x10000000, 0x0, 0x0, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x3}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {}, {}, {0xfffffffe, 0x0, 0x3, 0x0, 0x8000}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {0x0, 0x8000}, {0x0, 0x0, 0x10000}, {0x0, 0x80000000, 0x0, 0x7fff800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}], [{}, {}, {}, {}, {}, {0x3, 0x1}, {}, {0x0, 0x1}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {0x4, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {0x3}, {}, {0x0, 0x1}, {}, {0x4}, {0x1}, {}, {}, {}, {}, {0x0, 0x3f7278fbb5d0304a}, {0x4}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x1}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x1}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {0x2, 0x1}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x4}, {0x3}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) 0s ago: executing program 6 (id=979): syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x7, 0x0, 0x0, 0x200, 0x0, 0x1}) io_uring_enter(0xffffffffffffffff, 0x47fa, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) msgctl$IPC_RMID(0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000012c0)=ANY=[@ANYBLOB="10000000040000000400000002"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a80)={{r1}, &(0x7f0000000a00), &(0x7f0000000a40)=r0, 0x1000000}, 0x20) kernel console output (not intermixed with test programs): 71.215048][ T4951] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 71.215062][ T4951] Call Trace: [ 71.215069][ T4951] [ 71.215077][ T4951] __dump_stack+0x1d/0x30 [ 71.215099][ T4951] dump_stack_lvl+0xe8/0x140 [ 71.215121][ T4951] dump_stack+0x15/0x1b [ 71.215198][ T4951] should_fail_ex+0x265/0x280 [ 71.215376][ T4951] should_fail+0xb/0x20 [ 71.215406][ T4951] should_fail_usercopy+0x1a/0x20 [ 71.215432][ T4951] _copy_from_user+0x1c/0xb0 [ 71.215507][ T4951] ucma_create_id+0x7d/0x250 [ 71.215531][ T4951] ucma_write+0x1b0/0x250 [ 71.215659][ T4951] vfs_writev+0x3eb/0x870 [ 71.215721][ T4951] ? __pfx_ucma_write+0x10/0x10 [ 71.215760][ T4951] do_writev+0xe7/0x210 [ 71.215878][ T4951] __x64_sys_writev+0x45/0x50 [ 71.215963][ T4951] x64_sys_call+0x2006/0x2fb0 [ 71.215990][ T4951] do_syscall_64+0xd0/0x1a0 [ 71.216014][ T4951] ? clear_bhb_loop+0x25/0x80 [ 71.216037][ T4951] ? clear_bhb_loop+0x25/0x80 [ 71.216175][ T4951] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 71.216208][ T4951] RIP: 0033:0x7f9398a8e969 [ 71.216224][ T4951] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 71.216278][ T4951] RSP: 002b:00007f93970f7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 71.216302][ T4951] RAX: ffffffffffffffda RBX: 00007f9398cb5fa0 RCX: 00007f9398a8e969 [ 71.216343][ T4951] RDX: 0000000000000003 RSI: 0000200000000000 RDI: 0000000000000003 [ 71.216354][ T4951] RBP: 00007f93970f7090 R08: 0000000000000000 R09: 0000000000000000 [ 71.216365][ T4951] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 71.216456][ T4951] R13: 0000000000000000 R14: 00007f9398cb5fa0 R15: 00007ffe1666df48 [ 71.216478][ T4951] [ 71.447873][ T4953] loop5: detected capacity change from 0 to 2048 [ 71.518849][ T4953] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 71.553125][ T4967] sch_tbf: burst 3092 is lower than device lo mtu (65550) ! [ 71.585293][ T4966] netlink: 8 bytes leftover after parsing attributes in process `syz.5.421'. [ 71.594853][ T4953] netlink: 8 bytes leftover after parsing attributes in process `syz.5.421'. [ 71.634783][ T4966] netlink: 'syz.5.421': attribute type 1 has an invalid length. [ 71.642938][ T4953] netlink: 'syz.5.421': attribute type 1 has an invalid length. [ 71.657260][ T4966] netem: change failed [ 71.664050][ T4976] netlink: 12 bytes leftover after parsing attributes in process `syz.0.430'. [ 71.676544][ T4966] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 71.698528][ T4953] netlink: 'syz.5.421': attribute type 1 has an invalid length. [ 71.706939][ T4953] netlink: 16 bytes leftover after parsing attributes in process `syz.5.421'. [ 71.745774][ T3813] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.807120][ T4980] loop2: detected capacity change from 0 to 128 [ 71.816677][ T4980] EXT4-fs: Ignoring removed nobh option [ 71.840145][ T3381] Process accounting resumed [ 71.861105][ T4980] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 71.968714][ T4980] ext4 filesystem being mounted at /89/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 72.028253][ T4980] EXT4-fs (loop2): shut down requested (0) [ 72.035249][ T4989] SELinux: failed to load policy [ 72.062451][ T3310] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 72.123612][ T4999] netlink: 20 bytes leftover after parsing attributes in process `syz.0.440'. [ 72.136507][ T4999] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 72.149380][ T4999] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 72.168342][ T5001] loop2: detected capacity change from 0 to 256 [ 72.175166][ T5003] loop4: detected capacity change from 0 to 512 [ 72.187685][ T5001] FAT-fs (loop2): Directory bread(block 64) failed [ 72.196588][ T5001] FAT-fs (loop2): Directory bread(block 65) failed [ 72.203632][ T5001] FAT-fs (loop2): Directory bread(block 66) failed [ 72.211052][ T5001] FAT-fs (loop2): Directory bread(block 67) failed [ 72.217883][ T5001] FAT-fs (loop2): Directory bread(block 68) failed [ 72.225006][ T5001] FAT-fs (loop2): Directory bread(block 69) failed [ 72.232341][ T5001] FAT-fs (loop2): Directory bread(block 70) failed [ 72.240029][ T5001] FAT-fs (loop2): Directory bread(block 71) failed [ 72.247556][ T5003] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.261975][ T5001] FAT-fs (loop2): Directory bread(block 72) failed [ 72.269330][ T5003] ext4 filesystem being mounted at /95/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 72.282391][ T5001] FAT-fs (loop2): Directory bread(block 73) failed [ 72.381289][ T5013] loop2: detected capacity change from 0 to 512 [ 72.390369][ T5013] EXT4-fs: Ignoring removed nobh option [ 72.410117][ T5013] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.446: invalid indirect mapped block 256 (level 2) [ 72.429916][ T5013] EXT4-fs (loop2): 2 truncates cleaned up [ 72.436304][ T5013] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.453473][ T5016] SELinux: failed to load policy [ 72.475305][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.542453][ T5019] veth0_vlan: mtu greater than device maximum [ 72.593480][ T4897] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.667220][ T5012] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.446: bg 0: block 5: invalid block bitmap [ 72.689368][ T5012] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 72.702725][ T5012] EXT4-fs (loop2): This should not happen!! Data will be lost [ 72.702725][ T5012] [ 72.711378][ T5021] EXT4-fs warning (device loop2): ext4_block_to_path:107: block 209748080 > max in inode 15 [ 72.712854][ T5012] EXT4-fs (loop2): Total free blocks count 0 [ 72.723603][ T5021] EXT4-fs warning (device loop2): ext4_block_to_path:107: block 209748084 > max in inode 15 [ 72.729542][ T5012] EXT4-fs (loop2): Free/Dirty block details [ 72.745816][ T5012] EXT4-fs (loop2): free_blocks=0 [ 72.750901][ T5012] EXT4-fs (loop2): dirty_blocks=1377 [ 72.756659][ T5012] EXT4-fs (loop2): Block reservation details [ 72.763072][ T5012] EXT4-fs (loop2): i_reserved_data_blocks=1377 [ 72.775134][ T5029] FAULT_INJECTION: forcing a failure. [ 72.775134][ T5029] name failslab, interval 1, probability 0, space 0, times 0 [ 72.788233][ T5029] CPU: 1 UID: 0 PID: 5029 Comm: syz.4.451 Not tainted 6.15.0-rc4-syzkaller-00189-g2bfcee565c3a #0 PREEMPT(voluntary) [ 72.788266][ T5029] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 72.788280][ T5029] Call Trace: [ 72.788286][ T5029] [ 72.788299][ T5029] __dump_stack+0x1d/0x30 [ 72.788324][ T5029] dump_stack_lvl+0xe8/0x140 [ 72.788377][ T5029] dump_stack+0x15/0x1b [ 72.788392][ T5029] should_fail_ex+0x265/0x280 [ 72.788425][ T5029] ? flow_change+0x1bf/0xc80 [ 72.788463][ T5029] should_failslab+0x8c/0xb0 [ 72.788537][ T5029] __kmalloc_cache_noprof+0x4c/0x320 [ 72.788599][ T5029] flow_change+0x1bf/0xc80 [ 72.788686][ T5029] ? flow_init+0x31/0x80 [ 72.788725][ T5029] ? __pfx_flow_change+0x10/0x10 [ 72.788789][ T5029] tc_new_tfilter+0xde1/0x10a0 [ 72.788839][ T5029] ? ns_capable+0x7d/0xb0 [ 72.788857][ T5029] ? __pfx_tc_new_tfilter+0x10/0x10 [ 72.788960][ T5029] rtnetlink_rcv_msg+0x5fb/0x6d0 [ 72.788995][ T5029] netlink_rcv_skb+0x120/0x220 [ 72.789031][ T5029] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 72.789064][ T5029] rtnetlink_rcv+0x1c/0x30 [ 72.789114][ T5029] netlink_unicast+0x59e/0x670 [ 72.789154][ T5029] netlink_sendmsg+0x58b/0x6b0 [ 72.789244][ T5029] ? __pfx_netlink_sendmsg+0x10/0x10 [ 72.789281][ T5029] __sock_sendmsg+0x142/0x180 [ 72.789326][ T5029] ____sys_sendmsg+0x31e/0x4e0 [ 72.789409][ T5029] ___sys_sendmsg+0x17b/0x1d0 [ 72.789453][ T5029] __x64_sys_sendmsg+0xd4/0x160 [ 72.789491][ T5029] x64_sys_call+0x2999/0x2fb0 [ 72.789516][ T5029] do_syscall_64+0xd0/0x1a0 [ 72.789582][ T5029] ? clear_bhb_loop+0x25/0x80 [ 72.789603][ T5029] ? clear_bhb_loop+0x25/0x80 [ 72.789624][ T5029] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 72.789648][ T5029] RIP: 0033:0x7f87e5c7e969 [ 72.789666][ T5029] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 72.789688][ T5029] RSP: 002b:00007f87e42e7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 72.789742][ T5029] RAX: ffffffffffffffda RBX: 00007f87e5ea5fa0 RCX: 00007f87e5c7e969 [ 72.789754][ T5029] RDX: 0000000020040054 RSI: 0000200000006040 RDI: 0000000000000006 [ 72.789769][ T5029] RBP: 00007f87e42e7090 R08: 0000000000000000 R09: 0000000000000000 [ 72.789783][ T5029] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 72.789798][ T5029] R13: 0000000000000000 R14: 00007f87e5ea5fa0 R15: 00007ffff81cf8f8 [ 72.789879][ T5029] [ 73.072789][ T5021] EXT4-fs warning (device loop2): ext4_block_to_path:107: block 209748088 > max in inode 15 [ 73.075701][ T5035] netlink: 12 bytes leftover after parsing attributes in process `syz.0.454'. [ 73.098738][ T5021] EXT4-fs warning (device loop2): ext4_block_to_path:107: block 209748092 > max in inode 15 [ 73.131916][ T5021] EXT4-fs warning (device loop2): ext4_block_to_path:107: block 209748096 > max in inode 15 [ 73.158296][ T52] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 36 with max blocks 1376 with error 28 [ 73.180115][ T5021] EXT4-fs warning (device loop2): ext4_block_to_path:107: block 209748100 > max in inode 15 [ 73.188803][ T5019] EXT4-fs warning (device loop2): ext4_block_to_path:107: block 209747968 > max in inode 15 [ 73.191948][ T5021] EXT4-fs warning (device loop2): ext4_block_to_path:107: block 209748104 > max in inode 15 [ 73.212069][ T5019] EXT4-fs warning (device loop2): ext4_block_to_path:107: block 209747968 > max in inode 15 [ 73.227151][ T5021] EXT4-fs warning (device loop2): ext4_block_to_path:107: block 209748108 > max in inode 15 [ 73.241570][ T5046] program syz.4.460 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 73.252453][ T5046] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 73.264635][ T5044] loop5: detected capacity change from 0 to 512 [ 73.355313][ T5044] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.369952][ T5044] ext4 filesystem being mounted at /45/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 73.416096][ T5061] loop4: detected capacity change from 0 to 128 [ 73.427189][ T5061] EXT4-fs: Ignoring removed nobh option [ 73.435412][ T5061] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 73.476512][ T5066] loop0: detected capacity change from 0 to 512 [ 73.483796][ T5061] ext4 filesystem being mounted at /104/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 73.484145][ T5066] EXT4-fs: Ignoring removed nobh option [ 73.523197][ T5061] EXT4-fs (loop4): shut down requested (0) [ 73.542907][ T3312] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 73.543054][ T5066] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.467: invalid indirect mapped block 256 (level 2) [ 73.570300][ T3813] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.580123][ T5066] EXT4-fs (loop0): 2 truncates cleaned up [ 73.586965][ T5066] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.634016][ T5075] program syz.5.471 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 73.660777][ T5075] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 73.762750][ T5090] smc: net device bond0 applied user defined pnetid SYZ2 [ 73.770178][ T5090] smc: ib device syz2 ibport 1 applied user defined pnetid SYZ2 [ 73.778304][ T5090] smc: net device bond0 erased user defined pnetid SYZ2 [ 73.786198][ T5090] smc: ib device syz2 ibport 1 erased user defined pnetid SYZ2 [ 73.802052][ T5087] veth0_vlan: mtu greater than device maximum [ 73.859733][ T5098] tmpfs: Bad value for 'mpol' [ 73.956903][ T5108] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm syz.0.467: bg 0: block 5: invalid block bitmap [ 73.969648][ T5107] SELinux: failed to load policy [ 73.977140][ T5108] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 73.980922][ T5087] EXT4-fs warning (device loop0): ext4_block_to_path:107: block 209749416 > max in inode 15 [ 73.990318][ T5108] EXT4-fs (loop0): This should not happen!! Data will be lost [ 73.990318][ T5108] [ 74.011029][ T5108] EXT4-fs (loop0): Total free blocks count 0 [ 74.013450][ T5099] EXT4-fs warning (device loop0): ext4_block_to_path:107: block 209748172 > max in inode 15 [ 74.017209][ T5108] EXT4-fs (loop0): Free/Dirty block details [ 74.017234][ T5108] EXT4-fs (loop0): free_blocks=0 [ 74.017246][ T5108] EXT4-fs (loop0): dirty_blocks=1449 [ 74.017256][ T5108] EXT4-fs (loop0): Block reservation details [ 74.050869][ T5108] EXT4-fs (loop0): i_reserved_data_blocks=1449 [ 74.068656][ T5099] EXT4-fs warning (device loop0): ext4_block_to_path:107: block 209748176 > max in inode 15 [ 74.069136][ T5087] EXT4-fs warning (device loop0): ext4_block_to_path:107: block 209749416 > max in inode 15 [ 74.107222][ T5099] EXT4-fs warning (device loop0): ext4_block_to_path:107: block 209748180 > max in inode 15 [ 74.118596][ T5099] EXT4-fs warning (device loop0): ext4_block_to_path:107: block 209748184 > max in inode 15 [ 74.131224][ T5116] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 74.141907][ T5099] EXT4-fs warning (device loop0): ext4_block_to_path:107: block 209748188 > max in inode 15 [ 74.143446][ T4897] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.155822][ T5099] EXT4-fs warning (device loop0): ext4_block_to_path:107: block 209748192 > max in inode 15 [ 74.167495][ T5116] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 74.179090][ T5099] EXT4-fs warning (device loop0): ext4_block_to_path:107: block 209748196 > max in inode 15 [ 74.193709][ T5099] EXT4-fs warning (device loop0): ext4_block_to_path:107: block 209748200 > max in inode 15 [ 74.222743][ T4897] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.289494][ T4897] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.304439][ T4897] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.316813][ T4897] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.340347][ T4897] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.356070][ T1039] Process accounting resumed [ 74.544025][ T5132] hub 2-0:1.0: USB hub found [ 74.549257][ T5132] hub 2-0:1.0: 8 ports detected [ 74.572146][ T5132] loop4: detected capacity change from 0 to 512 [ 74.579664][ T5132] EXT4-fs: Ignoring removed oldalloc option [ 74.794325][ T5132] EXT4-fs error (device loop4): ext4_xattr_inode_iget:433: comm syz.4.493: Parent and EA inode have the same ino 15 [ 74.810752][ T5132] EXT4-fs error (device loop4): ext4_xattr_inode_iget:433: comm syz.4.493: Parent and EA inode have the same ino 15 [ 74.823888][ T5132] EXT4-fs (loop4): 1 orphan inode deleted [ 74.830580][ T5132] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.973927][ T52] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 36 with max blocks 1448 with error 28 [ 75.020570][ T5143] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 75.187839][ T5143] SELinux: failed to load policy [ 75.277165][ T29] kauditd_printk_skb: 291 callbacks suppressed [ 75.277179][ T29] audit: type=1326 audit(1746241706.280:919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5148 comm="syz.1.501" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3d16dce969 code=0x0 [ 75.381256][ T29] audit: type=1400 audit(1746241706.390:920): avc: denied { write } for pid=5155 comm="syz.2.505" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 75.482389][ T29] audit: type=1400 audit(1746241706.420:921): avc: denied { shutdown } for pid=5155 comm="syz.2.505" lport=53154 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 75.511357][ T5162] syz.2.505 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 75.543239][ T5161] SELinux: Context system_u:object_r:inetd_log_t:s0 is not valid (left unmapped). [ 75.555295][ T5164] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.577933][ T29] audit: type=1400 audit(1746241706.510:922): avc: denied { connect } for pid=5155 comm="syz.2.505" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 75.599288][ T29] audit: type=1400 audit(1746241706.550:923): avc: denied { relabelfrom } for pid=5154 comm="syz.5.504" name="" dev="pipefs" ino=5672 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 75.622330][ T29] audit: type=1400 audit(1746241706.560:924): avc: denied { relabelto } for pid=5154 comm="syz.5.504" name="" dev="pipefs" ino=5672 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=fifo_file permissive=1 trawcon="system_u:object_r:inetd_log_t:s0" [ 75.740688][ T5164] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.816918][ T5164] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.867368][ T5174] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 75.881203][ T5164] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.905625][ T5174] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 76.009850][ T5164] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.033858][ T5164] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.058778][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.081775][ T5164] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.116542][ T5164] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.141635][ T29] audit: type=1326 audit(1746241707.140:925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5190 comm="syz.4.509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87e5c7e969 code=0x7ffc0000 [ 76.165667][ T29] audit: type=1326 audit(1746241707.140:926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5190 comm="syz.4.509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87e5c7e969 code=0x7ffc0000 [ 76.190311][ T29] audit: type=1326 audit(1746241707.150:927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5190 comm="syz.4.509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f87e5c7e969 code=0x7ffc0000 [ 76.237283][ T29] audit: type=1326 audit(1746241707.150:928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5190 comm="syz.4.509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87e5c7e969 code=0x7ffc0000 [ 76.324202][ T5205] loop1: detected capacity change from 0 to 128 [ 76.344330][ T5205] EXT4-fs: Ignoring removed nobh option [ 76.363327][ T5210] loop2: detected capacity change from 0 to 512 [ 76.447993][ T5220] netlink: 20 bytes leftover after parsing attributes in process `syz.0.522'. [ 76.484764][ T5205] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 76.517957][ T5205] ext4 filesystem being mounted at /14/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 76.522682][ T5210] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.575024][ T5210] ext4 filesystem being mounted at /110/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 76.633364][ T5231] hub 2-0:1.0: USB hub found [ 76.638182][ T5231] hub 2-0:1.0: 8 ports detected [ 76.655737][ T5231] loop4: detected capacity change from 0 to 512 [ 76.662985][ T5231] EXT4-fs: Ignoring removed oldalloc option [ 76.752441][ T5231] EXT4-fs error (device loop4): ext4_xattr_inode_iget:433: comm syz.4.520: Parent and EA inode have the same ino 15 [ 76.766548][ T5231] EXT4-fs error (device loop4): ext4_xattr_inode_iget:433: comm syz.4.520: Parent and EA inode have the same ino 15 [ 76.781335][ T5231] EXT4-fs (loop4): 1 orphan inode deleted [ 76.788326][ T5231] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 76.943524][ T4557] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 77.114190][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.171484][ T5244] atomic_op ffff8881048e5128 conn xmit_atomic 0000000000000000 [ 77.190954][ T5247] loop5: detected capacity change from 0 to 128 [ 77.259987][ T5247] EXT4-fs: Ignoring removed nobh option [ 77.267335][ T5243] atomic_op ffff888117ee2528 conn xmit_atomic 0000000000000000 [ 77.281762][ T5247] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 77.297069][ T5247] ext4 filesystem being mounted at /61/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 77.326256][ T5247] EXT4-fs (loop5): shut down requested (0) [ 77.347221][ T3813] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 77.915453][ T5278] netlink: 12 bytes leftover after parsing attributes in process `syz.2.539'. [ 78.107698][ T5282] smc: net device bond0 applied user defined pnetid SYZ2 [ 78.126497][ T5282] smc: ib device syz2 ibport 1 applied user defined pnetid SYZ2 [ 78.145157][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.165928][ T5283] smc: net device bond0 erased user defined pnetid SYZ2 [ 78.193367][ T5283] smc: ib device syz2 ibport 1 erased user defined pnetid SYZ2 [ 78.205232][ T5285] smc: net device bond0 applied user defined pnetid SYZ2 [ 78.236207][ T5285] smc: ib device syz2 ibport 1 applied user defined pnetid SYZ2 [ 78.262044][ T5285] smc: net device bond0 erased user defined pnetid SYZ2 [ 78.269778][ T5285] smc: ib device syz2 ibport 1 erased user defined pnetid SYZ2 [ 78.306707][ T5294] loop1: detected capacity change from 0 to 128 [ 78.322411][ T3382] Process accounting resumed [ 78.331958][ T5293] SELinux: failed to load policy [ 78.355376][ T5294] EXT4-fs: Ignoring removed nobh option [ 78.379164][ T5294] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 78.393247][ T5294] ext4 filesystem being mounted at /19/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 78.404049][ T5301] IPv6: syztnl0: Disabled Multicast RS [ 78.433954][ T4557] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 78.454205][ T5301] loop0: detected capacity change from 0 to 128 [ 78.536791][ T5310] netlink: 12 bytes leftover after parsing attributes in process `syz.1.550'. [ 78.885063][ T5316] hub 2-0:1.0: USB hub found [ 78.890363][ T5316] hub 2-0:1.0: 8 ports detected [ 78.908624][ T5316] loop1: detected capacity change from 0 to 512 [ 78.915874][ T5316] EXT4-fs: Ignoring removed oldalloc option [ 79.071781][ T5316] EXT4-fs error (device loop1): ext4_xattr_inode_iget:433: comm syz.1.551: Parent and EA inode have the same ino 15 [ 79.085475][ T5316] EXT4-fs error (device loop1): ext4_xattr_inode_iget:433: comm syz.1.551: Parent and EA inode have the same ino 15 [ 79.099360][ T5316] EXT4-fs (loop1): 1 orphan inode deleted [ 79.106399][ T5316] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 79.301442][ T5321] smc: net device bond0 applied user defined pnetid SYZ2 [ 79.331644][ T5321] smc: ib device syz2 ibport 1 applied user defined pnetid SYZ2 [ 79.364872][ T5322] smc: net device bond0 erased user defined pnetid SYZ2 [ 79.393806][ T5322] smc: ib device syz2 ibport 1 erased user defined pnetid SYZ2 [ 79.582385][ T5326] FAULT_INJECTION: forcing a failure. [ 79.582385][ T5326] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 79.596414][ T5326] CPU: 1 UID: 0 PID: 5326 Comm: syz.2.555 Not tainted 6.15.0-rc4-syzkaller-00189-g2bfcee565c3a #0 PREEMPT(voluntary) [ 79.596440][ T5326] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 79.596461][ T5326] Call Trace: [ 79.596468][ T5326] [ 79.596476][ T5326] __dump_stack+0x1d/0x30 [ 79.596497][ T5326] dump_stack_lvl+0xe8/0x140 [ 79.596578][ T5326] dump_stack+0x15/0x1b [ 79.596599][ T5326] should_fail_ex+0x265/0x280 [ 79.596673][ T5326] should_fail_alloc_page+0xf2/0x100 [ 79.596764][ T5326] alloc_pages_bulk_noprof+0xef/0x540 [ 79.596853][ T5326] copy_splice_read+0xf3/0x5f0 [ 79.596922][ T5326] ? __pfx_copy_splice_read+0x10/0x10 [ 79.596986][ T5326] splice_direct_to_actor+0x26c/0x680 [ 79.597080][ T5326] ? __pfx_direct_splice_actor+0x10/0x10 [ 79.597147][ T5326] do_splice_direct+0xda/0x150 [ 79.597166][ T5326] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 79.597197][ T5326] do_sendfile+0x380/0x640 [ 79.597255][ T5326] __x64_sys_sendfile64+0x105/0x150 [ 79.597330][ T5326] x64_sys_call+0xb39/0x2fb0 [ 79.597350][ T5326] do_syscall_64+0xd0/0x1a0 [ 79.597377][ T5326] ? clear_bhb_loop+0x25/0x80 [ 79.597404][ T5326] ? clear_bhb_loop+0x25/0x80 [ 79.597427][ T5326] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 79.597512][ T5326] RIP: 0033:0x7f0bac7ae969 [ 79.597528][ T5326] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 79.597546][ T5326] RSP: 002b:00007f0baae17038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 79.597568][ T5326] RAX: ffffffffffffffda RBX: 00007f0bac9d5fa0 RCX: 00007f0bac7ae969 [ 79.597630][ T5326] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000003 [ 79.597644][ T5326] RBP: 00007f0baae17090 R08: 0000000000000000 R09: 0000000000000000 [ 79.597659][ T5326] R10: 000000040000f63c R11: 0000000000000246 R12: 0000000000000001 [ 79.597674][ T5326] R13: 0000000000000000 R14: 00007f0bac9d5fa0 R15: 00007ffdd6d050c8 [ 79.597695][ T5326] [ 79.979876][ T5328] SELinux: failed to load policy [ 80.187424][ T5338] loop2: detected capacity change from 0 to 128 [ 80.220621][ T5338] EXT4-fs: Ignoring removed nobh option [ 80.238224][ T5338] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 80.261297][ T5338] ext4 filesystem being mounted at /126/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 80.274645][ T4557] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.305493][ T3310] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 80.544109][ T29] kauditd_printk_skb: 145 callbacks suppressed [ 80.544124][ T29] audit: type=1400 audit(1746241711.550:1074): avc: denied { create } for pid=5359 comm="syz.2.572" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 80.555084][ T5360] SELinux: Context Ü is not valid (left unmapped). [ 80.627647][ T29] audit: type=1326 audit(1746241711.630:1075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5359 comm="syz.2.572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bac7ae969 code=0x7ffc0000 [ 80.688619][ T29] audit: type=1326 audit(1746241711.630:1076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5359 comm="syz.2.572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f0bac7ae969 code=0x7ffc0000 [ 80.694745][ T5367] loop1: detected capacity change from 0 to 128 [ 80.713483][ T29] audit: type=1326 audit(1746241711.630:1077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5359 comm="syz.2.572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bac7ae969 code=0x7ffc0000 [ 80.745718][ T29] audit: type=1326 audit(1746241711.630:1078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5359 comm="syz.2.572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0bac7ae969 code=0x7ffc0000 [ 80.753103][ T5367] EXT4-fs: Ignoring removed nobh option [ 80.769586][ T29] audit: type=1326 audit(1746241711.630:1079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5359 comm="syz.2.572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bac7ae969 code=0x7ffc0000 [ 80.799086][ T29] audit: type=1326 audit(1746241711.660:1080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5359 comm="syz.2.572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0bac7ae969 code=0x7ffc0000 [ 80.823094][ T29] audit: type=1326 audit(1746241711.660:1081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5359 comm="syz.2.572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bac7ae969 code=0x7ffc0000 [ 80.847590][ T29] audit: type=1326 audit(1746241711.660:1082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5359 comm="syz.2.572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0bac7ae969 code=0x7ffc0000 [ 80.871359][ T29] audit: type=1326 audit(1746241711.660:1083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5359 comm="syz.2.572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bac7ae969 code=0x7ffc0000 [ 80.896885][ T5360] loop2: detected capacity change from 0 to 512 [ 80.921378][ T5367] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 80.940461][ T5367] ext4 filesystem being mounted at /32/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 80.980178][ T4557] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 80.996669][ T5360] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 81.087278][ T5382] smc: net device bond0 applied user defined pnetid SYZ2 [ 81.096006][ T5382] smc: ib device syz2 ibport 1 applied user defined pnetid SYZ2 [ 81.106848][ T5360] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.122630][ T5360] ext4 filesystem being mounted at /130/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 81.144396][ T5360] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.162822][ T10] Process accounting resumed [ 81.200039][ T5382] smc: net device bond0 erased user defined pnetid SYZ2 [ 81.207925][ T5382] smc: ib device syz2 ibport 1 erased user defined pnetid SYZ2 [ 81.278293][ T5385] netlink: 16 bytes leftover after parsing attributes in process `syz.5.580'. [ 81.313804][ T5385] loop5: detected capacity change from 0 to 256 [ 81.466482][ T5392] loop2: detected capacity change from 0 to 128 [ 81.479675][ T5392] EXT4-fs: Ignoring removed nobh option [ 81.519579][ T5396] tls_set_device_offload: netdev not found [ 81.558380][ T5392] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 81.582782][ T5406] loop0: detected capacity change from 0 to 128 [ 81.609237][ T5406] EXT4-fs: Ignoring removed nobh option [ 81.615546][ T5392] ext4 filesystem being mounted at /131/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 81.636448][ T5406] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 81.666611][ T5406] ext4 filesystem being mounted at /111/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 81.691242][ T3310] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 81.703584][ T3311] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 81.731732][ T5424] program syz.0.595 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 81.742092][ T5424] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 81.909747][ T5452] netlink: 56 bytes leftover after parsing attributes in process `syz.1.602'. [ 81.919591][ T5452] netlink: 8 bytes leftover after parsing attributes in process `syz.1.602'. [ 81.980772][ T5461] loop2: detected capacity change from 0 to 512 [ 81.993674][ T5461] EXT4-fs: Ignoring removed nobh option [ 82.012717][ T5466] FAULT_INJECTION: forcing a failure. [ 82.012717][ T5466] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 82.027356][ T5466] CPU: 0 UID: 0 PID: 5466 Comm: syz.1.606 Not tainted 6.15.0-rc4-syzkaller-00189-g2bfcee565c3a #0 PREEMPT(voluntary) [ 82.027390][ T5466] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 82.027405][ T5466] Call Trace: [ 82.027414][ T5466] [ 82.027461][ T5466] __dump_stack+0x1d/0x30 [ 82.027486][ T5466] dump_stack_lvl+0xe8/0x140 [ 82.027508][ T5466] dump_stack+0x15/0x1b [ 82.027590][ T5466] should_fail_ex+0x265/0x280 [ 82.027625][ T5466] should_fail+0xb/0x20 [ 82.027661][ T5466] should_fail_usercopy+0x1a/0x20 [ 82.027697][ T5466] _copy_to_user+0x20/0xa0 [ 82.027718][ T5466] simple_read_from_buffer+0xb5/0x130 [ 82.027741][ T5466] proc_fail_nth_read+0x100/0x140 [ 82.027850][ T5466] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 82.027888][ T5466] vfs_read+0x19d/0x6f0 [ 82.027939][ T5466] ? __rcu_read_unlock+0x4f/0x70 [ 82.027963][ T5466] ? __rcu_read_unlock+0x4f/0x70 [ 82.027986][ T5466] ? __fget_files+0x184/0x1c0 [ 82.028140][ T5466] ksys_read+0xda/0x1a0 [ 82.028164][ T5466] __x64_sys_read+0x40/0x50 [ 82.028255][ T5466] x64_sys_call+0x2d77/0x2fb0 [ 82.028353][ T5466] do_syscall_64+0xd0/0x1a0 [ 82.028380][ T5466] ? clear_bhb_loop+0x25/0x80 [ 82.028401][ T5466] ? clear_bhb_loop+0x25/0x80 [ 82.028459][ T5466] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.028575][ T5466] RIP: 0033:0x7f3d16dcd37c [ 82.028594][ T5466] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 82.028615][ T5466] RSP: 002b:00007f3d15437030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 82.028635][ T5466] RAX: ffffffffffffffda RBX: 00007f3d16ff5fa0 RCX: 00007f3d16dcd37c [ 82.028689][ T5466] RDX: 000000000000000f RSI: 00007f3d154370a0 RDI: 0000000000000003 [ 82.028704][ T5466] RBP: 00007f3d15437090 R08: 0000000000000000 R09: 0000000000000000 [ 82.028757][ T5466] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 82.028781][ T5466] R13: 0000000000000001 R14: 00007f3d16ff5fa0 R15: 00007ffdd745f048 [ 82.028803][ T5466] [ 82.275543][ T5461] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.605: invalid indirect mapped block 256 (level 2) [ 82.315051][ T5461] EXT4-fs (loop2): 2 truncates cleaned up [ 82.328536][ T5475] program syz.0.607 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 82.332555][ T5461] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.364344][ T5463] loop4: detected capacity change from 0 to 512 [ 82.368078][ T5475] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 82.372663][ T5463] EXT4-fs: Ignoring removed oldalloc option [ 82.392256][ T5477] Falling back ldisc for ptm1. [ 82.486172][ T5463] EXT4-fs error (device loop4): ext4_xattr_inode_iget:433: comm syz.4.596: Parent and EA inode have the same ino 15 [ 82.588254][ T5500] veth0_vlan: mtu greater than device maximum [ 82.621957][ T5463] EXT4-fs error (device loop4): ext4_xattr_inode_iget:433: comm syz.4.596: Parent and EA inode have the same ino 15 [ 82.655753][ T5458] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.605: bg 0: block 5: invalid block bitmap [ 82.669501][ T5499] SELinux: failed to load policy [ 82.709157][ T5500] EXT4-fs warning (device loop2): ext4_block_to_path:107: block 209748216 > max in inode 15 [ 82.722133][ T5463] EXT4-fs (loop4): 1 orphan inode deleted [ 82.827458][ T5463] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 83.059579][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.241090][ T5519] smc: net device bond0 applied user defined pnetid SYZ2 [ 83.266972][ T5519] smc: ib device syz2 ibport 1 applied user defined pnetid SYZ2 [ 83.312569][ T5521] smc: net device bond0 erased user defined pnetid SYZ2 [ 83.336235][ T5521] smc: ib device syz2 ibport 1 erased user defined pnetid SYZ2 [ 83.433064][ T5528] loop1: detected capacity change from 0 to 512 [ 83.459407][ T5535] FAULT_INJECTION: forcing a failure. [ 83.459407][ T5535] name failslab, interval 1, probability 0, space 0, times 0 [ 83.460088][ T5528] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 83.472307][ T5535] CPU: 0 UID: 0 PID: 5535 Comm: syz.2.620 Not tainted 6.15.0-rc4-syzkaller-00189-g2bfcee565c3a #0 PREEMPT(voluntary) [ 83.472345][ T5535] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 83.472361][ T5535] Call Trace: [ 83.472368][ T5535] [ 83.472382][ T5535] __dump_stack+0x1d/0x30 [ 83.472409][ T5535] dump_stack_lvl+0xe8/0x140 [ 83.472434][ T5535] dump_stack+0x15/0x1b [ 83.472498][ T5535] should_fail_ex+0x265/0x280 [ 83.472537][ T5535] should_failslab+0x8c/0xb0 [ 83.472571][ T5535] kmem_cache_alloc_noprof+0x50/0x310 [ 83.472614][ T5535] ? __anon_vma_prepare+0x70/0x2f0 [ 83.472707][ T5535] ? pte_alloc_one+0xdd/0x110 [ 83.472731][ T5535] __anon_vma_prepare+0x70/0x2f0 [ 83.472764][ T5535] handle_mm_fault+0x1e68/0x2ae0 [ 83.472800][ T5535] ? __rcu_read_unlock+0x4f/0x70 [ 83.472938][ T5535] do_user_addr_fault+0x3fe/0x1090 [ 83.473001][ T5535] exc_page_fault+0x54/0xc0 [ 83.473099][ T5535] asm_exc_page_fault+0x26/0x30 [ 83.473123][ T5535] RIP: 0010:rep_movs_alternative+0x33/0x90 [ 83.473238][ T5535] Code: 73 25 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 <48> 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb [ 83.473262][ T5535] RSP: 0018:ffffc90003023e68 EFLAGS: 00050216 [ 83.473279][ T5535] RAX: 0000000000000000 RBX: 0000000000000020 RCX: 0000000000000020 [ 83.473292][ T5535] RDX: 0000000000000000 RSI: ffffc90003023ec0 RDI: 0000200000000440 [ 83.473329][ T5535] RBP: 0000000000000000 R08: 00000000000000c2 R09: 0000000000000000 [ 83.473344][ T5535] R10: 0001c90003023ec0 R11: 0001c90003023edf R12: 0000200000000460 [ 83.473387][ T5535] R13: 00007ffffffff000 R14: 0000200000000440 R15: ffffc90003023ec0 [ 83.473411][ T5535] _copy_to_user+0x7c/0xa0 [ 83.473438][ T5535] __x64_sys_getitimer+0xeb/0x130 [ 83.473532][ T5535] x64_sys_call+0x2df0/0x2fb0 [ 83.473559][ T5535] do_syscall_64+0xd0/0x1a0 [ 83.473585][ T5535] ? clear_bhb_loop+0x25/0x80 [ 83.473611][ T5535] ? clear_bhb_loop+0x25/0x80 [ 83.473782][ T5535] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.473808][ T5535] RIP: 0033:0x7f0bac7ae969 [ 83.473826][ T5535] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 83.473856][ T5535] RSP: 002b:00007f0baae17038 EFLAGS: 00000246 ORIG_RAX: 0000000000000024 [ 83.473875][ T5535] RAX: ffffffffffffffda RBX: 00007f0bac9d5fa0 RCX: 00007f0bac7ae969 [ 83.473890][ T5535] RDX: 0000000000000000 RSI: 0000200000000440 RDI: 0000000000000000 [ 83.473905][ T5535] RBP: 00007f0baae17090 R08: 0000000000000000 R09: 0000000000000000 [ 83.473919][ T5535] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 83.473933][ T5535] R13: 0000000000000001 R14: 00007f0bac9d5fa0 R15: 00007ffdd6d050c8 [ 83.473972][ T5535] [ 83.632436][ T5542] netlink: 12 bytes leftover after parsing attributes in process `syz.2.622'. [ 83.829648][ T5508] Process accounting resumed [ 83.902225][ T5528] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.933639][ T5528] ext4 filesystem being mounted at /38/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 83.959124][ T5556] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 83.976332][ T5556] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 83.993002][ T5528] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.187731][ T5576] smc: net device bond0 applied user defined pnetid SYZ2 [ 84.205524][ T5576] smc: ib device syz2 ibport 1 applied user defined pnetid SYZ2 [ 84.227250][ T5573] loop1: detected capacity change from 0 to 512 [ 84.238213][ T5576] smc: net device bond0 erased user defined pnetid SYZ2 [ 84.245699][ T5576] smc: ib device syz2 ibport 1 erased user defined pnetid SYZ2 [ 84.269353][ T5573] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 84.316915][ T5573] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.335662][ T5573] ext4 filesystem being mounted at /39/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 84.354340][ T5586] loop2: detected capacity change from 0 to 512 [ 84.369500][ T5586] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 84.387060][ T5573] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.399562][ T5586] EXT4-fs (loop2): 1 truncate cleaned up [ 84.405877][ T5586] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.498537][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.579866][ T5604] loop0: detected capacity change from 0 to 512 [ 84.587091][ T5604] EXT4-fs: Ignoring removed nobh option [ 84.602265][ T5609] FAULT_INJECTION: forcing a failure. [ 84.602265][ T5609] name failslab, interval 1, probability 0, space 0, times 0 [ 84.616129][ T5609] CPU: 0 UID: 0 PID: 5609 Comm: syz.2.635 Not tainted 6.15.0-rc4-syzkaller-00189-g2bfcee565c3a #0 PREEMPT(voluntary) [ 84.616162][ T5609] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 84.616178][ T5609] Call Trace: [ 84.616186][ T5609] [ 84.616236][ T5609] __dump_stack+0x1d/0x30 [ 84.616263][ T5609] dump_stack_lvl+0xe8/0x140 [ 84.616284][ T5609] dump_stack+0x15/0x1b [ 84.616299][ T5609] should_fail_ex+0x265/0x280 [ 84.616360][ T5609] ? __se_sys_memfd_create+0x1cc/0x590 [ 84.616389][ T5609] should_failslab+0x8c/0xb0 [ 84.616418][ T5609] __kmalloc_cache_noprof+0x4c/0x320 [ 84.616501][ T5609] __se_sys_memfd_create+0x1cc/0x590 [ 84.616533][ T5609] __x64_sys_memfd_create+0x31/0x40 [ 84.616563][ T5609] x64_sys_call+0x122f/0x2fb0 [ 84.616587][ T5609] do_syscall_64+0xd0/0x1a0 [ 84.616638][ T5609] ? clear_bhb_loop+0x25/0x80 [ 84.616664][ T5609] ? clear_bhb_loop+0x25/0x80 [ 84.616691][ T5609] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.616714][ T5609] RIP: 0033:0x7f0bac7ae969 [ 84.616729][ T5609] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 84.616750][ T5609] RSP: 002b:00007f0baae16e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 84.616836][ T5609] RAX: ffffffffffffffda RBX: 00000000000005ad RCX: 00007f0bac7ae969 [ 84.616851][ T5609] RDX: 00007f0baae16ef0 RSI: 0000000000000000 RDI: 00007f0bac831444 [ 84.616864][ T5609] RBP: 0000200000000180 R08: 00007f0baae16bb7 R09: 00007f0baae16e40 [ 84.616878][ T5609] R10: 000000000000000a R11: 0000000000000202 R12: 0000200000000040 [ 84.616894][ T5609] R13: 00007f0baae16ef0 R14: 00007f0baae16eb0 R15: 0000200000000940 [ 84.616937][ T5609] [ 84.680534][ T5604] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.634: invalid indirect mapped block 256 (level 2) [ 84.831006][ T5604] EXT4-fs (loop0): 2 truncates cleaned up [ 84.849965][ T5604] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.957298][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.999858][ T5622] veth0_vlan: mtu greater than device maximum [ 85.115259][ T5639] smc: net device bond0 applied user defined pnetid SYZ2 [ 85.123390][ T5603] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm syz.0.634: bg 0: block 5: invalid block bitmap [ 85.141408][ T5603] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 85.157305][ T5603] EXT4-fs (loop0): This should not happen!! Data will be lost [ 85.157305][ T5603] [ 85.169015][ T5603] EXT4-fs (loop0): Total free blocks count 0 [ 85.175010][ T5631] EXT4-fs warning (device loop0): ext4_block_to_path:107: block 209748004 > max in inode 15 [ 85.176199][ T5603] EXT4-fs (loop0): Free/Dirty block details [ 85.188222][ T5622] EXT4-fs warning (device loop0): ext4_block_to_path:107: block 209749036 > max in inode 15 [ 85.194357][ T5603] EXT4-fs (loop0): free_blocks=0 [ 85.209513][ T5643] loop4: detected capacity change from 0 to 512 [ 85.210186][ T5603] EXT4-fs (loop0): dirty_blocks=1069 [ 85.222765][ T5603] EXT4-fs (loop0): Block reservation details [ 85.229078][ T5603] EXT4-fs (loop0): i_reserved_data_blocks=1069 [ 85.232168][ T5631] EXT4-fs warning (device loop0): ext4_block_to_path:107: block 209748004 > max in inode 15 [ 85.236307][ T5639] smc: ib device syz2 ibport 1 applied user defined pnetid SYZ2 [ 85.249066][ T5622] EXT4-fs warning (device loop0): ext4_block_to_path:107: block 209749036 > max in inode 15 [ 85.266624][ T5643] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 85.296223][ T5631] EXT4-fs warning (device loop0): ext4_block_to_path:107: block 209748004 > max in inode 15 [ 85.306436][ T5655] netlink: 56 bytes leftover after parsing attributes in process `syz.2.646'. [ 85.306466][ T5655] netlink: 8 bytes leftover after parsing attributes in process `syz.2.646'. [ 85.314722][ T5642] smc: net device bond0 erased user defined pnetid SYZ2 [ 85.317271][ T5643] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 85.345664][ T5642] smc: ib device syz2 ibport 1 erased user defined pnetid SYZ2 [ 85.348412][ T5631] EXT4-fs warning (device loop0): ext4_block_to_path:107: block 209748004 > max in inode 15 [ 85.356969][ T5643] ext4 filesystem being mounted at /127/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 85.381148][ T5643] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.381208][ T5659] FAULT_INJECTION: forcing a failure. [ 85.381208][ T5659] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 85.405629][ T5659] CPU: 1 UID: 0 PID: 5659 Comm: syz.2.647 Not tainted 6.15.0-rc4-syzkaller-00189-g2bfcee565c3a #0 PREEMPT(voluntary) [ 85.405658][ T5659] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 85.405671][ T5659] Call Trace: [ 85.405678][ T5659] [ 85.405686][ T5659] __dump_stack+0x1d/0x30 [ 85.405706][ T5659] dump_stack_lvl+0xe8/0x140 [ 85.405749][ T5659] dump_stack+0x15/0x1b [ 85.405767][ T5659] should_fail_ex+0x265/0x280 [ 85.405840][ T5659] should_fail+0xb/0x20 [ 85.405868][ T5659] should_fail_usercopy+0x1a/0x20 [ 85.405891][ T5659] _copy_from_user+0x1c/0xb0 [ 85.405921][ T5659] io_register_clone_buffers+0x4e/0x750 [ 85.406065][ T5659] ? __fget_files+0x184/0x1c0 [ 85.406139][ T5659] __se_sys_io_uring_register+0x733/0xeb0 [ 85.406173][ T5659] ? __bpf_trace_sys_enter+0x10/0x30 [ 85.406258][ T5659] ? trace_sys_enter+0xd0/0x110 [ 85.406325][ T5659] __x64_sys_io_uring_register+0x55/0x70 [ 85.406358][ T5659] x64_sys_call+0xc91/0x2fb0 [ 85.406383][ T5659] do_syscall_64+0xd0/0x1a0 [ 85.406464][ T5659] ? clear_bhb_loop+0x25/0x80 [ 85.406485][ T5659] ? clear_bhb_loop+0x25/0x80 [ 85.406510][ T5659] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.406538][ T5659] RIP: 0033:0x7f0bac7ae969 [ 85.406577][ T5659] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 85.406598][ T5659] RSP: 002b:00007f0baae17038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 85.406620][ T5659] RAX: ffffffffffffffda RBX: 00007f0bac9d5fa0 RCX: 00007f0bac7ae969 [ 85.406635][ T5659] RDX: 0000200000000000 RSI: 000000000000001e RDI: 0000000000000004 [ 85.406648][ T5659] RBP: 00007f0baae17090 R08: 0000000000000000 R09: 0000000000000000 [ 85.406659][ T5659] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000001 [ 85.406673][ T5659] R13: 0000000000000000 R14: 00007f0bac9d5fa0 R15: 00007ffdd6d050c8 [ 85.406696][ T5659] [ 85.418650][ T5631] EXT4-fs warning (device loop0): ext4_block_to_path:107: block 209748004 > max in inode 15 [ 85.632813][ T5631] EXT4-fs warning (device loop0): ext4_block_to_path:107: block 209748004 > max in inode 15 [ 85.650907][ T5675] netlink: 12 bytes leftover after parsing attributes in process `syz.1.650'. [ 85.674955][ T5631] EXT4-fs warning (device loop0): ext4_block_to_path:107: block 209748004 > max in inode 15 [ 85.685963][ T41] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 36 with max blocks 1068 with error 28 [ 85.703904][ T5622] EXT4-fs warning (device loop0): ext4_block_to_path:107: block 209747968 > max in inode 15 [ 85.720455][ T29] kauditd_printk_skb: 86 callbacks suppressed [ 85.720472][ T29] audit: type=1326 audit(1746241716.730:1170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5674 comm="syz.1.650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d16dce969 code=0x7ffc0000 [ 85.752501][ T5681] hub 2-0:1.0: USB hub found [ 85.757870][ T5681] hub 2-0:1.0: 8 ports detected [ 85.786584][ T29] audit: type=1326 audit(1746241716.730:1171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5674 comm="syz.1.650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3d16dce969 code=0x7ffc0000 [ 85.813394][ T29] audit: type=1326 audit(1746241716.730:1172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5674 comm="syz.1.650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d16dce969 code=0x7ffc0000 [ 85.837329][ T29] audit: type=1326 audit(1746241716.730:1173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5674 comm="syz.1.650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f3d16dce969 code=0x7ffc0000 [ 85.861933][ T29] audit: type=1326 audit(1746241716.730:1174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5674 comm="syz.1.650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d16dce969 code=0x7ffc0000 [ 85.885894][ T29] audit: type=1326 audit(1746241716.730:1175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5674 comm="syz.1.650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f3d16dce969 code=0x7ffc0000 [ 85.911196][ T29] audit: type=1326 audit(1746241716.730:1176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5674 comm="syz.1.650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d16dce969 code=0x7ffc0000 [ 85.934946][ T29] audit: type=1326 audit(1746241716.740:1177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5674 comm="syz.1.650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d16dce969 code=0x7ffc0000 [ 86.001942][ T5681] loop5: detected capacity change from 0 to 512 [ 86.010607][ T5681] EXT4-fs: Ignoring removed oldalloc option [ 86.081223][ T5706] netlink: 56 bytes leftover after parsing attributes in process `syz.4.657'. [ 86.090894][ T5706] netlink: 8 bytes leftover after parsing attributes in process `syz.4.657'. [ 86.111423][ T5709] loop2: detected capacity change from 0 to 128 [ 86.119946][ T5709] EXT4-fs: Ignoring removed nobh option [ 86.142113][ T5681] EXT4-fs error (device loop5): ext4_xattr_inode_iget:433: comm syz.5.649: Parent and EA inode have the same ino 15 [ 86.163947][ T5709] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 86.186225][ T5709] ext4 filesystem being mounted at /164/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 86.216692][ T5681] EXT4-fs error (device loop5): ext4_xattr_inode_iget:433: comm syz.5.649: Parent and EA inode have the same ino 15 [ 86.283107][ T29] audit: type=1326 audit(1746241717.290:1178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5725 comm="syz.0.661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9398a8e969 code=0x7ffc0000 [ 86.289059][ T3310] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 86.310322][ T5681] EXT4-fs (loop5): 1 orphan inode deleted [ 86.327173][ T29] audit: type=1326 audit(1746241717.290:1179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5725 comm="syz.0.661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9398a8e969 code=0x7ffc0000 [ 86.329877][ T5727] netlink: 12 bytes leftover after parsing attributes in process `syz.4.662'. [ 86.396518][ T5733] loop0: detected capacity change from 0 to 1024 [ 86.404873][ T5733] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 86.416597][ T5733] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 86.426618][ T5733] JBD2: no valid journal superblock found [ 86.427286][ T5681] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 86.432498][ T5733] EXT4-fs (loop0): Could not load journal inode [ 86.593956][ T5768] loop1: detected capacity change from 0 to 512 [ 86.630039][ T5768] EXT4-fs: Ignoring removed nobh option [ 86.793287][ T5768] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.672: invalid indirect mapped block 256 (level 2) [ 86.830321][ T5768] EXT4-fs (loop1): 2 truncates cleaned up [ 86.839067][ T5768] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 86.935861][ T5783] hub 2-0:1.0: USB hub found [ 86.941619][ T5783] hub 2-0:1.0: 8 ports detected [ 86.961699][ T5783] loop2: detected capacity change from 0 to 512 [ 86.969858][ T5783] EXT4-fs: Ignoring removed oldalloc option [ 86.982775][ T5783] EXT4-fs error (device loop2): ext4_xattr_inode_iget:433: comm syz.2.675: Parent and EA inode have the same ino 15 [ 86.996841][ T5783] EXT4-fs error (device loop2): ext4_xattr_inode_iget:433: comm syz.2.675: Parent and EA inode have the same ino 15 [ 87.014807][ T5783] EXT4-fs (loop2): 1 orphan inode deleted [ 87.021810][ T5783] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 87.057052][ T5788] veth0_vlan: mtu greater than device maximum [ 87.267691][ T5788] EXT4-fs warning (device loop1): ext4_block_to_path:107: block 209748100 > max in inode 15 [ 87.307763][ T5789] EXT4-fs warning (device loop1): ext4_block_to_path:107: block 209747984 > max in inode 15 [ 87.319699][ T5789] EXT4-fs warning (device loop1): ext4_block_to_path:107: block 209747988 > max in inode 15 [ 87.330941][ T5789] EXT4-fs warning (device loop1): ext4_block_to_path:107: block 209747992 > max in inode 15 [ 87.341687][ T5789] EXT4-fs warning (device loop1): ext4_block_to_path:107: block 209747996 > max in inode 15 [ 87.353458][ T5789] EXT4-fs warning (device loop1): ext4_block_to_path:107: block 209748000 > max in inode 15 [ 87.390282][ T5765] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.672: bg 0: block 5: invalid block bitmap [ 87.411393][ T5765] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 87.423867][ T5765] EXT4-fs (loop1): This should not happen!! Data will be lost [ 87.423867][ T5765] [ 87.424008][ T5792] hub 2-0:1.0: USB hub found [ 87.433958][ T5765] EXT4-fs (loop1): Total free blocks count 0 [ 87.433981][ T5765] EXT4-fs (loop1): Free/Dirty block details [ 87.434000][ T5765] EXT4-fs (loop1): free_blocks=0 [ 87.434011][ T5765] EXT4-fs (loop1): dirty_blocks=133 [ 87.461153][ T5765] EXT4-fs (loop1): Block reservation details [ 87.467356][ T5765] EXT4-fs (loop1): i_reserved_data_blocks=133 [ 87.507849][ T5792] hub 2-0:1.0: 8 ports detected [ 87.590484][ T5794] loop4: detected capacity change from 0 to 512 [ 87.599775][ T5794] EXT4-fs: Ignoring removed oldalloc option [ 87.620439][ T5794] EXT4-fs error (device loop4): ext4_xattr_inode_iget:433: comm syz.4.674: Parent and EA inode have the same ino 15 [ 87.720680][ T5789] EXT4-fs warning (device loop1): ext4_block_to_path:107: block 209748004 > max in inode 15 [ 87.736136][ T5803] loop0: detected capacity change from 0 to 512 [ 87.812624][ T5803] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 87.842528][ T5788] EXT4-fs warning (device loop1): ext4_block_to_path:107: block 209748104 > max in inode 15 [ 87.846424][ T5789] EXT4-fs warning (device loop1): ext4_block_to_path:107: block 209748008 > max in inode 15 [ 87.853276][ T5788] EXT4-fs warning (device loop1): ext4_block_to_path:107: block 209748108 > max in inode 15 [ 87.898724][ T5794] EXT4-fs error (device loop4): ext4_xattr_inode_iget:433: comm syz.4.674: Parent and EA inode have the same ino 15 [ 87.911895][ T5803] ext4 filesystem being mounted at /131/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 88.012976][ T5803] EXT4-fs error (device loop0): ext4_get_first_dir_block:3538: inode #12: comm syz.0.677: directory missing '.' [ 88.090164][ T5803] EXT4-fs (loop0): Remounting filesystem read-only [ 88.098775][ T5794] EXT4-fs (loop4): 1 orphan inode deleted [ 88.105310][ T5794] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 88.158796][ T30] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 36 with max blocks 132 with error 28 [ 88.249427][ T3311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.606600][ T5830] loop2: detected capacity change from 0 to 128 [ 88.620128][ T5830] EXT4-fs: Ignoring removed nobh option [ 88.641525][ T5835] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 88.664654][ T5830] ext4 filesystem being mounted at /171/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 88.711698][ T5835] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 88.748607][ T5830] EXT4-fs (loop2): shut down requested (0) [ 89.145055][ T5874] loop0: detected capacity change from 0 to 512 [ 89.154110][ T5874] EXT4-fs: Ignoring removed oldalloc option [ 89.189982][ T5874] EXT4-fs error (device loop0): ext4_xattr_inode_iget:433: comm syz.0.687: Parent and EA inode have the same ino 15 [ 89.205161][ T5874] EXT4-fs error (device loop0): ext4_xattr_inode_iget:433: comm syz.0.687: Parent and EA inode have the same ino 15 [ 89.220979][ T5874] EXT4-fs (loop0): 1 orphan inode deleted [ 89.969712][ T5889] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.072174][ T5889] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.170291][ T5889] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.288843][ T5889] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.410036][ T5889] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.452800][ T5889] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.464781][ T5889] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.477227][ T5889] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.639736][ T5929] netlink: 12 bytes leftover after parsing attributes in process `syz.0.692'. [ 90.653917][ T5931] netlink: 56 bytes leftover after parsing attributes in process `syz.1.693'. [ 90.662964][ T5931] netlink: 8 bytes leftover after parsing attributes in process `syz.1.693'. [ 90.978591][ T5946] hub 2-0:1.0: USB hub found [ 90.983524][ T5946] hub 2-0:1.0: 8 ports detected [ 91.009614][ T5946] loop1: detected capacity change from 0 to 512 [ 91.016677][ T5946] EXT4-fs: Ignoring removed oldalloc option [ 91.140494][ T5946] EXT4-fs error (device loop1): ext4_xattr_inode_iget:433: comm syz.1.694: Parent and EA inode have the same ino 15 [ 91.153937][ T5946] EXT4-fs error (device loop1): ext4_xattr_inode_iget:433: comm syz.1.694: Parent and EA inode have the same ino 15 [ 91.170045][ T5946] EXT4-fs (loop1): 1 orphan inode deleted [ 91.215068][ T29] kauditd_printk_skb: 8 callbacks suppressed [ 91.215082][ T29] audit: type=1326 audit(1746241722.220:1188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5944 comm="syz.0.696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9398a8e969 code=0x7ffc0000 [ 91.515530][ T5945] loop0: detected capacity change from 0 to 512 [ 91.818593][ T29] audit: type=1326 audit(1746241722.260:1189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5944 comm="syz.0.696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9398a8e969 code=0x7ffc0000 [ 91.842083][ T29] audit: type=1326 audit(1746241722.260:1190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5944 comm="syz.0.696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f9398a8e969 code=0x7ffc0000 [ 91.865496][ T29] audit: type=1326 audit(1746241722.260:1191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5944 comm="syz.0.696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9398a8e969 code=0x7ffc0000 [ 91.889054][ T29] audit: type=1326 audit(1746241722.260:1192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5944 comm="syz.0.696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9398a8e969 code=0x7ffc0000 [ 91.912554][ T29] audit: type=1326 audit(1746241722.260:1193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5944 comm="syz.0.696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9398a8e969 code=0x7ffc0000 [ 91.936166][ T29] audit: type=1326 audit(1746241722.270:1194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5944 comm="syz.0.696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9398a8e969 code=0x7ffc0000 [ 91.960699][ T29] audit: type=1326 audit(1746241722.280:1195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5944 comm="syz.0.696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9398a8e969 code=0x7ffc0000 [ 91.984232][ T29] audit: type=1326 audit(1746241722.280:1196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5944 comm="syz.0.696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9398a8e969 code=0x7ffc0000 [ 92.008309][ T29] audit: type=1326 audit(1746241722.280:1197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5944 comm="syz.0.696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9398a8e969 code=0x7ffc0000 [ 92.041408][ T5945] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 92.444706][ T5945] ext4 filesystem being mounted at /141/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 92.653476][ T5978] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.690982][ T5978] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.741064][ T5978] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.760226][ T5999] netlink: 56 bytes leftover after parsing attributes in process `syz.0.704'. [ 92.769648][ T5999] netlink: 8 bytes leftover after parsing attributes in process `syz.0.704'. [ 92.824180][ T5978] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.871087][ T6015] netlink: 'syz.5.708': attribute type 39 has an invalid length. [ 92.895446][ T6015] veth1_macvtap: left promiscuous mode [ 93.083827][ T6038] loop5: detected capacity change from 0 to 128 [ 93.091975][ T6038] /dev/loop5: Can't open blockdev [ 93.202264][ T4591] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.275867][ T4591] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.366462][ T6062] loop4: detected capacity change from 0 to 512 [ 93.376712][ T4591] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.410641][ T6062] ext4 filesystem being mounted at /135/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 93.462433][ T4591] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.564354][ T4591] bridge_slave_1: left allmulticast mode [ 93.570252][ T4591] bridge_slave_1: left promiscuous mode [ 93.576013][ T4591] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.589557][ T4591] bridge_slave_0: left allmulticast mode [ 93.595603][ T4591] bridge_slave_0: left promiscuous mode [ 93.601571][ T4591] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.671756][ T6110] netlink: 12 bytes leftover after parsing attributes in process `syz.4.727'. [ 93.754246][ T4591] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 93.767104][ T4591] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 93.790430][ T4591] bond0 (unregistering): Released all slaves [ 93.906374][ T4591] hsr_slave_0: left promiscuous mode [ 93.916732][ T4591] hsr_slave_1: left promiscuous mode [ 93.939000][ T4591] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 93.946797][ T4591] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 93.964841][ T4591] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 93.972617][ T4591] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 93.991629][ T6182] loop4: detected capacity change from 0 to 512 [ 94.012959][ T4591] veth1_macvtap: left promiscuous mode [ 94.018494][ T4591] veth0_macvtap: left promiscuous mode [ 94.025958][ T4591] veth1_vlan: left promiscuous mode [ 94.035249][ T4591] veth0_vlan: left promiscuous mode [ 94.042430][ T6182] ext4 filesystem being mounted at /137/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 94.119902][ T6198] loop0: detected capacity change from 0 to 512 [ 94.168786][ T4591] team0 (unregistering): Port device team_slave_1 removed [ 94.214236][ T4591] team0 (unregistering): Port device team_slave_0 removed [ 94.326896][ T6055] chnl_net:caif_netlink_parms(): no params data found [ 94.386772][ T6205] loop0: detected capacity change from 0 to 512 [ 94.414756][ T6205] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 94.471469][ T6255] loop5: detected capacity change from 0 to 512 [ 94.485798][ T6055] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.494739][ T6055] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.501710][ T6255] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 94.515320][ T6055] bridge_slave_0: entered allmulticast mode [ 94.522719][ T6055] bridge_slave_0: entered promiscuous mode [ 94.534094][ T6332] smc: net device bond0 applied user defined pnetid SYZ2 [ 94.541334][ T6055] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.548486][ T6055] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.570623][ T6332] smc: ib device syz2 ibport 1 applied user defined pnetid SYZ2 [ 94.577705][ T6205] ext4 filesystem being mounted at /152/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 94.589198][ T6055] bridge_slave_1: entered allmulticast mode [ 94.596295][ T6055] bridge_slave_1: entered promiscuous mode [ 94.604414][ T6366] smc: net device bond0 erased user defined pnetid SYZ2 [ 94.613338][ T6255] ext4 filesystem being mounted at /98/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 94.626066][ T6366] smc: ib device syz2 ibport 1 erased user defined pnetid SYZ2 [ 94.671732][ T6055] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.773942][ T6055] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.914469][ T6055] team0: Port device team_slave_0 added [ 94.942011][ T6055] team0: Port device team_slave_1 added [ 94.999279][ T6055] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.006789][ T6055] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.033493][ T6055] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.054875][ T6055] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.062110][ T6055] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.088146][ T6055] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.105978][ T6505] smc: net device bond0 applied user defined pnetid SYZ2 [ 95.114112][ T6505] smc: ib device syz2 ibport 1 applied user defined pnetid SYZ2 [ 95.125148][ T6505] smc: net device bond0 erased user defined pnetid SYZ2 [ 95.142554][ T6505] smc: ib device syz2 ibport 1 erased user defined pnetid SYZ2 [ 95.162271][ T6055] hsr_slave_0: entered promiscuous mode [ 95.168909][ T6055] hsr_slave_1: entered promiscuous mode [ 95.178249][ T6055] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 95.191293][ T6055] Cannot create hsr debugfs directory [ 95.228416][ T6551] loop4: detected capacity change from 0 to 128 [ 95.249399][ T6551] EXT4-fs: Ignoring removed nobh option [ 95.288943][ T6551] ext4 filesystem being mounted at /147/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 95.348159][ T6577] bond0: entered promiscuous mode [ 95.353295][ T6577] bond0: entered allmulticast mode [ 95.360858][ T6577] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.381046][ T6577] bond0 (unregistering): Released all slaves [ 95.491423][ T6055] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 95.501595][ T6055] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 95.533088][ T6719] netlink: 65055 bytes leftover after parsing attributes in process `syz.5.766'. [ 95.566179][ T6723] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 95.574932][ T6055] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 95.583212][ T6723] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 95.595614][ T6055] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 95.666719][ T6055] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.673941][ T6740] FAULT_INJECTION: forcing a failure. [ 95.673941][ T6740] name failslab, interval 1, probability 0, space 0, times 0 [ 95.680794][ T6055] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.686795][ T6740] CPU: 0 UID: 0 PID: 6740 Comm: syz.0.770 Not tainted 6.15.0-rc4-syzkaller-00189-g2bfcee565c3a #0 PREEMPT(voluntary) [ 95.686830][ T6740] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 95.686846][ T6740] Call Trace: [ 95.686853][ T6740] [ 95.686862][ T6740] __dump_stack+0x1d/0x30 [ 95.686890][ T6740] dump_stack_lvl+0xe8/0x140 [ 95.686962][ T6740] dump_stack+0x15/0x1b [ 95.686984][ T6740] should_fail_ex+0x265/0x280 [ 95.687113][ T6740] should_failslab+0x8c/0xb0 [ 95.687149][ T6740] kmem_cache_alloc_noprof+0x50/0x310 [ 95.687288][ T6740] ? getname_flags+0x80/0x3b0 [ 95.687396][ T6740] getname_flags+0x80/0x3b0 [ 95.687434][ T6740] __getname_maybe_null+0x66/0x1a0 [ 95.687549][ T6740] __se_sys_move_mount+0x1f5/0x440 [ 95.687588][ T6740] __x64_sys_move_mount+0x67/0x80 [ 95.687629][ T6740] x64_sys_call+0x1f00/0x2fb0 [ 95.687657][ T6740] do_syscall_64+0xd0/0x1a0 [ 95.687790][ T6740] ? clear_bhb_loop+0x25/0x80 [ 95.687818][ T6740] ? clear_bhb_loop+0x25/0x80 [ 95.687845][ T6740] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.687873][ T6740] RIP: 0033:0x7f9398a8e969 [ 95.687892][ T6740] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 95.687990][ T6740] RSP: 002b:00007f93970f7038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ad [ 95.688085][ T6740] RAX: ffffffffffffffda RBX: 00007f9398cb5fa0 RCX: 00007f9398a8e969 [ 95.688097][ T6740] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: ffffffffffffffff [ 95.688130][ T6740] RBP: 00007f93970f7090 R08: 0000000000000044 R09: 0000000000000000 [ 95.688141][ T6740] R10: 0000200000002080 R11: 0000000000000246 R12: 0000000000000001 [ 95.688152][ T6740] R13: 0000000000000000 R14: 00007f9398cb5fa0 R15: 00007ffe1666df48 [ 95.688228][ T6740] [ 95.886044][ T6755] IPVS: sync thread started: state = BACKUP, mcast_ifn = hsr0, syncid = 33, id = 0 [ 95.896843][ T6754] IPVS: stopping backup sync thread 6755 ... [ 95.910276][ T3835] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.917571][ T3835] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.950006][ T3835] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.957350][ T3835] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.961893][ T6764] loop4: detected capacity change from 0 to 512 [ 95.990641][ T6764] EXT4-fs: Ignoring removed orlov option [ 95.992829][ T6055] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 96.007100][ T6055] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 96.061077][ T6764] ext4 filesystem being mounted at /154/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 96.083767][ T6055] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.094521][ T6764] FAULT_INJECTION: forcing a failure. [ 96.094521][ T6764] name failslab, interval 1, probability 0, space 0, times 0 [ 96.107410][ T6764] CPU: 0 UID: 0 PID: 6764 Comm: syz.4.774 Not tainted 6.15.0-rc4-syzkaller-00189-g2bfcee565c3a #0 PREEMPT(voluntary) [ 96.107444][ T6764] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 96.107458][ T6764] Call Trace: [ 96.107463][ T6764] [ 96.107471][ T6764] __dump_stack+0x1d/0x30 [ 96.107493][ T6764] dump_stack_lvl+0xe8/0x140 [ 96.107568][ T6764] dump_stack+0x15/0x1b [ 96.107662][ T6764] should_fail_ex+0x265/0x280 [ 96.107694][ T6764] should_failslab+0x8c/0xb0 [ 96.107724][ T6764] kmem_cache_alloc_noprof+0x50/0x310 [ 96.107757][ T6764] ? mb_cache_entry_create+0xf0/0x540 [ 96.107821][ T6764] ? check_xattrs+0x27d/0x7d0 [ 96.107884][ T6764] mb_cache_entry_create+0xf0/0x540 [ 96.107916][ T6764] ext4_xattr_get+0x298/0x470 [ 96.107941][ T6764] ext4_xattr_security_get+0x32/0x40 [ 96.108037][ T6764] ? __pfx_ext4_xattr_security_get+0x10/0x10 [ 96.108140][ T6764] __vfs_getxattr+0x2aa/0x2c0 [ 96.108194][ T6764] cap_inode_need_killpriv+0x2e/0x50 [ 96.108223][ T6764] security_inode_need_killpriv+0x36/0x70 [ 96.108249][ T6764] file_remove_privs_flags+0x123/0x320 [ 96.108325][ T6764] ? path_openat+0x1bf8/0x2170 [ 96.108347][ T6764] file_modified_flags+0x32/0x350 [ 96.108381][ T6764] file_modified+0x17/0x20 [ 96.108411][ T6764] ext4_buffered_write_iter+0x1d0/0x3c0 [ 96.108555][ T6764] ? ext4_file_write_iter+0xfe/0xf00 [ 96.108588][ T6764] ext4_file_write_iter+0x383/0xf00 [ 96.108673][ T6764] ? kstrtouint_from_user+0x9f/0xf0 [ 96.108773][ T6764] ? avc_policy_seqno+0x15/0x30 [ 96.108805][ T6764] ? selinux_file_permission+0x213/0x360 [ 96.108865][ T6764] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 96.108893][ T6764] vfs_write+0x49d/0x8d0 [ 96.108923][ T6764] ksys_write+0xda/0x1a0 [ 96.108949][ T6764] __x64_sys_write+0x40/0x50 [ 96.108991][ T6764] x64_sys_call+0x2cdd/0x2fb0 [ 96.109013][ T6764] do_syscall_64+0xd0/0x1a0 [ 96.109034][ T6764] ? clear_bhb_loop+0x25/0x80 [ 96.109056][ T6764] ? clear_bhb_loop+0x25/0x80 [ 96.109194][ T6764] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.109215][ T6764] RIP: 0033:0x7f87e5c7e969 [ 96.109230][ T6764] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 96.109248][ T6764] RSP: 002b:00007f87e42e7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 96.109266][ T6764] RAX: ffffffffffffffda RBX: 00007f87e5ea5fa0 RCX: 00007f87e5c7e969 [ 96.109278][ T6764] RDX: 00000000000101bf RSI: 0000200000000380 RDI: 0000000000000004 [ 96.109358][ T6764] RBP: 00007f87e42e7090 R08: 0000000000000000 R09: 0000000000000000 [ 96.109370][ T6764] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 96.109382][ T6764] R13: 0000000000000000 R14: 00007f87e5ea5fa0 R15: 00007ffff81cf8f8 [ 96.109401][ T6764] [ 96.565729][ T6055] veth0_vlan: entered promiscuous mode [ 96.589895][ T6055] veth1_vlan: entered promiscuous mode [ 96.638139][ T6055] veth0_macvtap: entered promiscuous mode [ 96.667664][ T6055] veth1_macvtap: entered promiscuous mode [ 96.692708][ T5978] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.730942][ T5978] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.776103][ T6055] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 96.786801][ T6055] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.796800][ T6055] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 96.807303][ T6055] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.817201][ T6055] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 96.827675][ T6055] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.837715][ T6055] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 96.848459][ T6055] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.904887][ T6055] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.913762][ T6844] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.927479][ T6853] smc: net device bond0 applied user defined pnetid SYZ2 [ 96.938472][ T6853] smc: ib device syz2 ibport 1 applied user defined pnetid SYZ2 [ 96.940112][ T6055] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 96.956672][ T6055] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.966564][ T6055] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 96.967013][ T6859] smc: net device bond0 erased user defined pnetid SYZ2 [ 96.977047][ T6055] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.977071][ T6055] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 96.977150][ T6055] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.014409][ T6055] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 97.017007][ T6859] smc: ib device syz2 ibport 1 erased user defined pnetid SYZ2 [ 97.024931][ T6055] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.045081][ T6055] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.055598][ T5978] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.083415][ T6055] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.092360][ T6055] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.101454][ T6055] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.110259][ T6055] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.144697][ T6844] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.175920][ T5978] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.202044][ T6844] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.292022][ T6844] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.357747][ T6844] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.407053][ T6844] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.456769][ T6844] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.526425][ T6844] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.649551][ T6876] netlink: 8 bytes leftover after parsing attributes in process `syz.1.787'. [ 97.672411][ T6876] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 97.834709][ T29] kauditd_printk_skb: 86 callbacks suppressed [ 97.834725][ T29] audit: type=1326 audit(1746241728.840:1284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6919 comm="syz.1.791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d16dce969 code=0x7ffc0000 [ 97.864553][ T29] audit: type=1326 audit(1746241728.840:1285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6919 comm="syz.1.791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d16dce969 code=0x7ffc0000 [ 97.922376][ T29] audit: type=1326 audit(1746241728.900:1286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6919 comm="syz.1.791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=260 compat=0 ip=0x7f3d16dce969 code=0x7ffc0000 [ 97.945923][ T29] audit: type=1326 audit(1746241728.900:1287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6919 comm="syz.1.791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d16dce969 code=0x7ffc0000 [ 97.969586][ T29] audit: type=1326 audit(1746241728.900:1288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6919 comm="syz.1.791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d16dce969 code=0x7ffc0000 [ 98.041080][ T6935] loop6: detected capacity change from 0 to 512 [ 98.053295][ T6935] EXT4-fs: Ignoring removed nobh option [ 98.104616][ T6935] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.797: invalid indirect mapped block 256 (level 2) [ 98.133293][ T6935] EXT4-fs (loop6): 2 truncates cleaned up [ 98.143791][ T6953] smc: net device bond0 applied user defined pnetid SYZ2 [ 98.170920][ T6953] smc: ib device syz2 ibport 1 applied user defined pnetid SYZ2 [ 98.194999][ T6958] smc: net device bond0 erased user defined pnetid SYZ2 [ 98.215653][ T6958] smc: ib device syz2 ibport 1 erased user defined pnetid SYZ2 [ 98.254527][ T6964] veth0_vlan: mtu greater than device maximum [ 98.331268][ T6974] netlink: 'syz.5.808': attribute type 21 has an invalid length. [ 98.339158][ T6974] netlink: 'syz.5.808': attribute type 20 has an invalid length. [ 98.347043][ T6974] IPv6: NLM_F_CREATE should be specified when creating new route [ 98.415906][ T6934] EXT4-fs error (device loop6): ext4_validate_block_bitmap:432: comm syz.6.797: bg 0: block 5: invalid block bitmap [ 98.463479][ T6934] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 98.476000][ T6934] EXT4-fs (loop6): This should not happen!! Data will be lost [ 98.476000][ T6934] [ 98.480047][ T6984] FAULT_INJECTION: forcing a failure. [ 98.480047][ T6984] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 98.485923][ T6934] EXT4-fs (loop6): Total free blocks count 0 [ 98.499067][ T6984] CPU: 1 UID: 0 PID: 6984 Comm: syz.5.811 Not tainted 6.15.0-rc4-syzkaller-00189-g2bfcee565c3a #0 PREEMPT(voluntary) [ 98.499104][ T6984] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 98.499157][ T6984] Call Trace: [ 98.499166][ T6984] [ 98.499176][ T6984] __dump_stack+0x1d/0x30 [ 98.499203][ T6984] dump_stack_lvl+0xe8/0x140 [ 98.499229][ T6984] dump_stack+0x15/0x1b [ 98.499250][ T6984] should_fail_ex+0x265/0x280 [ 98.499291][ T6984] should_fail+0xb/0x20 [ 98.499330][ T6984] should_fail_usercopy+0x1a/0x20 [ 98.499401][ T6984] _copy_from_user+0x1c/0xb0 [ 98.499429][ T6984] ___sys_sendmsg+0xc1/0x1d0 [ 98.499485][ T6984] __x64_sys_sendmsg+0xd4/0x160 [ 98.499515][ T6984] x64_sys_call+0x2999/0x2fb0 [ 98.499542][ T6984] do_syscall_64+0xd0/0x1a0 [ 98.499614][ T6984] ? clear_bhb_loop+0x25/0x80 [ 98.499641][ T6984] ? clear_bhb_loop+0x25/0x80 [ 98.499668][ T6984] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.499696][ T6984] RIP: 0033:0x7fd99530e969 [ 98.499757][ T6984] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 98.499779][ T6984] RSP: 002b:00007fd993977038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 98.499804][ T6984] RAX: ffffffffffffffda RBX: 00007fd995535fa0 RCX: 00007fd99530e969 [ 98.499820][ T6984] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 98.499836][ T6984] RBP: 00007fd993977090 R08: 0000000000000000 R09: 0000000000000000 [ 98.499851][ T6984] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 98.499875][ T6984] R13: 0000000000000000 R14: 00007fd995535fa0 R15: 00007fffbb800188 [ 98.499898][ T6984] [ 98.499932][ T6964] EXT4-fs warning (device loop6): ext4_block_to_path:107: block 209749764 > max in inode 15 [ 98.504922][ T6934] EXT4-fs (loop6): Free/Dirty block details [ 98.692541][ T6934] EXT4-fs (loop6): free_blocks=0 [ 98.697576][ T6934] EXT4-fs (loop6): dirty_blocks=1797 [ 98.698859][ T6964] EXT4-fs warning (device loop6): ext4_block_to_path:107: block 209749768 > max in inode 15 [ 98.702916][ T6934] EXT4-fs (loop6): Block reservation details [ 98.718998][ T6934] EXT4-fs (loop6): i_reserved_data_blocks=1797 [ 98.725827][ T6975] EXT4-fs warning (device loop6): ext4_block_to_path:107: block 209748132 > max in inode 15 [ 98.736020][ T6975] EXT4-fs warning (device loop6): ext4_block_to_path:107: block 209748136 > max in inode 15 [ 98.752401][ T1762] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 36 with max blocks 1796 with error 28 [ 98.765033][ T1762] EXT4-fs (loop6): This should not happen!! Data will be lost [ 98.765033][ T1762] [ 98.795511][ T6994] loop1: detected capacity change from 0 to 128 [ 98.821996][ T6975] EXT4-fs warning (device loop6): ext4_block_to_path:107: block 209748140 > max in inode 15 [ 98.843414][ T6994] EXT4-fs: Ignoring removed nobh option [ 98.851965][ T6964] EXT4-fs warning (device loop6): ext4_block_to_path:107: block 209749772 > max in inode 15 [ 98.870516][ T6964] EXT4-fs warning (device loop6): ext4_block_to_path:107: block 209749776 > max in inode 15 [ 98.879585][ T6994] ext4 filesystem being mounted at /64/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 98.891443][ T6975] EXT4-fs warning (device loop6): ext4_block_to_path:107: block 209748144 > max in inode 15 [ 98.903809][ T6975] EXT4-fs warning (device loop6): ext4_block_to_path:107: block 209748148 > max in inode 15 [ 98.914215][ T6975] EXT4-fs warning (device loop6): ext4_block_to_path:107: block 209748152 > max in inode 15 [ 99.205035][ T29] audit: type=1326 audit(1746241730.210:1289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7039 comm="syz.5.822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd99530e969 code=0x7ffc0000 [ 99.286300][ T29] audit: type=1326 audit(1746241730.240:1290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7039 comm="syz.5.822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=88 compat=0 ip=0x7fd99530e969 code=0x7ffc0000 [ 99.309749][ T29] audit: type=1326 audit(1746241730.240:1291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7039 comm="syz.5.822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd99530e969 code=0x7ffc0000 [ 99.333240][ T29] audit: type=1326 audit(1746241730.240:1292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7039 comm="syz.5.822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=89 compat=0 ip=0x7fd99530e969 code=0x7ffc0000 [ 99.356591][ T29] audit: type=1326 audit(1746241730.240:1293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7039 comm="syz.5.822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd99530e969 code=0x7ffc0000 [ 99.392468][ T7057] netlink: 8 bytes leftover after parsing attributes in process `syz.1.827'. [ 99.425877][ T7069] loop6: detected capacity change from 0 to 128 [ 99.465767][ T7069] EXT4-fs: Ignoring removed nobh option [ 99.497327][ T7069] ext4 filesystem being mounted at /5/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 99.564737][ T7075] loop0: detected capacity change from 0 to 512 [ 99.596842][ T7075] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 99.690649][ T7075] ext4 filesystem being mounted at /174/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 99.792175][ T7137] loop6: detected capacity change from 0 to 512 [ 99.819091][ T7137] EXT4-fs: Ignoring removed nobh option [ 99.891903][ T7154] bond1: entered promiscuous mode [ 99.896997][ T7154] bond1: entered allmulticast mode [ 99.913525][ T7137] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.837: invalid indirect mapped block 256 (level 2) [ 99.951150][ T7154] 8021q: adding VLAN 0 to HW filter on device bond1 [ 99.982415][ T7137] EXT4-fs (loop6): 2 truncates cleaned up [ 99.988118][ T7154] bond1 (unregistering): Released all slaves [ 100.132380][ T7236] veth0_vlan: mtu greater than device maximum [ 100.262545][ T7253] loop4: detected capacity change from 0 to 128 [ 100.269626][ T7136] EXT4-fs error (device loop6): ext4_validate_block_bitmap:432: comm syz.6.837: bg 0: block 5: invalid block bitmap [ 100.284518][ T7136] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 100.296885][ T7136] EXT4-fs (loop6): This should not happen!! Data will be lost [ 100.296885][ T7136] [ 100.297137][ T7253] EXT4-fs: Ignoring removed nobh option [ 100.306681][ T7136] EXT4-fs (loop6): Total free blocks count 0 [ 100.318378][ T7136] EXT4-fs (loop6): Free/Dirty block details [ 100.324402][ T7136] EXT4-fs (loop6): free_blocks=0 [ 100.329435][ T7136] EXT4-fs (loop6): dirty_blocks=985 [ 100.334694][ T7136] EXT4-fs (loop6): Block reservation details [ 100.340906][ T7136] EXT4-fs (loop6): i_reserved_data_blocks=985 [ 100.350464][ T7236] EXT4-fs warning (device loop6): ext4_block_to_path:107: block 209748060 > max in inode 15 [ 100.361028][ T7236] EXT4-fs warning (device loop6): ext4_block_to_path:107: block 209748064 > max in inode 15 [ 100.372481][ T7236] EXT4-fs warning (device loop6): ext4_block_to_path:107: block 209748068 > max in inode 15 [ 100.382822][ T7236] EXT4-fs warning (device loop6): ext4_block_to_path:107: block 209748072 > max in inode 15 [ 100.403846][ T7253] EXT4-fs mount: 32 callbacks suppressed [ 100.403861][ T7253] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 100.461059][ T7253] ext4 filesystem being mounted at /164/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 100.480496][ T7236] EXT4-fs warning (device loop6): ext4_block_to_path:107: block 209748076 > max in inode 15 [ 100.578603][ T7236] EXT4-fs warning (device loop6): ext4_block_to_path:107: block 209748080 > max in inode 15 [ 100.596536][ T7236] EXT4-fs warning (device loop6): ext4_block_to_path:107: block 209748084 > max in inode 15 [ 100.628617][ T7236] EXT4-fs warning (device loop6): ext4_block_to_path:107: block 209748088 > max in inode 15 [ 100.647550][ T12] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 36 with max blocks 984 with error 28 [ 100.660818][ T12] EXT4-fs (loop6): This should not happen!! Data will be lost [ 100.660818][ T12] [ 100.668655][ T7236] EXT4-fs warning (device loop6): ext4_block_to_path:107: block 209748092 > max in inode 15 [ 100.713477][ T7236] EXT4-fs warning (device loop6): ext4_block_to_path:107: block 209748096 > max in inode 15 [ 100.736108][ T3312] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 100.814681][ T7268] loop1: detected capacity change from 0 to 512 [ 100.857202][ T7268] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 100.935559][ T7268] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.973920][ T7268] ext4 filesystem being mounted at /73/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 101.007298][ T7308] bond1: entered promiscuous mode [ 101.012590][ T7308] bond1: entered allmulticast mode [ 101.023118][ T7308] 8021q: adding VLAN 0 to HW filter on device bond1 [ 101.040682][ T7308] bond1 (unregistering): Released all slaves [ 101.063793][ T7268] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.089764][ T7387] netlink: 12 bytes leftover after parsing attributes in process `syz.4.857'. [ 101.106279][ T7387] mmap: syz.4.857 (7387) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 101.303694][ T7423] loop4: detected capacity change from 0 to 128 [ 101.327664][ T7423] EXT4-fs: Ignoring removed nobh option [ 101.346363][ T7423] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 101.390712][ T7423] ext4 filesystem being mounted at /171/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 101.434586][ T3312] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 101.518513][ T7269] netlink: 96 bytes leftover after parsing attributes in process `syz.0.851'. [ 101.690687][ T7486] loop0: detected capacity change from 0 to 512 [ 101.715307][ T7486] EXT4-fs (loop0): couldn't mount as ext3 due to feature incompatibilities [ 101.778228][ T7505] FAULT_INJECTION: forcing a failure. [ 101.778228][ T7505] name failslab, interval 1, probability 0, space 0, times 0 [ 101.791214][ T7505] CPU: 0 UID: 0 PID: 7505 Comm: syz.0.871 Not tainted 6.15.0-rc4-syzkaller-00189-g2bfcee565c3a #0 PREEMPT(voluntary) [ 101.791289][ T7505] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 101.791300][ T7505] Call Trace: [ 101.791306][ T7505] [ 101.791314][ T7505] __dump_stack+0x1d/0x30 [ 101.791336][ T7505] dump_stack_lvl+0xe8/0x140 [ 101.791379][ T7505] dump_stack+0x15/0x1b [ 101.791439][ T7505] should_fail_ex+0x265/0x280 [ 101.791477][ T7505] should_failslab+0x8c/0xb0 [ 101.791542][ T7505] kmem_cache_alloc_noprof+0x50/0x310 [ 101.791573][ T7505] ? skb_clone+0x151/0x1f0 [ 101.791599][ T7505] skb_clone+0x151/0x1f0 [ 101.791626][ T7505] __netlink_deliver_tap+0x2c9/0x500 [ 101.791666][ T7505] netlink_unicast+0x64c/0x670 [ 101.791708][ T7505] netlink_sendmsg+0x58b/0x6b0 [ 101.791751][ T7505] ? __pfx_netlink_sendmsg+0x10/0x10 [ 101.791857][ T7505] __sock_sendmsg+0x142/0x180 [ 101.791962][ T7505] ____sys_sendmsg+0x31e/0x4e0 [ 101.791989][ T7505] ___sys_sendmsg+0x17b/0x1d0 [ 101.792024][ T7505] __x64_sys_sendmsg+0xd4/0x160 [ 101.792054][ T7505] x64_sys_call+0x2999/0x2fb0 [ 101.792151][ T7505] do_syscall_64+0xd0/0x1a0 [ 101.792179][ T7505] ? clear_bhb_loop+0x25/0x80 [ 101.792273][ T7505] ? clear_bhb_loop+0x25/0x80 [ 101.792374][ T7505] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.792399][ T7505] RIP: 0033:0x7f9398a8e969 [ 101.792418][ T7505] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 101.792445][ T7505] RSP: 002b:00007f93970f7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 101.792468][ T7505] RAX: ffffffffffffffda RBX: 00007f9398cb5fa0 RCX: 00007f9398a8e969 [ 101.792481][ T7505] RDX: 0000000000008040 RSI: 00002000000002c0 RDI: 0000000000000005 [ 101.792492][ T7505] RBP: 00007f93970f7090 R08: 0000000000000000 R09: 0000000000000000 [ 101.792504][ T7505] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 101.792515][ T7505] R13: 0000000000000000 R14: 00007f9398cb5fa0 R15: 00007ffe1666df48 [ 101.792536][ T7505] [ 101.803973][ T7512] loop6: detected capacity change from 0 to 128 [ 102.012329][ T7512] EXT4-fs: Ignoring removed nobh option [ 102.026950][ T7512] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 102.040375][ T7512] ext4 filesystem being mounted at /14/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 102.073282][ T6055] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 102.085204][ T7528] FAULT_INJECTION: forcing a failure. [ 102.085204][ T7528] name failslab, interval 1, probability 0, space 0, times 0 [ 102.097908][ T7528] CPU: 0 UID: 0 PID: 7528 Comm: syz.4.876 Not tainted 6.15.0-rc4-syzkaller-00189-g2bfcee565c3a #0 PREEMPT(voluntary) [ 102.097936][ T7528] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 102.097951][ T7528] Call Trace: [ 102.097958][ T7528] [ 102.097966][ T7528] __dump_stack+0x1d/0x30 [ 102.097991][ T7528] dump_stack_lvl+0xe8/0x140 [ 102.098022][ T7528] dump_stack+0x15/0x1b [ 102.098047][ T7528] should_fail_ex+0x265/0x280 [ 102.098089][ T7528] ? nf_tables_newflowtable+0x5c0/0x10b0 [ 102.098129][ T7528] should_failslab+0x8c/0xb0 [ 102.098188][ T7528] __kmalloc_cache_noprof+0x4c/0x320 [ 102.098211][ T7528] nf_tables_newflowtable+0x5c0/0x10b0 [ 102.098260][ T7528] nfnetlink_rcv+0xb96/0x1690 [ 102.098306][ T7528] netlink_unicast+0x59e/0x670 [ 102.098464][ T7528] netlink_sendmsg+0x58b/0x6b0 [ 102.098500][ T7528] ? __pfx_netlink_sendmsg+0x10/0x10 [ 102.098542][ T7528] __sock_sendmsg+0x142/0x180 [ 102.098637][ T7528] ____sys_sendmsg+0x31e/0x4e0 [ 102.098659][ T7528] ___sys_sendmsg+0x17b/0x1d0 [ 102.098697][ T7528] __x64_sys_sendmsg+0xd4/0x160 [ 102.098728][ T7528] x64_sys_call+0x2999/0x2fb0 [ 102.098791][ T7528] do_syscall_64+0xd0/0x1a0 [ 102.098819][ T7528] ? clear_bhb_loop+0x25/0x80 [ 102.098846][ T7528] ? clear_bhb_loop+0x25/0x80 [ 102.098873][ T7528] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.098973][ T7528] RIP: 0033:0x7f87e5c7e969 [ 102.098992][ T7528] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 102.099014][ T7528] RSP: 002b:00007f87e42e7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 102.099086][ T7528] RAX: ffffffffffffffda RBX: 00007f87e5ea5fa0 RCX: 00007f87e5c7e969 [ 102.099102][ T7528] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000005 [ 102.099118][ T7528] RBP: 00007f87e42e7090 R08: 0000000000000000 R09: 0000000000000000 [ 102.099131][ T7528] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 102.099142][ T7528] R13: 0000000000000000 R14: 00007f87e5ea5fa0 R15: 00007ffff81cf8f8 [ 102.099166][ T7528] [ 102.412597][ T7549] sch_tbf: peakrate 64 is lower than or equals to rate 18446744073709551615 ! [ 102.428025][ T7549] loop4: detected capacity change from 0 to 512 [ 102.454490][ T7549] EXT4-fs error (device loop4): ext4_iget_extra_inode:4693: inode #15: comm syz.4.882: corrupted in-inode xattr: invalid ea_ino [ 102.468288][ T7549] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.882: couldn't read orphan inode 15 (err -117) [ 102.484454][ T7549] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 102.531960][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.609549][ T7569] loop4: detected capacity change from 0 to 128 [ 102.623725][ T7569] EXT4-fs: Ignoring removed nobh option [ 102.636988][ T7569] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 102.680380][ T7569] ext4 filesystem being mounted at /183/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 102.717448][ T3312] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 102.746586][ T7578] FAULT_INJECTION: forcing a failure. [ 102.746586][ T7578] name failslab, interval 1, probability 0, space 0, times 0 [ 102.759448][ T7578] CPU: 0 UID: 0 PID: 7578 Comm: syz.0.890 Not tainted 6.15.0-rc4-syzkaller-00189-g2bfcee565c3a #0 PREEMPT(voluntary) [ 102.759482][ T7578] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 102.759518][ T7578] Call Trace: [ 102.759523][ T7578] [ 102.759550][ T7578] __dump_stack+0x1d/0x30 [ 102.759608][ T7578] dump_stack_lvl+0xe8/0x140 [ 102.759657][ T7578] dump_stack+0x15/0x1b [ 102.759672][ T7578] should_fail_ex+0x265/0x280 [ 102.759753][ T7578] ? v9fs_mount+0x51/0x590 [ 102.759777][ T7578] should_failslab+0x8c/0xb0 [ 102.759856][ T7578] __kmalloc_cache_noprof+0x4c/0x320 [ 102.759879][ T7578] v9fs_mount+0x51/0x590 [ 102.759899][ T7578] ? __pfx_v9fs_mount+0x10/0x10 [ 102.759924][ T7578] legacy_get_tree+0x75/0xd0 [ 102.759955][ T7578] vfs_get_tree+0x54/0x1d0 [ 102.759988][ T7578] do_new_mount+0x207/0x680 [ 102.760014][ T7578] path_mount+0x4a4/0xb20 [ 102.760094][ T7578] ? user_path_at+0x109/0x130 [ 102.760112][ T7578] __se_sys_mount+0x28f/0x2e0 [ 102.760138][ T7578] __x64_sys_mount+0x67/0x80 [ 102.760200][ T7578] x64_sys_call+0xd36/0x2fb0 [ 102.760226][ T7578] do_syscall_64+0xd0/0x1a0 [ 102.760251][ T7578] ? clear_bhb_loop+0x25/0x80 [ 102.760278][ T7578] ? clear_bhb_loop+0x25/0x80 [ 102.760354][ T7578] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.760374][ T7578] RIP: 0033:0x7f9398a8e969 [ 102.760388][ T7578] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 102.760409][ T7578] RSP: 002b:00007f93970f7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 102.760512][ T7578] RAX: ffffffffffffffda RBX: 00007f9398cb5fa0 RCX: 00007f9398a8e969 [ 102.760528][ T7578] RDX: 00002000000002c0 RSI: 0000200000000080 RDI: 0000000000000000 [ 102.760543][ T7578] RBP: 00007f93970f7090 R08: 0000200000000400 R09: 0000000000000000 [ 102.760556][ T7578] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 102.760567][ T7578] R13: 0000000000000000 R14: 00007f9398cb5fa0 R15: 00007ffe1666df48 [ 102.760585][ T7578] [ 102.996758][ T7590] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 103.005513][ T7590] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 103.191133][ T7615] bond1: entered promiscuous mode [ 103.196206][ T7615] bond1: entered allmulticast mode [ 103.202817][ T7615] 8021q: adding VLAN 0 to HW filter on device bond1 [ 103.221164][ T7615] bond1 (unregistering): Released all slaves [ 103.300215][ T7689] loop4: detected capacity change from 0 to 128 [ 103.312202][ T7689] EXT4-fs: Ignoring removed nobh option [ 103.322590][ T7689] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 103.338987][ T7689] ext4 filesystem being mounted at /191/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 103.386807][ T29] kauditd_printk_skb: 250 callbacks suppressed [ 103.386821][ T29] audit: type=1326 audit(1746241734.390:1544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7694 comm="syz.6.900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f723c9fe969 code=0x7ffc0000 [ 103.424020][ T29] audit: type=1326 audit(1746241734.390:1545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7694 comm="syz.6.900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f723c9fe969 code=0x7ffc0000 [ 103.428821][ T3312] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 103.447484][ T29] audit: type=1326 audit(1746241734.390:1546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7694 comm="syz.6.900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=260 compat=0 ip=0x7f723c9fe969 code=0x7ffc0000 [ 103.479981][ T29] audit: type=1326 audit(1746241734.390:1547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7694 comm="syz.6.900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f723c9fe969 code=0x7ffc0000 [ 103.503770][ T29] audit: type=1326 audit(1746241734.390:1548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7694 comm="syz.6.900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f723c9fe969 code=0x7ffc0000 [ 103.562268][ T29] audit: type=1400 audit(1746241734.560:1549): avc: denied { read } for pid=7696 comm="syz.6.902" name="usbmon0" dev="devtmpfs" ino=141 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 103.585710][ T29] audit: type=1400 audit(1746241734.560:1550): avc: denied { open } for pid=7696 comm="syz.6.902" path="/dev/usbmon0" dev="devtmpfs" ino=141 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 103.713465][ T29] audit: type=1400 audit(1746241734.720:1551): avc: denied { sqpoll } for pid=7705 comm="syz.0.905" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 103.729843][ T7730] FAULT_INJECTION: forcing a failure. [ 103.729843][ T7730] name failslab, interval 1, probability 0, space 0, times 0 [ 103.745500][ T7730] CPU: 0 UID: 0 PID: 7730 Comm: syz.4.909 Not tainted 6.15.0-rc4-syzkaller-00189-g2bfcee565c3a #0 PREEMPT(voluntary) [ 103.745528][ T7730] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 103.745539][ T7730] Call Trace: [ 103.745546][ T7730] [ 103.745555][ T7730] __dump_stack+0x1d/0x30 [ 103.745585][ T7730] dump_stack_lvl+0xe8/0x140 [ 103.745609][ T7730] dump_stack+0x15/0x1b [ 103.745630][ T7730] should_fail_ex+0x265/0x280 [ 103.745747][ T7730] ? nsim_nexthop_event_nb+0x7d/0xcd0 [ 103.745777][ T7730] should_failslab+0x8c/0xb0 [ 103.745834][ T7730] __kmalloc_cache_noprof+0x4c/0x320 [ 103.745864][ T7730] nsim_nexthop_event_nb+0x7d/0xcd0 [ 103.745893][ T7730] ? nh_notifier_info_init+0xb8/0x4d0 [ 103.745917][ T7730] ? should_failslab+0x8c/0xb0 [ 103.745952][ T7730] ? __kmalloc_cache_noprof+0x189/0x320 [ 103.746006][ T7730] ? vxlan_nexthop_event+0x2e/0x300 [ 103.746047][ T7730] ? __pfx_nsim_nexthop_event_nb+0x10/0x10 [ 103.746077][ T7730] blocking_notifier_call_chain+0x98/0x1f0 [ 103.746205][ T7730] call_nexthop_notifiers+0x103/0x210 [ 103.746235][ T7730] rtm_new_nexthop+0x2f0c/0x4510 [ 103.746321][ T7730] ? xas_load+0x413/0x430 [ 103.746345][ T7730] ? xas_load+0x413/0x430 [ 103.746456][ T7730] ? __pfx_rtm_new_nexthop+0x10/0x10 [ 103.746482][ T7730] rtnetlink_rcv_msg+0x5fb/0x6d0 [ 103.746517][ T7730] netlink_rcv_skb+0x120/0x220 [ 103.746560][ T7730] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 103.746598][ T7730] rtnetlink_rcv+0x1c/0x30 [ 103.746624][ T7730] netlink_unicast+0x59e/0x670 [ 103.746663][ T7730] netlink_sendmsg+0x58b/0x6b0 [ 103.746765][ T7730] ? __pfx_netlink_sendmsg+0x10/0x10 [ 103.746841][ T7730] __sock_sendmsg+0x142/0x180 [ 103.746873][ T7730] ____sys_sendmsg+0x31e/0x4e0 [ 103.746902][ T7730] ___sys_sendmsg+0x17b/0x1d0 [ 103.746945][ T7730] __x64_sys_sendmsg+0xd4/0x160 [ 103.746976][ T7730] x64_sys_call+0x2999/0x2fb0 [ 103.747009][ T7730] do_syscall_64+0xd0/0x1a0 [ 103.747092][ T7730] ? clear_bhb_loop+0x25/0x80 [ 103.747169][ T7730] ? clear_bhb_loop+0x25/0x80 [ 103.747198][ T7730] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.747225][ T7730] RIP: 0033:0x7f87e5c7e969 [ 103.747244][ T7730] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 103.747341][ T7730] RSP: 002b:00007f87e42e7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 103.747365][ T7730] RAX: ffffffffffffffda RBX: 00007f87e5ea5fa0 RCX: 00007f87e5c7e969 [ 103.747396][ T7730] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000006 [ 103.747465][ T7730] RBP: 00007f87e42e7090 R08: 0000000000000000 R09: 0000000000000000 [ 103.747481][ T7730] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 103.747496][ T7730] R13: 0000000000000000 R14: 00007f87e5ea5fa0 R15: 00007ffff81cf8f8 [ 103.747521][ T7730] [ 103.806100][ T29] audit: type=1326 audit(1746241734.810:1552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7741 comm="syz.6.912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f723c9fe969 code=0x7ffc0000 [ 103.806140][ T29] audit: type=1326 audit(1746241734.810:1553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7741 comm="syz.6.912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f723c9fe969 code=0x7ffc0000 [ 104.344563][ T7782] bond1: entered promiscuous mode [ 104.349744][ T7782] bond1: entered allmulticast mode [ 104.355112][ T7782] 8021q: adding VLAN 0 to HW filter on device bond1 [ 104.365758][ T7782] bond1 (unregistering): Released all slaves [ 104.411630][ T7852] loop0: detected capacity change from 0 to 512 [ 104.419203][ T7852] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 104.529889][ T7874] loop0: detected capacity change from 0 to 512 [ 104.537941][ T7874] EXT4-fs (loop0): couldn't mount as ext3 due to feature incompatibilities [ 104.573559][ T7871] bond1: entered promiscuous mode [ 104.578819][ T7871] bond1: entered allmulticast mode [ 104.584186][ T7871] 8021q: adding VLAN 0 to HW filter on device bond1 [ 104.594838][ T7871] bond1 (unregistering): Released all slaves [ 104.605833][ T7874] FAULT_INJECTION: forcing a failure. [ 104.605833][ T7874] name failslab, interval 1, probability 0, space 0, times 0 [ 104.618786][ T7874] CPU: 1 UID: 0 PID: 7874 Comm: syz.0.926 Not tainted 6.15.0-rc4-syzkaller-00189-g2bfcee565c3a #0 PREEMPT(voluntary) [ 104.618816][ T7874] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 104.618838][ T7874] Call Trace: [ 104.618882][ T7874] [ 104.618891][ T7874] __dump_stack+0x1d/0x30 [ 104.618931][ T7874] dump_stack_lvl+0xe8/0x140 [ 104.618950][ T7874] dump_stack+0x15/0x1b [ 104.618967][ T7874] should_fail_ex+0x265/0x280 [ 104.619063][ T7874] ? alloc_netdev_mqs+0x86a/0xab0 [ 104.619160][ T7874] should_failslab+0x8c/0xb0 [ 104.619189][ T7874] __kmalloc_cache_noprof+0x4c/0x320 [ 104.619211][ T7874] alloc_netdev_mqs+0x86a/0xab0 [ 104.619260][ T7874] rtnl_create_link+0x239/0x710 [ 104.619294][ T7874] rtnl_newlink_create+0x151/0x630 [ 104.619321][ T7874] ? __list_del_entry_valid_or_report+0x65/0x130 [ 104.619351][ T7874] rtnl_newlink+0xf29/0x12d0 [ 104.619387][ T7874] ? bpf_trace_run3+0xfd/0x1d0 [ 104.619433][ T7874] ? __pfx_rtnl_newlink+0x10/0x10 [ 104.619533][ T7874] rtnetlink_rcv_msg+0x5fb/0x6d0 [ 104.619597][ T7874] netlink_rcv_skb+0x120/0x220 [ 104.619628][ T7874] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 104.619708][ T7874] rtnetlink_rcv+0x1c/0x30 [ 104.619744][ T7874] netlink_unicast+0x59e/0x670 [ 104.619776][ T7874] netlink_sendmsg+0x58b/0x6b0 [ 104.619810][ T7874] ? __pfx_netlink_sendmsg+0x10/0x10 [ 104.619858][ T7874] __sock_sendmsg+0x142/0x180 [ 104.619884][ T7874] ____sys_sendmsg+0x31e/0x4e0 [ 104.619983][ T7874] ___sys_sendmsg+0x17b/0x1d0 [ 104.620017][ T7874] __x64_sys_sendmsg+0xd4/0x160 [ 104.620040][ T7874] x64_sys_call+0x2999/0x2fb0 [ 104.620136][ T7874] do_syscall_64+0xd0/0x1a0 [ 104.620198][ T7874] ? clear_bhb_loop+0x25/0x80 [ 104.620219][ T7874] ? clear_bhb_loop+0x25/0x80 [ 104.620332][ T7874] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.620352][ T7874] RIP: 0033:0x7f9398a8e969 [ 104.620367][ T7874] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 104.620452][ T7874] RSP: 002b:00007f93970f7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 104.620470][ T7874] RAX: ffffffffffffffda RBX: 00007f9398cb5fa0 RCX: 00007f9398a8e969 [ 104.620482][ T7874] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000005 [ 104.620495][ T7874] RBP: 00007f93970f7090 R08: 0000000000000000 R09: 0000000000000000 [ 104.620506][ T7874] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 104.620518][ T7874] R13: 0000000000000000 R14: 00007f9398cb5fa0 R15: 00007ffe1666df48 [ 104.620538][ T7874] [ 104.967714][ T7954] smc: net device bond0 applied user defined pnetid SYZ2 [ 104.976481][ T7954] smc: ib device syz2 ibport 1 applied user defined pnetid SYZ2 [ 104.985017][ T7954] smc: net device bond0 erased user defined pnetid SYZ2 [ 104.993173][ T7954] smc: ib device syz2 ibport 1 erased user defined pnetid SYZ2 [ 105.065456][ T7971] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 105.081988][ T7984] netlink: 8 bytes leftover after parsing attributes in process `syz.6.935'. [ 105.097523][ T7971] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 105.143946][ T7997] 9pnet_fd: Insufficient options for proto=fd [ 105.228769][ T8013] netlink: 'syz.6.942': attribute type 4 has an invalid length. [ 105.236506][ T8013] netlink: 152 bytes leftover after parsing attributes in process `syz.6.942'. [ 105.245510][ T8013] FAULT_INJECTION: forcing a failure. [ 105.245510][ T8013] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 105.258711][ T8013] CPU: 1 UID: 0 PID: 8013 Comm: syz.6.942 Not tainted 6.15.0-rc4-syzkaller-00189-g2bfcee565c3a #0 PREEMPT(voluntary) [ 105.258815][ T8013] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 105.258832][ T8013] Call Trace: [ 105.258839][ T8013] [ 105.258848][ T8013] __dump_stack+0x1d/0x30 [ 105.258870][ T8013] dump_stack_lvl+0xe8/0x140 [ 105.258889][ T8013] dump_stack+0x15/0x1b [ 105.258905][ T8013] should_fail_ex+0x265/0x280 [ 105.258939][ T8013] should_fail+0xb/0x20 [ 105.258967][ T8013] should_fail_usercopy+0x1a/0x20 [ 105.258985][ T8013] strncpy_from_user+0x25/0x230 [ 105.259031][ T8013] ? vprintk_emit+0x635/0x650 [ 105.259074][ T8013] strncpy_from_user_nofault+0x68/0xf0 [ 105.259106][ T8013] bpf_probe_read_compat_str+0xb4/0x130 [ 105.259138][ T8013] bpf_prog_c1796171ffc7efef+0x3e/0x40 [ 105.259168][ T8013] bpf_trace_run4+0x114/0x1d0 [ 105.259195][ T8013] __traceiter_sched_switch+0x3c/0x60 [ 105.259222][ T8013] __schedule+0xa0c/0xb20 [ 105.259249][ T8013] ? __cond_resched+0x4e/0x90 [ 105.259279][ T8013] __cond_resched+0x4e/0x90 [ 105.259380][ T8013] mutex_lock+0xd/0x30 [ 105.259409][ T8013] rtnl_newlink+0x4f1/0x12d0 [ 105.259435][ T8013] ? __refill_stock+0x96/0xd0 [ 105.259466][ T8013] ? refill_stock+0xa0/0x120 [ 105.259554][ T8013] ? __refill_stock+0x96/0xd0 [ 105.259580][ T8013] ? xas_load+0x413/0x430 [ 105.259599][ T8013] ? __rcu_read_unlock+0x4f/0x70 [ 105.259657][ T8013] ? xa_load+0xb1/0xe0 [ 105.259720][ T8013] ? page_counter_cancel+0xe1/0x1e0 [ 105.259794][ T8013] ? __kfree_skb+0x109/0x150 [ 105.259868][ T8013] ? __rcu_read_unlock+0x4f/0x70 [ 105.259901][ T8013] ? avc_has_perm_noaudit+0x1b1/0x200 [ 105.260009][ T8013] ? selinux_capable+0x1f9/0x270 [ 105.260033][ T8013] ? security_capable+0x83/0x90 [ 105.260192][ T8013] ? ns_capable+0x7d/0xb0 [ 105.260211][ T8013] ? __pfx_rtnl_newlink+0x10/0x10 [ 105.260233][ T8013] rtnetlink_rcv_msg+0x5fb/0x6d0 [ 105.260309][ T8013] netlink_rcv_skb+0x120/0x220 [ 105.260338][ T8013] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 105.260422][ T8013] rtnetlink_rcv+0x1c/0x30 [ 105.260471][ T8013] netlink_unicast+0x59e/0x670 [ 105.260502][ T8013] netlink_sendmsg+0x58b/0x6b0 [ 105.260536][ T8013] ? __pfx_netlink_sendmsg+0x10/0x10 [ 105.260635][ T8013] __sock_sendmsg+0x142/0x180 [ 105.260661][ T8013] ____sys_sendmsg+0x31e/0x4e0 [ 105.260683][ T8013] ___sys_sendmsg+0x17b/0x1d0 [ 105.260716][ T8013] __x64_sys_sendmsg+0xd4/0x160 [ 105.260738][ T8013] x64_sys_call+0x2999/0x2fb0 [ 105.260759][ T8013] do_syscall_64+0xd0/0x1a0 [ 105.260805][ T8013] ? clear_bhb_loop+0x25/0x80 [ 105.260832][ T8013] ? clear_bhb_loop+0x25/0x80 [ 105.260869][ T8013] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.260890][ T8013] RIP: 0033:0x7f723c9fe969 [ 105.260942][ T8013] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 105.260987][ T8013] RSP: 002b:00007f723b067038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 105.261005][ T8013] RAX: ffffffffffffffda RBX: 00007f723cc25fa0 RCX: 00007f723c9fe969 [ 105.261034][ T8013] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000005 [ 105.261046][ T8013] RBP: 00007f723b067090 R08: 0000000000000000 R09: 0000000000000000 [ 105.261058][ T8013] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 105.261069][ T8013] R13: 0000000000000000 R14: 00007f723cc25fa0 R15: 00007ffc08d86428 [ 105.261088][ T8013] [ 105.293854][ T8013] : renamed from bond0 (while UP) [ 105.363033][ T8026] netlink: 8 bytes leftover after parsing attributes in process `syz.0.947'. [ 105.433858][ T8029] loop0: detected capacity change from 0 to 1024 [ 105.440314][ T8022] smc: net device bond0 applied user defined pnetid SYZ2 [ 105.460196][ T8029] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 105.487410][ T8022] smc: ib device syz2 ibport 1 applied user defined pnetid SYZ2 [ 105.554786][ T8038] FAULT_INJECTION: forcing a failure. [ 105.554786][ T8038] name failslab, interval 1, probability 0, space 0, times 0 [ 105.555643][ T8028] smc: net device bond0 erased user defined pnetid SYZ2 [ 105.562996][ T8038] CPU: 0 UID: 0 PID: 8038 Comm: syz.6.948 Not tainted 6.15.0-rc4-syzkaller-00189-g2bfcee565c3a #0 PREEMPT(voluntary) [ 105.563134][ T8038] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 105.563150][ T8038] Call Trace: [ 105.563158][ T8038] [ 105.563168][ T8038] __dump_stack+0x1d/0x30 [ 105.563215][ T8038] dump_stack_lvl+0xe8/0x140 [ 105.563241][ T8038] dump_stack+0x15/0x1b [ 105.563262][ T8038] should_fail_ex+0x265/0x280 [ 105.563335][ T8038] should_failslab+0x8c/0xb0 [ 105.563373][ T8038] kmem_cache_alloc_noprof+0x50/0x310 [ 105.563505][ T8038] ? alloc_empty_file+0x76/0x200 [ 105.563549][ T8038] alloc_empty_file+0x76/0x200 [ 105.563633][ T8038] alloc_file_pseudo+0xc6/0x160 [ 105.563704][ T8038] __shmem_file_setup+0x1b9/0x1f0 [ 105.563738][ T8038] shmem_file_setup+0x3b/0x50 [ 105.563807][ T8038] __se_sys_memfd_create+0x2c3/0x590 [ 105.563839][ T8038] __x64_sys_memfd_create+0x31/0x40 [ 105.563874][ T8038] x64_sys_call+0x122f/0x2fb0 [ 105.563895][ T8038] do_syscall_64+0xd0/0x1a0 [ 105.563990][ T8038] ? clear_bhb_loop+0x25/0x80 [ 105.564018][ T8038] ? clear_bhb_loop+0x25/0x80 [ 105.564045][ T8038] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.564073][ T8038] RIP: 0033:0x7f723c9fe969 [ 105.564095][ T8038] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 105.564119][ T8038] RSP: 002b:00007f723b066e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 105.564142][ T8038] RAX: ffffffffffffffda RBX: 0000000000000631 RCX: 00007f723c9fe969 [ 105.564158][ T8038] RDX: 00007f723b066ef0 RSI: 0000000000000000 RDI: 00007f723ca81444 [ 105.564174][ T8038] RBP: 0000200000000500 R08: 00007f723b066bb7 R09: 00007f723b066e40 [ 105.564222][ T8038] R10: 000000000000000a R11: 0000000000000202 R12: 0000200000000300 [ 105.564238][ T8038] R13: 00007f723b066ef0 R14: 00007f723b066eb0 R15: 0000200000000480 [ 105.564263][ T8038] [ 105.855166][ T8028] smc: ib device syz2 ibport 1 erased user defined pnetid SYZ2 [ 105.865945][ T8045] netlink: 32 bytes leftover after parsing attributes in process `syz.4.950'. [ 105.865974][ T8045] netlink: 48 bytes leftover after parsing attributes in process `syz.4.950'. [ 105.865993][ T8045] netlink: 48 bytes leftover after parsing attributes in process `syz.4.950'. [ 105.866963][ T8045] x_tables: duplicate underflow at hook 4 [ 105.911488][ T8048] FAULT_INJECTION: forcing a failure. [ 105.911488][ T8048] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 105.928670][ T8048] CPU: 0 UID: 0 PID: 8048 Comm: syz.4.952 Not tainted 6.15.0-rc4-syzkaller-00189-g2bfcee565c3a #0 PREEMPT(voluntary) [ 105.928705][ T8048] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 105.928721][ T8048] Call Trace: [ 105.928729][ T8048] [ 105.928738][ T8048] __dump_stack+0x1d/0x30 [ 105.928762][ T8048] dump_stack_lvl+0xe8/0x140 [ 105.928859][ T8048] dump_stack+0x15/0x1b [ 105.928877][ T8048] should_fail_ex+0x265/0x280 [ 105.928908][ T8048] should_fail+0xb/0x20 [ 105.928939][ T8048] should_fail_usercopy+0x1a/0x20 [ 105.929009][ T8048] _copy_to_user+0x20/0xa0 [ 105.929072][ T8048] simple_read_from_buffer+0xb5/0x130 [ 105.929100][ T8048] proc_fail_nth_read+0x100/0x140 [ 105.929132][ T8048] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 105.929160][ T8048] vfs_read+0x19d/0x6f0 [ 105.929263][ T8048] ? __rcu_read_unlock+0x4f/0x70 [ 105.929283][ T8048] ? __fget_files+0x184/0x1c0 [ 105.929311][ T8048] ksys_read+0xda/0x1a0 [ 105.929343][ T8048] __x64_sys_read+0x40/0x50 [ 105.929466][ T8048] x64_sys_call+0x2d77/0x2fb0 [ 105.929490][ T8048] do_syscall_64+0xd0/0x1a0 [ 105.929529][ T8048] ? clear_bhb_loop+0x25/0x80 [ 105.929566][ T8048] ? clear_bhb_loop+0x25/0x80 [ 105.929627][ T8048] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.929647][ T8048] RIP: 0033:0x7f87e5c7d37c [ 105.929662][ T8048] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 105.929711][ T8048] RSP: 002b:00007f87e42e7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 105.929734][ T8048] RAX: ffffffffffffffda RBX: 00007f87e5ea5fa0 RCX: 00007f87e5c7d37c [ 105.929751][ T8048] RDX: 000000000000000f RSI: 00007f87e42e70a0 RDI: 0000000000000004 [ 105.929806][ T8048] RBP: 00007f87e42e7090 R08: 0000000000000000 R09: 0000000000000000 [ 105.929821][ T8048] R10: 0000200000032380 R11: 0000000000000246 R12: 0000000000000001 [ 105.929880][ T8048] R13: 0000000000000000 R14: 00007f87e5ea5fa0 R15: 00007ffff81cf8f8 [ 105.929898][ T8048] [ 106.256060][ T8073] 9pnet: Could not find request transport: 0xffffffffffffffff [ 106.269854][ T8072] bond1: entered promiscuous mode [ 106.275288][ T8072] bond1: entered allmulticast mode [ 106.283169][ T8072] 8021q: adding VLAN 0 to HW filter on device bond1 [ 106.295415][ T8072] bond1 (unregistering): Released all slaves [ 106.356387][ T8154] smc: net device bond0 applied user defined pnetid SYZ2 [ 106.366804][ T8154] smc: ib device syz2 ibport 1 applied user defined pnetid SYZ2 [ 106.389598][ T8154] smc: net device bond0 erased user defined pnetid SYZ2 [ 106.401728][ T8154] smc: ib device syz2 ibport 1 erased user defined pnetid SYZ2 [ 106.441873][ T8156] bond0: entered promiscuous mode [ 106.447138][ T8156] bond0: entered allmulticast mode [ 106.471855][ T8156] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.493670][ T8156] bond0 (unregistering): Released all slaves [ 106.684077][ T8273] bond1: entered promiscuous mode [ 106.689403][ T8273] bond1: entered allmulticast mode [ 106.723542][ T8273] 8021q: adding VLAN 0 to HW filter on device bond1 [ 106.754015][ T8320] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 106.754015][ T8320] program syz.4.976 not setting count and/or reply_len properly [ 106.793411][ T8273] bond1 (unregistering): Released all slaves [ 106.801943][ T294] ================================================================== [ 106.810234][ T294] BUG: KCSAN: data-race in copy_process / free_pid [ 106.816943][ T294] [ 106.819274][ T294] read-write to 0xffffffff8685f030 of 4 bytes by task 8336 on cpu 0: [ 106.827342][ T294] free_pid+0x77/0x180 [ 106.831428][ T294] free_pids+0x7a/0xb0 [ 106.835506][ T294] release_task+0x9d0/0xbb0 [ 106.840025][ T294] do_exit+0xee3/0x17c0 [ 106.844197][ T294] call_usermodehelper_exec_async+0x247/0x250 [ 106.850376][ T294] ret_from_fork+0x4b/0x60 [ 106.854817][ T294] ret_from_fork_asm+0x1a/0x30 [ 106.859593][ T294] [ 106.861919][ T294] read to 0xffffffff8685f030 of 4 bytes by task 294 on cpu 1: [ 106.869380][ T294] copy_process+0x1790/0x1f90 [ 106.874162][ T294] kernel_clone+0x16c/0x5b0 [ 106.878685][ T294] user_mode_thread+0x7d/0xb0 [ 106.883424][ T294] call_usermodehelper_exec_work+0x41/0x160 [ 106.889527][ T294] process_scheduled_works+0x4cb/0x9d0 [ 106.895003][ T294] worker_thread+0x582/0x770 [ 106.899613][ T294] kthread+0x486/0x510 [ 106.903696][ T294] ret_from_fork+0x4b/0x60 [ 106.908223][ T294] ret_from_fork_asm+0x1a/0x30 [ 106.912997][ T294] [ 106.915317][ T294] value changed: 0x800000d2 -> 0x800000d1 [ 106.921123][ T294] [ 106.923537][ T294] Reported by Kernel Concurrency Sanitizer on: [ 106.929697][ T294] CPU: 1 UID: 0 PID: 294 Comm: kworker/u8:5 Not tainted 6.15.0-rc4-syzkaller-00189-g2bfcee565c3a #0 PREEMPT(voluntary) [ 106.942213][ T294] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 106.953090][ T294] Workqueue: events_unbound call_usermodehelper_exec_work [ 106.960225][ T294] ==================================================================