last executing test programs: 29.463720161s ago: executing program 0 (id=1): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x2101, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x13, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000080000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000e10b47b6100000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000000180), 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0xb, &(0x7f00000004c0)=ANY=[@ANYRESHEX=r1], &(0x7f0000000040)='GPL\x00', 0xd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r5, @ANYBLOB="00000000000000001c001a800800028004000500080000003e"], 0x44}, 0x1, 0x0, 0x0, 0xc1a332accd536e1}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x18) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000080)='./file0\x00', 0x808080, &(0x7f0000000000), 0x2c, 0x52c, &(0x7f0000000640)="$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") write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0x2000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x38}}, 0x1000c840) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r1, 0x6, 0x15, &(0x7f00000002c0)=0x3, 0x4) unshare(0x2040400) r6 = fsopen(&(0x7f0000000440)='cgroup2\x00', 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000380)=ANY=[@ANYRES32=0x0], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r7}, 0x10) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) unshare(0x2000400) r8 = fsmount(r6, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x14, 0xc, &(0x7f0000000400)=ANY=[@ANYRES16=r8], 0x0, 0x5, 0x0, 0x0, 0x0, 0x11, '\x00', r5, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000070000000000009c15197e6dad60450000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20, @void, @value}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7, 0xfffffe18, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='workqueue_activate_work\x00', r9}, 0x10) openat$vcsa(0xffffffffffffff9c, &(0x7f0000002fc0), 0x242002, 0x0) 29.006811277s ago: executing program 0 (id=7): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000240)={[{@grpquota}, {@auto_da_alloc}, {@minixdf}]}, 0x1, 0x50c, &(0x7f0000000ac0)="$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") r0 = open(&(0x7f0000000100)='./bus\x00', 0x14113e, 0x133) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f0000"], 0x48) r1 = syz_io_uring_setup(0x1725, &(0x7f0000000100)={0x0, 0x1b2b, 0x800, 0x1, 0x333}, &(0x7f0000000400)=0x0, &(0x7f0000000200)=0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x458, 0x0, 0x168, 0x10, 0x190, 0xb, 0x388, 0x250, 0x250, 0x388, 0x250, 0x3, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00', [], [], 'veth1_to_batadv\x00', 'veth1_to_hsr\x00', {}, {}, 0x3a, 0x0, 0x0, 0x56}, 0x6000000, 0x128, 0x190, 0x0, {0x0, 0x28e}, [@inet=@rpfilter={{0x28}, {0xc}}, @common=@inet=@hashlimit1={{0x58}, {'netdevsim0\x00', {0x0, 0x0, 0x9, 0x1, 0x0, 0x10000, 0x80000401, 0x0, 0x40}}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0xd0, 0x1f8, 0x0, {}, [@common=@inet=@set2={{0x28}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:usb_device_t:s0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b8) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000300), r0) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000540)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000500)={&(0x7f0000000340)={0x2c, r6, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x2}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x3}, @L2TP_ATTR_DEBUG={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x48095) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r5, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) mkdir(&(0x7f0000000140)='./file0\x00', 0x12) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='debugfs\x00', 0x10040, 0x0) mount$tmpfs(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x1830022, &(0x7f0000000680)=ANY=[@ANYBLOB='mode=00000000000000000005634,uid=', @ANYRESDEC=0x0, @ANYBLOB="0124"]) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) statx(0xffffffffffffffff, 0x0, 0x6000, 0x4, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000580)={'nr0\x00'}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000001c0)={0x6, &(0x7f0000000080)=[{0xc1a0, 0x69, 0x8a, 0x80000001}, {0x81, 0xd, 0xfc, 0x8}, {0x1, 0x7f, 0xf, 0x5}, {0x4, 0x5e, 0x5, 0x8}, {0x80, 0x80, 0x1, 0x81}, {0xc, 0x1, 0x0, 0x908}]}) socket$inet6_tcp(0xa, 0x1, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000240)=0xfffffc04, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_SENDMSG={0x9, 0x1c, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2}, 0x0, 0x4080}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001900)={0x11, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_io_uring_setup(0x4a75, &(0x7f00000005c0)={0x0, 0x8ecf, 0x10, 0x1, 0x15c}, 0x0, 0x0) io_uring_enter(r1, 0x47f6, 0x0, 0x0, 0x0, 0x0) 28.408076467s ago: executing program 0 (id=17): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000210081044e81f782db44b9040a000000e8", 0x15}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000340)="d80000001c0081044e81f782db44b904021d080201000000040000a1180002000000000000000e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c6bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025cc", 0x94}], 0x1, 0x0, 0x0, 0x7400}, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$UHID_INPUT(r2, &(0x7f00000007c0)={0x8, {"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", 0x1000}}, 0x1006) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000002c0)={r2, 0x2000, {0x2a00, 0x80010000, 0x0, 0xe01, 0x0, 0x0, 0x0, 0x0, 0x1c, "001ea89d9bb7fb0000e60080b8785d96000100000000000000000000000000000000000000000000000000000000de000000000a00", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00", [0x0, 0x10000]}}) r3 = socket$kcm(0x11, 0x200000000000004, 0x300) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000340)="25b096f681cd731c3f3a9badc4e3cf5edeae1f3b5082d7ab3a97c053df68744e7c7e24d0b59997bab4bccff8363b275de3510b0ebe4275d8d2f153395668e3d608e358fc2294263c03f8dc4f8bf194e4fde4600a2dec2f483a914e2fde0cbc344a2b9fc18dd198966045a6d4d4eb8571e8bb69e6724e37fcbaa6e4c64050b47256b9bb17f5c0aa5101e015ecdcb62fec46fc02", 0x93}], 0x1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r3, 0x107, 0x12, &(0x7f00000008c0)=r6, 0x4) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000060000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r9}, 0x10) setrlimit(0x4, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0xd50, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2608004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bind$bt_hci(r0, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) close(r0) 13.406292131s ago: executing program 32 (id=17): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000210081044e81f782db44b9040a000000e8", 0x15}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000340)="d80000001c0081044e81f782db44b904021d080201000000040000a1180002000000000000000e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c6bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025cc", 0x94}], 0x1, 0x0, 0x0, 0x7400}, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$UHID_INPUT(r2, &(0x7f00000007c0)={0x8, {"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", 0x1000}}, 0x1006) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000002c0)={r2, 0x2000, {0x2a00, 0x80010000, 0x0, 0xe01, 0x0, 0x0, 0x0, 0x0, 0x1c, "001ea89d9bb7fb0000e60080b8785d96000100000000000000000000000000000000000000000000000000000000de000000000a00", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00", [0x0, 0x10000]}}) r3 = socket$kcm(0x11, 0x200000000000004, 0x300) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000340)="25b096f681cd731c3f3a9badc4e3cf5edeae1f3b5082d7ab3a97c053df68744e7c7e24d0b59997bab4bccff8363b275de3510b0ebe4275d8d2f153395668e3d608e358fc2294263c03f8dc4f8bf194e4fde4600a2dec2f483a914e2fde0cbc344a2b9fc18dd198966045a6d4d4eb8571e8bb69e6724e37fcbaa6e4c64050b47256b9bb17f5c0aa5101e015ecdcb62fec46fc02", 0x93}], 0x1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r3, 0x107, 0x12, &(0x7f00000008c0)=r6, 0x4) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000060000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r9}, 0x10) setrlimit(0x4, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0xd50, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2608004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bind$bt_hci(r0, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) close(r0) 3.858939s ago: executing program 4 (id=312): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008bd6000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000400)='io_uring_create\x00', r1}, 0x18) io_uring_setup(0x1de0, &(0x7f00000000c0)={0x0, 0x45d6, 0x40000, 0x0, 0x0, 0x0, r1}) 3.780292291s ago: executing program 4 (id=314): unshare(0x22020600) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) vmsplice(r0, &(0x7f00000005c0)=[{&(0x7f0000001cc0)="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", 0x341}], 0x1, 0xa) fcntl$setpipe(r0, 0x407, 0x6) (fail_nth: 2) 3.569264425s ago: executing program 4 (id=317): unshare(0x2a020600) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) vmsplice(r1, &(0x7f00000005c0)=[{&(0x7f0000001cc0)="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", 0x341}], 0x1, 0xa) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r2 = syz_clone3(&(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="61123000000000006113100000000000bf2000000000000016000200071b48013d030100000000009500000000000000bc26000000000000bf67000000000000070200000fff07006702000003000000360600000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a83683d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf5fe7030586"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r3 = syz_pidfd_open(r2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x3000001, 0x4010, r0, 0x0) write$P9_RMKDIR(r1, &(0x7f0000000080)={0x14, 0x49, 0x2, {0x10, 0x2, 0x3}}, 0x14) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r4}, 0x10) pidfd_send_signal(r3, 0x9, 0x0, 0x0) fcntl$setpipe(r1, 0x407, 0x6) 3.461694326s ago: executing program 4 (id=322): openat(0xffffffffffffffff, &(0x7f0000001d40)='./file0\x00', 0x0, 0x1c2) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001d80)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000047c0)=ANY=[@ANYBLOB="140000003a00010100000000000204000a"], 0x14}}, 0x0) recvmmsg(r1, &(0x7f0000003700)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000280)=""/4085, 0xff5}], 0x1}}], 0x4000000000001a3, 0x140, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000001c0)=0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x65, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x800000, 0x2, 0x7, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x6}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x69, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000040)='sys_enter\x00', r4}, 0x10) getrlimit(0x2, &(0x7f0000000180)) ptrace$setregs(0xf, r2, 0x1, &(0x7f0000001cc0)="14c5f2eabcce1daadc518d0cd6e3ca1bca654e309db68cfa99ab61924cdd5cc7441a201c6eabe66ef3ee5bd5755f06df3c8c28787ac39c35c478a9faf0874f022fad7f3010938aede7778e845d72fbb013d626ecbf9de18993b64156a6793d") socket$inet(0x2, 0x4000000000000001, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=@newqdisc={0x54, 0x10, 0x1, 0x70bd27, 0x0, {0x0, 0x0, 0x0, 0x0, {0xf}, {0xfff1}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x36, 0x8}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x26, 0x0, 0x0, 0x0, 0x1, 0xfffffffc, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) 2.913575334s ago: executing program 5 (id=326): bpf$PROG_LOAD(0x5, &(0x7f0000000dc0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000003c0)='mm_page_alloc\x00', r0}, 0x18) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'wlan1\x00', 0x1}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x339) openat$vcsu(0xffffffffffffff9c, &(0x7f0000002900), 0x200002, 0x0) socket$xdp(0x2c, 0x3, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000005c0)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a5050000000077d8f3b423cdac8d80000000000000002be16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0f7535f7866907dc6751dfb265a0e3ccae669e17fd6587d452d6453559c3421eed73d56615fe6c54c3b3ffe1b4ce25d7c983c044c03bf3a48dfe47ec9dd6c091c30b93bfae76d9ebacd3ed3e26e7a23129d6606fd28a69989d552af6bda9df2c3af36effff9af2551ce896165127cb3f011a7d06602e2fd52347125907000000000000003ed38ae89d24e1cebfba2f87925bfacba83109751fe6c05405d027edd68149ee99eef6a6992308a4fc0b7c70bc677d6dd4aed4af7500d7900a820b6347184e9a217b5614cd50cbe43a1ed2526814bc0000e9e086ce48e90defb6670c3df262ad0a97aec7291c25447c106a99893e10db21901eb397b2f5fd71d20fa7a050fbbef9e326ea27e513e96068fd1e8a43e89f9c85c822a961546ed5363c17ff1432d08806bc376e3e49ee52b59d13182e1f24ed200ada12f7a1001500a710eb1affb87ba55b2d72078e9f40b4ae7d01000000d11cd22c35d32940000088dde499000000fdffffff000000000000000000000000000000000000000000000c52f4ebd2c893bb97a068bd10734a83584898eccb26f7b789cfc4cd995fa3e11a5c74c85404e2df3ad37b729ac83b0dcb4f48f3c3356b9997fc455a17690b6f7f9ccbe4b1701941b18a904c0e585a66c3b84b138efc20a546d3d5227e23b03f2a834391ad24fe7d9b20cf92cb151763d41f5c76e2ff3e93ee296c4082ee73e7e197253a2b66c353312c9d75711ce1623e9c54bdff59d2a69dcb7d84c235b23a4480c2461b405cfd1a38992f295ad3adc94cd07c850d1ce6d0b2fea02c24e9280333152fb794e4ddea02017a6c139b50101caecaf2abc0842b99a96fc4275ad107274e2934a87a4ddcdb112754ca5bdec0ead14b6c0f19a43a2f04c7f0be31491eb8c9ff68236c8600000000000000000000000066e034c81c3cab4e33fc8dc55ce0ada18dcbf31c6e82893add3bee3e10fc873d1d922b0877cbcd95b839d3059d5140a1f742f6e75741e39e5cb6a193e06a1043375b0f61b5d4e17c81baa31b924d84f2243471221c15fa12313ffbfa7c2730302b66a99f66705b71e6205e7cbf3643561eabb9a63fcd604d5cc27e1317ad94cf438d71873e540be16b6ca20508011132153c528f7bca92980a3223c5b9cdddedb0a14adddf9a6e70a26b5c0ee0879c349814bee9d96d8bd23db4e801d49201ae84090455682794098afa42b34196b1d849020eeeb1ef48d003d71524683d7cdfa841bca708414fb8ff49742420d1ab7fa678aa4806d5247616e8bc0b02887f8efe9310ccf9bec1c9b7f6671c9d59ac6b09b4436cafdd1887c8e884c930d21ace088ccc99a94d4b33da2fc1b1310bb607a9ad65844655de1ac9fd36d12e07a821fb950368a970c58fb4f3f403fdaf68902874"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x8c0}, 0x0) 2.613696179s ago: executing program 4 (id=329): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000240)={[{@grpquota}, {@auto_da_alloc}, {@minixdf}]}, 0x1, 0x50c, &(0x7f0000000ac0)="$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") r0 = open(&(0x7f0000000100)='./bus\x00', 0x14113e, 0x133) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f0000"], 0x48) r1 = syz_io_uring_setup(0x1725, &(0x7f0000000100)={0x0, 0x1b2b, 0x800, 0x1, 0x333}, &(0x7f0000000400)=0x0, &(0x7f0000000200)=0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x458, 0x0, 0x168, 0x10, 0x190, 0xb, 0x388, 0x250, 0x250, 0x388, 0x250, 0x3, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00', [], [], 'veth1_to_batadv\x00', 'veth1_to_hsr\x00', {}, {}, 0x3a, 0x0, 0x0, 0x56}, 0x6000000, 0x128, 0x190, 0x0, {0x0, 0x28e}, [@inet=@rpfilter={{0x28}, {0xc}}, @common=@inet=@hashlimit1={{0x58}, {'netdevsim0\x00', {0x0, 0x0, 0x9, 0x1, 0x0, 0x10000, 0x80000401, 0x0, 0x40}}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0xd0, 0x1f8, 0x0, {}, [@common=@inet=@set2={{0x28}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:usb_device_t:s0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b8) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000300), r0) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000540)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000500)={&(0x7f0000000340)={0x2c, r6, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x2}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x3}, @L2TP_ATTR_DEBUG={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x48095) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r5, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) mkdir(&(0x7f0000000140)='./file0\x00', 0x12) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='debugfs\x00', 0x10040, 0x0) mount$tmpfs(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x1830022, &(0x7f0000000680)=ANY=[@ANYBLOB='mode=00000000000000000005634,uid=', @ANYRESDEC=0x0, @ANYBLOB="0124"]) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) statx(0xffffffffffffffff, 0x0, 0x6000, 0x4, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000580)={'nr0\x00'}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000001c0)={0x6, &(0x7f0000000080)=[{0xc1a0, 0x69, 0x8a, 0x80000001}, {0x81, 0xd, 0xfc, 0x8}, {0x1, 0x7f, 0xf, 0x5}, {0x4, 0x5e, 0x5, 0x8}, {0x80, 0x80, 0x1, 0x81}, {0xc, 0x1, 0x0, 0x908}]}) socket$inet6_tcp(0xa, 0x1, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000240)=0xfffffc04, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_SENDMSG={0x9, 0x1c, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2}, 0x0, 0x4080}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001900)={0x11, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_io_uring_setup(0x4a75, &(0x7f00000005c0)={0x0, 0x8ecf, 0x10, 0x1, 0x15c}, 0x0, 0x0) io_uring_enter(r1, 0x47f6, 0x0, 0x0, 0x0, 0x0) 2.50755893s ago: executing program 1 (id=331): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) connect$llc(0xffffffffffffffff, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xb, &(0x7f0000000c00)=ANY=[@ANYBLOB="18000000000000000000000023ed0000180100002820702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2, 0x0, 0x5}, 0x18) r3 = socket(0x10, 0x3, 0x0) connect$netlink(r3, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x25dfdbfd}, 0xc) sendmsg$nl_route_sched(r3, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000001540)=@newtaction={0x18, 0x32, 0x829, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x50) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x41, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x800000000003}, 0x1100, 0x5dd8, 0x0, 0x3, 0x0, 0x8, 0x400, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x0) r6 = socket$inet(0x2, 0x2, 0x1) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x14}, 0x4010) sendmsg$inet(r6, &(0x7f0000000600)={&(0x7f0000000040)={0x2, 0xffff, @multicast2}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f00000004c0)="1ed8b7f9d457", 0x6}], 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000890b040a0101027f00000100000000001c000000000000000000000008"], 0x40}, 0x20000000) sendmsg$inet(r5, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f0000000140)="be38", 0xffdf}], 0x1, &(0x7f0000000c80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @private}}}, @ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp={0x44, 0x4, 0x73}, @noop]}}}], 0x40}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x31, 0xffffffffffffffff, 0x0) read$char_usb(r5, &(0x7f0000000180)=""/147, 0x93) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={r7, 0xffffffffffffffff, 0x2d, 0x0, @val=@netfilter={0x2, 0x0, 0x6}}, 0x20) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000240)={0x9, 0x3, 0x1, 'queue1\x00', 0x7}) sendto$packet(r5, &(0x7f0000000400)="f0e2f63718850feb0f06087f6696641ffb9404e5c96d4b573985dfa9cfced496844c36fbd1ac2d8edc5b8685e02f2b005d94d5aa1d684377d3c393acc2ad4e3fdd59a480026734e183d8d4f2d245b3800e2c2d45463833f4694aa5875d134a4fc15ae566c7ca984b497af1649594f0376fbae04897b97611fae431629f98fa5cd30e15aa7622de93c2fdfbeddeabeeb7b5f8b115ff10f31b004bd25a487933a01805b22f258d4e1e96579f0d00d0f1494c5247952173da1201dd7e18cfde5f", 0xbf, 0x804, 0x0, 0x0) 2.388297123s ago: executing program 1 (id=332): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)={0x0, 0x38}}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x428}}, 0x0) recvmmsg(r0, &(0x7f00000037c0), 0x0, 0x0, &(0x7f0000000280)={0x77359400}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) utime(&(0x7f0000001fc0)='./bus\x00', &(0x7f0000002000)={0x9}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r3}, 0x10) r4 = socket(0xa, 0x2400000001, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='hrtimer_start\x00', r6}, 0x3d) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_MCAST_MSFILTER(r4, 0x29, 0x30, 0x0, 0x90) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000210081044e81f782db44b9040a000000e8", 0x15}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000340)="d80000001c0081044e81f782db44b904021d080201000000040000a1180002000000000000000e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c6bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025cc", 0x94}], 0x1, 0x0, 0x0, 0x7400}, 0x0) r7 = socket$kcm(0x11, 0x200000000000002, 0x300) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000340)="25b096f681cd731c3f3a9badc4e3cf5edeae1f3b5082d7ab3a97c053df68744e7c7e24d0b59997bab4bccff8363b275de3510b0ebe4275d8d2f153395668e3d608e358fc2294263c03f8dc4f8bf194e4fde4600a2dec2f483a914e2fde0cbc344a2b9fc18dd198966045a6d4d4eb8571e8bb69e6724e37fcbaa6e4c64050b47256b9bb17f5c0aa5101e015ecdcb62fec46fc02", 0x93}], 0x1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r9) recvmsg$unix(r8, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r7, 0x107, 0x12, &(0x7f00000008c0)=r10, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 2.204617336s ago: executing program 4 (id=333): bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0a000000030000000800000001"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000000500)="a4", 0x34000, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x2000000, @loopback, 0xffffffff}, 0x1c) 2.077403568s ago: executing program 5 (id=334): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e0000008500000005"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/resume', 0x169a82, 0x109) sendfile(r1, r1, 0x0, 0xb) 2.022621308s ago: executing program 5 (id=336): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e0000008500000005"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/resume', 0x169a82, 0x109) sendfile(r1, r1, 0x0, 0xb) 1.989059009s ago: executing program 5 (id=338): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) epoll_create1(0x0) close(0xffffffffffffffff) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="0207e80702"], 0x10}}, 0x40044) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r2}, &(0x7f00000001c0), &(0x7f0000000200)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=@framed={{0x18, 0x9}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r1}, &(0x7f0000000280), &(0x7f0000000200)=r4}, 0x1d) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r1, &(0x7f0000000780)}, 0x20) r5 = socket$inet6(0xa, 0x3, 0x84) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@private0={0xfc, 0x0, '\x00', 0x2}, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2e}, {0x0, 0xffffffffffffffff, 0x100000000000000, 0x2, 0x2, 0x2000000, 0x10}, {0x1}, 0x6, 0xffffdffd, 0x1}, {{@in6=@private2, 0x0, 0x32}, 0x2, @in=@rand_addr=0x64010101, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x4}}, 0xe8) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480), 0x48241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r6, &(0x7f0000000200)={@val={0x0, 0x800}, @void, @eth={@empty, @random="1f00", @val, {@mpls_mc={0x894f, {[], @llc={@llc={0xaa, 0xfe, '\x00'}}}}}}}, 0x1d) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xff}}}, 0x1c) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prctl$PR_SET_NAME(0xf, &(0x7f0000000180)='wg1\x00') r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r9, 0x0, 0xfffffffff7ffffe9}, 0x18) syz_usbip_server_init(0x1) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @void, @value}, 0x94) 1.668210424s ago: executing program 3 (id=343): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f00000000c0)}) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x41, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x800000000001}, 0x1100, 0x5dd8, 0x0, 0x8, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) msgsnd(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="03"], 0x401, 0x0) 1.531922226s ago: executing program 3 (id=344): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000180)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb0100180000000000000048000000480000000a000000000000000400000604000000030000000400000006000000000800000b000000040000000b0000000000d82800ff0c000000000000930a0000000e000000000000110300000000302e5f5f612e005f00"], &(0x7f0000000000)=""/42, 0x6a, 0x2a, 0x0, 0x2, 0x0, @void, @value}, 0x28) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r0}, &(0x7f0000000380), &(0x7f00000003c0)=r1}, 0x20) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000004080)={{r2}, &(0x7f0000004000), &(0x7f0000004040)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010028bd7000fedbe6250200000008000100", @ANYRES32], 0x1c}, 0x1, 0x0, 0x0, 0x4800}, 0x8004) write$nci(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="414601", @ANYRES32], 0x4) r5 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000005c0)={&(0x7f00000007c0)={0x118, r5, 0x4, 0x70bd2d, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_TAGLST={0x34, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x2}, {0x5}, {0x5, 0x3, 0x3}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x7}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x7c, 0x8, 0x0, 0x1, [{0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe9}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2e2175bb}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb6}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x31}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2fbbc42f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x75}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x32}]}, {0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7f6f7d26}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6e35207f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc5}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xef}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd0}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xffff13d4}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x97}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x54, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x3f86d8afd9e3e38e}, {0x5}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x2}, {0x5}, {0x5}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x6}]}]}, 0x118}, 0x1, 0x0, 0x0, 0x8001}, 0x4040010) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) r6 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r6, 0x65, 0x1, 0x0, 0xf00) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480), 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00'}, 0x10) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000380)='./file1\x00', 0x3000000, &(0x7f00000006c0), 0x1, 0x512, &(0x7f0000000c40)="$eJzs3W1rZFcdAPD/vcmk2d3UTFVkLdgWW9ktujNJY9so0lYQfVVQ6/s1JpMQMsmEzKRuQtEsfgBBRAU/gG8EP4Ag+xFEWND3oqKI7upL3St35kbzMJMMySSzTn4/OJlz7sP5n3PJ3LkPh3sDuLJeioh3ImIsIl6NiOlielqk2OukfLnHjz5YzFMSWfbe35JIimn7deXl8Yi4Uaw2GRFf/0rEt5LjcZs7u2sL9XptqyhXW+ub1ebO7p3V9YWV2kptY25u9o35N+dfn5/JCufqZzki3vrSn370/Z99+a1ffebbv7/7l9vfyZv1hY912h0Ri+cK0EOn7lJ7W+zLt9HWRQQbkrw/pbFhtwIAgH7kx/gfjohPto//p2OsfTQHAAAAjJLs7an4VxKRAQAAACMrjYipSNJKMRZgKtK0UumM4f1oXE/rjWbr08uN7Y2lfF5EOUrp8mq9NlOMFS5HKcnLs8UY2/3ya0fKcxHxXET8cPpau1xZbNSXhn3xAwAAAK6IGy8ePv//53TazgMAAAAjptyzAAAAAIwKp/wAAAAw+pz/AwAAwEj76rvv5inbf4/30vs722uN9+8s1ZprlfXtxcpiY2uzstJorLSf2bd+Wn31RmPzs7Gxfa/aqjVb1ebO7t31xvZG6+7qoVdgAwAAAJfouRcf/C6JiL3PX2unKJ4DCHDIH4fdAGCQxobdAGBoxofdAGBoSqcuYQ8Boy45Zf7xwTuda4Xx64tpDwAAMHi3Pn78/v9EMe/0awPA/zNjfQDg6nF3D66u0llHAN4cdEuAYflQ5+OZXvN7Pryjj/v/nWsMWXamhgEAAAMz1U5JWimO06ciTSuViGfbrwUoJcur9dpMcX7w2+nSM3l5tr1mcuqYYQAAAAAAAAAAAAAAAAAAAAAAAACgI8uSyAAAAICRFpH+OWk/zT/i1vQrU4evDhx569dP3/vxvYVWa2s2YiL5+3Q+aSIiWj8ppr+WeSUAAAAAPAU65+nF5+ywWwMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAqHn86IPF/XSZcf/6xYgod4s/HpPtz8koRcT1fyQxfmC9JCLGBhB/735E3OwWP4knWZaVi1Z0i3/tguOX25ume/w0Im4MID5cZQ/y/c873b5/abzU/uz+/Rsv0nn13v+l/93/jfXY/zx7pNzL8w9/Ue0Z/37E8+Pd9z/78ZNO/EMh8sLLffbxm9/Y3e0640CV3eIfjFVtrW9Wmzu7d1bXF1ZqK7WNubnZN+bfnH99fqa6vFqvFX+7hvnBJ3755KT+X+8Rv3y4/8e2/yt99T6Lfz+89+gjnUKpW/zbL3f//b3ZI35a/PZ9qsjn82/t5/c6+YNe+PlvXjip/0s9+j95Sv9v99X/+NyrX/veH7rOObY1AIDL0NzZXVuo12tbJ2Qm+1jmkjNvPx3NGGAmno5mDCuTfbfz/3i+es65+rFMdp7Vx2MAzZg49j0di7NWmETs5XX1+Q8JAACMmP8d9J90BwkAAAAAAAAAAAAAAAAAAAC4SGd8LNlkRPS98NGYe8PpKgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAif4TAAD//4RX0Xo=") write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040), 0x208e24b) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x360, 0x1c0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x480, 0xffffffff, 0xffffffff, 0x480, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0xc8, 0x60030000, {0x0, 0xff000000}}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x1a0, 0x1c8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x1c8, 0x4, 0x0, 'syz0\x00'}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) r7 = socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=@newqdisc={0x78, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xa}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x3, 0x0, 0x7ff, 0x1}, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x1e, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0xfffffffc, 0x0, 0xfff}}}}]}, 0x78}}, 0x0) 1.504589386s ago: executing program 1 (id=345): unshare(0x2a020600) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) vmsplice(r1, &(0x7f00000005c0)=[{&(0x7f0000001cc0)="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", 0x341}], 0x1, 0xa) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r2 = syz_clone3(&(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="61123000000000006113100000000000bf2000000000000016000200071b48013d030100000000009500000000000000bc26000000000000bf67000000000000070200000fff07006702000003000000360600000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a83683d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf5fe7030586"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r3 = syz_pidfd_open(r2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x3000001, 0x4010, r0, 0x0) write$P9_RMKDIR(r1, &(0x7f0000000080)={0x14, 0x49, 0x2, {0x10, 0x2, 0x3}}, 0x14) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r4}, 0x10) pidfd_send_signal(r3, 0x9, 0x0, 0x0) fcntl$setpipe(r1, 0x407, 0x6) 1.379856059s ago: executing program 1 (id=346): r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file1\x00', 0x16b042, 0x108) fcntl$setlease(r0, 0x400, 0x0) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20084000}, 0xc, &(0x7f0000000080)={&(0x7f0000000380)={0x1bc, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@TIPC_NLA_LINK={0x104, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x81}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x101}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2b}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffff9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffe}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x101}]}]}, @TIPC_NLA_SOCK={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x50882c03}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x7f}]}]}, @TIPC_NLA_MEDIA={0x88, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xb}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x51b}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5a}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xb87c}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffd8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x4000004}, 0x90) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') move_mount(r1, &(0x7f0000000180)='./mnt\x00', r1, 0x0, 0x154) 1.297681549s ago: executing program 1 (id=348): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800"], 0x64}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000b80)=ANY=[@ANYBLOB="18000000fffffffb000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000085200000020000009500000000000000"], 0x0, 0xfffffff2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000000010104000000000000000002000000240002801400018008000100e000000108000200e00000010c00028005000100000000000800154000000000080008"], 0x48}}, 0x4000000) 1.295952759s ago: executing program 3 (id=349): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000900850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kfree\x00', r1}, 0x10) r2 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x2) r3 = dup(r2) ioctl$USBDEVFS_CONTROL(r3, 0xc0185500, &(0x7f0000000240)={0x80, 0x6, 0xf00, 0x0, 0x0, 0x0, 0x0}) 1.26242294s ago: executing program 1 (id=350): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000100)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@resgid}, {@data_err_ignore}, {@jqfmt_vfsv0}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$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") r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kmem_cache_free\x00', r0}, 0x18) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) lsm_set_self_attr(0x64, 0x0, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000003c0)='sched_switch\x00', r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8c}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsopen(&(0x7f0000000000)='bpf\x00', 0x0) 1.174805862s ago: executing program 3 (id=351): bpf$PROG_LOAD(0x5, &(0x7f0000000dc0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000003c0)='mm_page_alloc\x00', r0}, 0x18) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'wlan1\x00', 0x1}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x339) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000002900), 0x200002, 0x0) waitid$P_PIDFD(0x3, r2, 0x0, 0x8, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000005c0)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a5050000000077d8f3b423cdac8d80000000000000002be16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0f7535f7866907dc6751dfb265a0e3ccae669e17fd6587d452d6453559c3421eed73d56615fe6c54c3b3ffe1b4ce25d7c983c044c03bf3a48dfe47ec9dd6c091c30b93bfae76d9ebacd3ed3e26e7a23129d6606fd28a69989d552af6bda9df2c3af36effff9af2551ce896165127cb3f011a7d06602e2fd52347125907000000000000003ed38ae89d24e1cebfba2f87925bfacba83109751fe6c05405d027edd68149ee99eef6a6992308a4fc0b7c70bc677d6dd4aed4af7500d7900a820b6347184e9a217b5614cd50cbe43a1ed2526814bc0000e9e086ce48e90defb6670c3df262ad0a97aec7291c25447c106a99893e10db21901eb397b2f5fd71d20fa7a050fbbef9e326ea27e513e96068fd1e8a43e89f9c85c822a961546ed5363c17ff1432d08806bc376e3e49ee52b59d13182e1f24ed200ada12f7a1001500a710eb1affb87ba55b2d72078e9f40b4ae7d01000000d11cd22c35d32940000088dde499000000fdffffff000000000000000000000000000000000000000000000c52f4ebd2c893bb97a068bd10734a83584898eccb26f7b789cfc4cd995fa3e11a5c74c85404e2df3ad37b729ac83b0dcb4f48f3c3356b9997fc455a17690b6f7f9ccbe4b1701941b18a904c0e585a66c3b84b138efc20a546d3d5227e23b03f2a834391ad24fe7d9b20cf92cb151763d41f5c76e2ff3e93ee296c4082ee73e7e197253a2b66c353312c9d75711ce1623e9c54bdff59d2a69dcb7d84c235b23a4480c2461b405cfd1a38992f295ad3adc94cd07c850d1ce6d0b2fea02c24e9280333152fb794e4ddea02017a6c139b50101caecaf2abc0842b99a96fc4275ad107274e2934a87a4ddcdb112754ca5bdec0ead14b6c0f19a43a2f04c7f0be31491eb8c9ff68236c8600000000000000000000000066e034c81c3cab4e33fc8dc55ce0ada18dcbf31c6e82893add3bee3e10fc873d1d922b0877cbcd95b839d3059d5140a1f742f6e75741e39e5cb6a193e06a1043375b0f61b5d4e17c81baa31b924d84f2243471221c15fa12313ffbfa7c2730302b66a99f66705b71e6205e7cbf3643561eabb9a63fcd604d5cc27e1317ad94cf438d71873e540be16b6ca20508011132153c528f7bca92980a3223c5b9cdddedb0a14adddf9a6e70a26b5c0ee0879c349814bee9d96d8bd23db4e801d49201ae84090455682794098afa42b34196b1d849020eeeb1ef48d003d71524683d7cdfa841bca708414fb8ff49742420d1ab7fa678aa4806d5247616e8bc0b02887f8efe9310ccf9bec1c9b7f6671c9d59ac6b09b4436cafdd1887c8e884c930d21ace088ccc99a94d4b33da2fc1b1310bb607a9ad65844655de1ac9fd36d12e07a821fb950368a970c58fb4f3f403fdaf68902874"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x8c0}, 0x0) 977.922595ms ago: executing program 2 (id=352): r0 = socket$inet6(0xa, 0x2, 0x3a) bind(r0, &(0x7f0000000000)=@hci={0xa}, 0x18) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYRESDEC=r0], 0x48) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {0x5}}, './file0\x00'}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0x102}, 0x18) r3 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x2409c8c1, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.avg_queue_size\x00', 0x26e1, 0x0) close(r4) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) ioctl$TUNSETQUEUE(r4, 0x400454d9, &(0x7f0000000100)={'wg1\x00', 0x400}) ioctl$TUNSETCARRIER(r5, 0x400454e2, &(0x7f0000000200)=0x1) sendto$inet6(r3, &(0x7f0000000e80)="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", 0x5c6, 0x6d91fb6102d8910c, 0x0, 0xfffffffffffffe38) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r6, &(0x7f00000010c0)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000c80)="93bffce623851797a8dc79018d7716840ffc6946a067f6d345b18bc896d8f016f5f206bb2b0eb2fe32d2f0048678cd35ef833c35225ff95a94770a6845b091e69f243dea0d601c54e9c93ee3568b89a3427c84262ff67b679ccac305b5cea1dcd151d7bb5754603b6b0e362d8041bdc61529260e6c4046d55927c96dcce1609b9c4f8424b9da760270a470f95b99ebb688db8aee2963a9a5c8b454270e3c084fd5232dd1e17566d440d9f479034f26806b25dcfc18c50ee6f365a1bd150cc423678f1ef69b0667c83d4ff77606fa2419a623de490ccf13b8e517b86ec867b9a8aef91ab13bfed96b1de8ac45fc2c5616665e00f6778bfbe71ac4b64342a98bb0234e03f78e546662f807b2ed652abdd0a45cc882ef7fcebba66cf3e75506d6c969632e0988518b9593346c9a6c8076751b053be0345b0d14a9f162a5dff0fb68c8e7df1a1bddbdb06c7183765a791437f5da3994750711f8797dc575fae592e1654adb2434b37b874ad1ac4aa6a50a384e601e3756b08ae220a4cf026ec168e60dc61f86eae68e5529a77ced1208dba91a88b770", 0x194}, {&(0x7f00000007c0)="02999344565d9c61d3bb8cf353fd63c588ffa39f0ff0fced20927ea4b2a247d082247558bef6b2b2cd6a0dffece1b36526e9388c344fb7ac429e432bcb0330483c0604aaf296d8218e240055cb92f17b1b47fd7b1b178ca0d1c470154ed985a179f87c9bc402189195e92dc1d73fce0d96439a53073df328509806e960", 0x7d}, {&(0x7f00000002c0)="ec75d081fcb7e79634ec1a1abfdebb6a38b0c57cc77b83d2eea81aad8f73b36abc2019cb08fcaaec9647a07d0a0965f0f1e39afd84e7e2523aaded5e09aa1e36fcc90c269ad6d38d57619127cee4253655c33b71054226c3b00b9ee6ae29f0b07bc6fe7981126ca804c1f64e6c19ba36b2778c5f4a1c58625fe19516af43c9870c5b8191e23778abe7df2280d459b1651686a53ca52dce9570444c153f9c2903ae4c868074e89477bf6ed2ab648b0498ac8c0f90844ed9a26675199d5ff9b391c1dec077b5099cf9aecd1a9d94e2", 0xce}, {&(0x7f0000000f00)="397d5f2e855cb2b0b1e61d3fe47dc3e798cf47cfebf169e77257f308b498e5b417227094d569a4456954e58ea1850000000000000000355c5f42d9f2aa5f", 0x3e}, {&(0x7f00000003c0)="9059c5aee5fca0529f3f9109a29885942349a08c6be8241fb9050c7491a49f89ee4aa8a1f1daa6663945ed017834c6afaab141dfb713", 0x36}, {&(0x7f0000000480)="3b98c053d628", 0x6}], 0x6}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000a00)="b1f56ee29c433328d3b2a83bd97e37007087acae7568edff43ed556d76770122635aea1dc48755381c71590cd542e796cc2669e2af442a03760c5cdfc691b3da35ad6a8d2ef9c2baa53a8dec36a2e434d46e643a1277b1dd932f3ef2cf46c257d6a19523b8b789ef34b46e461725b5e437323385b88c368f8bb5b933", 0x7c}, {&(0x7f0000000180)="5be3b011e12323e4ab88c0472f0700000000000000e71ba62334303d2db97401439932cfd4855c4cc243dae723789d8a9a16be3135c5f82691837c90ab19545f7a1dcf1449fd59eecae5f52fba1e89d6d34b39297bbbc2580600000000000000d6e36e737691a1c6bd2a64b2a85cbaaf648c9100000000000000006a8f4f5405596e72f8fe08c33a33b275787892f61fbb621794716f96031931b55af30fa01d72aa5a", 0xa3}], 0x2}}, {{0x0, 0x0, &(0x7f0000000c40)=[{&(0x7f0000000840)="3f1c4a04940ee0b20aec8b4090986a3bff84255d40657e7ee0d40a25584e869ef417cfb843df9bab6a733f72f13c385945fbe4f6592503b0013edc972aa7f382cfe6f924e9b3058c5dc3a39af5f6868c9031d7f0fba663fed16b868a4e53436b1be7a082f826014791", 0x69}, {&(0x7f00000008c0)="ab802595e16402267afad4132bae032aeebc5d3df8873915f385de7623fdcdbb497d2913cabe2bd146dee84fdcbeaa251db4f747090dc6c625ed3b915aae8dda1394c0d541055b3e89cab518a94118fb170c1d73", 0x54}, {&(0x7f0000000b80)="5e93f51c80552080613760264b6008795ee1e8b68965025b8a5b43529d3a64b1947ab79563d895ac06f8e1df8ce3befc5707528570ed617ff1", 0x39}], 0x3}}], 0x3, 0xc0) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r6, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) sendto$inet6(r3, 0x0, 0x0, 0x0, 0x0, 0x0) 835.605987ms ago: executing program 2 (id=353): r0 = socket$inet(0x2, 0x3, 0x33) getsockopt$inet_mreqsrc(r0, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) 835.178036ms ago: executing program 2 (id=354): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f00000000c0)}) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x41, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x800000000001}, 0x1100, 0x5dd8, 0x0, 0x8, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) msgsnd(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="03"], 0x401, 0x0) 692.154839ms ago: executing program 2 (id=355): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000100)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@resgid}, {@data_err_ignore}, {@jqfmt_vfsv0}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$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") r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kmem_cache_free\x00', r0}, 0x18) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) lsm_set_self_attr(0x64, 0x0, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000003c0)='sched_switch\x00', r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8c}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = fsopen(&(0x7f0000000000)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) 428.947473ms ago: executing program 2 (id=356): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xd, &(0x7f00000002c0)=@raw=[@ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}], &(0x7f0000000180)='syzkaller\x00', 0xd99d, 0x4d, &(0x7f0000000340)=""/77, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000004c0)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000500)={0x1, 0x2, 0x86, 0x8}, 0x10, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000540)=[{0x3, 0x1, 0x3}, {0x2, 0x2, 0x8, 0x9}, {0x4, 0x3, 0x10, 0xc}, {0x0, 0x5, 0x1, 0x6}, {0x3, 0x4, 0x6, 0x6}, {0x3, 0x5, 0x0, 0xb}, {0x3, 0x5, 0xd, 0xa756c5da3b814b9e}, {0x0, 0x4, 0x2, 0xc}], 0x10, 0x1, @void, @value}, 0x94) r0 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x18, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r1}, 0x10) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0xe, &(0x7f0000000000)=[{&(0x7f00000001c0)="d8000000180081054e81f782db44b904021d005c06007c09e8fe55a10a0015400600142603600e1208000b0000000401a8001600a400014009000200036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360d070100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) 387.811814ms ago: executing program 5 (id=357): r0 = socket$inet(0x2, 0x3, 0x33) getsockopt$inet_mreqsrc(r0, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) 356.155754ms ago: executing program 3 (id=358): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0x1e, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x50, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3ff, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0xf1, &(0x7f0000000240)={&(0x7f0000000500)=@newqdisc={0x38, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_HH_FLOWS_LIMIT={0x4}]}}]}, 0x38}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xe, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r5}, 0x10) accept4$unix(0xffffffffffffffff, &(0x7f0000000040)=@abs, 0x0, 0x80000) socket$kcm(0x10, 0x2, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000080)={@local, @random="daed8ab666f0", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010101, @local}, @time_exceeded={0x3, 0x5, 0x0, 0x3, 0x0, 0x6, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, 0x0, @broadcast, @multicast2}, "1a3f02eb38ad1bf6"}}}}}, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r6}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r7}, 0x10) openat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x6a1c2, 0x50) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000040)={[{@errors_remount}, {@abort}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5e}}, {@noauto_da_alloc}, {@bsdgroups}, {@oldalloc}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x2, 0x44a, &(0x7f0000000400)="$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") 290.588335ms ago: executing program 5 (id=359): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000180)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb0100180000000000000048000000480000000a000000000000000400000604000000030000000400000006000000000800000b000000040000000b0000000000d82800ff0c000000000000930a0000000e000000000000110300000000302e5f5f612e005f00"], &(0x7f0000000000)=""/42, 0x6a, 0x2a, 0x0, 0x2, 0x0, @void, @value}, 0x28) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r0}, &(0x7f0000000380), &(0x7f00000003c0)=r1}, 0x20) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000004080)={{r2}, &(0x7f0000004000), &(0x7f0000004040)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010028bd7000fedbe6250200000008000100", @ANYRES32], 0x1c}, 0x1, 0x0, 0x0, 0x4800}, 0x8004) write$nci(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="414601", @ANYRES32], 0x4) r5 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000005c0)={&(0x7f00000007c0)={0x118, r5, 0x4, 0x70bd2d, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_TAGLST={0x34, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x2}, {0x5}, {0x5, 0x3, 0x3}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x7}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x7c, 0x8, 0x0, 0x1, [{0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe9}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2e2175bb}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb6}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x31}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2fbbc42f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x75}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x32}]}, {0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7f6f7d26}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6e35207f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc5}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xef}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd0}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xffff13d4}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x97}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x54, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x3f86d8afd9e3e38e}, {0x5}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x2}, {0x5}, {0x5}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x6}]}]}, 0x118}, 0x1, 0x0, 0x0, 0x8001}, 0x4040010) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) r6 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r6, 0x65, 0x1, 0x0, 0xf00) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480), 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00'}, 0x10) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000380)='./file1\x00', 0x3000000, &(0x7f00000006c0), 0x1, 0x512, &(0x7f0000000c40)="$eJzs3W1rZFcdAPD/vcmk2d3UTFVkLdgWW9ktujNJY9so0lYQfVVQ6/s1JpMQMsmEzKRuQtEsfgBBRAU/gG8EP4Ag+xFEWND3oqKI7upL3St35kbzMJMMySSzTn4/OJlz7sP5n3PJ3LkPh3sDuLJeioh3ImIsIl6NiOlielqk2OukfLnHjz5YzFMSWfbe35JIimn7deXl8Yi4Uaw2GRFf/0rEt5LjcZs7u2sL9XptqyhXW+ub1ebO7p3V9YWV2kptY25u9o35N+dfn5/JCufqZzki3vrSn370/Z99+a1ffebbv7/7l9vfyZv1hY912h0Ri+cK0EOn7lJ7W+zLt9HWRQQbkrw/pbFhtwIAgH7kx/gfjohPto//p2OsfTQHAAAAjJLs7an4VxKRAQAAACMrjYipSNJKMRZgKtK0UumM4f1oXE/rjWbr08uN7Y2lfF5EOUrp8mq9NlOMFS5HKcnLs8UY2/3ya0fKcxHxXET8cPpau1xZbNSXhn3xAwAAAK6IGy8ePv//53TazgMAAAAjptyzAAAAAIwKp/wAAAAw+pz/AwAAwEj76rvv5inbf4/30vs722uN9+8s1ZprlfXtxcpiY2uzstJorLSf2bd+Wn31RmPzs7Gxfa/aqjVb1ebO7t31xvZG6+7qoVdgAwAAAJfouRcf/C6JiL3PX2unKJ4DCHDIH4fdAGCQxobdAGBoxofdAGBoSqcuYQ8Boy45Zf7xwTuda4Xx64tpDwAAMHi3Pn78/v9EMe/0awPA/zNjfQDg6nF3D66u0llHAN4cdEuAYflQ5+OZXvN7Pryjj/v/nWsMWXamhgEAAAMz1U5JWimO06ciTSuViGfbrwUoJcur9dpMcX7w2+nSM3l5tr1mcuqYYQAAAAAAAAAAAAAAAAAAAAAAAACgI8uSyAAAAICRFpH+OWk/zT/i1vQrU4evDhx569dP3/vxvYVWa2s2YiL5+3Q+aSIiWj8ppr+WeSUAAAAAPAU65+nF5+ywWwMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAqHn86IPF/XSZcf/6xYgod4s/HpPtz8koRcT1fyQxfmC9JCLGBhB/735E3OwWP4knWZaVi1Z0i3/tguOX25ume/w0Im4MID5cZQ/y/c873b5/abzU/uz+/Rsv0nn13v+l/93/jfXY/zx7pNzL8w9/Ue0Z/37E8+Pd9z/78ZNO/EMh8sLLffbxm9/Y3e0640CV3eIfjFVtrW9Wmzu7d1bXF1ZqK7WNubnZN+bfnH99fqa6vFqvFX+7hvnBJ3755KT+X+8Rv3y4/8e2/yt99T6Lfz+89+gjnUKpW/zbL3f//b3ZI35a/PZ9qsjn82/t5/c6+YNe+PlvXjip/0s9+j95Sv9v99X/+NyrX/veH7rOObY1AIDL0NzZXVuo12tbJ2Qm+1jmkjNvPx3NGGAmno5mDCuTfbfz/3i+es65+rFMdp7Vx2MAzZg49j0di7NWmETs5XX1+Q8JAACMmP8d9J90BwkAAAAAAAAAAAAAAAAAAAC4SGd8LNlkRPS98NGYe8PpKgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAif4TAAD//4RX0Xo=") write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040), 0x208e24b) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x360, 0x1c0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x480, 0xffffffff, 0xffffffff, 0x480, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0xc8, 0x60030000, {0x0, 0xff000000}}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x1a0, 0x1c8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x1c8, 0x4, 0x0, 'syz0\x00'}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) r7 = socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=@newqdisc={0x78, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xa}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x3, 0x0, 0x7ff, 0x1}, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x1e, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0xfffffffc, 0x0, 0xfff}}}}]}, 0x78}}, 0x0) 204.230557ms ago: executing program 2 (id=360): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) write$selinux_load(0xffffffffffffffff, &(0x7f0000000040)={0xf97cff8c, 0x8}, 0x10) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) r2 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\x01\x04\x00\x00\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n [ 40.849259][ T3457] SELinux: Context system_u:object_r:systemd_logind_var_run_t:s0 is not valid (left unmapped). [ 40.868034][ T3452] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 40.894668][ T3452] SELinux: ebitmap: truncated map [ 40.901841][ T3452] SELinux: failed to load policy [ 40.954890][ T3463] loop0: detected capacity change from 0 to 512 [ 40.975075][ T3457] netlink: 'syz.1.2': attribute type 21 has an invalid length. [ 41.013173][ T3463] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.029895][ T3470] loop3: detected capacity change from 0 to 256 [ 41.060774][ T3463] ext4 filesystem being mounted at /1/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 41.093879][ T3463] xt_CT: You must specify a L4 protocol and not use inversions on it [ 41.093942][ T3472] IPVS: stopping master sync thread 3477 ... [ 41.151826][ T3463] ======================================================= [ 41.151826][ T3463] WARNING: The mand mount option has been deprecated and [ 41.151826][ T3463] and is ignored by this kernel. Remove the mand [ 41.151826][ T3463] option from the mount to silence this warning. [ 41.151826][ T3463] ======================================================= [ 41.193544][ T3463] debugfs: Bad value for 'uid' [ 41.198699][ T3463] debugfs: Bad value for 'uid' [ 41.300919][ T3491] loop3: detected capacity change from 0 to 512 [ 41.316975][ T3481] loop2: detected capacity change from 0 to 512 [ 41.318253][ T3494] loop4: detected capacity change from 0 to 164 [ 41.332459][ T3491] EXT4-fs: Ignoring removed oldalloc option [ 41.417831][ T3494] ISOFS: unable to read i-node block [ 41.423599][ T3494] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 41.444127][ T3491] EXT4-fs error (device loop3): ext4_xattr_inode_iget:433: comm syz.3.15: Parent and EA inode have the same ino 15 [ 41.444399][ T3481] EXT4-fs error (device loop2): ext4_acquire_dquot:6935: comm syz.2.14: Failed to acquire dquot type 1 [ 41.495124][ T3481] EXT4-fs (loop2): 1 truncate cleaned up [ 41.501423][ T3491] EXT4-fs (loop3): Remounting filesystem read-only [ 41.508830][ T3491] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 41.522055][ T3491] EXT4-fs warning (device loop3): ext4_evict_inode:262: couldn't mark inode dirty (err -30) [ 41.533405][ T3304] EXT4-fs error (device loop0): ext4_readdir:264: inode #12: block 32: comm syz-executor: path /1/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 41.543467][ T3491] EXT4-fs (loop3): 1 orphan inode deleted [ 41.585625][ T3481] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.598502][ T3499] netlink: 8 bytes leftover after parsing attributes in process `syz.4.18'. [ 41.598541][ T3499] netlink: 8 bytes leftover after parsing attributes in process `syz.4.18'. [ 41.598563][ T3499] netlink: 8 bytes leftover after parsing attributes in process `syz.4.18'. [ 41.642750][ T3481] ext4 filesystem being mounted at /2/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 41.648164][ T3491] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.683989][ T3304] EXT4-fs error (device loop0): ext4_empty_dir:3086: inode #12: block 32: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 41.688392][ T3501] loop4: detected capacity change from 0 to 2048 [ 41.716783][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.730473][ C1] hrtimer: interrupt took 205832 ns [ 41.733135][ T3304] EXT4-fs warning (device loop0): ext4_empty_dir:3088: inode #12: comm syz-executor: directory missing '.' [ 41.766878][ T3304] EXT4-fs error (device loop0): ext4_readdir:264: inode #12: block 32: comm syz-executor: path /1/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 41.829443][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.853074][ T3506] process 'syz.4.19' launched './file0' with NULL argv: empty string added [ 41.907394][ T3509] netlink: 'syz.2.22': attribute type 13 has an invalid length. [ 41.984407][ T3304] EXT4-fs error (device loop0): ext4_empty_dir:3086: inode #12: block 32: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 42.019418][ T3509] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 42.042385][ T3304] EXT4-fs warning (device loop0): ext4_empty_dir:3088: inode #12: comm syz-executor: directory missing '.' [ 42.050248][ T3517] loop3: detected capacity change from 0 to 256 [ 42.060084][ T3304] EXT4-fs error (device loop0): ext4_readdir:264: inode #12: block 32: comm syz-executor: path /1/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 42.180797][ T3304] EXT4-fs error (device loop0): ext4_empty_dir:3086: inode #12: block 32: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 42.191020][ T3517] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 42.206266][ T3304] EXT4-fs warning (device loop0): ext4_empty_dir:3088: inode #12: comm syz-executor: directory missing '.' [ 42.240206][ T3304] EXT4-fs error (device loop0): ext4_readdir:264: inode #12: block 32: comm syz-executor: path /1/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 42.271799][ T3524] loop1: detected capacity change from 0 to 512 [ 42.322289][ T3304] EXT4-fs error (device loop0): ext4_empty_dir:3086: inode #12: block 32: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 42.345467][ T3304] EXT4-fs warning (device loop0): ext4_empty_dir:3088: inode #12: comm syz-executor: directory missing '.' [ 42.350582][ T3524] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 42.357823][ T3304] EXT4-fs error (device loop0): ext4_readdir:264: inode #12: block 32: comm syz-executor: path /1/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 42.396342][ T3524] EXT4-fs (loop1): 1 orphan inode deleted [ 42.403255][ T3524] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.416127][ T3418] EXT4-fs error (device loop1): ext4_release_dquot:6971: comm kworker/u8:7: Failed to release dquot type 1 [ 42.430593][ T3524] ext4 filesystem being mounted at /5/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 42.447118][ T3304] EXT4-fs error (device loop0): ext4_empty_dir:3086: inode #12: block 32: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 42.467681][ T3304] EXT4-fs warning (device loop0): ext4_empty_dir:3088: inode #12: comm syz-executor: directory missing '.' [ 42.527392][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.539944][ T3530] netlink: 32 bytes leftover after parsing attributes in process `syz.3.29'. [ 42.560518][ T3304] EXT4-fs warning (device loop0): ext4_empty_dir:3088: inode #12: comm syz-executor: directory missing '.' [ 42.604938][ T3538] tipc: Started in network mode [ 42.609988][ T3538] tipc: Node identity ac14140f, cluster identity 4711 [ 42.619686][ T3538] tipc: New replicast peer: 10.1.1.2 [ 42.625376][ T3538] tipc: Enabled bearer , priority 10 [ 42.654910][ T3304] EXT4-fs warning (device loop0): ext4_empty_dir:3088: inode #12: comm syz-executor: directory missing '.' [ 42.682561][ T3544] netlink: 4 bytes leftover after parsing attributes in process `syz.1.31'. [ 42.698516][ T3544] netlink: 4 bytes leftover after parsing attributes in process `syz.1.31'. [ 42.740871][ T3304] EXT4-fs warning (device loop0): ext4_empty_dir:3088: inode #12: comm syz-executor: directory missing '.' [ 42.756303][ T3549] loop8: detected capacity change from 0 to 1 [ 42.766639][ T3549] Buffer I/O error on dev loop8, logical block 0, async page read [ 42.775105][ T3549] Buffer I/O error on dev loop8, logical block 0, async page read [ 42.783247][ T3549] loop8: unable to read partition table [ 42.790025][ T3549] loop_reread_partitions: partition scan of loop8 () failed (rc=-5) [ 42.855103][ T3304] EXT4-fs warning (device loop0): ext4_empty_dir:3088: inode #12: comm syz-executor: directory missing '.' [ 42.947764][ T3304] EXT4-fs warning (device loop0): ext4_empty_dir:3088: inode #12: comm syz-executor: directory missing '.' [ 42.982977][ T3571] loop1: detected capacity change from 0 to 512 [ 43.006752][ T3571] EXT4-fs error (device loop1): ext4_do_update_inode:5211: inode #16: comm syz.1.36: corrupted inode contents [ 43.021429][ T3571] EXT4-fs error (device loop1): ext4_dirty_inode:6103: inode #16: comm syz.1.36: mark_inode_dirty error [ 43.055283][ T3571] EXT4-fs error (device loop1): ext4_do_update_inode:5211: inode #16: comm syz.1.36: corrupted inode contents [ 43.070628][ T3571] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #16: comm syz.1.36: mark_inode_dirty error [ 43.094620][ T3571] EXT4-fs error (device loop1): ext4_do_update_inode:5211: inode #16: comm syz.1.36: corrupted inode contents [ 43.143839][ T3571] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem [ 43.167941][ T3571] EXT4-fs error (device loop1): ext4_do_update_inode:5211: inode #16: comm syz.1.36: corrupted inode contents [ 43.194458][ T3571] EXT4-fs error (device loop1): ext4_truncate:4255: inode #16: comm syz.1.36: mark_inode_dirty error [ 43.219932][ T3571] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem [ 43.249691][ T3571] EXT4-fs (loop1): 1 truncate cleaned up [ 43.258253][ T3571] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.274260][ T3418] EXT4-fs error (device loop1): ext4_release_dquot:6971: comm kworker/u8:7: Failed to release dquot type 1 [ 43.287733][ T3571] ext4 filesystem being mounted at /10/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 43.302315][ T3571] EXT4-fs error (device loop1): ext4_xattr_block_get:593: inode #15: comm syz.1.36: corrupted xattr block 19: invalid ea_ino [ 43.351291][ T3571] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 43.426387][ T3571] EXT4-fs error (device loop1): ext4_xattr_block_get:593: inode #15: comm syz.1.36: corrupted xattr block 19: invalid ea_ino [ 43.496593][ T3571] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 43.507940][ T3571] EXT4-fs error (device loop1): ext4_acquire_dquot:6935: comm syz.1.36: Failed to acquire dquot type 1 [ 43.556768][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.567245][ T1769] EXT4-fs error (device loop1): ext4_release_dquot:6971: comm kworker/u8:6: Failed to release dquot type 1 [ 43.686056][ T3668] loop1: detected capacity change from 0 to 764 [ 43.696700][ T3670] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=3670 comm=syz.2.44 [ 43.742678][ T1029] tipc: Node number set to 2886997007 [ 43.804210][ T3673] netlink: 'syz.2.46': attribute type 13 has an invalid length. [ 43.855417][ T3673] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 43.889265][ T3679] mmap: syz.1.47 (3679) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 43.925189][ T3679] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 43.940934][ T3679] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 44.131683][ T3684] netlink: 'syz.4.50': attribute type 1 has an invalid length. [ 44.170129][ T3684] 8021q: adding VLAN 0 to HW filter on device bond1 [ 44.480965][ T3693] SELinux: failed to load policy [ 44.489711][ T3693] SELinux: policydb version -580125249 does not match my version range 15-34 [ 44.499561][ T3693] SELinux: failed to load policy [ 44.542490][ T1039] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 44.564660][ T3699] loop3: detected capacity change from 0 to 512 [ 44.572024][ T3699] EXT4-fs: Ignoring removed mblk_io_submit option [ 44.584345][ T1039] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 44.635915][ T3699] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.678443][ T3699] ext4 filesystem being mounted at /12/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 44.699181][ T3699] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 44.780491][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.834467][ T3719] loop3: detected capacity change from 0 to 128 [ 44.850358][ T3719] FAULT_INJECTION: forcing a failure. [ 44.850358][ T3719] name failslab, interval 1, probability 0, space 0, times 0 [ 44.864184][ T3719] CPU: 0 UID: 0 PID: 3719 Comm: syz.3.62 Not tainted 6.15.0-rc2-syzkaller #0 PREEMPT(voluntary) [ 44.864215][ T3719] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 44.864229][ T3719] Call Trace: [ 44.864237][ T3719] [ 44.864314][ T3719] dump_stack_lvl+0xf6/0x150 [ 44.864344][ T3719] dump_stack+0x15/0x1a [ 44.864363][ T3719] should_fail_ex+0x261/0x270 [ 44.864397][ T3719] should_failslab+0x8f/0xb0 [ 44.864436][ T3719] __kmalloc_noprof+0xad/0x410 [ 44.864498][ T3719] ? __d_alloc+0x8f/0x350 [ 44.864524][ T3719] __d_alloc+0x8f/0x350 [ 44.864548][ T3719] ? full_name_hash+0x93/0xe0 [ 44.864613][ T3719] d_alloc_parallel+0x57/0xcb0 [ 44.864644][ T3719] ? __d_lookup+0x362/0x390 [ 44.864674][ T3719] ? try_to_unlazy+0x26f/0x3a0 [ 44.864705][ T3719] path_openat+0x6ed/0x2000 [ 44.864788][ T3719] ? kstrtoull+0x115/0x140 [ 44.864858][ T3719] do_filp_open+0x115/0x240 [ 44.864893][ T3719] do_sys_openat2+0xaa/0x110 [ 44.864919][ T3719] __x64_sys_creat+0x6a/0x90 [ 44.864948][ T3719] x64_sys_call+0x10b4/0x2e10 [ 44.864984][ T3719] do_syscall_64+0xc9/0x1c0 [ 44.865027][ T3719] ? clear_bhb_loop+0x25/0x80 [ 44.865049][ T3719] ? clear_bhb_loop+0x25/0x80 [ 44.865069][ T3719] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 44.865093][ T3719] RIP: 0033:0x7ffbc537d169 [ 44.865111][ T3719] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 44.865131][ T3719] RSP: 002b:00007ffbc39e7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 44.865153][ T3719] RAX: ffffffffffffffda RBX: 00007ffbc5595fa0 RCX: 00007ffbc537d169 [ 44.865168][ T3719] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000300 [ 44.865223][ T3719] RBP: 00007ffbc39e7090 R08: 0000000000000000 R09: 0000000000000000 [ 44.865236][ T3719] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 44.865247][ T3719] R13: 0000000000000000 R14: 00007ffbc5595fa0 R15: 00007ffc117f50f8 [ 44.865264][ T3719] [ 45.101502][ T3714] syz.2.60 (3714) used greatest stack depth: 10888 bytes left [ 45.156612][ T29] kauditd_printk_skb: 316 callbacks suppressed [ 45.156629][ T29] audit: type=1400 audit(1744629125.347:426): avc: denied { create } for pid=3726 comm="syz.1.66" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 45.205158][ T3727] FAULT_INJECTION: forcing a failure. [ 45.205158][ T3727] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 45.218928][ T3727] CPU: 1 UID: 0 PID: 3727 Comm: syz.1.66 Not tainted 6.15.0-rc2-syzkaller #0 PREEMPT(voluntary) [ 45.218996][ T3727] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 45.219009][ T3727] Call Trace: [ 45.219016][ T3727] [ 45.219023][ T3727] dump_stack_lvl+0xf6/0x150 [ 45.219046][ T3727] dump_stack+0x15/0x1a [ 45.219061][ T3727] should_fail_ex+0x261/0x270 [ 45.219161][ T3727] should_fail+0xb/0x10 [ 45.219188][ T3727] should_fail_usercopy+0x1a/0x20 [ 45.219216][ T3727] _copy_from_user+0x1c/0xa0 [ 45.219248][ T3727] copy_msghdr_from_user+0x54/0x2b0 [ 45.219353][ T3727] ? __fget_files+0x186/0x1c0 [ 45.219373][ T3727] __sys_recvmsg+0x145/0x270 [ 45.219431][ T3727] __x64_sys_recvmsg+0x46/0x50 [ 45.219541][ T3727] x64_sys_call+0xc6d/0x2e10 [ 45.219562][ T3727] do_syscall_64+0xc9/0x1c0 [ 45.219658][ T3727] ? clear_bhb_loop+0x25/0x80 [ 45.219693][ T3727] ? clear_bhb_loop+0x25/0x80 [ 45.219791][ T3727] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 45.219895][ T3727] RIP: 0033:0x7ff3732dd169 [ 45.219912][ T3727] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 45.219929][ T3727] RSP: 002b:00007ff371947038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 45.219946][ T3727] RAX: ffffffffffffffda RBX: 00007ff3734f5fa0 RCX: 00007ff3732dd169 [ 45.219958][ T3727] RDX: 0000000000010000 RSI: 0000200000000500 RDI: 0000000000000003 [ 45.219972][ T3727] RBP: 00007ff371947090 R08: 0000000000000000 R09: 0000000000000000 [ 45.219986][ T3727] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 45.220000][ T3727] R13: 0000000000000000 R14: 00007ff3734f5fa0 R15: 00007fff9143e188 [ 45.220021][ T3727] [ 45.283229][ T29] audit: type=1400 audit(1744629125.377:427): avc: denied { write } for pid=3726 comm="syz.1.66" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 45.362669][ T3733] netlink: 'syz.1.70': attribute type 21 has an invalid length. [ 45.365671][ T29] audit: type=1400 audit(1744629125.377:428): avc: denied { nlmsg_read } for pid=3726 comm="syz.1.66" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 45.450786][ T29] audit: type=1400 audit(1744629125.417:429): avc: denied { read } for pid=3728 comm="syz.3.67" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 45.530736][ T3740] netlink: 56 bytes leftover after parsing attributes in process `syz.3.69'. [ 45.547848][ T29] audit: type=1400 audit(1744629125.517:430): avc: denied { relabelfrom } for pid=3731 comm="syz.1.70" name="" dev="pipefs" ino=4656 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 45.571754][ T3740] netlink: 4 bytes leftover after parsing attributes in process `syz.3.69'. [ 45.580634][ T3740] netlink: 4 bytes leftover after parsing attributes in process `syz.3.69'. [ 45.598369][ T3748] netlink: 20 bytes leftover after parsing attributes in process `syz.2.75'. [ 45.613729][ T29] audit: type=1400 audit(1744629125.757:431): avc: denied { create } for pid=3737 comm="syz.4.72" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 45.633822][ T29] audit: type=1400 audit(1744629125.757:432): avc: denied { connect } for pid=3737 comm="syz.4.72" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 45.645019][ T3738] loop4: detected capacity change from 0 to 2048 [ 45.654819][ T29] audit: type=1400 audit(1744629125.757:433): avc: denied { write } for pid=3737 comm="syz.4.72" path="socket:[4691]" dev="sockfs" ino=4691 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 45.786094][ T3738] loop4: p1 < > p4 [ 45.796144][ T3738] loop4: p4 size 8388608 extends beyond EOD, truncated [ 45.828140][ T29] audit: type=1400 audit(1744629126.017:434): avc: denied { append } for pid=3737 comm="syz.4.72" name="loop4p4" dev="devtmpfs" ino=526 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 45.889594][ T29] audit: type=1400 audit(1744629126.017:435): avc: denied { open } for pid=3737 comm="syz.4.72" path="/dev/loop4p4" dev="devtmpfs" ino=526 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 45.949051][ T3759] Zero length message leads to an empty skb [ 45.965720][ T3761] loop4: detected capacity change from 0 to 512 [ 45.970097][ T3763] loop2: detected capacity change from 0 to 764 [ 45.984499][ T3761] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 46.002781][ T3761] EXT4-fs (loop4): can't mount with journal_checksum, fs mounted w/o journal [ 46.133334][ T3767] infiniband syz!: set active [ 46.138124][ T3767] infiniband syz!: added team_slave_0 [ 46.171957][ T3767] RDS/IB: syz!: added [ 46.176592][ T3767] smc: adding ib device syz! with port count 1 [ 46.183307][ T3767] smc: ib device syz! port 1 has pnetid [ 46.408202][ T3779] netlink: 'syz.2.84': attribute type 21 has an invalid length. [ 46.561028][ T3304] EXT4-fs error: 75 callbacks suppressed [ 46.561047][ T3304] EXT4-fs error (device loop0): ext4_empty_dir:3086: inode #12: block 32: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 46.598453][ T3304] EXT4-fs error (device loop0): ext4_readdir:264: inode #12: block 32: comm syz-executor: path /1/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 46.619958][ T3767] syz.4.81 (3767) used greatest stack depth: 10624 bytes left [ 46.648828][ T3786] FAULT_INJECTION: forcing a failure. [ 46.648828][ T3786] name failslab, interval 1, probability 0, space 0, times 0 [ 46.662224][ T3786] CPU: 0 UID: 0 PID: 3786 Comm: syz.3.87 Not tainted 6.15.0-rc2-syzkaller #0 PREEMPT(voluntary) [ 46.662252][ T3786] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 46.662268][ T3786] Call Trace: [ 46.662275][ T3786] [ 46.662283][ T3786] dump_stack_lvl+0xf6/0x150 [ 46.662306][ T3786] dump_stack+0x15/0x1a [ 46.662330][ T3786] should_fail_ex+0x261/0x270 [ 46.662366][ T3786] should_failslab+0x8f/0xb0 [ 46.662478][ T3786] kmem_cache_alloc_node_noprof+0x5c/0x340 [ 46.662502][ T3786] ? __alloc_skb+0x10d/0x320 [ 46.662527][ T3786] __alloc_skb+0x10d/0x320 [ 46.662619][ T3786] netlink_alloc_large_skb+0xad/0xe0 [ 46.662721][ T3786] netlink_sendmsg+0x3da/0x720 [ 46.662757][ T3786] ? __pfx_netlink_sendmsg+0x10/0x10 [ 46.662788][ T3786] __sock_sendmsg+0x140/0x180 [ 46.662868][ T3786] ____sys_sendmsg+0x350/0x4e0 [ 46.662902][ T3786] __sys_sendmsg+0x1a0/0x240 [ 46.662946][ T3786] __x64_sys_sendmsg+0x46/0x50 [ 46.662972][ T3786] x64_sys_call+0x26f3/0x2e10 [ 46.663069][ T3786] do_syscall_64+0xc9/0x1c0 [ 46.663098][ T3786] ? clear_bhb_loop+0x25/0x80 [ 46.663119][ T3786] ? clear_bhb_loop+0x25/0x80 [ 46.663152][ T3786] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 46.663171][ T3786] RIP: 0033:0x7ffbc537d169 [ 46.663187][ T3786] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 46.663203][ T3786] RSP: 002b:00007ffbc39e7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 46.663246][ T3786] RAX: ffffffffffffffda RBX: 00007ffbc5595fa0 RCX: 00007ffbc537d169 [ 46.663260][ T3786] RDX: 0000000000008020 RSI: 0000200000000040 RDI: 000000000000000b [ 46.663274][ T3786] RBP: 00007ffbc39e7090 R08: 0000000000000000 R09: 0000000000000000 [ 46.663287][ T3786] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 46.663298][ T3786] R13: 0000000000000000 R14: 00007ffbc5595fa0 R15: 00007ffc117f50f8 [ 46.663318][ T3786] [ 46.697044][ T3304] EXT4-fs error (device loop0): ext4_empty_dir:3086: inode #12: block 32: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 46.888811][ T3304] EXT4-fs warning: 33 callbacks suppressed [ 46.888827][ T3304] EXT4-fs warning (device loop0): ext4_empty_dir:3088: inode #12: comm syz-executor: directory missing '.' [ 46.912304][ T3304] EXT4-fs error (device loop0): ext4_readdir:264: inode #12: block 32: comm syz-executor: path /1/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 46.982852][ T3801] Falling back ldisc for ttyS3. [ 47.045454][ T3304] EXT4-fs error (device loop0): ext4_empty_dir:3086: inode #12: block 32: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 47.091230][ T3825] loop4: detected capacity change from 0 to 764 [ 47.105851][ T3304] EXT4-fs warning (device loop0): ext4_empty_dir:3088: inode #12: comm syz-executor: directory missing '.' [ 47.125778][ T3828] netlink: 'syz.3.96': attribute type 21 has an invalid length. [ 47.134100][ T3304] EXT4-fs error (device loop0): ext4_readdir:264: inode #12: block 32: comm syz-executor: path /1/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 47.219357][ T3836] loop4: detected capacity change from 0 to 164 [ 47.222187][ T3834] __nla_validate_parse: 1 callbacks suppressed [ 47.222208][ T3834] netlink: 20 bytes leftover after parsing attributes in process `syz.3.97'. [ 47.305416][ T3842] loop3: detected capacity change from 0 to 764 [ 47.330739][ T3845] loop4: detected capacity change from 0 to 164 [ 47.348450][ T3304] EXT4-fs error (device loop0): ext4_empty_dir:3086: inode #12: block 32: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 47.390698][ T3304] EXT4-fs warning (device loop0): ext4_empty_dir:3088: inode #12: comm syz-executor: directory missing '.' [ 47.412632][ T3304] EXT4-fs error (device loop0): ext4_readdir:264: inode #12: block 32: comm syz-executor: path /1/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 47.543756][ T3859] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 47.582712][ T3859] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 47.585249][ T3304] EXT4-fs error (device loop0): ext4_empty_dir:3086: inode #12: block 32: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 47.640138][ T3867] netlink: 'syz.4.108': attribute type 21 has an invalid length. [ 47.691960][ T3304] EXT4-fs warning (device loop0): ext4_empty_dir:3088: inode #12: comm syz-executor: directory missing '.' [ 47.717928][ T3872] netlink: 24 bytes leftover after parsing attributes in process `syz.4.110'. [ 47.722819][ T3304] EXT4-fs error (device loop0): ext4_readdir:264: inode #12: block 32: comm syz-executor: path /1/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 47.803027][ T3873] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 47.812687][ T3875] loop4: detected capacity change from 0 to 764 [ 47.824143][ T3873] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 47.905924][ T1039] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 47.933857][ T1039] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 47.954081][ T3304] EXT4-fs warning (device loop0): ext4_empty_dir:3088: inode #12: comm syz-executor: directory missing '.' [ 48.034554][ T3880] FAULT_INJECTION: forcing a failure. [ 48.034554][ T3880] name failslab, interval 1, probability 0, space 0, times 0 [ 48.051937][ T3880] CPU: 1 UID: 0 PID: 3880 Comm: syz.2.112 Not tainted 6.15.0-rc2-syzkaller #0 PREEMPT(voluntary) [ 48.051964][ T3880] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 48.051998][ T3880] Call Trace: [ 48.052004][ T3880] [ 48.052010][ T3880] dump_stack_lvl+0xf6/0x150 [ 48.052035][ T3880] dump_stack+0x15/0x1a [ 48.052051][ T3880] should_fail_ex+0x261/0x270 [ 48.052081][ T3880] should_failslab+0x8f/0xb0 [ 48.052144][ T3880] kmem_cache_alloc_lru_noprof+0x5e/0x330 [ 48.052172][ T3880] ? shmem_alloc_inode+0x34/0x50 [ 48.052196][ T3880] shmem_alloc_inode+0x34/0x50 [ 48.052216][ T3880] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 48.052238][ T3880] alloc_inode+0x40/0x170 [ 48.052287][ T3880] new_inode+0x1e/0xe0 [ 48.052379][ T3880] shmem_get_inode+0x24e/0x730 [ 48.052419][ T3880] __shmem_file_setup+0x127/0x1f0 [ 48.052451][ T3880] shmem_file_setup+0x3b/0x50 [ 48.052480][ T3880] __se_sys_memfd_create+0x2e1/0x5a0 [ 48.052573][ T3880] __x64_sys_memfd_create+0x31/0x40 [ 48.052600][ T3880] x64_sys_call+0x1163/0x2e10 [ 48.052657][ T3880] do_syscall_64+0xc9/0x1c0 [ 48.052811][ T3880] ? clear_bhb_loop+0x25/0x80 [ 48.052834][ T3880] ? clear_bhb_loop+0x25/0x80 [ 48.052858][ T3880] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 48.052880][ T3880] RIP: 0033:0x7fc70d51d169 [ 48.052898][ T3880] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 48.052988][ T3880] RSP: 002b:00007fc70bb7ee18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 48.053009][ T3880] RAX: ffffffffffffffda RBX: 000000000000044a RCX: 00007fc70d51d169 [ 48.053024][ T3880] RDX: 00007fc70bb7eef0 RSI: 0000000000000000 RDI: 00007fc70d59f32c [ 48.053038][ T3880] RBP: 0000200000000400 R08: 00007fc70bb7ebb7 R09: 00007fc70bb7ee40 [ 48.053050][ T3880] R10: 000000000000000a R11: 0000000000000202 R12: 00002000000001c0 [ 48.053061][ T3880] R13: 00007fc70bb7eef0 R14: 00007fc70bb7eeb0 R15: 0000200000000040 [ 48.053079][ T3880] [ 48.165271][ T3304] EXT4-fs warning (device loop0): ext4_empty_dir:3088: inode #12: comm syz-executor: directory missing '.' [ 48.283345][ T3891] loop3: detected capacity change from 0 to 512 [ 48.302962][ T3891] EXT4-fs: Ignoring removed nobh option [ 48.375361][ T3891] EXT4-fs error (device loop3): ext4_do_update_inode:5211: inode #16: comm syz.3.116: corrupted inode contents [ 48.397655][ T3891] EXT4-fs (loop3): Remounting filesystem read-only [ 48.412876][ T3891] EXT4-fs (loop3): 1 truncate cleaned up [ 48.419441][ T3891] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.419800][ T3891] ext4 filesystem being mounted at /26/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 48.422819][ T3891] FAULT_INJECTION: forcing a failure. [ 48.422819][ T3891] name failslab, interval 1, probability 0, space 0, times 0 [ 48.422846][ T3891] CPU: 1 UID: 0 PID: 3891 Comm: syz.3.116 Not tainted 6.15.0-rc2-syzkaller #0 PREEMPT(voluntary) [ 48.422893][ T3891] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 48.422933][ T3891] Call Trace: [ 48.422941][ T3891] [ 48.422950][ T3891] dump_stack_lvl+0xf6/0x150 [ 48.423041][ T3891] dump_stack+0x15/0x1a [ 48.423059][ T3891] should_fail_ex+0x261/0x270 [ 48.423094][ T3891] should_failslab+0x8f/0xb0 [ 48.423136][ T3891] kmem_cache_alloc_node_noprof+0x5c/0x340 [ 48.423160][ T3891] ? alloc_vmap_area+0x1d5/0x1800 [ 48.423193][ T3891] alloc_vmap_area+0x1d5/0x1800 [ 48.423234][ T3891] ? __rcu_read_unlock+0x4e/0x70 [ 48.423268][ T3891] ? should_fail_ex+0xd7/0x270 [ 48.423294][ T3891] ? should_failslab+0x8f/0xb0 [ 48.423343][ T3891] ? __kmalloc_cache_node_noprof+0x194/0x340 [ 48.423371][ T3891] __get_vm_area_node+0x162/0x1c0 [ 48.423453][ T3891] __vmalloc_node_range_noprof+0x285/0xe80 [ 48.423563][ T3891] ? bpf_prog_alloc_no_stats+0x49/0x390 [ 48.423677][ T3891] ? avc_has_perm_noaudit+0x1cc/0x210 [ 48.423712][ T3891] ? selinux_capable+0x1f9/0x260 [ 48.423786][ T3891] ? bpf_prog_alloc_no_stats+0x49/0x390 [ 48.423808][ T3891] __vmalloc_noprof+0x5e/0x70 [ 48.423840][ T3891] ? bpf_prog_alloc_no_stats+0x49/0x390 [ 48.423876][ T3891] bpf_prog_alloc_no_stats+0x49/0x390 [ 48.423900][ T3891] ? bpf_prog_alloc+0x28/0x150 [ 48.423920][ T3891] bpf_prog_alloc+0x3a/0x150 [ 48.423954][ T3891] bpf_prog_load+0x532/0x10e0 [ 48.423992][ T3891] __sys_bpf+0x533/0x800 [ 48.424048][ T3891] __x64_sys_bpf+0x43/0x50 [ 48.424071][ T3891] x64_sys_call+0x23da/0x2e10 [ 48.424102][ T3891] do_syscall_64+0xc9/0x1c0 [ 48.424161][ T3891] ? clear_bhb_loop+0x25/0x80 [ 48.424190][ T3891] ? clear_bhb_loop+0x25/0x80 [ 48.424217][ T3891] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 48.424240][ T3891] RIP: 0033:0x7ffbc537d169 [ 48.424258][ T3891] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 48.424277][ T3891] RSP: 002b:00007ffbc39e7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 48.424296][ T3891] RAX: ffffffffffffffda RBX: 00007ffbc5595fa0 RCX: 00007ffbc537d169 [ 48.424309][ T3891] RDX: 0000000000000048 RSI: 00002000000017c0 RDI: 0000000000000005 [ 48.424324][ T3891] RBP: 00007ffbc39e7090 R08: 0000000000000000 R09: 0000000000000000 [ 48.424338][ T3891] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 48.424352][ T3891] R13: 0000000000000000 R14: 00007ffbc5595fa0 R15: 00007ffc117f50f8 [ 48.424376][ T3891] [ 48.424410][ T3891] syz.3.116: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0 [ 48.424558][ T3891] CPU: 1 UID: 0 PID: 3891 Comm: syz.3.116 Not tainted 6.15.0-rc2-syzkaller #0 PREEMPT(voluntary) [ 48.424583][ T3891] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 48.424594][ T3891] Call Trace: [ 48.424600][ T3891] [ 48.424606][ T3891] dump_stack_lvl+0xf6/0x150 [ 48.424627][ T3891] dump_stack+0x15/0x1a [ 48.424647][ T3891] warn_alloc+0x145/0x1b0 [ 48.424686][ T3891] __vmalloc_node_range_noprof+0x2aa/0xe80 [ 48.424798][ T3891] ? avc_has_perm_noaudit+0x1cc/0x210 [ 48.424828][ T3891] ? selinux_capable+0x1f9/0x260 [ 48.424931][ T3891] ? bpf_prog_alloc_no_stats+0x49/0x390 [ 48.424954][ T3891] __vmalloc_noprof+0x5e/0x70 [ 48.425062][ T3891] ? bpf_prog_alloc_no_stats+0x49/0x390 [ 48.425088][ T3891] bpf_prog_alloc_no_stats+0x49/0x390 [ 48.425111][ T3891] ? bpf_prog_alloc+0x28/0x150 [ 48.425143][ T3891] bpf_prog_alloc+0x3a/0x150 [ 48.425166][ T3891] bpf_prog_load+0x532/0x10e0 [ 48.425269][ T3891] __sys_bpf+0x533/0x800 [ 48.425303][ T3891] __x64_sys_bpf+0x43/0x50 [ 48.425321][ T3891] x64_sys_call+0x23da/0x2e10 [ 48.425348][ T3891] do_syscall_64+0xc9/0x1c0 [ 48.425384][ T3891] ? clear_bhb_loop+0x25/0x80 [ 48.425490][ T3891] ? clear_bhb_loop+0x25/0x80 [ 48.425515][ T3891] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 48.425538][ T3891] RIP: 0033:0x7ffbc537d169 [ 48.425553][ T3891] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 48.425571][ T3891] RSP: 002b:00007ffbc39e7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 48.425591][ T3891] RAX: ffffffffffffffda RBX: 00007ffbc5595fa0 RCX: 00007ffbc537d169 [ 48.425605][ T3891] RDX: 0000000000000048 RSI: 00002000000017c0 RDI: 0000000000000005 [ 48.425620][ T3891] RBP: 00007ffbc39e7090 R08: 0000000000000000 R09: 0000000000000000 [ 48.425632][ T3891] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 48.425645][ T3891] R13: 0000000000000000 R14: 00007ffbc5595fa0 R15: 00007ffc117f50f8 [ 48.425664][ T3891] [ 48.425672][ T3891] Mem-Info: [ 48.425680][ T3891] active_anon:4459 inactive_anon:0 isolated_anon:0 [ 48.425680][ T3891] active_file:4802 inactive_file:2043 isolated_file:0 [ 48.425680][ T3891] unevictable:0 dirty:1571 writeback:0 [ 48.425680][ T3891] slab_reclaimable:2785 slab_unreclaimable:27988 [ 48.425680][ T3891] mapped:28552 shmem:335 pagetables:879 [ 48.425680][ T3891] sec_pagetables:0 bounce:0 [ 48.425680][ T3891] kernel_misc_reclaimable:0 [ 48.425680][ T3891] free:1896876 free_pcp:3791 free_cma:0 [ 48.425740][ T3891] Node 0 active_anon:17836kB inactive_anon:0kB active_file:19208kB inactive_file:8172kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:114208kB dirty:6284kB writeback:0kB shmem:1340kB writeback_tmp:0kB kernel_stack:2992kB pagetables:3516kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 48.425837][ T3891] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 48.425894][ T3891] lowmem_reserve[]: 0 2882 7860 7860 [ 48.425971][ T3891] Node 0 DMA32 free:2947792kB boost:0kB min:4132kB low:7060kB high:9988kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2951320kB mlocked:0kB bounce:0kB free_pcp:3528kB local_pcp:0kB free_cma:0kB [ 48.426039][ T3891] lowmem_reserve[]: 0 0 4978 4978 [ 48.426092][ T3891] Node 0 Normal free:4624352kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB active_anon:17836kB inactive_anon:0kB active_file:19208kB inactive_file:8172kB unevictable:0kB writepending:6284kB present:5242880kB managed:5098244kB mlocked:0kB bounce:0kB free_pcp:11636kB local_pcp:4936kB free_cma:0kB [ 48.426215][ T3891] lowmem_reserve[]: 0 0 0 0 [ 48.426239][ T3891] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 48.426403][ T3891] Node 0 DMA32: 4*4kB (M) 2*8kB (M) 3*16kB (M) 4*32kB (M) 4*64kB (M) 4*128kB (M) 3*256kB (M) 4*512kB (M) 3*1024kB (M) 2*2048kB (M) 717*4096kB (M) = 2947792kB [ 48.426591][ T3891] Node 0 Normal: 299*4kB (UME) 174*8kB (UME) 122*16kB (UME) 65*32kB (UME) 27*64kB (UME) 17*128kB (UME) 7*256kB (UM) 2*512kB (UM) 3*1024kB (UM) 4*2048kB (UM) 1123*4096kB (ME) = 4624412kB [ 48.426901][ T3891] Node 0 hugepages_total=4 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 48.426921][ T3891] 7209 total pagecache pages [ 48.426929][ T3891] 0 pages in swap cache [ 48.426936][ T3891] Free swap = 124996kB [ 48.426944][ T3891] Total swap = 124996kB [ 48.426951][ T3891] 2097051 pages RAM [ 48.426959][ T3891] 0 pages HighMem/MovableOnly [ 48.426966][ T3891] 80820 pages reserved [ 48.431014][ T3304] EXT4-fs warning (device loop0): ext4_empty_dir:3088: inode #12: comm syz-executor: directory missing '.' [ 48.444632][ T3625] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 48.444663][ T3625] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 48.444686][ T3625] EXT4-fs (loop3): Quota write (off=8, len=24) cancelled because transaction is not started [ 48.458277][ T3902] netlink: 32 bytes leftover after parsing attributes in process `syz.4.121'. [ 48.498473][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.521689][ T3908] tipc: Started in network mode [ 48.521718][ T3908] tipc: Node identity ac14140f, cluster identity 4711 [ 48.521980][ T3908] tipc: New replicast peer: 10.1.1.2 [ 48.522015][ T3908] tipc: Enabled bearer , priority 10 [ 48.546606][ T3304] EXT4-fs warning (device loop0): ext4_empty_dir:3088: inode #12: comm syz-executor: directory missing '.' [ 48.596849][ T3913] loop3: detected capacity change from 0 to 764 [ 48.675095][ T3304] EXT4-fs warning (device loop0): ext4_empty_dir:3088: inode #12: comm syz-executor: directory missing '.' [ 48.776129][ T3926] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 48.835281][ T3928] loop9: detected capacity change from 0 to 7 [ 48.917002][ T3926] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 48.919918][ T3928] Buffer I/O error on dev loop9, logical block 0, async page read [ 48.933677][ T3304] EXT4-fs warning (device loop0): ext4_empty_dir:3088: inode #12: comm syz-executor: directory missing '.' [ 48.939032][ T3928] Buffer I/O error on dev loop9, logical block 0, async page read [ 49.522642][ T10] tipc: Node number set to 2886997007 [ 49.525402][ T3928] loop9: unable to read partition table [ 49.545970][ T3928] loop_reread_partitions: partition scan of loop9 (‏被xüںرّ éع¬§½dئ¤´à–ƒف،¯¨‌â·û [ 49.545970][ T3928] Uھےےےےےے) failed (rc=-5) [ 49.679726][ T3998] netlink: 4 bytes leftover after parsing attributes in process `syz.2.127'. [ 49.688746][ T3998] netlink: 4 bytes leftover after parsing attributes in process `syz.2.127'. [ 49.712177][ T3998] netlink: 4 bytes leftover after parsing attributes in process `syz.2.127'. [ 49.725543][ T3998] netlink: 124 bytes leftover after parsing attributes in process `syz.2.127'. [ 49.791816][ T4003] loop3: detected capacity change from 0 to 512 [ 49.798525][ T3380] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 49.808373][ T3380] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 49.865849][ T4003] EXT4-fs error (device loop3): ext4_acquire_dquot:6935: comm syz.3.129: Failed to acquire dquot type 1 [ 49.918954][ T4003] EXT4-fs (loop3): 1 truncate cleaned up [ 49.940186][ T4003] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.986828][ T4003] ext4 filesystem being mounted at /31/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 50.047651][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.165040][ T4019] loop1: detected capacity change from 0 to 764 [ 50.180021][ T4024] netlink: 32 bytes leftover after parsing attributes in process `syz.3.136'. [ 50.250003][ T4032] tipc: Enabling of bearer rejected, already enabled [ 50.277752][ T29] kauditd_printk_skb: 196 callbacks suppressed [ 50.277769][ T29] audit: type=1400 audit(1744629130.467:624): avc: denied { create } for pid=4033 comm="syz.1.137" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 50.307899][ T29] audit: type=1400 audit(1744629130.497:625): avc: denied { write } for pid=4033 comm="syz.1.137" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 50.328220][ T29] audit: type=1400 audit(1744629130.497:626): avc: denied { connect } for pid=4033 comm="syz.1.137" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 50.348115][ T29] audit: type=1400 audit(1744629130.497:627): avc: denied { name_connect } for pid=4033 comm="syz.1.137" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 50.422803][ T4045] 9pnet_fd: Insufficient options for proto=fd [ 50.433488][ T29] audit: type=1326 audit(1744629130.567:628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4012 comm="syz.2.132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc70d51d169 code=0x7ffc0000 [ 50.460000][ T29] audit: type=1326 audit(1744629130.567:629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4012 comm="syz.2.132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc70d51d169 code=0x7ffc0000 [ 50.488869][ T29] audit: type=1400 audit(1744629130.597:630): avc: denied { map } for pid=4042 comm="syz.1.139" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=5825 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 50.514350][ T29] audit: type=1400 audit(1744629130.597:631): avc: denied { read write } for pid=4042 comm="syz.1.139" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=5825 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 50.539892][ T29] audit: type=1400 audit(1744629130.617:632): avc: denied { read } for pid=4041 comm="+}[@" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 50.564520][ T29] audit: type=1400 audit(1744629130.617:633): avc: denied { open } for pid=4041 comm="+}[@" path="/dev/sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 50.731125][ T4069] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.790012][ T4069] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.879832][ T4069] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.936540][ T4069] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.001407][ T4069] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.113121][ T4069] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.171815][ T4069] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.209241][ T4069] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.343400][ T4172] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 51.359830][ T4176] loop4: detected capacity change from 0 to 764 [ 51.372783][ T4172] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 51.568762][ T3304] EXT4-fs error: 48 callbacks suppressed [ 51.568781][ T3304] EXT4-fs error (device loop0): ext4_empty_dir:3086: inode #12: block 32: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 51.599227][ T3304] EXT4-fs error (device loop0): ext4_readdir:264: inode #12: block 32: comm syz-executor: path /1/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 51.715738][ T4195] FAULT_INJECTION: forcing a failure. [ 51.715738][ T4195] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 51.729527][ T4195] CPU: 0 UID: 0 PID: 4195 Comm: syz.4.154 Not tainted 6.15.0-rc2-syzkaller #0 PREEMPT(voluntary) [ 51.729730][ T4195] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 51.729744][ T4195] Call Trace: [ 51.729752][ T4195] [ 51.729835][ T4195] dump_stack_lvl+0xf6/0x150 [ 51.729858][ T4195] dump_stack+0x15/0x1a [ 51.729874][ T4195] should_fail_ex+0x261/0x270 [ 51.729905][ T4195] should_fail_alloc_page+0xfd/0x110 [ 51.729991][ T4195] alloc_pages_bulk_noprof+0xfd/0x580 [ 51.730047][ T4195] copy_splice_read+0xe7/0x5d0 [ 51.730082][ T4195] ? __pfx_copy_splice_read+0x10/0x10 [ 51.730114][ T4195] splice_direct_to_actor+0x26c/0x680 [ 51.730161][ T4195] ? __pfx_direct_splice_actor+0x10/0x10 [ 51.730199][ T4195] do_splice_direct+0xd9/0x150 [ 51.730234][ T4195] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 51.730288][ T4195] do_sendfile+0x40a/0x690 [ 51.730385][ T4195] __x64_sys_sendfile64+0x113/0x160 [ 51.730407][ T4195] x64_sys_call+0xfc3/0x2e10 [ 51.730432][ T4195] do_syscall_64+0xc9/0x1c0 [ 51.730469][ T4195] ? clear_bhb_loop+0x25/0x80 [ 51.730507][ T4195] ? clear_bhb_loop+0x25/0x80 [ 51.730527][ T4195] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 51.730548][ T4195] RIP: 0033:0x7fee43acd169 [ 51.730565][ T4195] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 51.730582][ T4195] RSP: 002b:00007fee42137038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 51.730600][ T4195] RAX: ffffffffffffffda RBX: 00007fee43ce5fa0 RCX: 00007fee43acd169 [ 51.730616][ T4195] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000003 [ 51.730627][ T4195] RBP: 00007fee42137090 R08: 0000000000000000 R09: 0000000000000000 [ 51.730640][ T4195] R10: 0000004800000009 R11: 0000000000000246 R12: 0000000000000001 [ 51.730651][ T4195] R13: 0000000000000000 R14: 00007fee43ce5fa0 R15: 00007ffff2030ae8 [ 51.730668][ T4195] [ 51.959709][ T4198] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 52.006786][ T3304] EXT4-fs error (device loop0): ext4_empty_dir:3086: inode #12: block 32: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 52.036263][ T4201] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 52.039584][ T3304] EXT4-fs warning: 19 callbacks suppressed [ 52.039605][ T3304] EXT4-fs warning (device loop0): ext4_empty_dir:3088: inode #12: comm syz-executor: directory missing '.' [ 52.052837][ T4201] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 52.072521][ T3304] EXT4-fs error (device loop0): ext4_readdir:264: inode #12: block 32: comm syz-executor: path /1/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 52.084299][ T4203] FAULT_INJECTION: forcing a failure. [ 52.084299][ T4203] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 52.107793][ T4203] CPU: 1 UID: 0 PID: 4203 Comm: syz.4.157 Not tainted 6.15.0-rc2-syzkaller #0 PREEMPT(voluntary) [ 52.107824][ T4203] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 52.107839][ T4203] Call Trace: [ 52.107847][ T4203] [ 52.107856][ T4203] dump_stack_lvl+0xf6/0x150 [ 52.107881][ T4203] dump_stack+0x15/0x1a [ 52.107930][ T4203] should_fail_ex+0x261/0x270 [ 52.107958][ T4203] should_fail+0xb/0x10 [ 52.108013][ T4203] should_fail_usercopy+0x1a/0x20 [ 52.108047][ T4203] _copy_to_user+0x20/0xa0 [ 52.108178][ T4203] simple_read_from_buffer+0xb2/0x130 [ 52.108264][ T4203] proc_fail_nth_read+0x103/0x140 [ 52.108417][ T4203] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 52.108440][ T4203] vfs_read+0x1b2/0x710 [ 52.108473][ T4203] ? __rcu_read_unlock+0x4e/0x70 [ 52.108537][ T4203] ? __fget_files+0x186/0x1c0 [ 52.108569][ T4203] ksys_read+0xeb/0x1b0 [ 52.108597][ T4203] __x64_sys_read+0x42/0x50 [ 52.108697][ T4203] x64_sys_call+0x2a3b/0x2e10 [ 52.108724][ T4203] do_syscall_64+0xc9/0x1c0 [ 52.108824][ T4203] ? clear_bhb_loop+0x25/0x80 [ 52.108855][ T4203] ? clear_bhb_loop+0x25/0x80 [ 52.108878][ T4203] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 52.108963][ T4203] RIP: 0033:0x7fee43acbb7c [ 52.108979][ T4203] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 52.108999][ T4203] RSP: 002b:00007fee42137030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 52.109021][ T4203] RAX: ffffffffffffffda RBX: 00007fee43ce5fa0 RCX: 00007fee43acbb7c [ 52.109080][ T4203] RDX: 000000000000000f RSI: 00007fee421370a0 RDI: 0000000000000005 [ 52.109091][ T4203] RBP: 00007fee42137090 R08: 0000000000000000 R09: 0000000000000000 [ 52.109173][ T4203] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 52.109187][ T4203] R13: 0000000000000000 R14: 00007fee43ce5fa0 R15: 00007ffff2030ae8 [ 52.109208][ T4203] [ 52.363910][ T3304] EXT4-fs error (device loop0): ext4_empty_dir:3086: inode #12: block 32: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 52.371987][ T4207] loop2: detected capacity change from 0 to 764 [ 52.387252][ T3304] EXT4-fs warning (device loop0): ext4_empty_dir:3088: inode #12: comm syz-executor: directory missing '.' [ 52.404569][ T3304] EXT4-fs error (device loop0): ext4_readdir:264: inode #12: block 32: comm syz-executor: path /1/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 52.556653][ T3304] EXT4-fs error (device loop0): ext4_empty_dir:3086: inode #12: block 32: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 52.580486][ T3304] EXT4-fs warning (device loop0): ext4_empty_dir:3088: inode #12: comm syz-executor: directory missing '.' [ 52.614270][ T4219] netlink: 'syz.2.163': attribute type 15 has an invalid length. [ 52.631556][ T3304] EXT4-fs error (device loop0): ext4_readdir:264: inode #12: block 32: comm syz-executor: path /1/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 52.781857][ T3304] EXT4-fs error (device loop0): ext4_empty_dir:3086: inode #12: block 32: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 52.809086][ T4226] FAULT_INJECTION: forcing a failure. [ 52.809086][ T4226] name failslab, interval 1, probability 0, space 0, times 0 [ 52.823212][ T4226] CPU: 1 UID: 0 PID: 4226 Comm: syz.3.167 Not tainted 6.15.0-rc2-syzkaller #0 PREEMPT(voluntary) [ 52.823238][ T4226] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 52.823250][ T4226] Call Trace: [ 52.823256][ T4226] [ 52.823264][ T4226] dump_stack_lvl+0xf6/0x150 [ 52.823319][ T4226] dump_stack+0x15/0x1a [ 52.823360][ T4226] should_fail_ex+0x261/0x270 [ 52.823392][ T4226] should_failslab+0x8f/0xb0 [ 52.823430][ T4226] __kvmalloc_node_noprof+0x12c/0x520 [ 52.823454][ T4226] ? fanout_add+0x5b3/0xac0 [ 52.823484][ T4226] ? __kmalloc_cache_noprof+0x18d/0x320 [ 52.823509][ T4226] fanout_add+0x5b3/0xac0 [ 52.823602][ T4226] ? _copy_from_user+0x89/0xa0 [ 52.823713][ T4226] packet_setsockopt+0x927/0xfe0 [ 52.823813][ T4226] ? __pfx_packet_setsockopt+0x10/0x10 [ 52.823845][ T4226] __sys_setsockopt+0x187/0x200 [ 52.823872][ T4226] __x64_sys_setsockopt+0x66/0x80 [ 52.824031][ T4226] x64_sys_call+0x2a09/0x2e10 [ 52.824053][ T4226] do_syscall_64+0xc9/0x1c0 [ 52.824086][ T4226] ? clear_bhb_loop+0x25/0x80 [ 52.824107][ T4226] ? clear_bhb_loop+0x25/0x80 [ 52.824182][ T4226] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 52.824208][ T4226] RIP: 0033:0x7ffbc537d169 [ 52.824258][ T4226] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 52.824323][ T4226] RSP: 002b:00007ffbc39e7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 52.824341][ T4226] RAX: ffffffffffffffda RBX: 00007ffbc5595fa0 RCX: 00007ffbc537d169 [ 52.824354][ T4226] RDX: 0000000000000012 RSI: 0000000000000107 RDI: 0000000000000006 [ 52.824443][ T4226] RBP: 00007ffbc39e7090 R08: 0000000000000004 R09: 0000000000000000 [ 52.824457][ T4226] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 52.824472][ T4226] R13: 0000000000000000 R14: 00007ffbc5595fa0 R15: 00007ffc117f50f8 [ 52.824550][ T4226] [ 52.829917][ T3304] EXT4-fs warning (device loop0): ext4_empty_dir:3088: inode #12: comm syz-executor: directory missing '.' [ 52.940215][ T4224] netlink: 'syz.2.166': attribute type 10 has an invalid length. [ 52.948371][ T3304] EXT4-fs error (device loop0): ext4_readdir:264: inode #12: block 32: comm syz-executor: path /1/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 52.949741][ T4224] netlink: 40 bytes leftover after parsing attributes in process `syz.2.166'. [ 52.967099][ T4232] loop1: detected capacity change from 0 to 256 [ 52.996931][ T4224] dummy0: entered promiscuous mode [ 53.040667][ T4232] FAT-fs (loop1): bogus number of directory entries (4) [ 53.040690][ T4232] FAT-fs (loop1): Can't find a valid FAT filesystem [ 53.095832][ T3304] EXT4-fs warning (device loop0): ext4_empty_dir:3088: inode #12: comm syz-executor: directory missing '.' [ 53.106651][ T4224] bridge0: port 3(dummy0) entered blocking state [ 53.149930][ T4224] bridge0: port 3(dummy0) entered disabled state [ 53.160475][ T4232] loop1: detected capacity change from 0 to 128 [ 53.169566][ T4232] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a842c018, mo2=0002] [ 53.179159][ T4232] System zones: 1-3, 19-19, 35-36 [ 53.185852][ T4224] dummy0: entered allmulticast mode [ 53.191846][ T4232] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 53.206389][ T4224] bridge0: port 3(dummy0) entered blocking state [ 53.213327][ T4224] bridge0: port 3(dummy0) entered forwarding state [ 53.223963][ T4229] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 53.239919][ T4232] ext4 filesystem being mounted at /35/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 53.274798][ T3304] EXT4-fs warning (device loop0): ext4_empty_dir:3088: inode #12: comm syz-executor: directory missing '.' [ 53.324829][ T4239] loop4: detected capacity change from 0 to 512 [ 53.356809][ T4239] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 53.377326][ T3304] EXT4-fs warning (device loop0): ext4_empty_dir:3088: inode #12: comm syz-executor: directory missing '.' [ 53.389930][ T4239] ext4 filesystem being mounted at /50/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 53.406457][ T4240] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 53.434439][ T4244] loop2: detected capacity change from 0 to 764 [ 53.449161][ T4240] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 53.457777][ T3304] EXT4-fs warning (device loop0): ext4_empty_dir:3088: inode #12: comm syz-executor: directory missing '.' [ 53.529833][ T3304] EXT4-fs warning (device loop0): ext4_empty_dir:3088: inode #12: comm syz-executor: directory missing '.' [ 53.554706][ T3306] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 53.580960][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 53.667105][ T3304] EXT4-fs warning (device loop0): ext4_empty_dir:3088: inode #12: comm syz-executor: directory missing '.' [ 53.715347][ T4247] loop2: detected capacity change from 0 to 512 [ 53.725997][ T4255] netlink: 'syz.1.177': attribute type 21 has an invalid length. [ 53.737608][ T4247] EXT4-fs: Ignoring removed oldalloc option [ 53.823222][ T4247] EXT4-fs error (device loop2): ext4_xattr_inode_iget:433: comm syz.2.173: Parent and EA inode have the same ino 15 [ 53.843208][ T4247] EXT4-fs (loop2): Remounting filesystem read-only [ 53.851150][ T4247] EXT4-fs warning (device loop2): ext4_evict_inode:262: couldn't mark inode dirty (err -30) [ 53.883307][ T4247] EXT4-fs (loop2): 1 orphan inode deleted [ 53.900108][ T4247] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 53.914842][ T4268] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 53.935523][ T4268] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 53.960759][ T4270] loop4: detected capacity change from 0 to 512 [ 53.987005][ T4270] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -13 [ 54.005887][ T4270] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 54.037804][ T4270] EXT4-fs error (device loop4): ext4_clear_blocks:876: inode #13: comm syz.4.181: attempt to clear invalid blocks 2 len 1 [ 54.052023][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.061424][ T4270] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.181: invalid indirect mapped block 1819239214 (level 0) [ 54.077326][ T4270] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.181: invalid indirect mapped block 1819239214 (level 1) [ 54.102070][ T4270] EXT4-fs (loop4): 1 truncate cleaned up [ 54.108331][ T4270] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.143250][ T4270] EXT4-fs error (device loop4): __ext4_remount:6738: comm syz.4.181: Abort forced by user [ 54.160577][ T4270] EXT4-fs (loop4): Remounting filesystem read-only [ 54.167336][ T4270] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000. [ 54.223840][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.241882][ T4276] loop2: detected capacity change from 0 to 1024 [ 54.253948][ T4276] EXT4-fs: Ignoring removed nobh option [ 54.260020][ T4276] EXT4-fs: Ignoring removed bh option [ 54.272530][ T4278] syz.3.185 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 54.295778][ T4276] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.314434][ T4278] FAULT_INJECTION: forcing a failure. [ 54.314434][ T4278] name failslab, interval 1, probability 0, space 0, times 0 [ 54.331922][ T4278] CPU: 0 UID: 0 PID: 4278 Comm: syz.3.185 Not tainted 6.15.0-rc2-syzkaller #0 PREEMPT(voluntary) [ 54.331956][ T4278] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 54.331975][ T4278] Call Trace: [ 54.331982][ T4278] [ 54.331991][ T4278] dump_stack_lvl+0xf6/0x150 [ 54.332015][ T4278] dump_stack+0x15/0x1a [ 54.332031][ T4278] should_fail_ex+0x261/0x270 [ 54.332058][ T4278] should_failslab+0x8f/0xb0 [ 54.332094][ T4278] kmem_cache_alloc_noprof+0x59/0x340 [ 54.332121][ T4278] ? mas_alloc_nodes+0x1f4/0x4a0 [ 54.332152][ T4278] mas_alloc_nodes+0x1f4/0x4a0 [ 54.332187][ T4278] mas_preallocate+0x48d/0x6b0 [ 54.332226][ T4278] mmap_region+0x983/0x1490 [ 54.332270][ T4278] do_mmap+0x9ef/0xc80 [ 54.332302][ T4278] vm_mmap_pgoff+0x16d/0x2d0 [ 54.332330][ T4278] ksys_mmap_pgoff+0xd0/0x340 [ 54.332358][ T4278] ? fpregs_assert_state_consistent+0x83/0xa0 [ 54.332397][ T4278] x64_sys_call+0x1945/0x2e10 [ 54.332418][ T4278] do_syscall_64+0xc9/0x1c0 [ 54.332451][ T4278] ? clear_bhb_loop+0x25/0x80 [ 54.332472][ T4278] ? clear_bhb_loop+0x25/0x80 [ 54.332492][ T4278] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 54.332511][ T4278] RIP: 0033:0x7ffbc537d1a3 [ 54.332528][ T4278] Code: f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 41 89 ca 41 f7 c1 ff 0f 00 00 75 14 b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 25 c3 0f 1f 40 00 48 c7 c0 a8 ff ff ff 64 c7 [ 54.332549][ T4278] RSP: 002b:00007ffbc39e6e18 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 54.332576][ T4278] RAX: ffffffffffffffda RBX: 00000000000007c7 RCX: 00007ffbc537d1a3 [ 54.332588][ T4278] RDX: 0000000000000003 RSI: 0000000008400000 RDI: 0000000000000000 [ 54.332602][ T4278] RBP: 0000200000000202 R08: 00000000ffffffff R09: 0000000000000000 [ 54.332615][ T4278] R10: 0000000000000022 R11: 0000000000000246 R12: 0000000000000009 [ 54.332627][ T4278] R13: 00007ffbc39e6ef0 R14: 00007ffbc39e6eb0 R15: 0000200000000000 [ 54.332647][ T4278] [ 54.685739][ T4292] loop3: detected capacity change from 0 to 256 [ 54.704467][ T4292] FAT-fs (loop3): bogus number of directory entries (4) [ 54.712001][ T4292] FAT-fs (loop3): Can't find a valid FAT filesystem [ 54.752873][ T4298] loop4: detected capacity change from 0 to 256 [ 54.779653][ T4298] FAT-fs (loop4): bogus number of directory entries (4) [ 54.786983][ T4298] FAT-fs (loop4): Can't find a valid FAT filesystem [ 54.844039][ T4304] loop3: detected capacity change from 0 to 1024 [ 54.844404][ T4304] EXT4-fs: Ignoring removed nobh option [ 54.844441][ T4304] EXT4-fs: Ignoring removed bh option [ 54.887276][ T4304] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.906723][ T4309] loop4: detected capacity change from 0 to 256 [ 55.102508][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.160776][ T4321] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 55.237772][ T4321] syz.4.196 (4321) used greatest stack depth: 8848 bytes left [ 55.270878][ T4327] loop4: detected capacity change from 0 to 256 [ 55.299593][ T29] kauditd_printk_skb: 65 callbacks suppressed [ 55.299609][ T29] audit: type=1400 audit(1744629135.487:699): avc: denied { mounton } for pid=4326 comm="syz.4.198" path="/63/file0" dev="loop4" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=dir permissive=1 [ 55.350280][ T29] audit: type=1400 audit(1744629135.537:700): avc: denied { read write } for pid=4326 comm="syz.4.198" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 55.375144][ T29] audit: type=1400 audit(1744629135.537:701): avc: denied { open } for pid=4326 comm="syz.4.198" path="/dev/loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 55.400244][ T29] audit: type=1400 audit(1744629135.537:702): avc: denied { ioctl } for pid=4326 comm="syz.4.198" path="/dev/loop-control" dev="devtmpfs" ino=99 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 55.498740][ T4329] loop2: detected capacity change from 0 to 764 [ 55.520264][ T4329] iso9660: Unknown parameter '+' [ 55.671258][ T4333] FAULT_INJECTION: forcing a failure. [ 55.671258][ T4333] name failslab, interval 1, probability 0, space 0, times 0 [ 55.689549][ T4333] CPU: 1 UID: 0 PID: 4333 Comm: syz.2.200 Not tainted 6.15.0-rc2-syzkaller #0 PREEMPT(voluntary) [ 55.689580][ T4333] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 55.689592][ T4333] Call Trace: [ 55.689597][ T4333] [ 55.689604][ T4333] dump_stack_lvl+0xf6/0x150 [ 55.689681][ T4333] dump_stack+0x15/0x1a [ 55.689697][ T4333] should_fail_ex+0x261/0x270 [ 55.689932][ T4333] should_failslab+0x8f/0xb0 [ 55.689968][ T4333] __kmalloc_cache_node_noprof+0x58/0x340 [ 55.689997][ T4333] ? __get_vm_area_node+0xfb/0x1c0 [ 55.690164][ T4333] __get_vm_area_node+0xfb/0x1c0 [ 55.690286][ T4333] __vmalloc_node_range_noprof+0x285/0xe80 [ 55.690321][ T4333] ? bpf_prog_alloc_no_stats+0x49/0x390 [ 55.690352][ T4333] ? avc_has_perm_noaudit+0x1cc/0x210 [ 55.690384][ T4333] ? sysvec_apic_timer_interrupt+0x44/0x80 [ 55.690480][ T4333] ? bpf_prog_alloc_no_stats+0x49/0x390 [ 55.690509][ T4333] __vmalloc_noprof+0x5e/0x70 [ 55.690537][ T4333] ? bpf_prog_alloc_no_stats+0x49/0x390 [ 55.690556][ T4333] bpf_prog_alloc_no_stats+0x49/0x390 [ 55.690575][ T4333] ? bpf_prog_alloc+0x28/0x150 [ 55.690603][ T4333] bpf_prog_alloc+0x3a/0x150 [ 55.690757][ T4333] bpf_prog_load+0x532/0x10e0 [ 55.690801][ T4333] __sys_bpf+0x533/0x800 [ 55.690829][ T4333] __x64_sys_bpf+0x43/0x50 [ 55.690850][ T4333] x64_sys_call+0x23da/0x2e10 [ 55.690874][ T4333] do_syscall_64+0xc9/0x1c0 [ 55.690949][ T4333] ? clear_bhb_loop+0x25/0x80 [ 55.690975][ T4333] ? clear_bhb_loop+0x25/0x80 [ 55.691001][ T4333] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 55.691210][ T4333] RIP: 0033:0x7fc70d51d169 [ 55.691473][ T4333] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 55.691494][ T4333] RSP: 002b:00007fc70bb7f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 55.691516][ T4333] RAX: ffffffffffffffda RBX: 00007fc70d735fa0 RCX: 00007fc70d51d169 [ 55.691529][ T4333] RDX: 0000000000000094 RSI: 0000200000000380 RDI: 0000000000000005 [ 55.691540][ T4333] RBP: 00007fc70bb7f090 R08: 0000000000000000 R09: 0000000000000000 [ 55.691551][ T4333] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 55.691562][ T4333] R13: 0000000000000000 R14: 00007fc70d735fa0 R15: 00007ffe939c8208 [ 55.691585][ T4333] [ 56.112691][ T29] audit: type=1326 audit(1744629136.297:703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4334 comm="syz.2.202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc70d51d169 code=0x7ffc0000 [ 56.136982][ T29] audit: type=1326 audit(1744629136.297:704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4334 comm="syz.2.202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc70d51d169 code=0x7ffc0000 [ 56.161984][ T29] audit: type=1326 audit(1744629136.297:705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4334 comm="syz.2.202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc70d51d169 code=0x7ffc0000 [ 56.186399][ T29] audit: type=1326 audit(1744629136.297:706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4334 comm="syz.2.202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc70d51d169 code=0x7ffc0000 [ 56.211632][ T29] audit: type=1326 audit(1744629136.297:707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4334 comm="syz.2.202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc70d51d169 code=0x7ffc0000 [ 56.214615][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.238525][ T29] audit: type=1326 audit(1744629136.297:708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4334 comm="syz.2.202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc70d51d169 code=0x7ffc0000 [ 56.403280][ T4343] loop8: detected capacity change from 0 to 1 [ 56.412863][ T4343] Buffer I/O error on dev loop8, logical block 0, async page read [ 56.431285][ T4343] Buffer I/O error on dev loop8, logical block 0, async page read [ 56.439535][ T4343] loop8: unable to read partition table [ 56.448141][ T4343] loop_reread_partitions: partition scan of loop8 () failed (rc=-5) [ 56.515786][ T4345] netlink: 32 bytes leftover after parsing attributes in process `syz.1.205'. [ 56.601980][ T4356] tipc: Started in network mode [ 56.606981][ T4356] tipc: Node identity ac14140f, cluster identity 4711 [ 56.623922][ T4356] tipc: New replicast peer: 10.1.1.2 [ 56.629363][ T4356] tipc: Enabled bearer , priority 10 [ 56.738276][ T4379] netlink: 'syz.2.208': attribute type 21 has an invalid length. [ 56.769463][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.785657][ T4327] syz.4.198 (4327) used greatest stack depth: 7144 bytes left [ 56.800453][ T37] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.837713][ T4386] loop2: detected capacity change from 0 to 512 [ 56.858967][ T37] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.872808][ T4386] EXT4-fs error (device loop2): ext4_acquire_dquot:6935: comm syz.2.209: Failed to acquire dquot type 1 [ 56.887618][ T4386] EXT4-fs (loop2): 1 truncate cleaned up [ 56.901946][ T4386] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 56.921815][ T4386] ext4 filesystem being mounted at /51/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 56.922458][ T37] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.960949][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.994971][ T4403] +}[@ (4403): /proc/4402/oom_adj is deprecated, please use /proc/4402/oom_score_adj instead. [ 57.011860][ T4403] loop2: detected capacity change from 0 to 256 [ 57.028815][ T37] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.112374][ T4359] chnl_net:caif_netlink_parms(): no params data found [ 57.140160][ T4415] loop2: detected capacity change from 0 to 1024 [ 57.149151][ T4415] EXT4-fs: Ignoring removed nobh option [ 57.154956][ T4415] EXT4-fs: Ignoring removed bh option [ 57.212411][ T4415] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 57.271464][ T4359] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.278727][ T4359] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.289333][ T4359] bridge_slave_0: entered allmulticast mode [ 57.321759][ T4359] bridge_slave_0: entered promiscuous mode [ 57.411835][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.452614][ T4359] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.460098][ T4359] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.472863][ T4359] bridge_slave_1: entered allmulticast mode [ 57.479753][ T4359] bridge_slave_1: entered promiscuous mode [ 57.488105][ T37] bridge_slave_1: left allmulticast mode [ 57.493962][ T37] bridge_slave_1: left promiscuous mode [ 57.499818][ T37] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.508698][ T37] bridge_slave_0: left allmulticast mode [ 57.514993][ T37] bridge_slave_0: left promiscuous mode [ 57.521073][ T37] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.532013][ T4467] loop3: detected capacity change from 0 to 128 [ 57.540169][ T4467] /dev/loop3: Can't open blockdev [ 57.572994][ T4470] netlink: 4 bytes leftover after parsing attributes in process `syz.2.215'. [ 57.582023][ T4470] netlink: 4 bytes leftover after parsing attributes in process `syz.2.215'. [ 57.594708][ T4475] FAULT_INJECTION: forcing a failure. [ 57.594708][ T4475] name failslab, interval 1, probability 0, space 0, times 0 [ 57.607652][ T4475] CPU: 0 UID: 0 PID: 4475 Comm: syz.3.218 Not tainted 6.15.0-rc2-syzkaller #0 PREEMPT(voluntary) [ 57.607690][ T4475] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 57.607704][ T4475] Call Trace: [ 57.607710][ T4475] [ 57.607719][ T4475] dump_stack_lvl+0xf6/0x150 [ 57.607745][ T4475] dump_stack+0x15/0x1a [ 57.607760][ T4475] should_fail_ex+0x261/0x270 [ 57.607792][ T4475] should_failslab+0x8f/0xb0 [ 57.607829][ T4475] kmem_cache_alloc_noprof+0x59/0x340 [ 57.607864][ T4475] ? mas_alloc_nodes+0x1f4/0x4a0 [ 57.607899][ T4475] mas_alloc_nodes+0x1f4/0x4a0 [ 57.607938][ T4475] mas_preallocate+0x48d/0x6b0 [ 57.607979][ T4475] mmap_region+0x983/0x1490 [ 57.608026][ T4475] do_mmap+0x9ef/0xc80 [ 57.608064][ T4475] vm_mmap_pgoff+0x16d/0x2d0 [ 57.608096][ T4475] ksys_mmap_pgoff+0xd0/0x340 [ 57.608122][ T4475] ? syscall_trace_enter+0x102/0x1f0 [ 57.608153][ T4475] ? fpregs_assert_state_consistent+0x83/0xa0 [ 57.608192][ T4475] x64_sys_call+0x1945/0x2e10 [ 57.608215][ T4475] do_syscall_64+0xc9/0x1c0 [ 57.608243][ T4475] ? clear_bhb_loop+0x25/0x80 [ 57.608266][ T4475] ? clear_bhb_loop+0x25/0x80 [ 57.608291][ T4475] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 57.608315][ T4475] RIP: 0033:0x7ffbc537d1a3 [ 57.608331][ T4475] Code: f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 41 89 ca 41 f7 c1 ff 0f 00 00 75 14 b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 25 c3 0f 1f 40 00 48 c7 c0 a8 ff ff ff 64 c7 [ 57.608348][ T4475] RSP: 002b:00007ffbc39e6e18 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 57.608368][ T4475] RAX: ffffffffffffffda RBX: 000000000000061a RCX: 00007ffbc537d1a3 [ 57.608379][ T4475] RDX: 0000000000000003 RSI: 0000000008400000 RDI: 0000000000000000 [ 57.608390][ T4475] RBP: 0000200000000702 R08: 00000000ffffffff R09: 0000000000000000 [ 57.608401][ T4475] R10: 0000000000000022 R11: 0000000000000246 R12: 0000000000000004 [ 57.608412][ T4475] R13: 00007ffbc39e6ef0 R14: 00007ffbc39e6eb0 R15: 0000200000000d40 [ 57.608431][ T4475] [ 57.622753][ T4470] netlink: 4 bytes leftover after parsing attributes in process `syz.2.215'. [ 57.632715][ T9] tipc: Node number set to 2886997007 [ 57.833992][ T4470] netlink: 4 bytes leftover after parsing attributes in process `syz.2.215'. [ 57.843023][ T4470] netlink: 4 bytes leftover after parsing attributes in process `syz.2.215'. [ 57.854495][ T4470] netlink: 4 bytes leftover after parsing attributes in process `syz.2.215'. [ 57.899478][ T4470] netlink: 4 bytes leftover after parsing attributes in process `syz.2.215'. [ 57.908492][ T4470] netlink: 4 bytes leftover after parsing attributes in process `syz.2.215'. [ 57.966383][ T37] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 57.968862][ T37] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 57.972140][ T37] bond0 (unregistering): Released all slaves [ 58.019476][ T4359] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.031131][ T4359] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.050374][ T4494] __nla_validate_parse: 1 callbacks suppressed [ 58.050389][ T4494] netlink: 32 bytes leftover after parsing attributes in process `syz.1.223'. [ 58.091177][ T4359] team0: Port device team_slave_0 added [ 58.116684][ T4359] team0: Port device team_slave_1 added [ 58.155347][ T37] hsr_slave_0: left promiscuous mode [ 58.170526][ T37] hsr_slave_1: left promiscuous mode [ 58.178228][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 58.186136][ T37] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 58.201053][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 58.208514][ T37] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 58.259304][ T37] veth1_macvtap: left promiscuous mode [ 58.265309][ T4516] netlink: 44 bytes leftover after parsing attributes in process `syz.3.225'. [ 58.273989][ T37] veth0_macvtap: left promiscuous mode [ 58.294792][ T37] veth1_vlan: left promiscuous mode [ 58.310964][ T37] veth0_vlan: left promiscuous mode [ 58.487156][ T4545] loop3: detected capacity change from 0 to 128 [ 58.518154][ T4535] FAULT_INJECTION: forcing a failure. [ 58.518154][ T4535] name failslab, interval 1, probability 0, space 0, times 0 [ 58.531452][ T4535] CPU: 1 UID: 0 PID: 4535 Comm: syz.4.227 Not tainted 6.15.0-rc2-syzkaller #0 PREEMPT(voluntary) [ 58.531484][ T4535] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 58.531500][ T4535] Call Trace: [ 58.531508][ T4535] [ 58.531517][ T4535] dump_stack_lvl+0xf6/0x150 [ 58.531545][ T4535] dump_stack+0x15/0x1a [ 58.531613][ T4535] should_fail_ex+0x261/0x270 [ 58.531645][ T4535] should_failslab+0x8f/0xb0 [ 58.531742][ T4535] kmem_cache_alloc_node_noprof+0x5c/0x340 [ 58.531784][ T4535] ? __alloc_skb+0x10d/0x320 [ 58.531813][ T4535] __alloc_skb+0x10d/0x320 [ 58.531848][ T4535] netlink_ack+0xf1/0x4f0 [ 58.531877][ T4535] ? ref_tracker_free+0x3b8/0x420 [ 58.531936][ T4535] netlink_rcv_skb+0x19f/0x230 [ 58.531964][ T4535] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 58.532138][ T4535] rtnetlink_rcv+0x1c/0x30 [ 58.532167][ T4535] netlink_unicast+0x605/0x6c0 [ 58.532190][ T4535] netlink_sendmsg+0x609/0x720 [ 58.532219][ T4535] ? __pfx_netlink_sendmsg+0x10/0x10 [ 58.532255][ T4535] __sock_sendmsg+0x140/0x180 [ 58.532273][ T4535] ____sys_sendmsg+0x350/0x4e0 [ 58.532304][ T4535] __sys_sendmsg+0x1a0/0x240 [ 58.532345][ T4535] __x64_sys_sendmsg+0x46/0x50 [ 58.532437][ T4535] x64_sys_call+0x26f3/0x2e10 [ 58.532461][ T4535] do_syscall_64+0xc9/0x1c0 [ 58.532547][ T4535] ? clear_bhb_loop+0x25/0x80 [ 58.532573][ T4535] ? clear_bhb_loop+0x25/0x80 [ 58.532598][ T4535] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 58.532635][ T4535] RIP: 0033:0x7fee43acd169 [ 58.532703][ T4535] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 58.532720][ T4535] RSP: 002b:00007fee42116038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 58.532747][ T4535] RAX: ffffffffffffffda RBX: 00007fee43ce6080 RCX: 00007fee43acd169 [ 58.532774][ T4535] RDX: 0000000020000004 RSI: 0000200000000140 RDI: 0000000000000006 [ 58.532785][ T4535] RBP: 00007fee42116090 R08: 0000000000000000 R09: 0000000000000000 [ 58.532796][ T4535] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 58.532807][ T4535] R13: 0000000000000000 R14: 00007fee43ce6080 R15: 00007ffff2030ae8 [ 58.532825][ T4535] [ 58.765515][ T37] team0 (unregistering): Port device team_slave_1 removed [ 58.766139][ T4545] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 58.785895][ T37] team0 (unregistering): Port device team_slave_0 removed [ 58.793992][ T4545] ext4 filesystem being mounted at /56/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 58.866758][ T4497] tipc: Enabling of bearer rejected, already enabled [ 58.902243][ T4359] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 58.909748][ T4359] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.938805][ T4359] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.005263][ T4359] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.012361][ T4359] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.040049][ T4359] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 59.070540][ T4589] FAULT_INJECTION: forcing a failure. [ 59.070540][ T4589] name failslab, interval 1, probability 0, space 0, times 0 [ 59.083664][ T4589] CPU: 1 UID: 0 PID: 4589 Comm: syz.1.233 Not tainted 6.15.0-rc2-syzkaller #0 PREEMPT(voluntary) [ 59.083768][ T4589] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 59.083783][ T4589] Call Trace: [ 59.083790][ T4589] [ 59.083798][ T4589] dump_stack_lvl+0xf6/0x150 [ 59.083826][ T4589] dump_stack+0x15/0x1a [ 59.083869][ T4589] should_fail_ex+0x261/0x270 [ 59.083899][ T4589] should_failslab+0x8f/0xb0 [ 59.083930][ T4589] kmem_cache_alloc_node_noprof+0x5c/0x340 [ 59.083975][ T4589] ? __alloc_skb+0x10d/0x320 [ 59.084037][ T4589] __alloc_skb+0x10d/0x320 [ 59.084064][ T4589] netlink_alloc_large_skb+0xad/0xe0 [ 59.084093][ T4589] netlink_sendmsg+0x3da/0x720 [ 59.084128][ T4589] ? __pfx_netlink_sendmsg+0x10/0x10 [ 59.084239][ T4589] __sock_sendmsg+0x140/0x180 [ 59.084276][ T4589] ____sys_sendmsg+0x350/0x4e0 [ 59.084314][ T4589] __sys_sendmsg+0x1a0/0x240 [ 59.084424][ T4589] __x64_sys_sendmsg+0x46/0x50 [ 59.084457][ T4589] x64_sys_call+0x26f3/0x2e10 [ 59.084483][ T4589] do_syscall_64+0xc9/0x1c0 [ 59.084561][ T4589] ? clear_bhb_loop+0x25/0x80 [ 59.084586][ T4589] ? clear_bhb_loop+0x25/0x80 [ 59.084612][ T4589] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 59.084637][ T4589] RIP: 0033:0x7ff3732dd169 [ 59.084654][ T4589] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 59.084676][ T4589] RSP: 002b:00007ff371947038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 59.084739][ T4589] RAX: ffffffffffffffda RBX: 00007ff3734f5fa0 RCX: 00007ff3732dd169 [ 59.084753][ T4589] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000000000000006 [ 59.084767][ T4589] RBP: 00007ff371947090 R08: 0000000000000000 R09: 0000000000000000 [ 59.084851][ T4589] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 59.084865][ T4589] R13: 0000000000000000 R14: 00007ff3734f5fa0 R15: 00007fff9143e188 [ 59.084887][ T4589] [ 59.088331][ T4359] hsr_slave_0: entered promiscuous mode [ 59.303643][ T4359] hsr_slave_1: entered promiscuous mode [ 59.310056][ T4359] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 59.318407][ T4611] SELinux: ebitmap: truncated map [ 59.324205][ T4611] SELinux: failed to load policy [ 59.332005][ T4359] Cannot create hsr debugfs directory [ 59.395840][ T3312] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 59.418161][ T4619] FAULT_INJECTION: forcing a failure. [ 59.418161][ T4619] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 59.431908][ T4619] CPU: 0 UID: 0 PID: 4619 Comm: syz.4.238 Not tainted 6.15.0-rc2-syzkaller #0 PREEMPT(voluntary) [ 59.431934][ T4619] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 59.431948][ T4619] Call Trace: [ 59.431955][ T4619] [ 59.431963][ T4619] dump_stack_lvl+0xf6/0x150 [ 59.432000][ T4619] dump_stack+0x15/0x1a [ 59.432020][ T4619] should_fail_ex+0x261/0x270 [ 59.432052][ T4619] should_fail+0xb/0x10 [ 59.432076][ T4619] should_fail_usercopy+0x1a/0x20 [ 59.432176][ T4619] _copy_from_user+0x1c/0xa0 [ 59.432214][ T4619] copy_msghdr_from_user+0x54/0x2b0 [ 59.432324][ T4619] ? __fget_files+0x186/0x1c0 [ 59.432351][ T4619] __sys_sendmsg+0x141/0x240 [ 59.432400][ T4619] __x64_sys_sendmsg+0x46/0x50 [ 59.432513][ T4619] x64_sys_call+0x26f3/0x2e10 [ 59.432535][ T4619] do_syscall_64+0xc9/0x1c0 [ 59.432592][ T4619] ? clear_bhb_loop+0x25/0x80 [ 59.432617][ T4619] ? clear_bhb_loop+0x25/0x80 [ 59.432642][ T4619] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 59.432665][ T4619] RIP: 0033:0x7fee43acd169 [ 59.432683][ T4619] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 59.432734][ T4619] RSP: 002b:00007fee42137038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 59.432763][ T4619] RAX: ffffffffffffffda RBX: 00007fee43ce5fa0 RCX: 00007fee43acd169 [ 59.432777][ T4619] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000000000000003 [ 59.432791][ T4619] RBP: 00007fee42137090 R08: 0000000000000000 R09: 0000000000000000 [ 59.432805][ T4619] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 59.432818][ T4619] R13: 0000000000000000 R14: 00007fee43ce5fa0 R15: 00007ffff2030ae8 [ 59.432876][ T4619] [ 59.696649][ T4359] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 59.712415][ T4638] netlink: 24 bytes leftover after parsing attributes in process `syz.3.243'. [ 59.726415][ T4359] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 59.737138][ T4359] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 59.776133][ T4639] netlink: 'syz.1.244': attribute type 13 has an invalid length. [ 59.789068][ T4359] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 59.812953][ T4647] FAULT_INJECTION: forcing a failure. [ 59.812953][ T4647] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 59.827454][ T4647] CPU: 0 UID: 0 PID: 4647 Comm: syz.4.246 Not tainted 6.15.0-rc2-syzkaller #0 PREEMPT(voluntary) [ 59.827482][ T4647] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 59.827495][ T4647] Call Trace: [ 59.827503][ T4647] [ 59.827512][ T4647] dump_stack_lvl+0xf6/0x150 [ 59.827539][ T4647] dump_stack+0x15/0x1a [ 59.827558][ T4647] should_fail_ex+0x261/0x270 [ 59.827590][ T4647] should_fail+0xb/0x10 [ 59.827617][ T4647] should_fail_usercopy+0x1a/0x20 [ 59.827721][ T4647] _copy_from_user+0x1c/0xa0 [ 59.827754][ T4647] copy_msghdr_from_user+0x54/0x2b0 [ 59.827790][ T4647] ? __fget_files+0x186/0x1c0 [ 59.827846][ T4647] __sys_sendmsg+0x141/0x240 [ 59.827895][ T4647] __x64_sys_sendmsg+0x46/0x50 [ 59.827926][ T4647] x64_sys_call+0x26f3/0x2e10 [ 59.827953][ T4647] do_syscall_64+0xc9/0x1c0 [ 59.827989][ T4647] ? clear_bhb_loop+0x25/0x80 [ 59.828081][ T4647] ? clear_bhb_loop+0x25/0x80 [ 59.828103][ T4647] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 59.828123][ T4647] RIP: 0033:0x7fee43acd169 [ 59.828138][ T4647] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 59.828155][ T4647] RSP: 002b:00007fee42137038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 59.828175][ T4647] RAX: ffffffffffffffda RBX: 00007fee43ce5fa0 RCX: 00007fee43acd169 [ 59.828199][ T4647] RDX: 000000002400c850 RSI: 0000200000000280 RDI: 0000000000000004 [ 59.828245][ T4647] RBP: 00007fee42137090 R08: 0000000000000000 R09: 0000000000000000 [ 59.828259][ T4647] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 59.828273][ T4647] R13: 0000000000000000 R14: 00007fee43ce5fa0 R15: 00007ffff2030ae8 [ 59.828293][ T4647] [ 60.121218][ T4639] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 60.268289][ T4359] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.317811][ T29] kauditd_printk_skb: 42 callbacks suppressed [ 60.317828][ T29] audit: type=1400 audit(1744629140.507:749): avc: denied { write } for pid=4670 comm="syz.4.251" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 60.326085][ T4359] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.349031][ T4680] syz!: rxe_newlink: already configured on team_slave_0 [ 60.369535][ T3992] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.376790][ T3992] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.389198][ T4679] loop2: detected capacity change from 0 to 164 [ 60.410083][ T3992] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.417503][ T3992] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.477175][ T4359] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 60.528117][ T4689] loop2: detected capacity change from 0 to 512 [ 60.534589][ T29] audit: type=1400 audit(1744629140.717:750): avc: denied { setopt } for pid=4688 comm="syz.2.253" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 60.620265][ T4689] EXT4-fs (loop2): 1 orphan inode deleted [ 60.643021][ T3418] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 60.644885][ T4689] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 60.653046][ T3418] EXT4-fs error (device loop2): ext4_release_dquot:6971: comm kworker/u8:7: Failed to release dquot type 1 [ 60.679984][ T4689] ext4 filesystem being mounted at /65/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 60.683133][ T4359] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.718447][ T29] audit: type=1400 audit(1744629140.907:751): avc: denied { setopt } for pid=4701 comm="syz.4.256" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 60.786123][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.864915][ T4720] FAULT_INJECTION: forcing a failure. [ 60.864915][ T4720] name failslab, interval 1, probability 0, space 0, times 0 [ 60.878645][ T4720] CPU: 1 UID: 0 PID: 4720 Comm: syz.4.262 Not tainted 6.15.0-rc2-syzkaller #0 PREEMPT(voluntary) [ 60.878692][ T4720] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 60.878704][ T4720] Call Trace: [ 60.878711][ T4720] [ 60.878719][ T4720] dump_stack_lvl+0xf6/0x150 [ 60.878747][ T4720] dump_stack+0x15/0x1a [ 60.878771][ T4720] should_fail_ex+0x261/0x270 [ 60.878805][ T4720] should_failslab+0x8f/0xb0 [ 60.878836][ T4720] kmem_cache_alloc_node_noprof+0x5c/0x340 [ 60.879048][ T4720] ? __alloc_skb+0x10d/0x320 [ 60.879078][ T4720] __alloc_skb+0x10d/0x320 [ 60.879101][ T4720] netlink_alloc_large_skb+0xad/0xe0 [ 60.879123][ T4720] netlink_sendmsg+0x3da/0x720 [ 60.879157][ T4720] ? __pfx_netlink_sendmsg+0x10/0x10 [ 60.879302][ T4720] __sock_sendmsg+0x140/0x180 [ 60.879324][ T4720] ____sys_sendmsg+0x350/0x4e0 [ 60.879398][ T4720] __sys_sendmsg+0x1a0/0x240 [ 60.879441][ T4720] __x64_sys_sendmsg+0x46/0x50 [ 60.879508][ T4720] x64_sys_call+0x26f3/0x2e10 [ 60.879534][ T4720] do_syscall_64+0xc9/0x1c0 [ 60.879637][ T4720] ? clear_bhb_loop+0x25/0x80 [ 60.879663][ T4720] ? clear_bhb_loop+0x25/0x80 [ 60.879689][ T4720] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 60.879709][ T4720] RIP: 0033:0x7fee43acd169 [ 60.879724][ T4720] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 60.879763][ T4720] RSP: 002b:00007fee42137038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 60.879785][ T4720] RAX: ffffffffffffffda RBX: 00007fee43ce5fa0 RCX: 00007fee43acd169 [ 60.879799][ T4720] RDX: 0000000000000000 RSI: 0000200000000340 RDI: 0000000000000004 [ 60.879813][ T4720] RBP: 00007fee42137090 R08: 0000000000000000 R09: 0000000000000000 [ 60.879826][ T4720] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 60.879837][ T4720] R13: 0000000000000000 R14: 00007fee43ce5fa0 R15: 00007ffff2030ae8 [ 60.879920][ T4720] [ 61.189410][ T4737] loop1: detected capacity change from 0 to 512 [ 61.202955][ T4730] loop4: detected capacity change from 0 to 512 [ 61.211083][ T4737] EXT4-fs: Ignoring removed mblk_io_submit option [ 61.243261][ T4719] syz.3.259 uses obsolete (PF_INET,SOCK_PACKET) [ 61.252633][ T4737] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 61.285718][ T4730] Quota error (device loop4): v2_read_file_info: Number of blocks too big for quota file size (1099511633920 > 6144). [ 61.287585][ T4737] EXT4-fs (loop1): 1 truncate cleaned up [ 61.323275][ T4737] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 61.353212][ T4733] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 61.372412][ T4719] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(14) [ 61.372619][ T29] audit: type=1400 audit(1744629141.557:752): avc: denied { relabelto } for pid=4732 comm="syz.1.264" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 61.380187][ T4719] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 61.421297][ T4719] vhci_hcd vhci_hcd.0: Device attached [ 61.442380][ T4730] EXT4-fs warning (device loop4): ext4_enable_quotas:7170: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 61.477993][ T4730] EXT4-fs (loop4): mount failed [ 61.490274][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.493939][ T29] audit: type=1400 audit(1744629141.677:753): avc: denied { create } for pid=4766 comm="syz.2.267" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 61.543724][ T4768] 9pnet: p9_errstr2errno: server reported unknown error ‌@يخ‚ح(لل [ 61.603739][ T4779] FAULT_INJECTION: forcing a failure. [ 61.603739][ T4779] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 61.616990][ T4779] CPU: 1 UID: 0 PID: 4779 Comm: syz.1.266 Not tainted 6.15.0-rc2-syzkaller #0 PREEMPT(voluntary) [ 61.617077][ T4779] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 61.617091][ T4779] Call Trace: [ 61.617098][ T4779] [ 61.617105][ T4779] dump_stack_lvl+0xf6/0x150 [ 61.617133][ T4779] dump_stack+0x15/0x1a [ 61.617229][ T4779] should_fail_ex+0x261/0x270 [ 61.617265][ T4779] should_fail+0xb/0x10 [ 61.617294][ T4779] should_fail_usercopy+0x1a/0x20 [ 61.617327][ T4779] _copy_to_user+0x20/0xa0 [ 61.617360][ T4779] simple_read_from_buffer+0xb2/0x130 [ 61.617437][ T4779] proc_fail_nth_read+0x103/0x140 [ 61.617462][ T4779] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 61.617485][ T4779] vfs_read+0x1b2/0x710 [ 61.617513][ T4779] ? __rcu_read_unlock+0x4e/0x70 [ 61.617593][ T4779] ? __fget_files+0x186/0x1c0 [ 61.617620][ T4779] ksys_read+0xeb/0x1b0 [ 61.617656][ T4779] __x64_sys_read+0x42/0x50 [ 61.617688][ T4779] x64_sys_call+0x2a3b/0x2e10 [ 61.617720][ T4779] do_syscall_64+0xc9/0x1c0 [ 61.617758][ T4779] ? clear_bhb_loop+0x25/0x80 [ 61.617785][ T4779] ? clear_bhb_loop+0x25/0x80 [ 61.617830][ T4779] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 61.617856][ T4779] RIP: 0033:0x7ff3732dbb7c [ 61.617938][ T4779] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 61.617960][ T4779] RSP: 002b:00007ff371926030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 61.617979][ T4779] RAX: ffffffffffffffda RBX: 00007ff3734f6080 RCX: 00007ff3732dbb7c [ 61.617990][ T4779] RDX: 000000000000000f RSI: 00007ff3719260a0 RDI: 0000000000000004 [ 61.618001][ T4779] RBP: 00007ff371926090 R08: 0000000000000000 R09: 0000000000000000 [ 61.618044][ T4779] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 61.618058][ T4779] R13: 0000000000000000 R14: 00007ff3734f6080 R15: 00007fff9143e188 [ 61.618127][ T4779] [ 61.651709][ T29] audit: type=1400 audit(1744629141.717:754): avc: denied { write } for pid=4766 comm="syz.2.267" name="file0" dev="tmpfs" ino=387 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 61.662756][ T36] usb 7-1: new low-speed USB device number 2 using vhci_hcd [ 61.663920][ T29] audit: type=1400 audit(1744629141.717:755): avc: denied { open } for pid=4766 comm="syz.2.267" path="/68/file0" dev="tmpfs" ino=387 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 61.877738][ T29] audit: type=1400 audit(1744629141.727:756): avc: denied { ioctl } for pid=4766 comm="syz.2.267" path="/68/file0" dev="tmpfs" ino=387 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 61.918326][ T4754] vhci_hcd: connection reset by peer [ 61.930268][ T3418] vhci_hcd: stop threads [ 61.934911][ T3418] vhci_hcd: release socket [ 61.939607][ T3418] vhci_hcd: disconnect device [ 61.994356][ T4359] veth0_vlan: entered promiscuous mode [ 62.042678][ T4359] veth1_vlan: entered promiscuous mode [ 62.110933][ T4359] veth0_macvtap: entered promiscuous mode [ 62.134487][ T4359] veth1_macvtap: entered promiscuous mode [ 62.193964][ T4359] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.204783][ T4359] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.214839][ T4359] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.226499][ T4359] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.237447][ T4359] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.248124][ T4359] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.268450][ T4359] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 62.340281][ T4841] netlink: 8 bytes leftover after parsing attributes in process `syz.2.274'. [ 62.353496][ T4359] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.365624][ T4359] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.377258][ T4359] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.388286][ T4359] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.398437][ T4359] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.409126][ T4359] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.419486][ T4359] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.430861][ T4359] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.468346][ T4359] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.478840][ T4841] bridge0: entered promiscuous mode [ 62.534018][ T4359] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.543047][ T4359] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.552072][ T4359] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.560932][ T4359] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.661300][ T4878] netlink: 8 bytes leftover after parsing attributes in process `syz.1.277'. [ 62.707450][ T4878] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.737504][ T4887] loop1: detected capacity change from 0 to 512 [ 62.780781][ T4887] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 62.796264][ T4878] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.832704][ T4887] ext4 filesystem being mounted at /55/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 62.859593][ T4887] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.885440][ T4878] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.924329][ T4906] loop5: detected capacity change from 0 to 1024 [ 62.937964][ T4906] EXT4-fs: Ignoring removed nobh option [ 62.943981][ T4906] EXT4-fs: Ignoring removed bh option [ 63.035794][ T4906] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 63.068021][ T4878] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.131654][ T4927] FAULT_INJECTION: forcing a failure. [ 63.131654][ T4927] name failslab, interval 1, probability 0, space 0, times 0 [ 63.144459][ T4927] CPU: 0 UID: 0 PID: 4927 Comm: syz.2.283 Not tainted 6.15.0-rc2-syzkaller #0 PREEMPT(voluntary) [ 63.144485][ T4927] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 63.144504][ T4927] Call Trace: [ 63.144511][ T4927] [ 63.144519][ T4927] dump_stack_lvl+0xf6/0x150 [ 63.144548][ T4927] dump_stack+0x15/0x1a [ 63.144566][ T4927] should_fail_ex+0x261/0x270 [ 63.144600][ T4927] should_failslab+0x8f/0xb0 [ 63.144640][ T4927] kmem_cache_alloc_noprof+0x59/0x340 [ 63.144698][ T4927] ? prepare_creds+0x39/0x4e0 [ 63.144724][ T4927] ? __rcu_read_unlock+0x4e/0x70 [ 63.144757][ T4927] prepare_creds+0x39/0x4e0 [ 63.144790][ T4927] copy_creds+0x90/0x3f0 [ 63.144838][ T4927] copy_process+0x63f/0x1f60 [ 63.144946][ T4927] ? __rcu_read_unlock+0x4e/0x70 [ 63.144987][ T4927] kernel_clone+0x168/0x5d0 [ 63.145022][ T4927] __x64_sys_clone+0xe9/0x120 [ 63.145131][ T4927] x64_sys_call+0x2dc9/0x2e10 [ 63.145154][ T4927] do_syscall_64+0xc9/0x1c0 [ 63.145184][ T4927] ? clear_bhb_loop+0x25/0x80 [ 63.145210][ T4927] ? clear_bhb_loop+0x25/0x80 [ 63.145235][ T4927] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 63.145267][ T4927] RIP: 0033:0x7fc70d51d169 [ 63.145283][ T4927] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 63.145300][ T4927] RSP: 002b:00007fc70bb3cfe8 EFLAGS: 00000202 ORIG_RAX: 0000000000000038 [ 63.145317][ T4927] RAX: ffffffffffffffda RBX: 00007fc70d736160 RCX: 00007fc70d51d169 [ 63.145371][ T4927] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000045128480 [ 63.145451][ T4927] RBP: 00007fc70bb3d090 R08: 0000000000000000 R09: 0000000000000000 [ 63.145462][ T4927] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000001 [ 63.145473][ T4927] R13: 0000000000000000 R14: 00007fc70d736160 R15: 00007ffe939c8208 [ 63.145492][ T4927] [ 63.533204][ T4878] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.550180][ T4878] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.564259][ T4878] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.586141][ T4878] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.807692][ T4359] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.962279][ T4982] loop5: detected capacity change from 0 to 4096 [ 63.979447][ T4982] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 64.015712][ T4990] loop4: detected capacity change from 0 to 512 [ 64.030119][ T4975] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 64.063521][ T4985] netlink: 8 bytes leftover after parsing attributes in process `syz.1.294'. [ 64.112280][ T4990] EXT4-fs error (device loop4): ext4_acquire_dquot:6935: comm syz.4.300: Failed to acquire dquot type 1 [ 64.158953][ T4969] sch_tbf: burst 3092 is lower than device lo mtu (65550) ! [ 64.173622][ T4359] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.199692][ T4990] EXT4-fs (loop4): 1 truncate cleaned up [ 64.211162][ T4990] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 64.228019][ T4990] ext4 filesystem being mounted at /89/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 64.240149][ T4995] loop2: detected capacity change from 0 to 512 [ 64.366532][ T4995] EXT4-fs error (device loop2): ext4_acquire_dquot:6935: comm syz.2.301: Failed to acquire dquot type 1 [ 64.384039][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.960738][ T5000] netlink: 'syz.1.304': attribute type 13 has an invalid length. [ 65.365769][ T4995] EXT4-fs (loop2): 1 truncate cleaned up [ 65.384116][ T4995] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 65.397252][ T4995] ext4 filesystem being mounted at /74/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 65.414100][ T5012] FAULT_INJECTION: forcing a failure. [ 65.414100][ T5012] name failslab, interval 1, probability 0, space 0, times 0 [ 65.427101][ T5012] CPU: 1 UID: 0 PID: 5012 Comm: syz.4.305 Not tainted 6.15.0-rc2-syzkaller #0 PREEMPT(voluntary) [ 65.427147][ T5012] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 65.427171][ T5012] Call Trace: [ 65.427179][ T5012] [ 65.427188][ T5012] dump_stack_lvl+0xf6/0x150 [ 65.427214][ T5012] dump_stack+0x15/0x1a [ 65.427247][ T5012] should_fail_ex+0x261/0x270 [ 65.427278][ T5012] should_failslab+0x8f/0xb0 [ 65.427373][ T5012] ? __pfx_io_ring_ctx_ref_free+0x10/0x10 [ 65.427404][ T5012] __kmalloc_cache_noprof+0x55/0x320 [ 65.427426][ T5012] ? percpu_ref_init+0x96/0x240 [ 65.427453][ T5012] ? __pfx_io_ring_ctx_ref_free+0x10/0x10 [ 65.427555][ T5012] percpu_ref_init+0x96/0x240 [ 65.427586][ T5012] io_ring_ctx_alloc+0x1b7/0x690 [ 65.427619][ T5012] io_uring_create+0x10a/0x670 [ 65.427704][ T5012] __se_sys_io_uring_setup+0x1f7/0x210 [ 65.427801][ T5012] __x64_sys_io_uring_setup+0x31/0x40 [ 65.427830][ T5012] x64_sys_call+0x1741/0x2e10 [ 65.427851][ T5012] do_syscall_64+0xc9/0x1c0 [ 65.427881][ T5012] ? clear_bhb_loop+0x25/0x80 [ 65.427905][ T5012] ? clear_bhb_loop+0x25/0x80 [ 65.428009][ T5012] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 65.428032][ T5012] RIP: 0033:0x7fee43acd169 [ 65.428049][ T5012] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 65.428114][ T5012] RSP: 002b:00007fee42137038 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 65.428134][ T5012] RAX: ffffffffffffffda RBX: 00007fee43ce5fa0 RCX: 00007fee43acd169 [ 65.428148][ T5012] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000001de0 [ 65.428168][ T5012] RBP: 00007fee42137090 R08: 0000000000000000 R09: 0000000000000000 [ 65.428181][ T5012] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 65.428238][ T5012] R13: 0000000000000000 R14: 00007fee43ce5fa0 R15: 00007ffff2030ae8 [ 65.428317][ T5012] [ 65.680131][ T29] kauditd_printk_skb: 96 callbacks suppressed [ 65.680150][ T29] audit: type=1400 audit(1744629145.922:849): avc: denied { write } for pid=2987 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 65.713645][ T29] audit: type=1400 audit(1744629145.953:850): avc: denied { remove_name } for pid=2987 comm="syslogd" name="messages" dev="tmpfs" ino=6 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 65.741685][ T29] audit: type=1400 audit(1744629145.953:851): avc: denied { rename } for pid=2987 comm="syslogd" name="messages" dev="tmpfs" ino=6 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 65.741752][ T29] audit: type=1400 audit(1744629145.953:852): avc: denied { add_name } for pid=2987 comm="syslogd" name="messages.0" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 65.766814][ T5000] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 65.808003][ T29] audit: type=1400 audit(1744629145.953:853): avc: denied { unlink } for pid=2987 comm="syslogd" name="messages.0" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 65.832463][ T29] audit: type=1400 audit(1744629145.953:854): avc: denied { create } for pid=2987 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 65.839784][ T5017] sock: sock_set_timeout: `syz.5.306' (pid 5017) tries to set negative timeout [ 65.913639][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.932530][ T29] audit: type=1326 audit(1744629146.179:855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5020 comm="syz.4.308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee43acd169 code=0x7ffc0000 [ 65.960956][ T29] audit: type=1326 audit(1744629146.179:856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5020 comm="syz.4.308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee43acd169 code=0x7ffc0000 [ 65.990323][ T29] audit: type=1326 audit(1744629146.210:857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5015 comm="syz.5.306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9e55fd169 code=0x7ffc0000 [ 66.018699][ T29] audit: type=1326 audit(1744629146.210:858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5015 comm="syz.5.306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9e55fd169 code=0x7ffc0000 [ 66.019792][ T5016] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.124092][ T5033] FAULT_INJECTION: forcing a failure. [ 66.124092][ T5033] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 66.138659][ T5033] CPU: 0 UID: 0 PID: 5033 Comm: syz.4.314 Not tainted 6.15.0-rc2-syzkaller #0 PREEMPT(voluntary) [ 66.138708][ T5033] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 66.138722][ T5033] Call Trace: [ 66.138729][ T5033] [ 66.138737][ T5033] dump_stack_lvl+0xf6/0x150 [ 66.138760][ T5033] dump_stack+0x15/0x1a [ 66.138778][ T5033] should_fail_ex+0x261/0x270 [ 66.138810][ T5033] should_fail+0xb/0x10 [ 66.138839][ T5033] should_fail_usercopy+0x1a/0x20 [ 66.138889][ T5033] _copy_to_user+0x20/0xa0 [ 66.138929][ T5033] simple_read_from_buffer+0xb2/0x130 [ 66.139028][ T5033] proc_fail_nth_read+0x103/0x140 [ 66.139052][ T5033] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 66.139206][ T5033] vfs_read+0x1b2/0x710 [ 66.139236][ T5033] ? bpf_trace_run2+0x12c/0x1d0 [ 66.139300][ T5033] ? __pfx___bpf_trace_sys_enter+0x10/0x10 [ 66.139337][ T5033] ksys_read+0xeb/0x1b0 [ 66.139423][ T5033] __x64_sys_read+0x42/0x50 [ 66.139543][ T5033] x64_sys_call+0x2a3b/0x2e10 [ 66.139605][ T5033] do_syscall_64+0xc9/0x1c0 [ 66.139641][ T5033] ? clear_bhb_loop+0x25/0x80 [ 66.139748][ T5033] ? clear_bhb_loop+0x25/0x80 [ 66.139775][ T5033] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 66.139816][ T5033] RIP: 0033:0x7fee43acbb7c [ 66.139835][ T5033] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 66.139853][ T5033] RSP: 002b:00007fee42137030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 66.139870][ T5033] RAX: ffffffffffffffda RBX: 00007fee43ce5fa0 RCX: 00007fee43acbb7c [ 66.139882][ T5033] RDX: 000000000000000f RSI: 00007fee421370a0 RDI: 0000000000000005 [ 66.139894][ T5033] RBP: 00007fee42137090 R08: 0000000000000000 R09: 0000000000000000 [ 66.139950][ T5033] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 66.139964][ T5033] R13: 0000000000000000 R14: 00007fee43ce5fa0 R15: 00007ffff2030ae8 [ 66.139987][ T5033] [ 66.145496][ T5016] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.390927][ T5039] netlink: 'syz.2.309': attribute type 21 has an invalid length. [ 66.486865][ T5016] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.531685][ T5053] netlink: 32 bytes leftover after parsing attributes in process `syz.1.323'. [ 66.563250][ T5016] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.582921][ T5056] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 66.592765][ T5055] loop2: detected capacity change from 0 to 512 [ 66.618303][ T5061] tipc: Enabling of bearer rejected, already enabled [ 66.630316][ T36] usb 7-1: enqueue for inactive port 0 [ 66.634402][ T5056] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 66.636062][ T36] usb 7-1: enqueue for inactive port 0 [ 66.655483][ T5055] EXT4-fs error (device loop2): ext4_acquire_dquot:6935: comm syz.2.320: Failed to acquire dquot type 1 [ 66.664805][ T5016] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.695053][ T5055] EXT4-fs (loop2): 1 truncate cleaned up [ 66.707321][ T5016] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.744734][ T5055] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 66.762245][ T36] vhci_hcd: vhci_device speed not set [ 66.765776][ T5016] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.769832][ T5055] ext4 filesystem being mounted at /76/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 66.816224][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.850672][ T5016] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.879236][ T5050] netlink: '+}[@': attribute type 13 has an invalid length. [ 66.932063][ T5078] netlink: 8 bytes leftover after parsing attributes in process `+}[@'. [ 67.030129][ T5050] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 67.089336][ T5088] netlink: 'syz.5.326': attribute type 13 has an invalid length. [ 67.257422][ T5088] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 67.396524][ T5134] loop4: detected capacity change from 0 to 512 [ 67.453560][ T5138] loop2: detected capacity change from 0 to 256 [ 67.471819][ T5134] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.474259][ T5138] vfat: Bad value for 'tz' [ 67.500197][ T5134] ext4 filesystem being mounted at /96/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 67.515174][ T5138] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.539802][ T5134] xt_CT: You must specify a L4 protocol and not use inversions on it [ 67.561373][ T5138] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.570482][ T5134] debugfs: Bad value for 'uid' [ 67.577514][ T5134] debugfs: Bad value for 'uid' [ 67.618835][ T5138] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.672580][ T5138] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.739007][ T3305] EXT4-fs error (device loop4): ext4_readdir:264: inode #12: block 32: comm syz-executor: path /96/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 67.769952][ T5138] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.782858][ T5138] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.797475][ T5138] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.811919][ T5138] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.817056][ T3305] EXT4-fs error (device loop4): ext4_empty_dir:3086: inode #12: block 32: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 67.870192][ T3305] EXT4-fs warning (device loop4): ext4_empty_dir:3088: inode #12: comm syz-executor: directory missing '.' [ 67.883028][ T3305] EXT4-fs error (device loop4): ext4_readdir:264: inode #12: block 32: comm syz-executor: path /96/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 67.970286][ T5160] netlink: 'syz.2.337': attribute type 21 has an invalid length. [ 67.978464][ T5160] netlink: 128 bytes leftover after parsing attributes in process `syz.2.337'. [ 67.990306][ T5160] netlink: 'syz.2.337': attribute type 5 has an invalid length. [ 67.992994][ T3305] EXT4-fs error (device loop4): ext4_empty_dir:3086: inode #12: block 32: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 67.998611][ T5160] netlink: 3 bytes leftover after parsing attributes in process `syz.2.337'. [ 68.036948][ T3305] EXT4-fs warning (device loop4): ext4_empty_dir:3088: inode #12: comm syz-executor: directory missing '.' [ 68.049602][ T3305] EXT4-fs error (device loop4): ext4_readdir:264: inode #12: block 32: comm syz-executor: path /96/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 68.130772][ T5168] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(14) [ 68.137607][ T5168] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 68.145472][ T5168] vhci_hcd vhci_hcd.0: Device attached [ 68.252835][ T3305] EXT4-fs error (device loop4): ext4_empty_dir:3086: inode #12: block 32: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 68.306095][ T3305] EXT4-fs warning (device loop4): ext4_empty_dir:3088: inode #12: comm syz-executor: directory missing '.' [ 68.319906][ T5198] loop2: detected capacity change from 0 to 4096 [ 68.333711][ T3305] EXT4-fs error (device loop4): ext4_readdir:264: inode #12: block 32: comm syz-executor: path /96/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 68.367343][ T5198] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 68.414837][ T36] usb 11-1: new low-speed USB device number 2 using vhci_hcd [ 68.445743][ T3305] EXT4-fs error (device loop4): ext4_empty_dir:3086: inode #12: block 32: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 68.473395][ T3305] EXT4-fs warning (device loop4): ext4_empty_dir:3088: inode #12: comm syz-executor: directory missing '.' [ 68.486317][ T3305] EXT4-fs error (device loop4): ext4_readdir:264: inode #12: block 32: comm syz-executor: path /96/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 68.508867][ T5189] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 68.518511][ T5210] loop3: detected capacity change from 0 to 512 [ 68.543049][ T5210] EXT4-fs (loop3): 1 orphan inode deleted [ 68.569247][ T3640] EXT4-fs error (device loop3): ext4_release_dquot:6971: comm kworker/u8:13: Failed to release dquot type 1 [ 68.570167][ T5210] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 68.592412][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.595317][ T5210] ext4 filesystem being mounted at /83/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 68.660993][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.699315][ T5235] loop1: detected capacity change from 0 to 1024 [ 68.715597][ T5235] EXT4-fs: Ignoring removed nobh option [ 68.721803][ T5235] EXT4-fs: Ignoring removed bh option [ 68.740947][ T5235] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 68.774937][ T3305] EXT4-fs error (device loop4): ext4_empty_dir:3086: inode #12: block 32: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 68.801315][ T5181] vhci_hcd: connection reset by peer [ 68.815097][ T5247] netlink: 'syz.3.351': attribute type 13 has an invalid length. [ 68.833849][ T3305] EXT4-fs warning (device loop4): ext4_empty_dir:3088: inode #12: comm syz-executor: directory missing '.' [ 68.846480][ T3632] vhci_hcd: stop threads [ 68.850784][ T3632] vhci_hcd: release socket [ 68.855728][ T3632] vhci_hcd: disconnect device [ 68.948202][ T5247] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 68.958207][ T3305] EXT4-fs warning (device loop4): ext4_empty_dir:3088: inode #12: comm syz-executor: directory missing '.' [ 69.127946][ T3305] EXT4-fs warning (device loop4): ext4_empty_dir:3088: inode #12: comm syz-executor: directory missing '.' [ 69.233960][ T5285] loop2: detected capacity change from 0 to 1024 [ 69.257215][ T5285] EXT4-fs: Ignoring removed nobh option [ 69.264058][ T5285] EXT4-fs: Ignoring removed bh option [ 69.284243][ T3305] EXT4-fs warning (device loop4): ext4_empty_dir:3088: inode #12: comm syz-executor: directory missing '.' [ 69.309803][ T5285] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 69.519803][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.548207][ T3305] EXT4-fs warning (device loop4): ext4_empty_dir:3088: inode #12: comm syz-executor: directory missing '.' [ 69.600540][ T5312] netlink: 'syz.3.358': attribute type 3 has an invalid length. [ 69.631635][ T5312] loop3: detected capacity change from 0 to 512 [ 69.652208][ T5312] EXT4-fs: Ignoring removed oldalloc option [ 69.664244][ T5314] netlink: 'syz.2.356': attribute type 21 has an invalid length. [ 69.669703][ T5316] loop5: detected capacity change from 0 to 512 [ 69.684543][ T5312] EXT4-fs error (device loop3): ext4_xattr_inode_iget:433: comm syz.3.358: Parent and EA inode have the same ino 15 [ 69.716548][ T3305] EXT4-fs warning (device loop4): ext4_empty_dir:3088: inode #12: comm syz-executor: directory missing '.' [ 69.729541][ T5312] EXT4-fs (loop3): Remounting filesystem read-only [ 69.737036][ T5312] EXT4-fs warning (device loop3): ext4_evict_inode:262: couldn't mark inode dirty (err -30) [ 69.773942][ T5312] EXT4-fs (loop3): 1 orphan inode deleted [ 69.803697][ T5312] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 69.819121][ T5316] EXT4-fs (loop5): 1 orphan inode deleted [ 69.833100][ T3640] EXT4-fs error (device loop5): ext4_release_dquot:6971: comm kworker/u8:13: Failed to release dquot type 1 [ 69.858786][ T5316] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.916457][ T5316] ext4 filesystem being mounted at /10/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 69.941867][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.957858][ T5319] loop7: detected capacity change from 0 to 16384 [ 69.975414][ T3005] ================================================================== [ 69.984130][ T3005] BUG: KCSAN: data-race in set_nlink / set_nlink [ 69.991411][ T3005] [ 69.993853][ T3005] read to 0xffff888106466c50 of 4 bytes by task 3451 on cpu 1: [ 70.002322][ T3005] set_nlink+0x2b/0xb0 [ 70.007895][ T3005] kernfs_iop_permission+0x1d3/0x210 [ 70.013669][ T3005] inode_permission+0x18c/0x300 [ 70.019532][ T3005] link_path_walk+0x147/0x840 [ 70.026801][ T3005] path_openat+0x1b4/0x2000 [ 70.033964][ T3005] do_filp_open+0x115/0x240 [ 70.039326][ T3005] do_sys_openat2+0xaa/0x110 [ 70.044658][ T3005] __x64_sys_openat+0xf8/0x120 [ 70.050132][ T3005] x64_sys_call+0x1ac/0x2e10 [ 70.054945][ T3005] do_syscall_64+0xc9/0x1c0 [ 70.060515][ T3005] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 70.068198][ T3005] [ 70.071328][ T3005] write to 0xffff888106466c50 of 4 bytes by task 3005 on cpu 0: [ 70.081169][ T3005] set_nlink+0x98/0xb0 [ 70.085653][ T3005] kernfs_iop_permission+0x1d3/0x210 [ 70.091427][ T3005] inode_permission+0x18c/0x300 [ 70.096639][ T3005] link_path_walk+0x147/0x840 [ 70.101588][ T3005] path_lookupat+0x6c/0x2a0 [ 70.106188][ T3005] filename_lookup+0x14b/0x340 [ 70.111147][ T3005] vfs_statx+0x9d/0x310 [ 70.115415][ T3005] vfs_fstatat+0xe4/0x130 [ 70.120047][ T3005] __se_sys_newfstatat+0x58/0x260 [ 70.125125][ T3005] __x64_sys_newfstatat+0x55/0x70 [ 70.130537][ T3005] x64_sys_call+0x2d6f/0x2e10 [ 70.135427][ T3005] do_syscall_64+0xc9/0x1c0 [ 70.140404][ T3005] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 70.146555][ T3005] [ 70.148882][ T3005] value changed: 0x00000009 -> 0x00000008 [ 70.154653][ T3005] [ 70.156985][ T3005] Reported by Kernel Concurrency Sanitizer on: [ 70.163806][ T3005] CPU: 0 UID: 0 PID: 3005 Comm: udevd Not tainted 6.15.0-rc2-syzkaller #0 PREEMPT(voluntary) [ 70.175259][ T3005] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 70.185753][ T3005] ================================================================== [ 70.260778][ T4359] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.307726][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.646745][ T3305] EXT4-fs error: 113 callbacks suppressed [ 72.646759][ T3305] EXT4-fs error (device loop4): ext4_empty_dir:3086: inode #12: block 32: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 72.674396][ T3305] EXT4-fs error (device loop4): ext4_readdir:264: inode #12: block 32: comm syz-executor: path /96/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 72.741211][ T3305] EXT4-fs error (device loop4): ext4_empty_dir:3086: inode #12: block 32: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 72.761133][ T3305] EXT4-fs error (device loop4): ext4_readdir:264: inode #12: block 32: comm syz-executor: path /96/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 72.829409][ T3305] EXT4-fs error (device loop4): ext4_empty_dir:3086: inode #12: block 32: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 72.849658][ T3305] EXT4-fs warning: 53 callbacks suppressed [ 72.849673][ T3305] EXT4-fs warning (device loop4): ext4_empty_dir:3088: inode #12: comm syz-executor: directory missing '.' [ 72.867617][ T3305] EXT4-fs error (device loop4): ext4_readdir:264: inode #12: block 32: comm syz-executor: path /96/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 72.943492][ T3305] EXT4-fs error (device loop4): ext4_empty_dir:3086: inode #12: block 32: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 72.963775][ T3305] EXT4-fs warning (device loop4): ext4_empty_dir:3088: inode #12: comm syz-executor: directory missing '.' [ 72.975585][ T3305] EXT4-fs error (device loop4): ext4_readdir:264: inode #12: block 32: comm syz-executor: path /96/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 73.040933][ T3305] EXT4-fs error (device loop4): ext4_empty_dir:3086: inode #12: block 32: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 73.061888][ T3305] EXT4-fs warning (device loop4): ext4_empty_dir:3088: inode #12: comm syz-executor: directory missing '.' [ 73.074403][ T3305] EXT4-fs error (device loop4): ext4_readdir:264: inode #12: block 32: comm syz-executor: path /96/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 73.141195][ T3305] EXT4-fs warning (device loop4): ext4_empty_dir:3088: inode #12: comm syz-executor: directory missing '.' [ 73.197659][ T3305] EXT4-fs warning (device loop4): ext4_empty_dir:3088: inode #12: comm syz-executor: directory missing '.' [ 73.255109][ T3305] EXT4-fs warning (device loop4): ext4_empty_dir:3088: inode #12: comm syz-executor: directory missing '.' [ 73.310692][ T3305] EXT4-fs warning (device loop4): ext4_empty_dir:3088: inode #12: comm syz-executor: directory missing '.' [ 73.364575][ T36] usb 11-1: enqueue for inactive port 0 [ 73.370251][ T36] usb 11-1: enqueue for inactive port 0 [ 73.374032][ T3305] EXT4-fs warning (device loop4): ext4_empty_dir:3088: inode #12: comm syz-executor: directory missing '.' [ 73.432108][ T3305] EXT4-fs warning (device loop4): ext4_empty_dir:3088: inode #12: comm syz-executor: directory missing '.' [ 73.442950][ T36] vhci_hcd: vhci_device speed not set [ 73.491759][ T3305] EXT4-fs warning (device loop4): ext4_empty_dir:3088: inode #12: comm syz-executor: directory missing '.' [ 75.009354][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.