last executing test programs: 1m10.17477067s ago: executing program 2 (id=115): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000040), &(0x7f0000000280)='%pS \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) personality(0x4000005) 1m10.107496071s ago: executing program 2 (id=118): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, @perf_config_ext={0x2, 0x800800000003}, 0x1100, 0x5dd8, 0x3, 0x5, 0x0, 0x8, 0xff7b, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) r1 = syz_clone(0x8d002240, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x10, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRESHEX, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x18) ptrace(0x10, r1) ptrace$pokeuser(0x6, r1, 0x358, 0x0) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x74, &(0x7f0000000200)=""/107, &(0x7f0000000100)=0x6b) r3 = getpid() wait4(r1, &(0x7f0000000280), 0x2, &(0x7f0000000500)) r4 = syz_pidfd_open(r3, 0x0) process_madvise(r4, &(0x7f0000000040)=[{0x0}, {&(0x7f0000000180)="a4", 0x1}], 0x2, 0x13, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r5, 0x107, 0x16, &(0x7f0000000100)={0x1, &(0x7f0000002040)=[{0x4, 0x8, 0x5, 0x6}]}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 1m9.860130085s ago: executing program 2 (id=121): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="40000000130a03eb71f462991c52fbfe6d9da70000000000000000030000030900010073797a31000000000900020573797a30000000000800034000000000012b4d0a66fd143ebcb4855335eb4d9f94b02d9d9d12b433de8070bffe20a9f375bc94d72bb6ad1d8ebe111d4acdef38bcf39e11efc5af83ef2c977cdfde26a943eee5c3a29f9b8a94710468cd93c98db87e0e729692eec525d9fa4f189f647656efb5186474cf7f059b6fd9112e5f8210390778ae125b457c81ba8266e2fc7f9f"], 0x40}, 0x1, 0x0, 0x0, 0x44040}, 0x8010) 1m9.794726176s ago: executing program 2 (id=124): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='attr/current\x00') r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000005"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r2 = memfd_create(&(0x7f0000001cc0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc0sr\x95\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\x00\x01\x00\x00\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0) execveat(r2, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000640)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='mm_page_alloc\x00', 0xffffffffffffffff, 0x0, 0xfffffffffffffffd}, 0x18) r5 = add_key$keyring(&(0x7f00000000c0), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$restrict_keyring(0xa, r5, &(0x7f0000000300)='asymmetric\x00', &(0x7f0000000000)='id:cb2e') syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x8004, &(0x7f0000000080)={[{@discard}, {@bh}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x7b9, &(0x7f00000007c0)="$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") r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x107842, 0x42) prctl$PR_SET_FPEXC(0xc, 0x10000) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r7}, 0x10) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010007000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000020900020073797a32000000000900010073797a3000000000080005400000001f5c0000000e0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xe0}}, 0x0) prctl$PR_SET_FPEXC(0xc, 0x100000) sendfile(r6, r6, 0x0, 0x80000000) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r9 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0f00000006000000030000000700000020100000", @ANYRES32=r1, @ANYBLOB="0100e5919039000000000000003b18fd315000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="05000000040000000200"/28], 0x50) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000000200)={{0x1, 0x1, 0x18, r6, {r10}}, './file1\x00'}) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180200000020702500000000002020207b1af8ff00000000bfa100000000000007010000dbffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kfree\x00', r11, 0x0, 0xfffffffffffffffc}, 0x18) write$selinux_attr(r9, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) 1m9.576398879s ago: executing program 2 (id=126): bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a00000001010000ff7f0000cc00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32, @ANYBLOB="006500000100"], 0x50) 1m9.245724105s ago: executing program 2 (id=134): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x408e, &(0x7f0000000240)={[{@test_dummy_encryption_v1}, {@min_batch_time={'min_batch_time', 0x3d, 0xfff}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x80}}, {@stripe={'stripe', 0x3d, 0x4000}}, {@errors_remount}, {@max_batch_time={'max_batch_time', 0x3d, 0x4}}]}, 0x3, 0x43a, &(0x7f0000000bc0)="$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") r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c0000001d00070f000000000000000007000000", @ANYRES32=r2], 0x24}}, 0x0) r3 = socket(0x10, 0x3, 0x0) bind$netlink(r3, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) write(r3, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) connect$netlink(r3, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000b4bffc), 0x4) r4 = socket$xdp(0x2c, 0x3, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x10, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES16=0x0, @ANYBLOB="0000000000000000b70800000000e7057b020000f8ffffffb79b000008000000b704000000000012850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000880)=ANY=[@ANYRES8=r5, @ANYRESDEC=r0, @ANYBLOB="d0a74081ff3b", @ANYRESDEC=r4, @ANYRESDEC], &(0x7f0000000900)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r7}, 0x10) r8 = socket$netlink(0x10, 0x3, 0x400000000000004) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000000040)=0x1000000, 0x4) writev(r8, &(0x7f0000000100)=[{&(0x7f0000000180)="480000001400190d7ebdeb75fd0d9c562c84d8c033aae421962ea6ff3cd3c461ebe430a2ed7a80ffe0090f000000000000a2bc5603ca00000f7f89000000200000004a2471083ec6", 0x48}], 0x1) r9 = accept4$tipc(r3, &(0x7f0000000040)=@id, &(0x7f0000000080)=0x10, 0x800) setsockopt$SO_TIMESTAMP(r9, 0x1, 0x3f, &(0x7f0000000180)=0x81, 0x4) r10 = gettid() io_submit(0x0, 0x2, &(0x7f0000000500)=[&(0x7f0000000380)={0x0, 0x0, 0x0, 0x7, 0x8, r6, &(0x7f0000000340), 0x0, 0x7fffffff, 0x0, 0x1}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x6, 0x5, 0xffffffffffffffff, &(0x7f0000000440)="35c218ad7d13267bbbdaf12ac911c68d767d158fe25de20a1de437fcf447456dd98ee9a6f780ec80cba5750ed7187f6bd50ad74cded48428cca79dfac8381d35ad141c0bfc7b29ba63d2f09e1438338af8022e6b53011a7f3090a81f555f5685752e87a8c905ed457d1ad57a450d50abe063be5c0335df", 0x77, 0xffffffffffffff81, 0x0, 0x2}]) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r10}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) write(r3, &(0x7f0000000000)='\"', 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000780)=ANY=[@ANYRESOCT=r0, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r11}, 0x10) 1m9.177566226s ago: executing program 32 (id=134): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x408e, &(0x7f0000000240)={[{@test_dummy_encryption_v1}, {@min_batch_time={'min_batch_time', 0x3d, 0xfff}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x80}}, {@stripe={'stripe', 0x3d, 0x4000}}, {@errors_remount}, {@max_batch_time={'max_batch_time', 0x3d, 0x4}}]}, 0x3, 0x43a, &(0x7f0000000bc0)="$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") r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c0000001d00070f000000000000000007000000", @ANYRES32=r2], 0x24}}, 0x0) r3 = socket(0x10, 0x3, 0x0) bind$netlink(r3, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) write(r3, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) connect$netlink(r3, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000b4bffc), 0x4) r4 = socket$xdp(0x2c, 0x3, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x10, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES16=0x0, @ANYBLOB="0000000000000000b70800000000e7057b020000f8ffffffb79b000008000000b704000000000012850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000880)=ANY=[@ANYRES8=r5, @ANYRESDEC=r0, @ANYBLOB="d0a74081ff3b", @ANYRESDEC=r4, @ANYRESDEC], &(0x7f0000000900)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r7}, 0x10) r8 = socket$netlink(0x10, 0x3, 0x400000000000004) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000000040)=0x1000000, 0x4) writev(r8, &(0x7f0000000100)=[{&(0x7f0000000180)="480000001400190d7ebdeb75fd0d9c562c84d8c033aae421962ea6ff3cd3c461ebe430a2ed7a80ffe0090f000000000000a2bc5603ca00000f7f89000000200000004a2471083ec6", 0x48}], 0x1) r9 = accept4$tipc(r3, &(0x7f0000000040)=@id, &(0x7f0000000080)=0x10, 0x800) setsockopt$SO_TIMESTAMP(r9, 0x1, 0x3f, &(0x7f0000000180)=0x81, 0x4) r10 = gettid() io_submit(0x0, 0x2, &(0x7f0000000500)=[&(0x7f0000000380)={0x0, 0x0, 0x0, 0x7, 0x8, r6, &(0x7f0000000340), 0x0, 0x7fffffff, 0x0, 0x1}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x6, 0x5, 0xffffffffffffffff, &(0x7f0000000440)="35c218ad7d13267bbbdaf12ac911c68d767d158fe25de20a1de437fcf447456dd98ee9a6f780ec80cba5750ed7187f6bd50ad74cded48428cca79dfac8381d35ad141c0bfc7b29ba63d2f09e1438338af8022e6b53011a7f3090a81f555f5685752e87a8c905ed457d1ad57a450d50abe063be5c0335df", 0x77, 0xffffffffffffff81, 0x0, 0x2}]) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r10}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) write(r3, &(0x7f0000000000)='\"', 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000780)=ANY=[@ANYRESOCT=r0, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r11}, 0x10) 41.525940986s ago: executing program 5 (id=629): r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x5, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) r2 = syz_clone(0x8d002240, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x10, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRESHEX=r1, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x18) ptrace(0x10, r2) ptrace$pokeuser(0x6, r2, 0x358, 0x0) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x74, &(0x7f0000000200)=""/107, &(0x7f0000000100)=0x6b) r4 = getpid() wait4(r2, &(0x7f0000000280), 0x2, &(0x7f0000000500)) r5 = syz_pidfd_open(r4, 0x0) process_madvise(r5, &(0x7f0000000040)=[{0x0}, {&(0x7f0000000180)="a4", 0x1}], 0x2, 0x13, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r6, 0x107, 0x16, &(0x7f0000000100)={0x1, &(0x7f0000002040)=[{0x4, 0x8, 0x5, 0x6}]}, 0x10) 41.494180477s ago: executing program 5 (id=630): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000c500000001f0ffff95"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) inotify_init() 41.471883197s ago: executing program 5 (id=631): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000800000000000000000001811", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) timer_create(0x0, &(0x7f0000000180)={0x0, 0x13, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)=0x0) timer_settime(r6, 0x1, &(0x7f0000000300)={{0x77359400}, {0x0, 0x989680}}, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000000)='kfree\x00', r7, 0x0, 0x1000000000000}, 0x18) r8 = socket$inet_tcp(0x2, 0x1, 0x0) r9 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r9, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r9, 0x0, 0x30, &(0x7f0000000940)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000002000000e00000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000064010102000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x310) r10 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r10, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) close_range(r8, 0xffffffffffffffff, 0x0) 41.326662879s ago: executing program 5 (id=636): perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x1}, 0x8002, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x1c, 0x0, 0x8, 0xc92245752b3d0e57, 0x0, 0x0, {0x7, 0x0, 0xd8e3}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x809b}]}, 0x1c}, 0x1, 0x0, 0x0, 0x810}, 0x20000080) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newtaction={0x88c, 0x30, 0xffff, 0x3, 0x0, {}, [{0x878, 0x1, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x1, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x54, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x22, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x8, 0x0, 0x0, 0x27ffdbfc, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x3, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x9, 0x0, 0x0, 0xeeb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfffffffc, 0x9, 0xfffffffd, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x80, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x100000]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x20000000, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x8dc, 0x0, 0x5, 0x2, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x800, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x2, 0xfffffffc, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0xf9, 0x0, 0x0, 0x3, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff7f, 0xfffffffd, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x8, 0x0, 0x0, 0x100]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x7, 0x0, 0x0, 0xfffffffe, {0x3, 0x0, 0x0, 0x0, 0x0, 0x3}, {0x4, 0x2, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x3}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x88c}}, 0x0) fstat(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = geteuid() getresgid(&(0x7f0000000c40), &(0x7f0000000140), &(0x7f0000000240)=0x0) syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000200)='./file0\x00', 0x10814, &(0x7f0000000700)=ANY=[@ANYBLOB='umask=00000000000000000000000,flush,nodots,dots,gid=', @ANYRESHEX=r3, @ANYBLOB="00006b746769643d0092", @ANYRESDEC, @ANYBLOB="1500bba7d41fabba4332de3ca642acf6f8de847e3f21783608008708a887d30aaf0a14b0691d48445fe3b4d1ddde1b81337b2c3b5f88535d7f6fa931b84783704494cebe49ca9f6269b05edde0246c360d0566b4056f0f02ccab035d3d0a5cde0b31bd424949fe23c0a0a25691738006c5c6acdf101fecdb4f79abdfb95c6afaea03dd5903b5240565f31504c207a9a2aa6c8108fb973081e90412a3c6cfa3b2513693727fad9acd8108acb8b90fab033c9dac0dc3e5a61c513e7b5edc5d76320f0e54045ea2b7b8fb1f78d3d346e26ee5ed6926cea1ffe0a1"], 0x1, 0x1fa, &(0x7f0000000500)="$eJzs2zFrE2EYB/Dn2rRe7GAHJ1E4cHEK6icwSAUxIEQy6GSgurQipEsUxH4eZz+EX8alg2SLXO5om2sLjWdyEn8/ON6H/O/guSF53uHN27sfDvY/Hr3f+nISaZLFRsSTmETs5lUpKdd0Vm/HnCTq+FXraQDgj/T7w27TPbBco1F3eDsidi4kg2+NNAQAAAAAAAAAAEBti5z/34j4Wj3/f7zifgGA+pz/X1/tch2NusN7xf6twvl/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoDmT6fTWNL/Sci2vGxGRRkQ7Im5GRCsi8s+b7hcAqG8ynZ/7V83/iEgiwvwHgDXw6vWbF91eb6+fZWnEz+PxYDwo1iJ/9ry39zCb2T176mQ8Hmye5o+KPJvPt2b7hjx/fGm+HQ/uF3mePX3Zq+Q7sb/81weA/1InO3Vuvm+WV0Snc1mez+eiOrc/qMzvVtxprew1AIAFHH36fDA8PHw3+utFsthT7bKhq+/53lpWq4prFT+Sf6INRd0ivc7NDf8wAUt39qWvJmkzDQEAAAAAAAAAAAAAABes4i9HTb8jAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADr53cAAAD//8h6UUs=") r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$cont(0x1f, r4, 0x0, 0xfffffffffffffffd) r5 = fcntl$getown(r0, 0x9) msgctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f00000000c0)={{0x2, 0xee01, r1, r2, r3, 0x80, 0x40}, 0x0, 0x0, 0x9, 0x100000001, 0x5, 0x5, 0x1, 0x8, 0xe485, 0x6, r4, r5}) 41.081421063s ago: executing program 5 (id=637): r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x2b2000, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000140)) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0xd, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000840)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x5, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r2, 0x0, 0xffffffffffffffff}, 0x18) ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f0000000180)={0x1, &(0x7f00000000c0)=[{0x6}]}) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000880)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4, &(0x7f0000000340)={[{@stripe={'stripe', 0x3d, 0x3ff}}, {@resuid}]}, 0xfe, 0x259, &(0x7f0000000380)="$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") socket$nl_generic(0x10, 0x3, 0x10) r5 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ioctl$EXT4_IOC_GROUP_ADD(r5, 0x40286608, &(0x7f0000000040)={0x19, 0x3, 0xb, 0x3, 0x7, 0xd}) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='net_dev_xmit\x00', r6}, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000900000018110000", @ANYRES32, @ANYBLOB="0000090000000000b70800000c0000007b8af8ff00000000bfa2000000000000070200ec2d0b52000000000008000000b70400000000000085000000030000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r7}, 0x10) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r8, 0x0, 0x30, 0xe1515f8735398fb, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0x45c], 0x0, 0x0, 0x1, 0x1}}, 0x3c) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r9 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYRES8=r3, @ANYRES32=r4], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000140)={&(0x7f00000001c0)="0aedef2e203eb0c7e22bb62b86e2aca44f61c45a68442d1ac712529c968155463d141400ad202a11ed87b1435f62268edb4ba2c1287949dca6f6547ff576a06e8ea5aa445ee1fcce5641b7aac7e61ae850a7cba4b7ae0b763389e9a69e0a745c99f48a41b647a4f1d54a573d9d2480db6e9ae2bc43f3a1e1a85658dc27d0c519514e504d2c85169f8b50dc5ce65426b092a99f85d6dfa5bc4e9d6f36800dcda6b033eb45a5317f4aa7ef2449198b19310ee2ca0627fd4a1da497ab65f0", &(0x7f0000000000)=""/17, &(0x7f0000000300)="f3d9e8e24c29027b466ac2475b9685c5b681b1d1c02808c0b13e22d988a20dc394b07b132eea2afb4111e4dd94fb634b0f9184d8b3e1e240fa09190ae2a53c8f6bd86304e305aa0e792d29e438f152ac9d38fbbb650ef9d3fce1ff", &(0x7f00000004c0)="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", 0x84e7, r10}, 0x38) add_key(&(0x7f00000003c0)='ceph\x00', 0x0, &(0x7f0000000400)="010000000037a788a11d1f000000000000006923c63a4541062101a59ea9cba39a989ca8c70b3692930208", 0x2b, r9) 40.971610505s ago: executing program 5 (id=641): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000080000000000000000000181100", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) timer_create(0x0, &(0x7f0000000180)={0x0, 0x13, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)=0x0) timer_settime(r6, 0x1, &(0x7f0000000300)={{0x77359400}, {0x0, 0x989680}}, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000000)='kfree\x00', r7, 0x0, 0x1000000000000}, 0x18) r8 = socket$inet_tcp(0x2, 0x1, 0x0) r9 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r9, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r9, 0x0, 0x30, &(0x7f0000000940)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000002000000e00000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000064010102000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x310) r10 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r10, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) close_range(r8, 0xffffffffffffffff, 0x0) 40.959311865s ago: executing program 33 (id=641): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000080000000000000000000181100", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) timer_create(0x0, &(0x7f0000000180)={0x0, 0x13, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)=0x0) timer_settime(r6, 0x1, &(0x7f0000000300)={{0x77359400}, {0x0, 0x989680}}, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000000)='kfree\x00', r7, 0x0, 0x1000000000000}, 0x18) r8 = socket$inet_tcp(0x2, 0x1, 0x0) r9 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r9, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r9, 0x0, 0x30, &(0x7f0000000940)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000002000000e00000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000064010102000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x310) r10 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r10, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) close_range(r8, 0xffffffffffffffff, 0x0) 1.9298853s ago: executing program 0 (id=1399): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000031c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000440)='kmem_cache_free\x00', r0}, 0x18) r1 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x10001, @mcast1, 0x5}, 0x1c) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x953a, &(0x7f0000000100)=[{&(0x7f0000000000)="2b10", 0xffbd}], 0x1, 0x0, 0x0, 0x2c}, 0x4) 1.923215471s ago: executing program 0 (id=1401): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r0 = socket$kcm(0xa, 0x6, 0x0) listen(r0, 0x3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000007c0)='memory.events\x00', 0x26e1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="40000000130a03eb71f462991c52fbfe6d9da70000000000000000030000030900010073797a31000000000900020573797a30000000000800034000000000012b4d0a66fd143ebcb4855335eb4d9f94b02d9d9d12b433de8070bffe20a9f375bc94d72bb6ad1d8ebe111d4acdef38bcf39e11efc5af83ef2c977cdfde26a943eee5c3a29f9b8a94710468cd93c98db87e0e729692eec525d9fa4f18"], 0x40}, 0x1, 0x0, 0x0, 0x44040}, 0x8010) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000fb"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f00000000c0)={0x41, 0x12}, 0x10) r5 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) r6 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000280)={0x41, 0x3}, 0x10) r7 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000100)={0x41}, 0x1be) sendmsg$tipc(r6, &(0x7f0000000240)={&(0x7f0000000080), 0x10, 0x0}, 0x0) r8 = dup(0xffffffffffffffff) write$UHID_INPUT(r8, &(0x7f0000002380)={0x12, {"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", 0x1000}}, 0x1006) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00'}, 0x10) 1.811692572s ago: executing program 0 (id=1402): socket$packet(0x11, 0x3, 0x300) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c2500000000002220207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000006000000850000000400000085000000d000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000280)='tlb_flush\x00', r0}, 0x10) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000016"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r3}, 0x10) r4 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) fcntl$dupfd(r4, 0x0, r4) socket$netlink(0x10, 0x3, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="05000000040002004300000001"], 0x50) bpf$BPF_GET_PROG_INFO(0x4, &(0x7f0000000140)={r5, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5b, 0x8, 0x0, 0x0}}, 0x10) socket$inet6(0xa, 0x3, 0x89) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r6, &(0x7f0000000100)={0xa, 0x0, 0x108, @empty, 0x404}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x1, &(0x7f0000000340)=@gcm_256={{0x303}, '\x00', "376a31a19e8e279cec092f071cc80f218d360356a936a7e3971a8c35c47e5804", '\x00', "fffffffffffffffd"}, 0x38) writev(r6, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) 1.616324595s ago: executing program 0 (id=1406): prlimit64(0x0, 0xe, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() r1 = gettid() r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x2000) read(r2, &(0x7f0000000200)=""/209, 0x128) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000080)={0x335, @time={0x80, 0xff}}) tkill(r1, 0x7) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r2, 0xc02c5341, &(0x7f00000004c0)) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r2, 0xc0a85320, &(0x7f00000000c0)={{0x8, 0x1}, 'port0\x00', 0x0, 0x20, 0x29e, 0x1000, 0x37, 0x7, 0x7, 0x0, 0x4, 0x1}) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) 1.195479742s ago: executing program 1 (id=1410): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001240)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000f1ffff000000000000100000850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000000e, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0x101}, 0x18) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x77359400}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a010400000000000000000100000008000240000000020900010073797a3000000000140000001100"], 0x50}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000009006000000000000000000000a3c000000090a050600000000000000000100000008000a40000000000900020073797ab1000000000900010073797a3000000000080005400000001414000000110001"], 0x64}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r3 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000009006000000000000000000000a3c000000090a010400000000000000000100000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000141400000011000f"], 0x64}}, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 924.572586ms ago: executing program 0 (id=1413): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e00000027f0000010000000003"], 0x1c) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f00000008c0)={0x1, {{0x2, 0x0, @multicast2}}}, 0x88) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newqdisc={0x94, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x64, 0x2, {{0x40b, 0x2, 0x7, 0x2c, 0xfffffffa, 0xa7b6}, [@TCA_NETEM_JITTER64={0xc, 0xb, 0x81}, @TCA_NETEM_RATE={0x14, 0x6, {0x1, 0x3ff, 0xa, 0x4}}, @TCA_NETEM_CORR={0x10, 0x1, {0x3, 0x8, 0x2}}, @TCA_NETEM_CORRUPT={0xc, 0x4, {0x5}}, @TCA_NETEM_REORDER={0xc, 0x3, {0x2, 0x4}}]}}}]}, 0x94}, 0x1, 0x0, 0x0, 0x40088d0}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=@newtfilter={0x38, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0xb, 0x6}, {}, {0x7}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_FLAGS={0x8, 0xb, 0x2}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="16000000000000000400000001fd92f494b46f3e73d444e3ce6f1d79d964d6ad16d02aed043e9ee05d615ee42f6bb82b1e83f2f01acbea05e5e72a6ead58a21bd34edc3b03afd7043e5ae1dbf881abd5f2ac20b665b67bb4e1203ff4a8028e08ce091ad37c19856b6673a2d5699ce2736833d4d7d9466d2f65"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r8}, 0x10) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x301}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @link_local}) close(r9) 738.879269ms ago: executing program 3 (id=1419): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x1100, 0x5dd9, 0x0, 0x5, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="d80000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000004000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c000280050001"], 0xd8}}, 0x0) (fail_nth: 10) 726.840599ms ago: executing program 6 (id=1420): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000030000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$inet6(0xa, 0x80003, 0xff) setsockopt$inet6_int(r2, 0x29, 0x16, &(0x7f0000fcb000), 0x4) setsockopt$inet6_int(r2, 0x29, 0x16, &(0x7f0000000140), 0x4) 713.486239ms ago: executing program 6 (id=1421): r0 = socket$key(0xf, 0x3, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000400"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000001000000000000000000000018010000786c692500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b70300000000ffff850000000400000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x2, 0x13, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 698.27331ms ago: executing program 3 (id=1422): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x101900, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000080)) ioctl$PPPIOCSMAXCID(r2, 0x40047451, &(0x7f0000000100)=0xffff0000) ioctl$PPPIOCSMAXCID(r2, 0x40047451, &(0x7f0000002540)=0x1) 698.011579ms ago: executing program 6 (id=1423): rt_sigaction(0x40, &(0x7f0000000500)={0x0, 0x4000000, 0x0}, 0x0, 0x8, &(0x7f0000001540)) (async) io_pgetevents(0x0, 0x1, 0x7, &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}, {}], 0x0, &(0x7f0000000180)={&(0x7f0000000000)={[0x2]}, 0x8}) (async, rerun: 64) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='stat\x00') (rerun: 64) preadv(r0, &(0x7f0000000340)=[{&(0x7f00000013c0)=""/125, 0x7d}], 0x1, 0x0, 0xffffffff) 652.39275ms ago: executing program 3 (id=1424): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x2, @perf_bp={0x0, 0xa}, 0x1000, 0x5dd8, 0x0, 0x5, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = socket$kcm(0x21, 0x2, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$kcm(r1, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000100)="a6", 0xfffffcf4}, {0x0}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) 652.2387ms ago: executing program 6 (id=1425): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r1, 0x0, 0xc395}, 0x18) r2 = getpid() r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r3, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0x1], 0x0, 0x0, 0x20000000000000b2, 0x1, r2}}, 0x40) perf_event_open(&(0x7f00000004c0)={0x8, 0x80, 0x0, 0xc, 0x0, 0x0, 0x82, 0x200000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000080), 0x9}, 0x18204, 0x0, 0x3, 0x0, 0x0, 0x5338c7af, 0x0, 0x0, 0x0, 0x0, 0x2}, r2, 0xc, 0xffffffffffffffff, 0x0) 652.14131ms ago: executing program 6 (id=1426): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000031c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$inet6(0xa, 0x3, 0x8000000003c) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000380)='kmem_cache_free\x00', r1}, 0x18) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x10001, @mcast1, 0x5}, 0x1c) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x4) 651.51133ms ago: executing program 6 (id=1427): r0 = syz_open_dev$loop(&(0x7f00000005c0), 0x9, 0x12d600) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='environ\x00') perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x68, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x800000, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) preadv(r2, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r3, &(0x7f0000004200)='t', 0x1) sendfile(r3, r1, 0x0, 0x8000000) ioctl$SNDRV_TIMER_IOCTL_STOP(r3, 0x54a1) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.usage_user\x00', 0x275a, 0x0) getsockopt$sock_buf(r1, 0x1, 0x1c, &(0x7f0000000000)=""/177, &(0x7f00000000c0)=0xb1) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r4, 0x1000, {0x2a00, 0x80010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2abfc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0155aaffffffffffff0300", "2809e85397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac0000000000000000000400", "90010000009265406c09306903d800", [0x0, 0x1]}}) ioctl$LOOP_SET_FD(r0, 0x4c00, r0) 645.82156ms ago: executing program 4 (id=1428): socket$xdp(0x2c, 0x3, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f00000000c0)={"6957608d766cfff5c3a665bd121a2d89", 0x0, 0x0, {0x4, 0x40000a}, {0x7, 0x8}, 0x5, [0x3, 0x3, 0x5, 0x6, 0x0, 0x400, 0xffffffffffff0001, 0x2, 0x8, 0x40000007, 0x80000000, 0x81, 0x10, 0x522586f, 0xfffffffffffffffb, 0x400000000000001]}) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0xc200, 0x2, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffdfc, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000940)={{0x14, 0x3ed}, [@NFT_MSG_DELSETELEM={0x14, 0xe, 0xa, 0x5, 0x0, 0x0, {0x2}}], {0x14, 0x3ed}}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0xc010) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) mount(0x0, &(0x7f00000004c0)='./file1\x00', &(0x7f0000000500)='aufs\x00', 0xb32000, 0x0) r3 = socket$inet(0xa, 0x801, 0x84) connect$inet(r3, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r3, 0x8000) r4 = accept4(r3, 0x0, 0x0, 0x0) sendto$inet(r4, &(0x7f00000002c0)="cc", 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000100)={0x3}, 0x10) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x2}, 0x8) sendto$inet(r4, &(0x7f0000000300)="b3", 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000040)={0x0, 0x1}, 0x8) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(r6) splice(r5, 0x0, r6, 0x0, 0x4ffe2, 0x0) openat$cgroup_procs(r5, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$eJzs3c9rXNUeAPDvnSRNm/a95MGD9+oqIGigdGJqbBVcVFyIYKGga9thMg01k0zJTEoTAlpEcCOouBB007U/6s6tP7b6X7gQS9W0WHEhkTu5t502M2mSJpnqfD5wM+fceyfnfOf+OGfmHu4NoGeNpn8KEYcj4t0kYjibn0TEQDPVH3Fybb1bK8vldEpidfXlX5LmOjdXlsvR8p7UwSzz/4j45q2II4X15dYXl2ZK1WplPsuPN2YvjNcXl46eny1NV6Yrc8cnJiePnXjqxPGdi/W375cOXXvvhcc/P/nHm/+7+s63SZyMQ9my1jh2ymiMZp/JQPoR3uX5nS6sy5JuV4BtSQ/NvrWjPA7HcPQ1UwDAP9nrEbEKAPSYRPsPAD0m/x3g5spyOZ+6+4vE3rr+XETsX4s/v765tqQ/u2a3v3kddOhmcteVkSQiRnag/NGI+PjLVz9Np9il65AA7bxxOSLOjoyuP/8n68YsbNUTGyzbl72O3jPf+Q/2zldp/+fpdv2/wu3+T7Tp/wy2OXa3477H/4EdKGQDaf/v2Zaxbbda4s+M9GW5fzX7fAPJufPVSnpu+3dEjMXAYJqf2KCMsRt/3ui0rLX/9+v7r32Slp++3lmj8FP/4N3vmSo1Sg8Sc6vrlyMe6W8Xf3J7+ycd+r+nN1nGi8+8/VGnZWn8abz5tD7+yEYn7Y7VKxGPtd3+d0a0JRuOTxxv7g7j+U7Rxhc/fDjUqfzW7Z9Oafn5d4G9kG7/oY3jH0lax2vWt17Gd1eGv+607P7xt9//9yWvNNN5P+JSqdGYn4jYl7y0fv6xO+/N8/n6afxjj7Y//jfa/9PvhGc3GX//tZ8/2378uyuNf2pL23/riau3Zvo6lb+57T/ZTI1lczZz/ttsBR/kswMAAAAAAAAAAAAAAAAAAAAAAACAzSpExKFICsXb6UKhWFx7hvd/Y6hQrdUbR87VFuamovms7JEYKOS3uhxuuR/qRHY//Dx/7J78kxHxn4j4YPBAkt9HcarLsQMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABA7mCH5/+nfhzsdu0AgF2zv9sVAAD2nPYfAHqP9h8Aeo/2HwB6j/YfAHqP9h8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBddvrUqXRa/X1luZzmpy4uLszULh6dqtRnirML5WK5Nn+hOF2rTVcrxXJt9n7/r1qrXZiMuYVL441KvTFeX1w6M1tbmGucOT9bmq6cqQzsSVQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsDX1xaWZUrVamZfYRmL14ahG9xN92e70sNRnTxPJw1GNHU50+cQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8DfxVwAAAP//02Ii/w==") r7 = socket$inet6_udp(0xa, 0x2, 0x0) bind$unix(r7, &(0x7f0000000240)=@abs, 0x10) 430.176184ms ago: executing program 4 (id=1429): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r0 = socket$kcm(0xa, 0x6, 0x0) listen(r0, 0x3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000007c0)='memory.events\x00', 0x26e1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="40000000130a03eb71f462991c52fbfe6d9da70000000000000000030000030900010073797a31000000000900020573797a30000000000800034000000000012b4d0a66fd143ebcb4855335eb4d9f94b02d9d9d12b433de8070bffe20a9f375bc94d72bb6ad1d8ebe111d4acdef38bcf39e11efc5af83ef2c977cdfde26a943eee5c3a29f9b8a94710468cd93c98db87e0e729692eec525d9fa4f189f647656efb5"], 0x40}, 0x1, 0x0, 0x0, 0x44040}, 0x8010) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000fb"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f00000000c0)={0x41, 0x12}, 0x10) r5 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) r6 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000280)={0x41, 0x3}, 0x10) r7 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000100)={0x41}, 0x1be) sendmsg$tipc(r6, &(0x7f0000000240)={&(0x7f0000000080), 0x10, 0x0}, 0x0) r8 = dup(0xffffffffffffffff) write$UHID_INPUT(r8, &(0x7f0000002380)={0x12, {"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", 0x1000}}, 0x1006) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00'}, 0x10) 324.477256ms ago: executing program 4 (id=1430): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00'}, 0x10) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000d0400"/20, @ANYRES32=r2, @ANYBLOB="60c000000800000024001280110001006272696467655f736c617665000000000c000580080022"], 0x44}, 0x1, 0x0, 0x0, 0x95}, 0x48040) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r1, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0xffffffffffffff7b) socket$inet6_sctp(0xa, 0x1, 0x84) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x8, 0xa8714, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0, 0x2}, 0x305, 0xab3, 0x0, 0x6, 0x40000008, 0x8, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}, 0x1, 0x0, 0x0, 0x885}, 0x0) r5 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r5, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) sendto$inet6(r5, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd45, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) connect$inet6(r7, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r7, 0x6, 0x1f, &(0x7f0000000040), 0x4) setsockopt$inet6_tcp_TLS_TX(r7, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_256={{0x304}, "0002002000", "07f217bd74511e465bbbd5de01000000f9044677d4d588363d63af84db44be59", "00f8ff00", "8ce63ecbc640735f"}, 0x38) close(r7) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r5, 0x84, 0x17, &(0x7f0000000040)=ANY=[@ANYRESDEC=0x0, @ANYBLOB="01"], 0x9) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r3, 0x84, 0x19, &(0x7f0000000340)={0x0, 0x1}, 0x8) 276.289506ms ago: executing program 1 (id=1431): r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x5, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) r2 = syz_clone(0x8d002240, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x10, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRESHEX=r1, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x18) ptrace(0x10, r2) ptrace$pokeuser(0x6, r2, 0x358, 0x0) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x74, &(0x7f0000000200)=""/107, &(0x7f0000000100)=0x6b) r4 = getpid() wait4(r2, &(0x7f0000000280), 0x2, 0x0) r5 = syz_pidfd_open(r4, 0x0) process_madvise(r5, &(0x7f0000000040)=[{0x0}, {&(0x7f0000000180)="a4", 0x1}], 0x2, 0x13, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r6, 0x107, 0x16, &(0x7f0000000100)={0x1, &(0x7f0000002040)=[{0x4, 0x8, 0x5, 0x6}]}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 270.459736ms ago: executing program 3 (id=1432): symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') bpf$TOKEN_CREATE(0x24, &(0x7f0000000280), 0x8) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000000)={0x0, &(0x7f00000000c0)}) preadv(r0, &(0x7f0000000040)=[{&(0x7f00000015c0)=""/4101, 0x1005}], 0x1, 0x5, 0xffffbfff) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x4200c2, 0x0) unshare(0x6a040000) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000100)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) syz_emit_ethernet(0x55, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socket(0xa, 0x3, 0x3a) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) add_key$keyring(&(0x7f0000000080), &(0x7f0000001100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000300)='asymmetric\x00', 0x0, &(0x7f00000003c0)="300a000000c33f60a0408a72a0f03655f7acf0b4d2ebb707bf18694d42c0a0ddacaf19c928cf08d47da12b41a29c0b6ae6f63a4fb65f92abdde365659fba7a3611c8b3f95395aaf97feac533167ef003d30be1fe51317fe9b65e", 0xfffffffffffffe54, 0x0) r1 = inotify_init() r2 = creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) syz_open_dev$tty20(0xc, 0x4, 0x0) r3 = inotify_add_watch(r1, &(0x7f0000000240)='./file0\x00', 0x8c7) write$binfmt_elf32(r2, &(0x7f00000002c0)=ANY=[@ANYRES64=r3], 0x69) close(r2) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000005c0)=@newtaction={0x48, 0x1c, 0x1, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x34, 0x1, [@m_bpf={0x30, 0x12, 0x0, 0x0, {{0x8}, {0x4}, {0x6, 0x6, "eb1e"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) 256.195977ms ago: executing program 1 (id=1433): ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={0xffffffffffffffff}) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='xen_cpu_write_idt_entry\x00', 0xffffffffffffffff, 0x0, 0x8000}, 0x18) unshare(0x20000400) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000340)='kfree\x00', r2, 0x0, 0xfffffffffffffffe}, 0x18) r3 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r3, 0x65, 0x1, 0x0, 0xf00) 188.397107ms ago: executing program 4 (id=1434): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x101900, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000080)) ioctl$PPPIOCSMAXCID(r2, 0x40047451, &(0x7f0000000100)=0xffff0000) ioctl$PPPIOCSMAXCID(r2, 0x40047451, &(0x7f0000002540)=0x1) 188.200207ms ago: executing program 1 (id=1435): r0 = socket$key(0xf, 0x3, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e0000000400000004000000"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000001000000000000000000000018010000786c692500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b70300000000ffff850000000400000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x2, 0x13, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 163.417298ms ago: executing program 1 (id=1436): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'veth1_to_bond\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) syz_emit_ethernet(0xfc0, &(0x7f0000007940)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd606410a60f8a896adf660000000000001200ffffe0000012fe8000000000000000000000000000aa"], 0x0) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r1, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x39}}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000000)={r1, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000280)={r1, 0x2, 0x6, @local}, 0x10) pipe2(&(0x7f0000001cc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kfree\x00', r7, 0x0, 0x8000000000000000}, 0x18) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@access_uid}]}}) 108.083488ms ago: executing program 4 (id=1437): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000031c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$inet6(0xa, 0x3, 0x8000000003c) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000380)='kmem_cache_free\x00', r1}, 0x18) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x10001, @mcast1, 0x5}, 0x1c) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x4) 82.536119ms ago: executing program 3 (id=1438): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000004000000000000000000850000002300000095"], &(0x7f0000000180)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000380)='sched_switch\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r2, 0xc0a85320, &(0x7f00000003c0)={{0x80}, 'port0\x00', 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r2, 0x40a85321, &(0x7f00000004c0)={{0x80}, 'port0\x00', 0x0, 0x121428, 0x5000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, 0x0, 0x44090) syz_mount_image$vfat(&(0x7f0000000340), &(0x7f0000000980)='./file1\x00', 0x280809a, &(0x7f0000000f40)=ANY=[], 0xd, 0x2c0, &(0x7f0000001a80)="$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") r3 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x130) write$9p(r3, &(0x7f0000001400)="3b27a4b46ee92b4a", 0x8) 72.25625ms ago: executing program 0 (id=1439): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b0000000000"], 0x48) bpf$BPF_MAP_FREEZE(0x16, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x18) r1 = gettid() prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) preadv(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f0000000b00)=""/152, 0x98}], 0x1, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r3) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=ANY=[@ANYBLOB="28000000e07ec4799d99fead58abda538e06c8d567b887c77e574ddca2759b63ff782a7bb16be66bb373586fb5d7e9806ffc98a642c66623621263f38a4bc7d6e3316ff075", @ANYRES16=r4, @ANYBLOB="010300000000000000000100000008000300", @ANYRES32=0x0, @ANYBLOB="0c0099000200000003000000"], 0x28}}, 0x40) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) sendmsg$NL80211_CMD_SET_MESH_CONFIG(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x20004050}, 0x4040801) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b7040000000000008500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5f9d4634b549d9f8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001700)={&(0x7f0000000080)='kmem_cache_free\x00', r5}, 0x10) syz_mount_image$vfat(&(0x7f0000000280), &(0x7f0000000000)='./file0\x00', 0x1018000, &(0x7f00000003c0)=ANY=[@ANYRES8=0x0, @ANYRES16, @ANYRES16=0x0, @ANYRESOCT=r2, @ANYRES32, @ANYRESDEC], 0x1, 0x2ee, &(0x7f00000006c0)="$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") r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x22) pwritev2(r6, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0x10c6a, 0x0, 0x0) sendmsg$NL80211_CMD_GET_SCAN(r0, 0x0, 0x4040) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r8, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0) getsockname$packet(r0, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000010000507000000000004000000000000", @ANYRES32=r9, @ANYBLOB="00000016010000001800120008000100736974000c0002000800030036"], 0x38}}, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000580)=ANY=[], 0x60}, 0x1, 0x0, 0x0, 0x8000}, 0x4040) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) 48.53372ms ago: executing program 4 (id=1440): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r0 = socket$kcm(0xa, 0x6, 0x0) listen(r0, 0x3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000007c0)='memory.events\x00', 0x26e1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="40000000130a03eb71f462991c52fbfe6d9da70000000000000000030000030900010073797a31000000000900020573797a30000000000800034000000000012b4d0a66fd143ebcb4855335eb4d9f94b02d9d9d12b433de8070bffe20a9f375bc94d72bb6ad1d8ebe111d4acdef38bcf39e11efc5af83ef2c977cdfde26a943eee5c3a29f9b8a94710468cd93c98db87e0e729692eec525d9fa4f189f647656efb5186474"], 0x40}, 0x1, 0x0, 0x0, 0x44040}, 0x8010) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000fb"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f00000000c0)={0x41, 0x12}, 0x10) r5 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) r6 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000280)={0x41, 0x3}, 0x10) r7 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000100)={0x41}, 0x1be) sendmsg$tipc(r6, &(0x7f0000000240)={&(0x7f0000000080), 0x10, 0x0}, 0x0) r8 = dup(0xffffffffffffffff) write$UHID_INPUT(r8, &(0x7f0000002380)={0x12, {"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", 0x1000}}, 0x1006) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00'}, 0x10) 281.26µs ago: executing program 1 (id=1441): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r0 = socket$kcm(0xa, 0x6, 0x0) listen(r0, 0x3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000007c0)='memory.events\x00', 0x26e1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="40000000130a03eb71f462991c52fbfe6d9da70000000000000000030000030900010073797a31000000000900020573797a30000000000800034000000000012b4d0a66fd143ebcb4855335eb4d9f94b02d9d9d12b433de8070bffe20a9f375bc94d72bb6ad1d8ebe111d4acdef38bcf39e11efc5af83ef2c977cdfde26a943eee5c3a29f9b8a94710468cd93c98db87e0e729692eec525d9fa4f18"], 0x40}, 0x1, 0x0, 0x0, 0x44040}, 0x8010) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000fb"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f00000000c0)={0x41, 0x12}, 0x10) r5 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) r6 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000280)={0x41, 0x3}, 0x10) r7 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000100)={0x41}, 0x1be) sendmsg$tipc(r6, &(0x7f0000000240)={&(0x7f0000000080), 0x10, 0x0}, 0x0) r8 = dup(0xffffffffffffffff) write$UHID_INPUT(r8, &(0x7f0000002380)={0x12, {"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", 0x1000}}, 0x1006) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00'}, 0x10) 0s ago: executing program 3 (id=1442): r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x5, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) r2 = syz_clone(0x8d002240, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x10, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRESHEX=r1, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x18) ptrace(0x10, r2) ptrace$pokeuser(0x6, r2, 0x358, 0x0) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x74, &(0x7f0000000200)=""/107, &(0x7f0000000100)=0x6b) r4 = getpid() wait4(r2, &(0x7f0000000280), 0x2, &(0x7f0000000500)) r5 = syz_pidfd_open(r4, 0x0) process_madvise(r5, &(0x7f0000000040)=[{0x0}], 0x1, 0x13, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r6, 0x107, 0x16, &(0x7f0000000100)={0x1, &(0x7f0000002040)=[{0x4, 0x8, 0x5, 0x6}]}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) kernel console output (not intermixed with test programs): from 0 to 164 [ 76.246446][ T6008] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 76.298590][ T6015] xt_hashlimit: max too large, truncated to 1048576 [ 76.318577][ T6015] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 76.516168][ T6026] syz_tun (unregistering): left allmulticast mode [ 76.594127][ T5536] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.603643][ T1864] EXT4-fs error (device loop6): ext4_release_dquot:6971: comm kworker/u8:6: Failed to release dquot type 1 [ 76.666255][ T6030] loop6: detected capacity change from 0 to 512 [ 76.694700][ T6030] EXT4-fs: test_dummy_encryption option not supported [ 76.823987][ T6035] selinux_netlink_send: 53 callbacks suppressed [ 76.824006][ T6035] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6035 comm=syz.6.824 [ 76.861026][ T6035] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6035 comm=syz.6.824 [ 76.890018][ T6035] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6035 comm=syz.6.824 [ 76.910129][ T29] kauditd_printk_skb: 798 callbacks suppressed [ 76.910148][ T29] audit: type=1326 audit(1743750860.974:6920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6039 comm="syz.4.827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f814a35d169 code=0x7ffc0000 [ 76.939787][ T29] audit: type=1326 audit(1743750860.974:6921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6039 comm="syz.4.827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f814a35d169 code=0x7ffc0000 [ 76.963151][ T29] audit: type=1326 audit(1743750860.974:6922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6039 comm="syz.4.827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f814a35d169 code=0x7ffc0000 [ 76.986574][ T29] audit: type=1326 audit(1743750860.974:6923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6039 comm="syz.4.827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=199 compat=0 ip=0x7f814a35d169 code=0x7ffc0000 [ 77.009938][ T29] audit: type=1326 audit(1743750860.974:6924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6039 comm="syz.4.827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f814a35d169 code=0x7ffc0000 [ 77.042237][ T6035] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6035 comm=syz.6.824 [ 77.081923][ T6035] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6035 comm=syz.6.824 [ 77.085979][ T29] audit: type=1326 audit(1743750861.124:6925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6042 comm="syz.0.829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f9228d169 code=0x7ffc0000 [ 77.101832][ T6035] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6035 comm=syz.6.824 [ 77.117966][ T29] audit: type=1326 audit(1743750861.124:6926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6042 comm="syz.0.829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f9228d169 code=0x7ffc0000 [ 77.130433][ T6035] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6035 comm=syz.6.824 [ 77.153329][ T29] audit: type=1326 audit(1743750861.124:6927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6042 comm="syz.0.829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7f4f9228d169 code=0x7ffc0000 [ 77.189022][ T29] audit: type=1326 audit(1743750861.124:6928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6042 comm="syz.0.829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f9228d169 code=0x7ffc0000 [ 77.212463][ T29] audit: type=1326 audit(1743750861.124:6929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6042 comm="syz.0.829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4f9228d169 code=0x7ffc0000 [ 77.239094][ T6035] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6035 comm=syz.6.824 [ 77.251571][ T6035] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6035 comm=syz.6.824 [ 77.266996][ T6035] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6035 comm=syz.6.824 [ 77.335249][ T6048] loop4: detected capacity change from 0 to 256 [ 77.348797][ T6048] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 77.365933][ T6046] loop1: detected capacity change from 0 to 512 [ 77.376638][ T6046] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 77.392111][ T6046] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 77.410591][ T6048] FAT-fs (loop4): Directory bread(block 64) failed [ 77.417330][ T6048] FAT-fs (loop4): Directory bread(block 65) failed [ 77.417629][ T6054] xt_hashlimit: max too large, truncated to 1048576 [ 77.435418][ T6048] FAT-fs (loop4): Directory bread(block 66) failed [ 77.442050][ T6048] FAT-fs (loop4): Directory bread(block 67) failed [ 77.445587][ T6054] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 77.448568][ T6046] EXT4-fs (loop1): Remounting filesystem read-only [ 77.468145][ T6048] FAT-fs (loop4): Directory bread(block 68) failed [ 77.474772][ T6048] FAT-fs (loop4): Directory bread(block 69) failed [ 77.481429][ T6048] FAT-fs (loop4): Directory bread(block 70) failed [ 77.488080][ T6046] EXT4-fs (loop1): 1 truncate cleaned up [ 77.494215][ T6046] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.506716][ T6048] FAT-fs (loop4): Directory bread(block 71) failed [ 77.523479][ T6048] FAT-fs (loop4): Directory bread(block 72) failed [ 77.543448][ T6048] FAT-fs (loop4): Directory bread(block 73) failed [ 77.582217][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.653242][ T6061] loop6: detected capacity change from 0 to 512 [ 77.662086][ T6061] EXT4-fs: Ignoring removed i_version option [ 77.668121][ T6061] EXT4-fs: Ignoring removed mblk_io_submit option [ 77.678695][ T6059] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 77.695826][ T6059] vhci_hcd: default hub control req: 2314 v0008 i0002 l0 [ 77.703636][ T6061] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 77.721798][ T6061] EXT4-fs (loop6): can't mount with data_err=abort, fs mounted w/o journal [ 77.744475][ T6061] loop6: detected capacity change from 0 to 164 [ 77.762908][ T6061] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 77.776794][ T6071] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 77.787762][ T6061] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 77.789895][ T6071] vhci_hcd: default hub control req: 2314 v0008 i0002 l0 [ 77.862890][ T6083] netlink: 'syz.0.844': attribute type 4 has an invalid length. [ 77.988103][ T6087] loop6: detected capacity change from 0 to 128 [ 78.042227][ T6089] loop6: detected capacity change from 0 to 2048 [ 78.064198][ T6089] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 78.099739][ T6089] FAULT_INJECTION: forcing a failure. [ 78.099739][ T6089] name failslab, interval 1, probability 0, space 0, times 0 [ 78.112414][ T6089] CPU: 1 UID: 0 PID: 6089 Comm: syz.6.847 Not tainted 6.14.0-syzkaller-12966-ga2cc6ff5ec8f #0 PREEMPT(voluntary) [ 78.112441][ T6089] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 78.112453][ T6089] Call Trace: [ 78.112459][ T6089] [ 78.112465][ T6089] dump_stack_lvl+0xf6/0x150 [ 78.112546][ T6089] dump_stack+0x15/0x1a [ 78.112561][ T6089] should_fail_ex+0x261/0x270 [ 78.112584][ T6089] should_failslab+0x8f/0xb0 [ 78.112612][ T6089] __kmalloc_noprof+0xad/0x410 [ 78.112652][ T6089] ? ext4_find_extent+0x172/0x7e0 [ 78.112705][ T6089] ext4_find_extent+0x172/0x7e0 [ 78.112731][ T6089] ? __rcu_read_unlock+0x4e/0x70 [ 78.112761][ T6089] ext4_ext_map_blocks+0x121/0x36a0 [ 78.112870][ T6089] ? blk_mq_submit_bio+0x3e1/0xf50 [ 78.112959][ T6089] ? __submit_bio+0x2fd/0x510 [ 78.113020][ T6089] ? ext4_es_lookup_extent+0x35b/0x520 [ 78.113044][ T6089] ext4_map_blocks+0x5f8/0xdf0 [ 78.113139][ T6089] ext4_iomap_begin+0x497/0x5c0 [ 78.113166][ T6089] ? __pfx_ext4_iomap_begin+0x10/0x10 [ 78.113189][ T6089] iomap_iter+0x32e/0x770 [ 78.113220][ T6089] ? __pfx_ext4_iomap_end+0x10/0x10 [ 78.113317][ T6089] __iomap_dio_rw+0xd5e/0x12a0 [ 78.113352][ T6089] ? ext4_xattr_security_get+0x32/0x40 [ 78.113389][ T6089] ? ext4_journal_check_start+0x122/0x1b0 [ 78.113421][ T6089] iomap_dio_rw+0x40/0x90 [ 78.113523][ T6089] ext4_file_write_iter+0xba9/0xf80 [ 78.113552][ T6089] do_iter_readv_writev+0x40d/0x4b0 [ 78.113591][ T6089] vfs_writev+0x2da/0x880 [ 78.113613][ T6089] ? get_pid_task+0x94/0xd0 [ 78.113709][ T6089] __se_sys_pwritev2+0x103/0x1d0 [ 78.113742][ T6089] __x64_sys_pwritev2+0x78/0x90 [ 78.113772][ T6089] x64_sys_call+0x1c86/0x2e10 [ 78.113837][ T6089] do_syscall_64+0xc9/0x1c0 [ 78.113894][ T6089] ? clear_bhb_loop+0x25/0x80 [ 78.113996][ T6089] ? clear_bhb_loop+0x25/0x80 [ 78.114022][ T6089] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 78.114042][ T6089] RIP: 0033:0x7f9fb25bd169 [ 78.114131][ T6089] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 78.114150][ T6089] RSP: 002b:00007f9fb0c27038 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 78.114170][ T6089] RAX: ffffffffffffffda RBX: 00007f9fb27d5fa0 RCX: 00007f9fb25bd169 [ 78.114183][ T6089] RDX: 0000000000000001 RSI: 0000200000000240 RDI: 0000000000000004 [ 78.114196][ T6089] RBP: 00007f9fb0c27090 R08: 00000000ff010000 R09: 0000000000000000 [ 78.114273][ T6089] R10: 0000000000001400 R11: 0000000000000246 R12: 0000000000000002 [ 78.114304][ T6089] R13: 0000000000000000 R14: 00007f9fb27d5fa0 R15: 00007ffd498abf28 [ 78.114325][ T6089] [ 78.427426][ T5536] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.445429][ T6100] FAULT_INJECTION: forcing a failure. [ 78.445429][ T6100] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 78.458640][ T6100] CPU: 0 UID: 0 PID: 6100 Comm: syz.0.851 Not tainted 6.14.0-syzkaller-12966-ga2cc6ff5ec8f #0 PREEMPT(voluntary) [ 78.458678][ T6100] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 78.458690][ T6100] Call Trace: [ 78.458696][ T6100] [ 78.458703][ T6100] dump_stack_lvl+0xf6/0x150 [ 78.458726][ T6100] dump_stack+0x15/0x1a [ 78.458808][ T6100] should_fail_ex+0x261/0x270 [ 78.458838][ T6100] should_fail+0xb/0x10 [ 78.458859][ T6100] should_fail_usercopy+0x1a/0x20 [ 78.458977][ T6100] _copy_to_user+0x20/0xa0 [ 78.459012][ T6100] simple_read_from_buffer+0xb2/0x130 [ 78.459046][ T6100] proc_fail_nth_read+0x103/0x140 [ 78.459086][ T6100] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 78.459136][ T6100] vfs_read+0x1b2/0x710 [ 78.459160][ T6100] ? __rcu_read_unlock+0x4e/0x70 [ 78.459190][ T6100] ? __fget_files+0x186/0x1c0 [ 78.459221][ T6100] ksys_read+0xeb/0x1b0 [ 78.459252][ T6100] __x64_sys_read+0x42/0x50 [ 78.459277][ T6100] x64_sys_call+0x2a3b/0x2e10 [ 78.459297][ T6100] do_syscall_64+0xc9/0x1c0 [ 78.459339][ T6100] ? clear_bhb_loop+0x25/0x80 [ 78.459362][ T6100] ? clear_bhb_loop+0x25/0x80 [ 78.459453][ T6100] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 78.459476][ T6100] RIP: 0033:0x7f4f9228bb7c [ 78.459492][ T6100] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 78.459511][ T6100] RSP: 002b:00007f4f908f7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 78.459531][ T6100] RAX: ffffffffffffffda RBX: 00007f4f924a5fa0 RCX: 00007f4f9228bb7c [ 78.459542][ T6100] RDX: 000000000000000f RSI: 00007f4f908f70a0 RDI: 0000000000000004 [ 78.459554][ T6100] RBP: 00007f4f908f7090 R08: 0000000000000000 R09: 0000000000000000 [ 78.459608][ T6100] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 78.459621][ T6100] R13: 0000000000000000 R14: 00007f4f924a5fa0 R15: 00007ffeec06ec08 [ 78.459639][ T6100] [ 78.826479][ T6114] loop1: detected capacity change from 0 to 512 [ 78.837548][ T6114] EXT4-fs: test_dummy_encryption option not supported [ 78.954919][ T6123] FAULT_INJECTION: forcing a failure. [ 78.954919][ T6123] name failslab, interval 1, probability 0, space 0, times 0 [ 78.967646][ T6123] CPU: 0 UID: 0 PID: 6123 Comm: syz.4.861 Not tainted 6.14.0-syzkaller-12966-ga2cc6ff5ec8f #0 PREEMPT(voluntary) [ 78.967670][ T6123] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 78.967682][ T6123] Call Trace: [ 78.967689][ T6123] [ 78.967696][ T6123] dump_stack_lvl+0xf6/0x150 [ 78.967774][ T6123] dump_stack+0x15/0x1a [ 78.967790][ T6123] should_fail_ex+0x261/0x270 [ 78.967816][ T6123] should_failslab+0x8f/0xb0 [ 78.967915][ T6123] __kmalloc_cache_noprof+0x55/0x320 [ 78.967989][ T6123] ? __se_sys_memfd_create+0x1ea/0x5a0 [ 78.968057][ T6123] __se_sys_memfd_create+0x1ea/0x5a0 [ 78.968083][ T6123] __x64_sys_memfd_create+0x31/0x40 [ 78.968170][ T6123] x64_sys_call+0x1163/0x2e10 [ 78.968189][ T6123] do_syscall_64+0xc9/0x1c0 [ 78.968215][ T6123] ? clear_bhb_loop+0x25/0x80 [ 78.968236][ T6123] ? clear_bhb_loop+0x25/0x80 [ 78.968262][ T6123] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 78.968281][ T6123] RIP: 0033:0x7f814a35d169 [ 78.968296][ T6123] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 78.968357][ T6123] RSP: 002b:00007f81489c6e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 78.968373][ T6123] RAX: ffffffffffffffda RBX: 00000000000004fa RCX: 00007f814a35d169 [ 78.968384][ T6123] RDX: 00007f81489c6ef0 RSI: 0000000000000000 RDI: 00007f814a3dec3c [ 78.968403][ T6123] RBP: 00002000000005c0 R08: 00007f81489c6bb7 R09: 00007f81489c6e40 [ 78.968413][ T6123] R10: 000000000000000a R11: 0000000000000202 R12: 0000200000000040 [ 78.968424][ T6123] R13: 00007f81489c6ef0 R14: 00007f81489c6eb0 R15: 00002000000001c0 [ 78.968442][ T6123] [ 79.236243][ T6135] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 79.536138][ T6142] __nla_validate_parse: 11 callbacks suppressed [ 79.536155][ T6142] netlink: 4 bytes leftover after parsing attributes in process `syz.6.868'. [ 79.687849][ T6145] netlink: 44 bytes leftover after parsing attributes in process `syz.0.869'. [ 80.030033][ T6163] atomic_op ffff888139e3f928 conn xmit_atomic 0000000000000000 [ 80.318529][ T6175] hub 9-0:1.0: USB hub found [ 80.323900][ T6175] hub 9-0:1.0: 8 ports detected [ 80.441228][ T6177] netlink: 44 bytes leftover after parsing attributes in process `syz.4.882'. [ 80.763056][ T6191] loop4: detected capacity change from 0 to 512 [ 80.769695][ T6191] EXT4-fs: Ignoring removed i_version option [ 80.775769][ T6191] EXT4-fs: Ignoring removed mblk_io_submit option [ 80.784890][ T6191] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 80.794906][ T6191] EXT4-fs (loop4): can't mount with data_err=abort, fs mounted w/o journal [ 80.809161][ T6191] loop4: detected capacity change from 0 to 164 [ 80.817162][ T6191] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 80.833511][ T6191] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 80.885164][ T6201] netlink: 44 bytes leftover after parsing attributes in process `syz.4.890'. [ 81.070933][ T6223] rdma_rxe: rxe_newlink: failed to add bond0 [ 81.081240][ T6223] netlink: 16 bytes leftover after parsing attributes in process `syz.4.900'. [ 81.093505][ T6223] netlink: 4 bytes leftover after parsing attributes in process `syz.4.900'. [ 81.104984][ T6223] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 81.119592][ T6223] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 81.137798][ T6223] loop4: detected capacity change from 0 to 512 [ 81.176722][ T6223] EXT4-fs error (device loop4): ext4_do_update_inode:5182: inode #3: comm syz.4.900: corrupted inode contents [ 81.211391][ T6223] EXT4-fs error (device loop4): ext4_dirty_inode:6074: inode #3: comm syz.4.900: mark_inode_dirty error [ 81.229671][ T6233] netlink: 96 bytes leftover after parsing attributes in process `syz.3.904'. [ 81.239327][ T6223] EXT4-fs error (device loop4): ext4_do_update_inode:5182: inode #3: comm syz.4.900: corrupted inode contents [ 81.280784][ T6223] EXT4-fs error (device loop4): __ext4_ext_dirty:207: inode #3: comm syz.4.900: mark_inode_dirty error [ 81.295133][ T6223] EXT4-fs error (device loop4): ext4_acquire_dquot:6935: comm syz.4.900: Failed to acquire dquot type 0 [ 81.322308][ T6223] EXT4-fs error (device loop4): ext4_do_update_inode:5182: inode #16: comm syz.4.900: corrupted inode contents [ 81.325601][ T6241] loop1: detected capacity change from 0 to 128 [ 81.356295][ T6223] EXT4-fs error (device loop4): ext4_dirty_inode:6074: inode #16: comm syz.4.900: mark_inode_dirty error [ 81.359838][ T6241] ext4: Unknown parameter 'vfat' [ 81.384724][ T6223] EXT4-fs error (device loop4): ext4_do_update_inode:5182: inode #16: comm syz.4.900: corrupted inode contents [ 81.419636][ T6223] EXT4-fs error (device loop4): __ext4_ext_dirty:207: inode #16: comm syz.4.900: mark_inode_dirty error [ 81.437888][ T6245] siw: device registration error -23 [ 81.443001][ T6223] EXT4-fs error (device loop4): ext4_do_update_inode:5182: inode #16: comm syz.4.900: corrupted inode contents [ 81.456490][ T6223] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem [ 81.466138][ T6223] EXT4-fs error (device loop4): ext4_do_update_inode:5182: inode #16: comm syz.4.900: corrupted inode contents [ 81.479521][ T6223] EXT4-fs error (device loop4): ext4_truncate:4254: inode #16: comm syz.4.900: mark_inode_dirty error [ 81.491187][ T6223] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem [ 81.501895][ T6223] EXT4-fs (loop4): 1 truncate cleaned up [ 81.508077][ T6223] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.524211][ T6223] ext4 filesystem being mounted at /182/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 81.572817][ T6223] EXT4-fs error (device loop4): ext4_xattr_block_get:593: inode #15: comm syz.4.900: corrupted xattr block 19: invalid ea_ino [ 81.603438][ T6223] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 81.616709][ T6223] EXT4-fs error (device loop4): ext4_xattr_block_get:593: inode #15: comm syz.4.900: corrupted xattr block 19: invalid ea_ino [ 81.650159][ T6223] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 81.670742][ T6223] EXT4-fs error (device loop4): ext4_xattr_block_find:1869: inode #15: comm syz.4.900: corrupted xattr block 19: invalid ea_ino [ 81.699808][ T6223] xt_hashlimit: max too large, truncated to 1048576 [ 81.714660][ T6223] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 81.755698][ T6265] netlink: 'syz.3.917': attribute type 33 has an invalid length. [ 81.763587][ T6265] netlink: 152 bytes leftover after parsing attributes in process `syz.3.917'. [ 81.813212][ T6271] netlink: 44 bytes leftover after parsing attributes in process `syz.3.920'. [ 81.845075][ T6275] netlink: 84 bytes leftover after parsing attributes in process `syz.3.922'. [ 82.086507][ T29] kauditd_printk_skb: 732 callbacks suppressed [ 82.086522][ T29] audit: type=1326 audit(1743750866.154:7660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6294 comm="syz.1.928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c258bd169 code=0x7ffc0000 [ 82.121241][ T6297] loop1: detected capacity change from 0 to 256 [ 82.128489][ T6297] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 82.142158][ T29] audit: type=1326 audit(1743750866.164:7661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6294 comm="syz.1.928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3c258bd169 code=0x7ffc0000 [ 82.165556][ T29] audit: type=1326 audit(1743750866.164:7662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6294 comm="syz.1.928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c258bd169 code=0x7ffc0000 [ 82.169032][ T6305] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 82.188935][ T29] audit: type=1326 audit(1743750866.164:7663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6294 comm="syz.1.928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c258bd169 code=0x7ffc0000 [ 82.188968][ T29] audit: type=1326 audit(1743750866.184:7664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6294 comm="syz.1.928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3c258bd169 code=0x7ffc0000 [ 82.188998][ T29] audit: type=1326 audit(1743750866.184:7665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6294 comm="syz.1.928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c258bd169 code=0x7ffc0000 [ 82.197516][ T6305] vhci_hcd: default hub control req: 2314 v0008 i0002 l0 [ 82.219673][ T29] audit: type=1326 audit(1743750866.184:7666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6294 comm="syz.1.928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c258bd169 code=0x7ffc0000 [ 82.297112][ T29] audit: type=1326 audit(1743750866.184:7667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6294 comm="syz.1.928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3c258bd169 code=0x7ffc0000 [ 82.320568][ T29] audit: type=1326 audit(1743750866.184:7668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6294 comm="syz.1.928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c258bd169 code=0x7ffc0000 [ 82.335726][ T6297] FAT-fs (loop1): Directory bread(block 64) failed [ 82.343873][ T29] audit: type=1326 audit(1743750866.184:7669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6294 comm="syz.1.928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c258bd169 code=0x7ffc0000 [ 82.355227][ T6297] FAT-fs (loop1): Directory bread(block 65) failed [ 82.381191][ T6297] FAT-fs (loop1): Directory bread(block 66) failed [ 82.387763][ T6297] FAT-fs (loop1): Directory bread(block 67) failed [ 82.394585][ T6297] FAT-fs (loop1): Directory bread(block 68) failed [ 82.401141][ T6297] FAT-fs (loop1): Directory bread(block 69) failed [ 82.407791][ T6297] FAT-fs (loop1): Directory bread(block 70) failed [ 82.414460][ T6297] FAT-fs (loop1): Directory bread(block 71) failed [ 82.421298][ T6297] FAT-fs (loop1): Directory bread(block 72) failed [ 82.428804][ T6297] FAT-fs (loop1): Directory bread(block 73) failed [ 82.498045][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.507832][ T4927] EXT4-fs error (device loop4): ext4_release_dquot:6971: comm kworker/u8:13: Failed to release dquot type 1 [ 82.772630][ T6371] FAULT_INJECTION: forcing a failure. [ 82.772630][ T6371] name failslab, interval 1, probability 0, space 0, times 0 [ 82.785342][ T6371] CPU: 0 UID: 0 PID: 6371 Comm: syz.0.939 Not tainted 6.14.0-syzkaller-12966-ga2cc6ff5ec8f #0 PREEMPT(voluntary) [ 82.785434][ T6371] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 82.785449][ T6371] Call Trace: [ 82.785456][ T6371] [ 82.785464][ T6371] dump_stack_lvl+0xf6/0x150 [ 82.785493][ T6371] dump_stack+0x15/0x1a [ 82.785526][ T6371] should_fail_ex+0x261/0x270 [ 82.785630][ T6371] should_failslab+0x8f/0xb0 [ 82.785667][ T6371] kmem_cache_alloc_noprof+0x59/0x340 [ 82.785691][ T6371] ? skb_clone+0x154/0x1f0 [ 82.785723][ T6371] skb_clone+0x154/0x1f0 [ 82.785776][ T6371] __netlink_deliver_tap+0x2bd/0x4f0 [ 82.785859][ T6371] netlink_unicast+0x69e/0x6c0 [ 82.785879][ T6371] netlink_sendmsg+0x609/0x720 [ 82.785909][ T6371] ? __pfx_netlink_sendmsg+0x10/0x10 [ 82.786050][ T6371] __sock_sendmsg+0x140/0x180 [ 82.786162][ T6371] ____sys_sendmsg+0x350/0x4e0 [ 82.786196][ T6371] __sys_sendmsg+0x1a0/0x240 [ 82.786300][ T6371] __x64_sys_sendmsg+0x46/0x50 [ 82.786326][ T6371] x64_sys_call+0x26f3/0x2e10 [ 82.786351][ T6371] do_syscall_64+0xc9/0x1c0 [ 82.786384][ T6371] ? clear_bhb_loop+0x25/0x80 [ 82.786468][ T6371] ? clear_bhb_loop+0x25/0x80 [ 82.786493][ T6371] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.786514][ T6371] RIP: 0033:0x7f4f9228d169 [ 82.786527][ T6371] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 82.786547][ T6371] RSP: 002b:00007f4f908f7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 82.786642][ T6371] RAX: ffffffffffffffda RBX: 00007f4f924a5fa0 RCX: 00007f4f9228d169 [ 82.786657][ T6371] RDX: 0000000000000000 RSI: 000020000000c2c0 RDI: 0000000000000003 [ 82.786671][ T6371] RBP: 00007f4f908f7090 R08: 0000000000000000 R09: 0000000000000000 [ 82.786755][ T6371] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 82.786769][ T6371] R13: 0000000000000000 R14: 00007f4f924a5fa0 R15: 00007ffeec06ec08 [ 82.786790][ T6371] [ 83.057313][ T6383] netlink: 'syz.0.942': attribute type 1 has an invalid length. [ 83.069727][ T6386] loop4: detected capacity change from 0 to 164 [ 83.116063][ T6386] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 83.155891][ T6386] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 83.189138][ T6403] SELinux: Context system_u:object_r:lib_t:s0 is not valid (left unmapped). [ 83.224497][ T6395] xt_hashlimit: size too large, truncated to 1048576 [ 83.303727][ T6412] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.430526][ T6412] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.487561][ T6412] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.510508][ T6426] loop6: detected capacity change from 0 to 512 [ 83.525636][ T6421] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 83.538051][ T6426] EXT4-fs: Ignoring removed i_version option [ 83.544080][ T6426] EXT4-fs: Ignoring removed mblk_io_submit option [ 83.573675][ T6421] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 83.583565][ T6412] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.593983][ T6426] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 83.604060][ T6426] EXT4-fs (loop6): can't mount with data_err=abort, fs mounted w/o journal [ 83.627958][ T6426] loop6: detected capacity change from 0 to 164 [ 83.636304][ T6426] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 83.649676][ T6426] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 83.704825][ T6412] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.745349][ T6412] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.771811][ T6412] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.792137][ T6412] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.880535][ T6442] loop1: detected capacity change from 0 to 2048 [ 83.892289][ T6445] loop4: detected capacity change from 0 to 256 [ 83.899573][ T6445] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 83.921244][ T6445] FAT-fs (loop4): Directory bread(block 64) failed [ 83.931606][ T6442] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 83.952793][ T6445] FAT-fs (loop4): Directory bread(block 65) failed [ 83.966940][ T6445] FAT-fs (loop4): Directory bread(block 66) failed [ 83.973806][ T6445] FAT-fs (loop4): Directory bread(block 67) failed [ 83.980386][ T6445] FAT-fs (loop4): Directory bread(block 68) failed [ 83.988634][ T6445] FAT-fs (loop4): Directory bread(block 69) failed [ 83.991509][ T6442] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 83.995504][ T6445] FAT-fs (loop4): Directory bread(block 70) failed [ 84.003378][ T6442] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 84.018888][ T6445] FAT-fs (loop4): Directory bread(block 71) failed [ 84.025630][ T6445] FAT-fs (loop4): Directory bread(block 72) failed [ 84.032262][ T6445] FAT-fs (loop4): Directory bread(block 73) failed [ 84.050223][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.187587][ T6467] loop1: detected capacity change from 0 to 512 [ 84.194157][ T6467] EXT4-fs: Ignoring removed i_version option [ 84.200184][ T6467] EXT4-fs: Ignoring removed mblk_io_submit option [ 84.209019][ T6467] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 84.220505][ T6467] EXT4-fs (loop1): can't mount with data_err=abort, fs mounted w/o journal [ 84.254376][ T6467] loop1: detected capacity change from 0 to 164 [ 84.263865][ T6467] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 84.267856][ T6467] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 84.302187][ T6471] loop6: detected capacity change from 0 to 8192 [ 84.545382][ T6494] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 84.551951][ T6494] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 84.559613][ T6494] vhci_hcd vhci_hcd.0: Device attached [ 84.570858][ T6495] vhci_hcd: connection closed [ 84.571188][ T4926] vhci_hcd: stop threads [ 84.580291][ T4926] vhci_hcd: release socket [ 84.584892][ T4926] vhci_hcd: disconnect device [ 84.625012][ T6503] __nla_validate_parse: 9 callbacks suppressed [ 84.625033][ T6503] netlink: 44 bytes leftover after parsing attributes in process `syz.3.983'. [ 84.692083][ T6509] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 84.699569][ T6509] vhci_hcd: default hub control req: 2314 v0008 i0002 l0 [ 84.736251][ T6515] block device autoloading is deprecated and will be removed. [ 84.743959][ T6515] syz.1.988: attempt to access beyond end of device [ 84.743959][ T6515] md30: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 84.810955][ T6522] netlink: 72 bytes leftover after parsing attributes in process `syz.1.988'. [ 84.827823][ T6522] netlink: 12 bytes leftover after parsing attributes in process `syz.1.988'. [ 84.836955][ T6522] netlink: 8 bytes leftover after parsing attributes in process `syz.1.988'. [ 84.875545][ T6527] netlink: 4 bytes leftover after parsing attributes in process `syz.3.993'. [ 84.884551][ T6527] netlink: 4 bytes leftover after parsing attributes in process `syz.3.993'. [ 84.899424][ T6527] netlink: 4 bytes leftover after parsing attributes in process `syz.3.993'. [ 84.908654][ T6527] netlink: 4 bytes leftover after parsing attributes in process `syz.3.993'. [ 84.929977][ T6527] netlink: 4 bytes leftover after parsing attributes in process `syz.3.993'. [ 84.939059][ T6527] netlink: 4 bytes leftover after parsing attributes in process `syz.3.993'. [ 84.975521][ T6537] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 85.027015][ T6539] program syz.4.995 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 85.037613][ T6539] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 85.483008][ T6572] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 85.490379][ T6572] vhci_hcd: default hub control req: 2314 v0008 i0002 l0 [ 85.721188][ T6590] loop1: detected capacity change from 0 to 2048 [ 85.782199][ T6590] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 85.913789][ T6609] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 85.922147][ T6609] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 85.953781][ T6612] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 85.956067][ T6611] FAULT_INJECTION: forcing a failure. [ 85.956067][ T6611] name failslab, interval 1, probability 0, space 0, times 0 [ 85.973762][ T6611] CPU: 0 UID: 0 PID: 6611 Comm: syz.4.1023 Not tainted 6.14.0-syzkaller-12966-ga2cc6ff5ec8f #0 PREEMPT(voluntary) [ 85.973793][ T6611] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 85.973807][ T6611] Call Trace: [ 85.973812][ T6611] [ 85.973819][ T6611] dump_stack_lvl+0xf6/0x150 [ 85.973842][ T6611] dump_stack+0x15/0x1a [ 85.973908][ T6611] should_fail_ex+0x261/0x270 [ 85.973939][ T6611] should_failslab+0x8f/0xb0 [ 85.973976][ T6611] __kmalloc_node_track_caller_noprof+0xaa/0x410 [ 85.974056][ T6611] ? kstrdup_const+0x3e/0x50 [ 85.974080][ T6611] kstrdup+0x3d/0xd0 [ 85.974099][ T6611] kstrdup_const+0x3e/0x50 [ 85.974163][ T6611] alloc_vfsmnt+0xe5/0x340 [ 85.974194][ T6611] clone_mnt+0x45/0x7a0 [ 85.974224][ T6611] ? is_subdir+0x87/0x160 [ 85.974325][ T6611] copy_tree+0x2ff/0x850 [ 85.974400][ T6611] copy_mnt_ns+0x121/0x5e0 [ 85.974431][ T6611] ? kmem_cache_alloc_noprof+0x237/0x340 [ 85.974458][ T6611] ? create_new_namespaces+0x3c/0x430 [ 85.974546][ T6611] create_new_namespaces+0x89/0x430 [ 85.974567][ T6611] ? security_capable+0x81/0x90 [ 85.974599][ T6611] unshare_nsproxy_namespaces+0xe6/0x120 [ 85.974632][ T6611] ksys_unshare+0x3d3/0x700 [ 85.974736][ T6611] __x64_sys_unshare+0x1f/0x30 [ 85.974770][ T6611] x64_sys_call+0x2c93/0x2e10 [ 85.974791][ T6611] do_syscall_64+0xc9/0x1c0 [ 85.974824][ T6611] ? clear_bhb_loop+0x25/0x80 [ 85.974873][ T6611] ? clear_bhb_loop+0x25/0x80 [ 85.974899][ T6611] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.974919][ T6611] RIP: 0033:0x7f814a35d169 [ 85.974933][ T6611] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 85.974956][ T6611] RSP: 002b:00007f81489c7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 85.975041][ T6611] RAX: ffffffffffffffda RBX: 00007f814a575fa0 RCX: 00007f814a35d169 [ 85.975057][ T6611] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000002c020400 [ 85.975072][ T6611] RBP: 00007f81489c7090 R08: 0000000000000000 R09: 0000000000000000 [ 85.975085][ T6611] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 85.975096][ T6611] R13: 0000000000000000 R14: 00007f814a575fa0 R15: 00007fffc9b13688 [ 85.975134][ T6611] [ 85.976647][ T6612] vhci_hcd: default hub control req: 2314 v0008 i0002 l0 [ 86.214684][ T6590] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280 [ 86.246908][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.283029][ T6621] rdma_rxe: rxe_newlink: failed to add bond0 [ 86.304185][ T6621] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 86.319634][ T6621] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 86.353709][ T6621] loop4: detected capacity change from 0 to 512 [ 86.378204][ T6622] loop6: detected capacity change from 0 to 512 [ 86.388496][ T6621] EXT4-fs error (device loop4): ext4_do_update_inode:5182: inode #3: comm syz.4.1028: corrupted inode contents [ 86.388890][ T6621] EXT4-fs error (device loop4): ext4_dirty_inode:6074: inode #3: comm syz.4.1028: mark_inode_dirty error [ 86.390080][ T6621] EXT4-fs error (device loop4): ext4_do_update_inode:5182: inode #3: comm syz.4.1028: corrupted inode contents [ 86.390560][ T6621] EXT4-fs error (device loop4): __ext4_ext_dirty:207: inode #3: comm syz.4.1028: mark_inode_dirty error [ 86.441176][ T6621] EXT4-fs error (device loop4): ext4_acquire_dquot:6935: comm syz.4.1028: Failed to acquire dquot type 0 [ 86.459821][ T6637] loop1: detected capacity change from 0 to 512 [ 86.464327][ T6622] EXT4-fs (loop6): orphan cleanup on readonly fs [ 86.473893][ T6622] EXT4-fs (loop6): Cannot turn on journaled quota: type 0: error -13 [ 86.485430][ T6621] EXT4-fs error (device loop4): ext4_do_update_inode:5182: inode #16: comm syz.4.1028: corrupted inode contents [ 86.485910][ T6622] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 86.518084][ T6622] EXT4-fs error (device loop6): ext4_clear_blocks:876: inode #13: comm syz.6.1027: attempt to clear invalid blocks 2 len 1 [ 86.518636][ T6637] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 86.531747][ T6621] EXT4-fs error (device loop4): ext4_dirty_inode:6074: inode #16: comm syz.4.1028: mark_inode_dirty error [ 86.556595][ T6622] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #13: comm syz.6.1027: invalid indirect mapped block 1819239214 (level 0) [ 86.573889][ T6621] EXT4-fs error (device loop4): ext4_do_update_inode:5182: inode #16: comm syz.4.1028: corrupted inode contents [ 86.574173][ T6637] ext4 filesystem being mounted at /193/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 86.596658][ T6621] EXT4-fs error (device loop4): __ext4_ext_dirty:207: inode #16: comm syz.4.1028: mark_inode_dirty error [ 86.609684][ T6622] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #13: comm syz.6.1027: invalid indirect mapped block 1819239214 (level 1) [ 86.626789][ T6637] EXT4-fs error (device loop1): ext4_acquire_dquot:6935: comm syz.1.1033: Failed to acquire dquot type 0 [ 86.628020][ T6622] EXT4-fs (loop6): 1 truncate cleaned up [ 86.638101][ T6621] EXT4-fs error (device loop4): ext4_do_update_inode:5182: inode #16: comm syz.4.1028: corrupted inode contents [ 86.651375][ T6622] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 86.657616][ T6621] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem [ 86.688110][ T6621] EXT4-fs error (device loop4): ext4_do_update_inode:5182: inode #16: comm syz.4.1028: corrupted inode contents [ 86.700211][ T6621] EXT4-fs error (device loop4): ext4_truncate:4254: inode #16: comm syz.4.1028: mark_inode_dirty error [ 86.713452][ T6621] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem [ 86.722722][ T6621] EXT4-fs (loop4): 1 truncate cleaned up [ 86.728929][ T6621] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 86.747277][ T6621] ext4 filesystem being mounted at /196/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 86.788839][ T6621] EXT4-fs error (device loop4): ext4_xattr_block_get:593: inode #15: comm syz.4.1028: corrupted xattr block 19: invalid ea_ino [ 86.803940][ T6621] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 86.813222][ T6621] EXT4-fs error (device loop4): ext4_xattr_block_get:593: inode #15: comm syz.4.1028: corrupted xattr block 19: invalid ea_ino [ 86.828589][ T6621] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 86.846914][ T6621] EXT4-fs error (device loop4): ext4_xattr_block_find:1869: inode #15: comm syz.4.1028: corrupted xattr block 19: invalid ea_ino [ 86.909947][ T5536] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.048813][ T6621] xt_hashlimit: max too large, truncated to 1048576 [ 87.056469][ T6621] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 87.336819][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 87.434139][ T6664] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 87.441561][ T6664] vhci_hcd: default hub control req: 2314 v0008 i0002 l0 [ 87.509144][ T29] kauditd_printk_skb: 523 callbacks suppressed [ 87.509161][ T29] audit: type=1326 audit(1743750871.574:8188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6667 comm="syz.3.1041" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1243ad169 code=0x7ffc0000 [ 87.539587][ T29] audit: type=1326 audit(1743750871.594:8189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6667 comm="syz.3.1041" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb1243ad169 code=0x7ffc0000 [ 87.563079][ T29] audit: type=1326 audit(1743750871.594:8190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6667 comm="syz.3.1041" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1243ad169 code=0x7ffc0000 [ 87.586611][ T29] audit: type=1326 audit(1743750871.594:8191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6667 comm="syz.3.1041" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7fb1243ad169 code=0x7ffc0000 [ 87.610072][ T29] audit: type=1326 audit(1743750871.594:8192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6667 comm="syz.3.1041" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1243ad169 code=0x7ffc0000 [ 87.633605][ T29] audit: type=1326 audit(1743750871.594:8193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6667 comm="syz.3.1041" exe="/root/syz-executor" sig=0 arch=c000003e syscall=221 compat=0 ip=0x7fb1243ad169 code=0x7ffc0000 [ 87.633635][ T29] audit: type=1326 audit(1743750871.594:8194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6667 comm="syz.3.1041" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1243ad169 code=0x7ffc0000 [ 87.689054][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.698954][ T12] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 87.708758][ T12] EXT4-fs error (device loop4): ext4_release_dquot:6971: comm kworker/u8:0: Failed to release dquot type 1 [ 87.736407][ T29] audit: type=1326 audit(1743750871.804:8195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6677 comm="syz.3.1044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1243ad169 code=0x7ffc0000 [ 87.810104][ T29] audit: type=1326 audit(1743750871.824:8196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6677 comm="syz.3.1044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb1243ad169 code=0x7ffc0000 [ 87.983629][ T6689] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 87.998421][ T6689] vhci_hcd: default hub control req: 2314 v0008 i0002 l0 [ 88.399403][ T6701] sg_write: data in/out 209152/1 bytes for SCSI command 0xf2-- guessing data in; [ 88.399403][ T6701] program syz.4.1054 not setting count and/or reply_len properly [ 88.435168][ T6700] loop4: detected capacity change from 0 to 512 [ 88.442134][ T6700] EXT4-fs: Ignoring removed oldalloc option [ 88.464472][ T6700] EXT4-fs error (device loop4): ext4_xattr_inode_iget:433: comm syz.4.1054: Parent and EA inode have the same ino 15 [ 88.477517][ T6700] EXT4-fs error (device loop4): ext4_xattr_inode_iget:433: comm syz.4.1054: Parent and EA inode have the same ino 15 [ 88.493040][ T6700] EXT4-fs (loop4): 1 orphan inode deleted [ 88.499293][ T6700] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 88.870265][ T6723] loop1: detected capacity change from 0 to 256 [ 88.877399][ T6723] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 88.895900][ T6723] FAT-fs (loop1): Directory bread(block 64) failed [ 88.902974][ T6723] FAT-fs (loop1): Directory bread(block 65) failed [ 88.909795][ T6723] FAT-fs (loop1): Directory bread(block 66) failed [ 88.918177][ T6723] FAT-fs (loop1): Directory bread(block 67) failed [ 88.924782][ T6723] FAT-fs (loop1): Directory bread(block 68) failed [ 88.931297][ T6723] FAT-fs (loop1): Directory bread(block 69) failed [ 88.940204][ T6723] FAT-fs (loop1): Directory bread(block 70) failed [ 88.946823][ T6723] FAT-fs (loop1): Directory bread(block 71) failed [ 88.962084][ T6723] FAT-fs (loop1): Directory bread(block 72) failed [ 88.968595][ T6723] FAT-fs (loop1): Directory bread(block 73) failed [ 89.040963][ T6727] loop1: detected capacity change from 0 to 512 [ 89.047679][ T6727] EXT4-fs: Ignoring removed i_version option [ 89.053782][ T6727] EXT4-fs: Ignoring removed mblk_io_submit option [ 89.078716][ T6727] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 89.090619][ T6727] EXT4-fs (loop1): can't mount with data_err=abort, fs mounted w/o journal [ 89.197091][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.372002][ T6742] FAULT_INJECTION: forcing a failure. [ 89.372002][ T6742] name failslab, interval 1, probability 0, space 0, times 0 [ 89.384689][ T6742] CPU: 1 UID: 0 PID: 6742 Comm: syz.4.1070 Not tainted 6.14.0-syzkaller-12966-ga2cc6ff5ec8f #0 PREEMPT(voluntary) [ 89.384717][ T6742] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 89.384732][ T6742] Call Trace: [ 89.384740][ T6742] [ 89.384749][ T6742] dump_stack_lvl+0xf6/0x150 [ 89.384773][ T6742] dump_stack+0x15/0x1a [ 89.384816][ T6742] should_fail_ex+0x261/0x270 [ 89.384847][ T6742] should_failslab+0x8f/0xb0 [ 89.384885][ T6742] __kmalloc_node_track_caller_noprof+0xaa/0x410 [ 89.384941][ T6742] ? sidtab_sid2str_get+0xb8/0x140 [ 89.384962][ T6742] ? vsnprintf+0x84d/0x8a0 [ 89.384981][ T6742] kmemdup_noprof+0x2b/0x70 [ 89.385004][ T6742] sidtab_sid2str_get+0xb8/0x140 [ 89.385039][ T6742] security_sid_to_context_core+0x1eb/0x2f0 [ 89.385069][ T6742] security_sid_to_context+0x27/0x30 [ 89.385115][ T6742] selinux_lsmprop_to_secctx+0x6c/0xf0 [ 89.385139][ T6742] security_lsmprop_to_secctx+0x40/0x80 [ 89.385174][ T6742] audit_log_task_context+0x7a/0x180 [ 89.385204][ T6742] audit_log_task+0xfb/0x250 [ 89.385231][ T6742] audit_seccomp+0x68/0x130 [ 89.385257][ T6742] __seccomp_filter+0x694/0x10e0 [ 89.385292][ T6742] ? vfs_write+0x669/0x950 [ 89.385324][ T6742] __secure_computing+0x7e/0x160 [ 89.385407][ T6742] syscall_trace_enter+0xcf/0x1f0 [ 89.385452][ T6742] do_syscall_64+0xaa/0x1c0 [ 89.385486][ T6742] ? clear_bhb_loop+0x25/0x80 [ 89.385539][ T6742] ? clear_bhb_loop+0x25/0x80 [ 89.385560][ T6742] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 89.385612][ T6742] RIP: 0033:0x7f814a35d169 [ 89.385630][ T6742] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 89.385652][ T6742] RSP: 002b:00007f81489c7038 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 89.385675][ T6742] RAX: ffffffffffffffda RBX: 00007f814a575fa0 RCX: 00007f814a35d169 [ 89.385690][ T6742] RDX: 0400000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 89.385762][ T6742] RBP: 00007f81489c7090 R08: 0000000000000000 R09: 0000000000000000 [ 89.385773][ T6742] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 89.385785][ T6742] R13: 0000000000000000 R14: 00007f814a575fa0 R15: 00007fffc9b13688 [ 89.385807][ T6742] [ 89.634035][ T6746] loop6: detected capacity change from 0 to 512 [ 89.674635][ T6746] EXT4-fs: test_dummy_encryption option not supported [ 89.763987][ T6758] selinux_netlink_send: 140 callbacks suppressed [ 89.764000][ T6758] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6758 comm=syz.6.1072 [ 89.811852][ T6758] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6758 comm=syz.6.1072 [ 89.842218][ T6758] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6758 comm=syz.6.1072 [ 89.887405][ T6758] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6758 comm=syz.6.1072 [ 89.901015][ T6758] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6758 comm=syz.6.1072 [ 89.913701][ T6758] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6758 comm=syz.6.1072 [ 89.927506][ T6758] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6758 comm=syz.6.1072 [ 89.941143][ T6758] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6758 comm=syz.6.1072 [ 89.954861][ T6758] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6758 comm=syz.6.1072 [ 89.967855][ T6758] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6758 comm=syz.6.1072 [ 89.983315][ T6769] __nla_validate_parse: 15 callbacks suppressed [ 89.983335][ T6769] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1074'. [ 90.046821][ T6769] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1074'. [ 91.207216][ T6796] veth1_to_team: entered promiscuous mode [ 91.383287][ T6807] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 91.390722][ T6807] vhci_hcd: default hub control req: 2314 v0008 i0002 l0 [ 91.913096][ T6824] FAULT_INJECTION: forcing a failure. [ 91.913096][ T6824] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 91.926219][ T6824] CPU: 1 UID: 0 PID: 6824 Comm: syz.6.1100 Not tainted 6.14.0-syzkaller-12966-ga2cc6ff5ec8f #0 PREEMPT(voluntary) [ 91.926302][ T6824] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 91.926339][ T6824] Call Trace: [ 91.926346][ T6824] [ 91.926354][ T6824] dump_stack_lvl+0xf6/0x150 [ 91.926379][ T6824] dump_stack+0x15/0x1a [ 91.926398][ T6824] should_fail_ex+0x261/0x270 [ 91.926427][ T6824] should_fail+0xb/0x10 [ 91.926503][ T6824] should_fail_usercopy+0x1a/0x20 [ 91.926590][ T6824] _copy_from_user+0x1c/0xa0 [ 91.926670][ T6824] do_arpt_set_ctl+0x450/0xa30 [ 91.926699][ T6824] ? _raw_spin_unlock_bh+0x36/0x40 [ 91.926726][ T6824] nf_setsockopt+0x195/0x1b0 [ 91.926774][ T6824] ip_setsockopt+0xea/0x100 [ 91.926813][ T6824] udp_setsockopt+0x95/0xb0 [ 91.926847][ T6824] sock_common_setsockopt+0x64/0x80 [ 91.926917][ T6824] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 91.926969][ T6824] __sys_setsockopt+0x187/0x200 [ 91.926999][ T6824] __x64_sys_setsockopt+0x66/0x80 [ 91.927029][ T6824] x64_sys_call+0x2a09/0x2e10 [ 91.927081][ T6824] do_syscall_64+0xc9/0x1c0 [ 91.927152][ T6824] ? clear_bhb_loop+0x25/0x80 [ 91.927183][ T6824] ? clear_bhb_loop+0x25/0x80 [ 91.927209][ T6824] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.927230][ T6824] RIP: 0033:0x7f9fb25bd169 [ 91.927244][ T6824] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 91.927283][ T6824] RSP: 002b:00007f9fb0c27038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 91.927305][ T6824] RAX: ffffffffffffffda RBX: 00007f9fb27d5fa0 RCX: 00007f9fb25bd169 [ 91.927319][ T6824] RDX: 0000000000000060 RSI: 0000000000000000 RDI: 0000000000000006 [ 91.927333][ T6824] RBP: 00007f9fb0c27090 R08: 0000000000000418 R09: 0000000000000000 [ 91.927347][ T6824] R10: 0000200000000440 R11: 0000000000000246 R12: 0000000000000001 [ 91.927366][ T6824] R13: 0000000000000000 R14: 00007f9fb27d5fa0 R15: 00007ffd498abf28 [ 91.927387][ T6824] [ 91.998244][ T6831] FAULT_INJECTION: forcing a failure. [ 91.998244][ T6831] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 91.998272][ T6831] CPU: 1 UID: 0 PID: 6831 Comm: +}[@ Not tainted 6.14.0-syzkaller-12966-ga2cc6ff5ec8f #0 PREEMPT(voluntary) [ 91.998344][ T6831] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 91.998354][ T6831] Call Trace: [ 91.998360][ T6831] [ 91.998366][ T6831] dump_stack_lvl+0xf6/0x150 [ 91.998388][ T6831] dump_stack+0x15/0x1a [ 91.998406][ T6831] should_fail_ex+0x261/0x270 [ 91.998433][ T6831] should_fail+0xb/0x10 [ 91.998451][ T6831] should_fail_usercopy+0x1a/0x20 [ 91.998530][ T6831] _copy_from_user+0x1c/0xa0 [ 91.998635][ T6831] __sys_bpf+0x16a/0x800 [ 91.998660][ T6831] __x64_sys_bpf+0x43/0x50 [ 91.998675][ T6831] x64_sys_call+0x23da/0x2e10 [ 91.998746][ T6831] do_syscall_64+0xc9/0x1c0 [ 91.998785][ T6831] ? clear_bhb_loop+0x25/0x80 [ 91.998807][ T6831] ? clear_bhb_loop+0x25/0x80 [ 91.998904][ T6831] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.998925][ T6831] RIP: 0033:0x7f4f9228d169 [ 91.998940][ T6831] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 91.998959][ T6831] RSP: 002b:00007f4f908b5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 91.999047][ T6831] RAX: ffffffffffffffda RBX: 00007f4f924a6160 RCX: 00007f4f9228d169 [ 91.999060][ T6831] RDX: 0000000000000050 RSI: 0000200000000040 RDI: 0000000000000000 [ 91.999070][ T6831] RBP: 00007f4f908b5090 R08: 0000000000000000 R09: 0000000000000000 [ 91.999080][ T6831] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 91.999089][ T6831] R13: 0000000000000000 R14: 00007f4f924a6160 R15: 00007ffeec06ec08 [ 91.999104][ T6831] [ 92.421597][ T6838] loop4: detected capacity change from 0 to 512 [ 92.422032][ T6838] EXT4-fs: Ignoring removed i_version option [ 92.422113][ T6838] EXT4-fs: Ignoring removed mblk_io_submit option [ 92.422813][ T6838] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 92.423009][ T6838] EXT4-fs (loop4): can't mount with data_err=abort, fs mounted w/o journal [ 92.450498][ T6838] loop4: detected capacity change from 0 to 164 [ 92.460744][ T6838] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 92.483310][ T6838] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 92.693500][ T29] kauditd_printk_skb: 508 callbacks suppressed [ 92.693513][ T29] audit: type=1400 audit(1743750876.764:8704): avc: denied { bind } for pid=6844 comm="syz.0.1109" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 92.694330][ T29] audit: type=1400 audit(1743750876.764:8705): avc: denied { setopt } for pid=6844 comm="syz.0.1109" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 92.702428][ T29] audit: type=1400 audit(1743750876.774:8706): avc: denied { ioctl } for pid=6844 comm="syz.0.1109" path="socket:[16359]" dev="sockfs" ino=16359 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 92.715116][ T6845] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.765410][ T6845] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.837554][ T6845] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.878841][ T6852] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1112'. [ 92.886454][ T6845] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.919031][ T29] audit: type=1400 audit(1743750876.984:8707): avc: denied { create } for pid=6855 comm="syz.3.1114" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 92.923454][ T29] audit: type=1326 audit(1743750876.994:8708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6855 comm="syz.3.1114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1243ad169 code=0x7ffc0000 [ 93.014475][ T29] audit: type=1326 audit(1743750877.084:8709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6855 comm="syz.3.1114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb1243abad0 code=0x7ffc0000 [ 93.037967][ T29] audit: type=1326 audit(1743750877.084:8710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6855 comm="syz.3.1114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb1243abad0 code=0x7ffc0000 [ 93.061390][ T29] audit: type=1326 audit(1743750877.084:8711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6855 comm="syz.3.1114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1243ad169 code=0x7ffc0000 [ 93.084863][ T29] audit: type=1326 audit(1743750877.084:8712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6855 comm="syz.3.1114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1243ad169 code=0x7ffc0000 [ 93.108361][ T29] audit: type=1326 audit(1743750877.084:8713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6855 comm="syz.3.1114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fb1243ad169 code=0x7ffc0000 [ 93.133781][ T6858] rdma_rxe: rxe_newlink: failed to add bond0 [ 93.140437][ T6856] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1114'. [ 93.143469][ T6845] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.154496][ T6858] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1115'. [ 93.170600][ T6858] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 93.183454][ T6858] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 93.215254][ T6845] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.223754][ T6858] loop6: detected capacity change from 0 to 512 [ 93.249119][ T6859] xt_hashlimit: max too large, truncated to 1048576 [ 93.256509][ T6859] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 93.273905][ T6858] EXT4-fs error (device loop6): ext4_do_update_inode:5182: inode #3: comm syz.6.1115: corrupted inode contents [ 93.287457][ T6858] EXT4-fs error (device loop6): ext4_dirty_inode:6074: inode #3: comm syz.6.1115: mark_inode_dirty error [ 93.310202][ T6845] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.334665][ T6858] EXT4-fs error (device loop6): ext4_do_update_inode:5182: inode #3: comm syz.6.1115: corrupted inode contents [ 93.353254][ T6845] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.409010][ T6858] EXT4-fs error (device loop6): __ext4_ext_dirty:207: inode #3: comm syz.6.1115: mark_inode_dirty error [ 93.447014][ T6858] EXT4-fs error (device loop6): ext4_acquire_dquot:6935: comm syz.6.1115: Failed to acquire dquot type 0 [ 93.481425][ T6858] EXT4-fs error (device loop6): ext4_do_update_inode:5182: inode #16: comm syz.6.1115: corrupted inode contents [ 93.533308][ T6858] EXT4-fs error (device loop6): ext4_dirty_inode:6074: inode #16: comm syz.6.1115: mark_inode_dirty error [ 93.570596][ T6858] EXT4-fs error (device loop6): ext4_do_update_inode:5182: inode #16: comm syz.6.1115: corrupted inode contents [ 93.602296][ T6858] EXT4-fs error (device loop6): __ext4_ext_dirty:207: inode #16: comm syz.6.1115: mark_inode_dirty error [ 93.617319][ T6858] EXT4-fs error (device loop6): ext4_do_update_inode:5182: inode #16: comm syz.6.1115: corrupted inode contents [ 93.630031][ T6858] EXT4-fs error (device loop6) in ext4_orphan_del:305: Corrupt filesystem [ 93.642829][ T6873] FAULT_INJECTION: forcing a failure. [ 93.642829][ T6873] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 93.655940][ T6873] CPU: 1 UID: 0 PID: 6873 Comm: syz.0.1120 Not tainted 6.14.0-syzkaller-12966-ga2cc6ff5ec8f #0 PREEMPT(voluntary) [ 93.655969][ T6873] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 93.656000][ T6873] Call Trace: [ 93.656007][ T6873] [ 93.656014][ T6873] dump_stack_lvl+0xf6/0x150 [ 93.656039][ T6873] dump_stack+0x15/0x1a [ 93.656057][ T6873] should_fail_ex+0x261/0x270 [ 93.656153][ T6858] EXT4-fs error (device loop6): ext4_do_update_inode:5182: inode #16: comm syz.6.1115: corrupted inode contents [ 93.656160][ T6873] should_fail+0xb/0x10 [ 93.656186][ T6873] should_fail_usercopy+0x1a/0x20 [ 93.656215][ T6873] _copy_from_user+0x1c/0xa0 [ 93.656253][ T6873] copy_msghdr_from_user+0x54/0x2b0 [ 93.656355][ T6873] ? __fget_files+0x186/0x1c0 [ 93.656380][ T6873] __sys_sendmsg+0x141/0x240 [ 93.656427][ T6873] __x64_sys_sendmsg+0x46/0x50 [ 93.656456][ T6873] x64_sys_call+0x26f3/0x2e10 [ 93.656578][ T6873] do_syscall_64+0xc9/0x1c0 [ 93.656659][ T6873] ? clear_bhb_loop+0x25/0x80 [ 93.656683][ T6873] ? clear_bhb_loop+0x25/0x80 [ 93.656707][ T6873] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.656786][ T6873] RIP: 0033:0x7f4f9228d169 [ 93.656811][ T6873] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 93.656831][ T6873] RSP: 002b:00007f4f908f7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 93.656852][ T6873] RAX: ffffffffffffffda RBX: 00007f4f924a5fa0 RCX: 00007f4f9228d169 [ 93.656866][ T6873] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000006 [ 93.656942][ T6873] RBP: 00007f4f908f7090 R08: 0000000000000000 R09: 0000000000000000 [ 93.656955][ T6873] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 93.656971][ T6873] R13: 0000000000000000 R14: 00007f4f924a5fa0 R15: 00007ffeec06ec08 [ 93.656992][ T6873] [ 93.844930][ T6858] EXT4-fs error (device loop6): ext4_truncate:4254: inode #16: comm syz.6.1115: mark_inode_dirty error [ 93.856675][ T6858] EXT4-fs error (device loop6) in ext4_process_orphan:347: Corrupt filesystem [ 93.867378][ T6858] EXT4-fs (loop6): 1 truncate cleaned up [ 93.873625][ T6858] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 93.888026][ T6858] ext4 filesystem being mounted at /76/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 93.906808][ T6858] EXT4-fs error (device loop6): ext4_xattr_block_get:593: inode #15: comm syz.6.1115: corrupted xattr block 19: invalid ea_ino [ 93.920173][ T6858] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop6 ino=15 [ 93.929333][ T6858] EXT4-fs error (device loop6): ext4_xattr_block_get:593: inode #15: comm syz.6.1115: corrupted xattr block 19: invalid ea_ino [ 93.953421][ T6858] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop6 ino=15 [ 93.973413][ T6858] EXT4-fs error (device loop6): ext4_xattr_block_find:1869: inode #15: comm syz.6.1115: corrupted xattr block 19: invalid ea_ino [ 94.027405][ T6858] xt_hashlimit: max too large, truncated to 1048576 [ 94.040107][ T6858] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 94.263881][ T6907] rdma_rxe: rxe_newlink: failed to add bond0 [ 94.272781][ T6907] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1134'. [ 94.344099][ T6907] xt_hashlimit: max too large, truncated to 1048576 [ 94.351283][ T6907] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 94.479896][ T6916] loop4: detected capacity change from 0 to 256 [ 94.487359][ T6916] FAT-fs (loop4): bogus number of FAT sectors [ 94.493647][ T6916] FAT-fs (loop4): Can't find a valid FAT filesystem [ 94.505899][ T6918] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1139'. [ 94.516663][ T6918] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 94.525909][ T6918] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 94.540450][ T6918] loop1: detected capacity change from 0 to 512 [ 94.564896][ T6918] EXT4-fs error (device loop1): ext4_do_update_inode:5182: inode #3: comm syz.1.1139: corrupted inode contents [ 94.577016][ T6918] EXT4-fs error (device loop1): ext4_dirty_inode:6074: inode #3: comm syz.1.1139: mark_inode_dirty error [ 94.588927][ T6918] EXT4-fs error (device loop1): ext4_do_update_inode:5182: inode #3: comm syz.1.1139: corrupted inode contents [ 94.601373][ T6918] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #3: comm syz.1.1139: mark_inode_dirty error [ 94.602943][ T5536] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.614787][ T6918] EXT4-fs error (device loop1): ext4_acquire_dquot:6935: comm syz.1.1139: Failed to acquire dquot type 0 [ 94.633029][ T4927] EXT4-fs error (device loop6): ext4_release_dquot:6971: comm kworker/u8:13: Failed to release dquot type 1 [ 94.634282][ T6918] EXT4-fs error (device loop1): ext4_do_update_inode:5182: inode #16: comm syz.1.1139: corrupted inode contents [ 94.656753][ T6918] EXT4-fs error (device loop1): ext4_dirty_inode:6074: inode #16: comm syz.1.1139: mark_inode_dirty error [ 94.672215][ T6918] EXT4-fs error (device loop1): ext4_do_update_inode:5182: inode #16: comm syz.1.1139: corrupted inode contents [ 94.693762][ T6918] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #16: comm syz.1.1139: mark_inode_dirty error [ 94.715520][ T6918] EXT4-fs error (device loop1): ext4_do_update_inode:5182: inode #16: comm syz.1.1139: corrupted inode contents [ 94.738829][ T6918] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem [ 94.747707][ T6918] EXT4-fs error (device loop1): ext4_do_update_inode:5182: inode #16: comm syz.1.1139: corrupted inode contents [ 94.759662][ T6918] EXT4-fs error (device loop1): ext4_truncate:4254: inode #16: comm syz.1.1139: mark_inode_dirty error [ 94.772578][ T6918] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem [ 94.782585][ T6918] EXT4-fs (loop1): 1 truncate cleaned up [ 94.788648][ T6918] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 94.801697][ T6918] ext4 filesystem being mounted at /211/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 94.819077][ T6918] EXT4-fs error (device loop1): ext4_xattr_block_get:593: inode #15: comm syz.1.1139: corrupted xattr block 19: invalid ea_ino [ 94.832706][ T6918] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 94.842323][ T6918] EXT4-fs error (device loop1): ext4_xattr_block_get:593: inode #15: comm syz.1.1139: corrupted xattr block 19: invalid ea_ino [ 94.855678][ T6935] veth0_macvtap: left promiscuous mode [ 94.856158][ T6918] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 94.872036][ T6918] EXT4-fs error (device loop1): ext4_xattr_block_find:1869: inode #15: comm syz.1.1139: corrupted xattr block 19: invalid ea_ino [ 94.874001][ T6935] macvtap0: refused to change device tx_queue_len [ 94.927420][ T6942] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1146'. [ 94.937512][ T6918] xt_hashlimit: max too large, truncated to 1048576 [ 94.946038][ T6944] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1148'. [ 94.955886][ T6918] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 95.035370][ T6948] loop6: detected capacity change from 0 to 2048 [ 95.035826][ T6950] selinux_netlink_send: 46 callbacks suppressed [ 95.035840][ T6950] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=6950 comm=syz.3.1149 [ 95.113231][ T6956] 9pnet_fd: Insufficient options for proto=fd [ 95.185598][ T6964] program syz.6.1154 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 95.282424][ T6964] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1154'. [ 95.291521][ T6964] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 95.645537][ T6973] loop6: detected capacity change from 0 to 512 [ 95.685171][ T6973] EXT4-fs: Ignoring removed i_version option [ 95.691262][ T6973] EXT4-fs: Ignoring removed mblk_io_submit option [ 95.704217][ T6973] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 95.718046][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.731487][ T4927] EXT4-fs error (device loop1): ext4_release_dquot:6971: comm kworker/u8:13: Failed to release dquot type 1 [ 95.743485][ T6973] EXT4-fs (loop6): can't mount with data_err=abort, fs mounted w/o journal [ 95.768236][ T6973] loop6: detected capacity change from 0 to 164 [ 95.791224][ T6973] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 95.815601][ T6973] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 95.908037][ T6983] FAULT_INJECTION: forcing a failure. [ 95.908037][ T6983] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 95.921353][ T6983] CPU: 1 UID: 0 PID: 6983 Comm: syz.6.1161 Not tainted 6.14.0-syzkaller-12966-ga2cc6ff5ec8f #0 PREEMPT(voluntary) [ 95.921376][ T6983] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 95.921387][ T6983] Call Trace: [ 95.921392][ T6983] [ 95.921397][ T6983] dump_stack_lvl+0xf6/0x150 [ 95.921464][ T6983] dump_stack+0x15/0x1a [ 95.921478][ T6983] should_fail_ex+0x261/0x270 [ 95.921505][ T6983] should_fail_alloc_page+0xfd/0x110 [ 95.921561][ T6983] __alloc_frozen_pages_noprof+0x11d/0x360 [ 95.921588][ T6983] alloc_pages_mpol+0xb6/0x260 [ 95.921609][ T6983] alloc_migration_target_by_mpol+0x123/0x240 [ 95.921695][ T6983] migrate_pages_batch+0x324/0x1930 [ 95.921726][ T6983] ? __pfx_alloc_migration_target_by_mpol+0x10/0x10 [ 95.921768][ T6983] migrate_pages+0xf08/0x1850 [ 95.921902][ T6983] ? __pfx_alloc_migration_target_by_mpol+0x10/0x10 [ 95.922013][ T6983] __se_sys_mbind+0xdf4/0xfe0 [ 95.922079][ T6983] ? vfs_write+0x669/0x950 [ 95.922110][ T6983] __x64_sys_mbind+0x78/0x90 [ 95.922127][ T6983] x64_sys_call+0x13be/0x2e10 [ 95.922145][ T6983] do_syscall_64+0xc9/0x1c0 [ 95.922243][ T6983] ? clear_bhb_loop+0x25/0x80 [ 95.922337][ T6983] ? clear_bhb_loop+0x25/0x80 [ 95.922360][ T6983] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.922378][ T6983] RIP: 0033:0x7f9fb25bd169 [ 95.922391][ T6983] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 95.922408][ T6983] RSP: 002b:00007f9fb0c27038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed [ 95.922432][ T6983] RAX: ffffffffffffffda RBX: 00007f9fb27d5fa0 RCX: 00007f9fb25bd169 [ 95.922442][ T6983] RDX: 0000000000000000 RSI: 0000000000003000 RDI: 0000200000126000 [ 95.922452][ T6983] RBP: 00007f9fb0c27090 R08: 0000000000000000 R09: 0000000000000002 [ 95.922461][ T6983] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 95.922471][ T6983] R13: 0000000000000000 R14: 00007f9fb27d5fa0 R15: 00007ffd498abf28 [ 95.922509][ T6983] [ 96.277745][ T6995] rdma_rxe: rxe_newlink: failed to add bond0 [ 96.299387][ T6995] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1165'. [ 96.309574][ T6995] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 96.319309][ T6995] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 96.335461][ T6995] loop6: detected capacity change from 0 to 512 [ 96.363867][ T6995] EXT4-fs error (device loop6): ext4_do_update_inode:5182: inode #3: comm syz.6.1165: corrupted inode contents [ 96.377597][ T6995] EXT4-fs error (device loop6): ext4_dirty_inode:6074: inode #3: comm syz.6.1165: mark_inode_dirty error [ 96.384444][ T6981] Set syz1 is full, maxelem 65536 reached [ 96.396423][ T6995] EXT4-fs error (device loop6): ext4_do_update_inode:5182: inode #3: comm syz.6.1165: corrupted inode contents [ 96.408286][ T6995] EXT4-fs error (device loop6): __ext4_ext_dirty:207: inode #3: comm syz.6.1165: mark_inode_dirty error [ 96.419731][ T6995] EXT4-fs error (device loop6): ext4_acquire_dquot:6935: comm syz.6.1165: Failed to acquire dquot type 0 [ 96.427115][ T7002] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1168'. [ 96.432329][ T6995] EXT4-fs error (device loop6): ext4_do_update_inode:5182: inode #16: comm syz.6.1165: corrupted inode contents [ 96.444130][ T7002] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 96.452800][ T6995] EXT4-fs error (device loop6): ext4_dirty_inode:6074: inode #16: comm syz.6.1165: mark_inode_dirty error [ 96.460809][ T7002] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 96.479662][ T6995] EXT4-fs error (device loop6): ext4_do_update_inode:5182: inode #16: comm syz.6.1165: corrupted inode contents [ 96.487955][ T7002] loop4: detected capacity change from 0 to 512 [ 96.493818][ T6995] EXT4-fs error (device loop6): __ext4_ext_dirty:207: inode #16: comm syz.6.1165: mark_inode_dirty error [ 96.509335][ T6995] EXT4-fs error (device loop6): ext4_do_update_inode:5182: inode #16: comm syz.6.1165: corrupted inode contents [ 96.521535][ T6995] EXT4-fs error (device loop6) in ext4_orphan_del:305: Corrupt filesystem [ 96.530709][ T6995] EXT4-fs error (device loop6): ext4_do_update_inode:5182: inode #16: comm syz.6.1165: corrupted inode contents [ 96.533126][ T7002] EXT4-fs error (device loop4): ext4_do_update_inode:5182: inode #3: comm syz.4.1168: corrupted inode contents [ 96.543105][ T6995] EXT4-fs error (device loop6): ext4_truncate:4254: inode #16: comm syz.6.1165: mark_inode_dirty error [ 96.554948][ T7002] EXT4-fs error (device loop4): ext4_dirty_inode:6074: inode #3: comm syz.4.1168: mark_inode_dirty error [ 96.567378][ T6995] EXT4-fs error (device loop6) in ext4_process_orphan:347: Corrupt filesystem [ 96.577413][ T7002] EXT4-fs error (device loop4): ext4_do_update_inode:5182: inode #3: comm syz.4.1168: corrupted inode contents [ 96.588599][ T6995] EXT4-fs (loop6): 1 truncate cleaned up [ 96.599103][ T7002] EXT4-fs error (device loop4): __ext4_ext_dirty:207: inode #3: comm syz.4.1168: mark_inode_dirty error [ 96.605683][ T6995] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 96.614953][ T7002] EXT4-fs error (device loop4): ext4_acquire_dquot:6935: comm syz.4.1168: Failed to acquire dquot type 0 [ 96.615374][ T7002] EXT4-fs error (device loop4): ext4_do_update_inode:5182: inode #16: comm syz.4.1168: corrupted inode contents [ 96.628212][ T6995] ext4 filesystem being mounted at /89/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 96.640865][ T7002] EXT4-fs error (device loop4): ext4_dirty_inode:6074: inode #16: comm syz.4.1168: mark_inode_dirty error [ 96.695316][ T7002] EXT4-fs error (device loop4): ext4_do_update_inode:5182: inode #16: comm syz.4.1168: corrupted inode contents [ 96.696659][ T7008] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1170'. [ 96.719522][ T7002] EXT4-fs error (device loop4): __ext4_ext_dirty:207: inode #16: comm syz.4.1168: mark_inode_dirty error [ 96.719935][ T6995] EXT4-fs error (device loop6): ext4_xattr_block_get:593: inode #15: comm syz.6.1165: corrupted xattr block 19: invalid ea_ino [ 96.731197][ T7002] EXT4-fs error (device loop4): ext4_do_update_inode:5182: inode #16: comm syz.4.1168: corrupted inode contents [ 96.746740][ T6995] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop6 ino=15 [ 96.756175][ T7002] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem [ 96.766893][ T6995] EXT4-fs error (device loop6): ext4_xattr_block_get:593: inode #15: comm syz.6.1165: corrupted xattr block 19: invalid ea_ino [ 96.787943][ T6995] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop6 ino=15 [ 96.796945][ T7002] EXT4-fs error (device loop4): ext4_do_update_inode:5182: inode #16: comm syz.4.1168: corrupted inode contents [ 96.810940][ T6995] EXT4-fs error (device loop6): ext4_xattr_block_find:1869: inode #15: comm syz.6.1165: corrupted xattr block 19: invalid ea_ino [ 96.824593][ T7002] EXT4-fs error (device loop4): ext4_truncate:4254: inode #16: comm syz.4.1168: mark_inode_dirty error [ 96.826147][ T7010] xt_hashlimit: max too large, truncated to 1048576 [ 96.838012][ T7002] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem [ 96.851395][ T7010] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 96.853311][ T7002] EXT4-fs (loop4): 1 truncate cleaned up [ 96.871349][ T7002] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 96.885806][ T7002] ext4 filesystem being mounted at /223/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 96.907761][ T7002] EXT4-fs error (device loop4): ext4_xattr_block_get:593: inode #15: comm syz.4.1168: corrupted xattr block 19: invalid ea_ino [ 96.921322][ T7002] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 96.930989][ T7002] EXT4-fs error (device loop4): ext4_xattr_block_get:593: inode #15: comm syz.4.1168: corrupted xattr block 19: invalid ea_ino [ 96.944426][ T7002] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 96.954019][ T7002] EXT4-fs error (device loop4): ext4_xattr_block_find:1869: inode #15: comm syz.4.1168: corrupted xattr block 19: invalid ea_ino [ 97.024688][ T7012] xt_hashlimit: max too large, truncated to 1048576 [ 97.032199][ T7012] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 97.150869][ T7019] 9pnet_fd: Insufficient options for proto=fd [ 97.460006][ T5536] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.470984][ T37] EXT4-fs error (device loop6): ext4_release_dquot:6971: comm kworker/u8:2: Failed to release dquot type 1 [ 97.471947][ T7032] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1179'. [ 97.500346][ T7040] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1183'. [ 97.590437][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.606556][ T37] EXT4-fs error (device loop4): ext4_release_dquot:6971: comm kworker/u8:2: Failed to release dquot type 1 [ 97.681454][ T7056] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1186'. [ 97.727370][ T29] kauditd_printk_skb: 1011 callbacks suppressed [ 97.727399][ T29] audit: type=1326 audit(1743750881.784:9713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7058 comm="syz.0.1189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f9228d169 code=0x7ffc0000 [ 97.757283][ T29] audit: type=1326 audit(1743750881.784:9714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7058 comm="syz.0.1189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f9228d169 code=0x7ffc0000 [ 97.780827][ T29] audit: type=1326 audit(1743750881.794:9715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7058 comm="syz.0.1189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4f9228d169 code=0x7ffc0000 [ 97.804499][ T29] audit: type=1326 audit(1743750881.794:9716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7058 comm="syz.0.1189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f9228d169 code=0x7ffc0000 [ 97.827956][ T29] audit: type=1326 audit(1743750881.794:9717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7058 comm="syz.0.1189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f9228d169 code=0x7ffc0000 [ 97.858876][ T29] audit: type=1326 audit(1743750881.824:9718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7058 comm="syz.0.1189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4f9228d169 code=0x7ffc0000 [ 97.882389][ T29] audit: type=1326 audit(1743750881.824:9719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7058 comm="syz.0.1189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f9228d169 code=0x7ffc0000 [ 97.905997][ T29] audit: type=1326 audit(1743750881.824:9720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7058 comm="syz.0.1189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f9228d169 code=0x7ffc0000 [ 97.929558][ T29] audit: type=1326 audit(1743750881.824:9721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7058 comm="syz.0.1189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=253 compat=0 ip=0x7f4f9228d169 code=0x7ffc0000 [ 97.953111][ T29] audit: type=1326 audit(1743750881.824:9722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7058 comm="syz.0.1189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f9228d169 code=0x7ffc0000 [ 98.040030][ T7072] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1195'. [ 98.118577][ T7073] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1193'. [ 98.212539][ T7079] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1197'. [ 98.286334][ T7081] xt_hashlimit: max too large, truncated to 1048576 [ 98.320269][ T7081] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 98.342032][ T7083] loop1: detected capacity change from 0 to 164 [ 98.360170][ T7083] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 98.389452][ T7083] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 98.489198][ T7091] loop6: detected capacity change from 0 to 512 [ 98.515920][ T7091] EXT4-fs error (device loop6): ext4_expand_extra_isize_ea:2798: inode #11: comm syz.6.1201: corrupted xattr block 95: invalid header [ 98.534450][ T7091] EXT4-fs error (device loop6): ext4_validate_block_bitmap:432: comm syz.6.1201: bg 0: block 7: invalid block bitmap [ 98.548757][ T7091] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 98.559212][ T7091] EXT4-fs error (device loop6): ext4_xattr_delete_inode:2962: inode #11: comm syz.6.1201: corrupted xattr block 95: invalid header [ 98.582580][ T7091] EXT4-fs warning (device loop6): ext4_evict_inode:279: xattr delete (err -117) [ 98.592169][ T7091] EXT4-fs (loop6): 1 orphan inode deleted [ 98.598525][ T7091] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 98.644798][ T5536] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.739324][ T7103] loop6: detected capacity change from 0 to 512 [ 98.766564][ T7103] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 98.774528][ T7103] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842c01c, mo2=0002] [ 98.801737][ T7103] System zones: 1-12 [ 98.805995][ T7103] EXT4-fs (loop6): orphan cleanup on readonly fs [ 98.813182][ T7103] EXT4-fs warning (device loop6): ext4_block_to_path:107: block 3279949761 > max in inode 13 [ 98.824357][ T7103] EXT4-fs warning (device loop6): ext4_block_to_path:107: block 3279949762 > max in inode 13 [ 98.842035][ T7103] EXT4-fs (loop6): 1 truncate cleaned up [ 98.847988][ T7103] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 98.884332][ T5536] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.966781][ T7121] loop1: detected capacity change from 0 to 164 [ 98.986062][ T7121] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 99.022317][ T7121] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 99.109574][ T7135] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7135 comm=syz.3.1213 [ 99.143204][ T7138] IPv6: Can't replace route, no match found [ 99.151932][ T7135] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7135 comm=syz.3.1213 [ 99.207906][ T7135] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7135 comm=syz.3.1213 [ 99.220564][ T7135] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7135 comm=syz.3.1213 [ 99.244898][ T7135] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7135 comm=syz.3.1213 [ 99.257419][ T7135] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7135 comm=syz.3.1213 [ 99.278017][ T7146] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 99.286539][ T7135] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7135 comm=syz.3.1213 [ 99.300002][ T7146] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 99.308885][ T7135] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7135 comm=syz.3.1213 [ 99.339576][ T7135] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7135 comm=syz.3.1213 [ 99.383424][ T7148] xt_hashlimit: max too large, truncated to 1048576 [ 99.404526][ T7148] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 99.455584][ T7150] block device autoloading is deprecated and will be removed. [ 99.464043][ T7150] syz.1.1222: attempt to access beyond end of device [ 99.464043][ T7150] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 99.547833][ T7159] FAULT_INJECTION: forcing a failure. [ 99.547833][ T7159] name failslab, interval 1, probability 0, space 0, times 0 [ 99.560688][ T7159] CPU: 1 UID: 0 PID: 7159 Comm: syz.1.1226 Not tainted 6.14.0-syzkaller-12966-ga2cc6ff5ec8f #0 PREEMPT(voluntary) [ 99.560770][ T7159] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 99.560784][ T7159] Call Trace: [ 99.560791][ T7159] [ 99.560799][ T7159] dump_stack_lvl+0xf6/0x150 [ 99.560825][ T7159] dump_stack+0x15/0x1a [ 99.560897][ T7159] should_fail_ex+0x261/0x270 [ 99.560930][ T7159] should_failslab+0x8f/0xb0 [ 99.560963][ T7159] kmem_cache_alloc_noprof+0x59/0x340 [ 99.560990][ T7159] ? skb_clone+0x154/0x1f0 [ 99.561055][ T7159] skb_clone+0x154/0x1f0 [ 99.561083][ T7159] __netlink_deliver_tap+0x2bd/0x4f0 [ 99.561149][ T7159] netlink_unicast+0x69e/0x6c0 [ 99.561175][ T7159] netlink_sendmsg+0x609/0x720 [ 99.561206][ T7159] ? __pfx_netlink_sendmsg+0x10/0x10 [ 99.561233][ T7159] __sock_sendmsg+0x140/0x180 [ 99.561271][ T7159] ____sys_sendmsg+0x350/0x4e0 [ 99.561348][ T7159] __sys_sendmsg+0x1a0/0x240 [ 99.561394][ T7159] __x64_sys_sendmsg+0x46/0x50 [ 99.561446][ T7159] x64_sys_call+0x26f3/0x2e10 [ 99.561469][ T7159] do_syscall_64+0xc9/0x1c0 [ 99.561545][ T7159] ? clear_bhb_loop+0x25/0x80 [ 99.561620][ T7159] ? clear_bhb_loop+0x25/0x80 [ 99.561640][ T7159] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.561729][ T7159] RIP: 0033:0x7f3c258bd169 [ 99.561744][ T7159] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 99.561761][ T7159] RSP: 002b:00007f3c23f27038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 99.561821][ T7159] RAX: ffffffffffffffda RBX: 00007f3c25ad5fa0 RCX: 00007f3c258bd169 [ 99.561835][ T7159] RDX: 0000000000048002 RSI: 0000200000000080 RDI: 0000000000000004 [ 99.561846][ T7159] RBP: 00007f3c23f27090 R08: 0000000000000000 R09: 0000000000000000 [ 99.561857][ T7159] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 99.561901][ T7159] R13: 0000000000000000 R14: 00007f3c25ad5fa0 R15: 00007ffc4db46628 [ 99.561918][ T7159] [ 99.766531][ T7159] IPv6: Can't replace route, no match found [ 99.807433][ T7163] loop1: detected capacity change from 0 to 164 [ 99.814770][ T7163] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 99.825101][ T7163] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 99.891540][ T7165] loop4: detected capacity change from 0 to 512 [ 99.913630][ T7165] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 99.934883][ T7165] EXT4-fs (loop4): 1 truncate cleaned up [ 99.942219][ T7165] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 99.959140][ T7165] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.095579][ T7186] selinux_netlink_send: 28 callbacks suppressed [ 100.095599][ T7186] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7186 comm=syz.3.1232 [ 100.143086][ T7186] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7186 comm=syz.3.1232 [ 100.155740][ T7186] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7186 comm=syz.3.1232 [ 100.168777][ T7186] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7186 comm=syz.3.1232 [ 100.181471][ T7186] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7186 comm=syz.3.1232 [ 100.346959][ T7192] loop0: detected capacity change from 0 to 2048 [ 100.404153][ T7192] ext4: Unknown parameter 'silent' [ 100.423667][ T7196] __nla_validate_parse: 7 callbacks suppressed [ 100.423680][ T7196] netlink: 44 bytes leftover after parsing attributes in process `syz.6.1239'. [ 100.527750][ T7186] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7186 comm=syz.3.1232 [ 100.535593][ T7186] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7186 comm=syz.3.1232 [ 100.550897][ T7186] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7186 comm=syz.3.1232 [ 100.555558][ T7186] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7186 comm=syz.3.1232 [ 100.570524][ T7186] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7186 comm=syz.3.1232 [ 100.688376][ T7205] vlan2: entered allmulticast mode [ 100.693606][ T7205] bond0: entered allmulticast mode [ 100.698732][ T7205] bond_slave_0: entered allmulticast mode [ 100.704500][ T7205] bond_slave_1: entered allmulticast mode [ 100.712005][ T7208] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1244'. [ 100.796433][ T7213] loop4: detected capacity change from 0 to 512 [ 100.803818][ T7215] FAULT_INJECTION: forcing a failure. [ 100.803818][ T7215] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 100.817582][ T7215] CPU: 1 UID: 0 PID: 7215 Comm: syz.0.1247 Not tainted 6.14.0-syzkaller-12966-ga2cc6ff5ec8f #0 PREEMPT(voluntary) [ 100.817637][ T7215] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 100.817651][ T7215] Call Trace: [ 100.817657][ T7215] [ 100.817664][ T7215] dump_stack_lvl+0xf6/0x150 [ 100.817689][ T7215] dump_stack+0x15/0x1a [ 100.817835][ T7215] should_fail_ex+0x261/0x270 [ 100.817867][ T7215] should_fail+0xb/0x10 [ 100.817889][ T7215] should_fail_usercopy+0x1a/0x20 [ 100.817916][ T7215] copy_to_user_nofault+0x7d/0x120 [ 100.817935][ T7215] bpf_probe_write_user+0x80/0xc0 [ 100.817961][ T7215] bpf_prog_19072b5a3fcf5d64+0x41/0x45 [ 100.817983][ T7215] bpf_trace_run2+0x106/0x1d0 [ 100.818018][ T7215] __bpf_trace_sys_enter+0x10/0x30 [ 100.818083][ T7215] trace_sys_enter+0x85/0x110 [ 100.818111][ T7215] syscall_trace_enter+0x13d/0x1f0 [ 100.818135][ T7215] ? fpregs_assert_state_consistent+0x83/0xa0 [ 100.818197][ T7215] do_syscall_64+0xaa/0x1c0 [ 100.818226][ T7215] ? clear_bhb_loop+0x25/0x80 [ 100.818259][ T7215] ? clear_bhb_loop+0x25/0x80 [ 100.818278][ T7215] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.818296][ T7215] RIP: 0033:0x7f4f9228d169 [ 100.818310][ T7215] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 100.818326][ T7215] RSP: 002b:00007f4f908f7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000048 [ 100.818346][ T7215] RAX: ffffffffffffffda RBX: 00007f4f924a5fa0 RCX: 00007f4f9228d169 [ 100.818359][ T7215] RDX: 0000200000000000 RSI: 0000000000000024 RDI: 0000000000000006 [ 100.818400][ T7215] RBP: 00007f4f908f7090 R08: 0000000000000000 R09: 0000000000000000 [ 100.818416][ T7215] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 100.818452][ T7215] R13: 0000000000000000 R14: 00007f4f924a5fa0 R15: 00007ffeec06ec08 [ 100.818467][ T7215] [ 100.821249][ T7213] EXT4-fs: Ignoring removed orlov option [ 101.047075][ T7213] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.064134][ T7213] ext4 filesystem being mounted at /238/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 101.266876][ T7247] loop1: detected capacity change from 0 to 512 [ 101.275565][ T7247] EXT4-fs: test_dummy_encryption option not supported [ 101.627499][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.672125][ T7263] netlink: 2048 bytes leftover after parsing attributes in process `syz.6.1262'. [ 101.681314][ T7263] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1262'. [ 101.697840][ T7263] FAULT_INJECTION: forcing a failure. [ 101.697840][ T7263] name failslab, interval 1, probability 0, space 0, times 0 [ 101.710549][ T7263] CPU: 1 UID: 0 PID: 7263 Comm: syz.6.1262 Not tainted 6.14.0-syzkaller-12966-ga2cc6ff5ec8f #0 PREEMPT(voluntary) [ 101.710571][ T7263] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 101.710581][ T7263] Call Trace: [ 101.710586][ T7263] [ 101.710592][ T7263] dump_stack_lvl+0xf6/0x150 [ 101.710617][ T7263] dump_stack+0x15/0x1a [ 101.710632][ T7263] should_fail_ex+0x261/0x270 [ 101.710727][ T7263] should_failslab+0x8f/0xb0 [ 101.710758][ T7263] kmem_cache_alloc_node_noprof+0x5c/0x340 [ 101.710779][ T7263] ? __alloc_skb+0x10d/0x320 [ 101.710827][ T7263] ? security_capable+0x81/0x90 [ 101.710851][ T7263] __alloc_skb+0x10d/0x320 [ 101.710920][ T7263] netlink_ack+0xf1/0x4f0 [ 101.710936][ T7263] ? ref_tracker_free+0x3b8/0x420 [ 101.710954][ T7263] ? __skb_clone+0x216/0x2f0 [ 101.710974][ T7263] netlink_rcv_skb+0x19f/0x230 [ 101.711014][ T7263] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 101.711122][ T7263] rtnetlink_rcv+0x1c/0x30 [ 101.711145][ T7263] netlink_unicast+0x605/0x6c0 [ 101.711162][ T7263] netlink_sendmsg+0x609/0x720 [ 101.711221][ T7263] ? __pfx_netlink_sendmsg+0x10/0x10 [ 101.711238][ T7263] __sock_sendmsg+0x140/0x180 [ 101.711269][ T7263] sock_sendmsg+0xce/0x130 [ 101.711303][ T7263] ? avc_has_perm_noaudit+0x1cc/0x210 [ 101.711329][ T7263] splice_to_socket+0x666/0xa00 [ 101.711369][ T7263] ? rw_verify_area+0x8c/0x150 [ 101.711389][ T7263] ? __pfx_splice_to_socket+0x10/0x10 [ 101.711411][ T7263] do_splice+0x9e4/0x1160 [ 101.711509][ T7263] ? get_pid_task+0x94/0xd0 [ 101.711582][ T7263] ? proc_fail_nth_write+0x12d/0x160 [ 101.711597][ T7263] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 101.711615][ T7263] ? __rcu_read_unlock+0x4e/0x70 [ 101.711638][ T7263] ? __fget_files+0x186/0x1c0 [ 101.711652][ T7263] ? pipe_clear_nowait+0xd7/0x110 [ 101.711753][ T7263] __se_sys_splice+0x254/0x3b0 [ 101.711866][ T7263] __x64_sys_splice+0x78/0x90 [ 101.711912][ T7263] x64_sys_call+0xf5b/0x2e10 [ 101.711934][ T7263] do_syscall_64+0xc9/0x1c0 [ 101.711964][ T7263] ? clear_bhb_loop+0x25/0x80 [ 101.711986][ T7263] ? clear_bhb_loop+0x25/0x80 [ 101.712045][ T7263] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.712060][ T7263] RIP: 0033:0x7f9fb25bd169 [ 101.712088][ T7263] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 101.712167][ T7263] RSP: 002b:00007f9fb0c06038 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 101.712182][ T7263] RAX: ffffffffffffffda RBX: 00007f9fb27d6080 RCX: 00007f9fb25bd169 [ 101.712191][ T7263] RDX: 0000000000000007 RSI: 0000000000000000 RDI: 0000000000000005 [ 101.712200][ T7263] RBP: 00007f9fb0c06090 R08: 000000000004ffe6 R09: 0000000000000000 [ 101.712281][ T7263] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 101.712290][ T7263] R13: 0000000000000001 R14: 00007f9fb27d6080 R15: 00007ffd498abf28 [ 101.712316][ T7263] [ 102.235907][ T7278] random: crng reseeded on system resumption [ 102.407926][ T7291] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1276'. [ 102.485594][ T7302] loop6: detected capacity change from 0 to 512 [ 102.511918][ T7306] raw_sendmsg: syz.1.1280 forgot to set AF_INET. Fix it! [ 102.555975][ T7312] loop6: detected capacity change from 0 to 512 [ 102.588795][ T7316] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1283'. [ 102.598288][ T7316] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1283'. [ 102.607334][ T7316] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1283'. [ 102.637598][ T7318] sit0: entered promiscuous mode [ 102.647985][ T7318] netlink: 'syz.1.1284': attribute type 1 has an invalid length. [ 102.655799][ T7318] netlink: 1 bytes leftover after parsing attributes in process `syz.1.1284'. [ 102.661050][ T7320] loop6: detected capacity change from 0 to 512 [ 102.683003][ T7320] EXT4-fs (loop6): orphan cleanup on readonly fs [ 102.689758][ T7320] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.1285: bg 0: block 248: padding at end of block bitmap is not set [ 102.704835][ T7320] EXT4-fs error (device loop6): ext4_acquire_dquot:6935: comm syz.6.1285: Failed to acquire dquot type 1 [ 102.716469][ T7320] EXT4-fs (loop6): 1 truncate cleaned up [ 102.722961][ T7320] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 102.736932][ T7320] EXT4-fs (loop6): warning: mounting fs with errors, running e2fsck is recommended [ 102.752041][ T7320] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 102.769613][ T7320] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.863195][ T7326] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 102.874168][ T7326] vhci_hcd: default hub control req: 2314 v0008 i0002 l0 [ 102.925839][ T29] kauditd_printk_skb: 424 callbacks suppressed [ 102.925854][ T29] audit: type=1400 audit(1743750886.994:10145): avc: denied { ioctl } for pid=7327 comm="syz.0.1287" path="socket:[18376]" dev="sockfs" ino=18376 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 102.968873][ T7332] netlink: 14 bytes leftover after parsing attributes in process `syz.6.1289'. [ 103.023945][ T7341] FAULT_INJECTION: forcing a failure. [ 103.023945][ T7341] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 103.037229][ T7341] CPU: 0 UID: 0 PID: 7341 Comm: syz.6.1291 Not tainted 6.14.0-syzkaller-12966-ga2cc6ff5ec8f #0 PREEMPT(voluntary) [ 103.037276][ T7341] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 103.037286][ T7341] Call Trace: [ 103.037291][ T7341] [ 103.037297][ T7341] dump_stack_lvl+0xf6/0x150 [ 103.037318][ T7341] dump_stack+0x15/0x1a [ 103.037341][ T7341] should_fail_ex+0x261/0x270 [ 103.037387][ T7341] should_fail_alloc_page+0xfd/0x110 [ 103.037421][ T7341] __alloc_frozen_pages_noprof+0x11d/0x360 [ 103.037468][ T7341] alloc_pages_mpol+0xb6/0x260 [ 103.037523][ T7341] vma_alloc_folio_noprof+0x19c/0x300 [ 103.037550][ T7341] handle_mm_fault+0xdda/0x2e80 [ 103.037585][ T7341] ? __rcu_read_lock+0x36/0x50 [ 103.037609][ T7341] ? __pte_offset_map_lock+0x1d3/0x290 [ 103.037683][ T7341] __get_user_pages+0xf4e/0x2340 [ 103.037714][ T7341] __mm_populate+0x25d/0x3c0 [ 103.037763][ T7341] do_mlock+0x4d7/0x580 [ 103.037790][ T7341] ? ksys_write+0x180/0x1b0 [ 103.037821][ T7341] __x64_sys_mlock+0x36/0x40 [ 103.037854][ T7341] x64_sys_call+0x267b/0x2e10 [ 103.037873][ T7341] do_syscall_64+0xc9/0x1c0 [ 103.037905][ T7341] ? clear_bhb_loop+0x25/0x80 [ 103.037931][ T7341] ? clear_bhb_loop+0x25/0x80 [ 103.037953][ T7341] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.037974][ T7341] RIP: 0033:0x7f9fb25bd169 [ 103.037988][ T7341] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 103.038011][ T7341] RSP: 002b:00007f9fb0c27038 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 103.038029][ T7341] RAX: ffffffffffffffda RBX: 00007f9fb27d5fa0 RCX: 00007f9fb25bd169 [ 103.038040][ T7341] RDX: 0000000000000000 RSI: 0000000000800000 RDI: 0000200000000000 [ 103.038050][ T7341] RBP: 00007f9fb0c27090 R08: 0000000000000000 R09: 0000000000000000 [ 103.038060][ T7341] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 103.038069][ T7341] R13: 0000000000000000 R14: 00007f9fb27d5fa0 R15: 00007ffd498abf28 [ 103.038084][ T7341] [ 103.268911][ T29] audit: type=1400 audit(1743750887.334:10146): avc: denied { name_bind } for pid=7344 comm="syz.4.1293" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 103.315626][ T7345] loop4: detected capacity change from 0 to 1024 [ 103.328962][ T7345] EXT4-fs (loop4): invalid inodes per group: 453408 [ 103.328962][ T7345] [ 103.385823][ T29] audit: type=1400 audit(1743750887.454:10147): avc: denied { listen } for pid=7348 comm="syz.3.1295" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 103.440272][ T7345] pim6reg1: entered promiscuous mode [ 103.446173][ T7345] pim6reg1: entered allmulticast mode [ 103.479015][ T7360] netlink: 'syz.6.1299': attribute type 11 has an invalid length. [ 103.564861][ T7367] FAULT_INJECTION: forcing a failure. [ 103.564861][ T7367] name failslab, interval 1, probability 0, space 0, times 0 [ 103.577643][ T7367] CPU: 0 UID: 0 PID: 7367 Comm: syz.1.1302 Not tainted 6.14.0-syzkaller-12966-ga2cc6ff5ec8f #0 PREEMPT(voluntary) [ 103.577691][ T7367] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 103.577702][ T7367] Call Trace: [ 103.577707][ T7367] [ 103.577712][ T7367] dump_stack_lvl+0xf6/0x150 [ 103.577733][ T7367] dump_stack+0x15/0x1a [ 103.577795][ T7367] should_fail_ex+0x261/0x270 [ 103.577887][ T7367] should_failslab+0x8f/0xb0 [ 103.577914][ T7367] kmem_cache_alloc_noprof+0x59/0x340 [ 103.577937][ T7367] ? skb_clone+0x154/0x1f0 [ 103.577967][ T7367] skb_clone+0x154/0x1f0 [ 103.578001][ T7367] __netlink_deliver_tap+0x2bd/0x4f0 [ 103.578059][ T7367] netlink_unicast+0x69e/0x6c0 [ 103.578083][ T7367] netlink_sendmsg+0x609/0x720 [ 103.578107][ T7367] ? __pfx_netlink_sendmsg+0x10/0x10 [ 103.578126][ T7367] __sock_sendmsg+0x140/0x180 [ 103.578162][ T7367] ____sys_sendmsg+0x350/0x4e0 [ 103.578262][ T7367] __sys_sendmsg+0x1a0/0x240 [ 103.578301][ T7367] __x64_sys_sendmsg+0x46/0x50 [ 103.578323][ T7367] x64_sys_call+0x26f3/0x2e10 [ 103.578360][ T7367] do_syscall_64+0xc9/0x1c0 [ 103.578387][ T7367] ? clear_bhb_loop+0x25/0x80 [ 103.578409][ T7367] ? clear_bhb_loop+0x25/0x80 [ 103.578431][ T7367] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.578453][ T7367] RIP: 0033:0x7f3c258bd169 [ 103.578468][ T7367] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 103.578557][ T7367] RSP: 002b:00007f3c23f27038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 103.578653][ T7367] RAX: ffffffffffffffda RBX: 00007f3c25ad5fa0 RCX: 00007f3c258bd169 [ 103.578666][ T7367] RDX: 0000000000000000 RSI: 0000200000000340 RDI: 0000000000000003 [ 103.578675][ T7367] RBP: 00007f3c23f27090 R08: 0000000000000000 R09: 0000000000000000 [ 103.578685][ T7367] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 103.578736][ T7367] R13: 0000000000000000 R14: 00007f3c25ad5fa0 R15: 00007ffc4db46628 [ 103.578755][ T7367] [ 103.854789][ T29] audit: type=1326 audit(1743750887.914:10148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7377 comm="syz.4.1306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f814a354127 code=0x7ffc0000 [ 103.878395][ T29] audit: type=1326 audit(1743750887.914:10149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7377 comm="syz.4.1306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f814a2f9359 code=0x7ffc0000 [ 103.901866][ T29] audit: type=1326 audit(1743750887.914:10150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7377 comm="syz.4.1306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f814a354127 code=0x7ffc0000 [ 103.924146][ T7384] loop4: detected capacity change from 0 to 164 [ 103.925311][ T29] audit: type=1326 audit(1743750887.914:10151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7377 comm="syz.4.1306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f814a2f9359 code=0x7ffc0000 [ 103.955018][ T29] audit: type=1326 audit(1743750887.914:10152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7377 comm="syz.4.1306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f814a35d169 code=0x7ffc0000 [ 103.978707][ T29] audit: type=1326 audit(1743750887.914:10153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7377 comm="syz.4.1306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f814a35d169 code=0x7ffc0000 [ 104.002484][ T29] audit: type=1326 audit(1743750887.914:10154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7377 comm="syz.4.1306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f814a35d169 code=0x7ffc0000 [ 104.036923][ T7384] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 104.048293][ T3005] udevd[3005]: worker [3297] terminated by signal 33 (Unknown signal 33) [ 104.051439][ T7384] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 104.148036][ T7408] netlink: 'syz.4.1317': attribute type 4 has an invalid length. [ 104.151405][ T7407] FAULT_INJECTION: forcing a failure. [ 104.151405][ T7407] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 104.168936][ T7407] CPU: 0 UID: 0 PID: 7407 Comm: syz.6.1315 Not tainted 6.14.0-syzkaller-12966-ga2cc6ff5ec8f #0 PREEMPT(voluntary) [ 104.168968][ T7407] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 104.168983][ T7407] Call Trace: [ 104.168990][ T7407] [ 104.168998][ T7407] dump_stack_lvl+0xf6/0x150 [ 104.169096][ T7407] dump_stack+0x15/0x1a [ 104.169117][ T7407] should_fail_ex+0x261/0x270 [ 104.169150][ T7407] should_fail+0xb/0x10 [ 104.169256][ T7407] should_fail_usercopy+0x1a/0x20 [ 104.169298][ T7407] _copy_to_user+0x20/0xa0 [ 104.169412][ T7407] simple_read_from_buffer+0xb2/0x130 [ 104.169444][ T7407] proc_fail_nth_read+0x103/0x140 [ 104.169495][ T7407] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 104.169548][ T7407] vfs_read+0x1b2/0x710 [ 104.169571][ T7407] ? __rcu_read_unlock+0x4e/0x70 [ 104.169595][ T7407] ? __fget_files+0x186/0x1c0 [ 104.169654][ T7407] ksys_read+0xeb/0x1b0 [ 104.169680][ T7407] __x64_sys_read+0x42/0x50 [ 104.169704][ T7407] x64_sys_call+0x2a3b/0x2e10 [ 104.169751][ T7407] do_syscall_64+0xc9/0x1c0 [ 104.169776][ T7407] ? clear_bhb_loop+0x25/0x80 [ 104.169795][ T7407] ? clear_bhb_loop+0x25/0x80 [ 104.169814][ T7407] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.169833][ T7407] RIP: 0033:0x7f9fb25bbb7c [ 104.169846][ T7407] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 104.169862][ T7407] RSP: 002b:00007f9fb0c27030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 104.169879][ T7407] RAX: ffffffffffffffda RBX: 00007f9fb27d5fa0 RCX: 00007f9fb25bbb7c [ 104.169889][ T7407] RDX: 000000000000000f RSI: 00007f9fb0c270a0 RDI: 0000000000000005 [ 104.169900][ T7407] RBP: 00007f9fb0c27090 R08: 0000000000000000 R09: 0000000000000000 [ 104.169910][ T7407] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 104.169944][ T7407] R13: 0000000000000000 R14: 00007f9fb27d5fa0 R15: 00007ffd498abf28 [ 104.169960][ T7407] [ 104.426020][ T7415] sd 0:0:1:0: device reset [ 104.824073][ T7441] rdma_rxe: rxe_newlink: failed to add bond0 [ 104.835797][ T7444] tipc: Started in network mode [ 104.840680][ T7444] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711 [ 104.849820][ T7444] tipc: Enabled bearer , priority 10 [ 104.860481][ T7444] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.911573][ T7447] xt_hashlimit: max too large, truncated to 1048576 [ 104.922395][ T7447] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 104.942890][ T7444] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.967158][ T7451] loop0: detected capacity change from 0 to 128 [ 104.975033][ T7451] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 104.993168][ T7451] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 105.006122][ T7444] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.009746][ T7451] ext2 filesystem being mounted at /267/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 105.037303][ T7451] sg_write: data in/out 122/14 bytes for SCSI command 0x0-- guessing data in; [ 105.037303][ T7451] program syz.0.1331 not setting count and/or reply_len properly [ 105.078328][ T3303] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 105.093472][ T7444] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.115967][ T7463] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 105.139709][ T7444] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.148093][ T7467] loop4: detected capacity change from 0 to 2048 [ 105.151221][ T7444] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.166102][ T7444] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.178025][ T7444] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.188078][ T7467] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 105.228425][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.452110][ T7512] loop6: detected capacity change from 0 to 128 [ 105.459213][ T7512] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 105.482098][ T7512] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 105.525880][ T7519] loop4: detected capacity change from 0 to 1024 [ 105.538773][ T7519] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 105.549615][ T7521] __nla_validate_parse: 14 callbacks suppressed [ 105.549629][ T7521] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1358'. [ 105.572806][ T7519] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.597592][ T7530] @: renamed from macsec0 (while UP) [ 105.606836][ T7530] loop1: detected capacity change from 0 to 256 [ 105.654262][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.675861][ T7532] loop4: detected capacity change from 0 to 512 [ 105.683070][ T7532] ext3: Unknown parameter 'nodelalloc"journal_async_commit' [ 105.700290][ T7535] 9pnet_fd: Insufficient options for proto=fd [ 105.714910][ T7535] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 105.752957][ T7538] No such timeout policy "syz0" [ 105.805315][ T7545] loop6: detected capacity change from 0 to 512 [ 105.812530][ T7545] EXT4-fs: Ignoring removed orlov option [ 105.818619][ T7545] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 105.827908][ T7545] EXT4-fs (loop6): orphan cleanup on readonly fs [ 105.835171][ T7545] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.1365: bg 0: block 248: padding at end of block bitmap is not set [ 105.850082][ T7545] EXT4-fs error (device loop6): ext4_acquire_dquot:6935: comm syz.6.1365: Failed to acquire dquot type 1 [ 105.861910][ T7545] EXT4-fs (loop6): 1 truncate cleaned up [ 105.868276][ T7545] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 105.881204][ T7545] EXT4-fs: Ignoring removed orlov option [ 105.886901][ T7545] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 105.895575][ T7545] EXT4-fs (loop6): warning: mounting fs with errors, running e2fsck is recommended [ 105.911913][ T7545] EXT4-fs error (device loop6): __ext4_remount:6738: comm syz.6.1365: Abort forced by user [ 105.922235][ T7545] EXT4-fs (loop6): Remounting filesystem read-only [ 105.928866][ T7545] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 105.937340][ T7545] ext4 filesystem being remounted at /127/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 105.957249][ T5536] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.966203][ T10] tipc: Node number set to 4269801488 [ 105.984033][ T7552] loop6: detected capacity change from 0 to 1024 [ 105.997466][ T7552] loop6: detected capacity change from 0 to 512 [ 106.004543][ T7552] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 106.013655][ T7552] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem [ 106.022712][ T7552] EXT4-fs (loop6): warning: checktime reached, running e2fsck is recommended [ 106.031628][ T7552] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 106.042178][ T7552] System zones: 0-2, 18-18, 34-34 [ 106.047456][ T7552] EXT4-fs warning (device loop6): ext4_update_dynamic_rev:1132: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 106.062833][ T7554] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1368'. [ 106.064275][ T7552] EXT4-fs (loop6): 1 truncate cleaned up [ 106.078013][ T7552] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 106.110294][ T5536] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.145385][ T7561] loop6: detected capacity change from 0 to 512 [ 106.174787][ T7561] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.187689][ T7561] ext4 filesystem being mounted at /129/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 106.213867][ T5536] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.230208][ T7569] FAULT_INJECTION: forcing a failure. [ 106.230208][ T7569] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 106.243295][ T7569] CPU: 1 UID: 0 PID: 7569 Comm: syz.0.1374 Not tainted 6.14.0-syzkaller-12966-ga2cc6ff5ec8f #0 PREEMPT(voluntary) [ 106.243322][ T7569] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 106.243333][ T7569] Call Trace: [ 106.243338][ T7569] [ 106.243344][ T7569] dump_stack_lvl+0xf6/0x150 [ 106.243364][ T7569] dump_stack+0x15/0x1a [ 106.243378][ T7569] should_fail_ex+0x261/0x270 [ 106.243436][ T7569] should_fail+0xb/0x10 [ 106.243455][ T7569] should_fail_usercopy+0x1a/0x20 [ 106.243479][ T7569] _copy_from_iter+0xd8/0xd10 [ 106.243503][ T7569] ? kmalloc_reserve+0x16e/0x190 [ 106.243531][ T7569] ? __build_skb_around+0x199/0x1f0 [ 106.243549][ T7569] ? __alloc_skb+0x227/0x320 [ 106.243571][ T7569] ? __virt_addr_valid+0x1ed/0x250 [ 106.243589][ T7569] ? __check_object_size+0x367/0x510 [ 106.243611][ T7569] netlink_sendmsg+0x492/0x720 [ 106.243667][ T7569] ? __pfx_netlink_sendmsg+0x10/0x10 [ 106.243686][ T7569] __sock_sendmsg+0x140/0x180 [ 106.243763][ T7569] ____sys_sendmsg+0x350/0x4e0 [ 106.243788][ T7569] __sys_sendmsg+0x1a0/0x240 [ 106.243877][ T7569] __x64_sys_sendmsg+0x46/0x50 [ 106.243899][ T7569] x64_sys_call+0x26f3/0x2e10 [ 106.243972][ T7569] do_syscall_64+0xc9/0x1c0 [ 106.243996][ T7569] ? clear_bhb_loop+0x25/0x80 [ 106.244014][ T7569] ? clear_bhb_loop+0x25/0x80 [ 106.244032][ T7569] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.244049][ T7569] RIP: 0033:0x7f4f9228d169 [ 106.244061][ T7569] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 106.244090][ T7569] RSP: 002b:00007f4f908f7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 106.244106][ T7569] RAX: ffffffffffffffda RBX: 00007f4f924a5fa0 RCX: 00007f4f9228d169 [ 106.244116][ T7569] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 106.244126][ T7569] RBP: 00007f4f908f7090 R08: 0000000000000000 R09: 0000000000000000 [ 106.244136][ T7569] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 106.244145][ T7569] R13: 0000000000000000 R14: 00007f4f924a5fa0 R15: 00007ffeec06ec08 [ 106.244161][ T7569] [ 106.586496][ T7591] loop6: detected capacity change from 0 to 2048 [ 106.610634][ T7596] netlink: 'syz.1.1382': attribute type 4 has an invalid length. [ 106.634575][ T7588] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1380'. [ 106.636840][ T7591] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 106.657681][ T7591] ext4 filesystem being mounted at /131/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 106.730053][ T7604] loop0: detected capacity change from 0 to 164 [ 106.750992][ T7604] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 106.787924][ T7604] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 106.980505][ T7611] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.1381: bg 0: block 345: padding at end of block bitmap is not set [ 107.001371][ T7611] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 16 with error 117 [ 107.013905][ T7611] EXT4-fs (loop6): This should not happen!! Data will be lost [ 107.013905][ T7611] [ 107.046864][ T37] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 32 with max blocks 2048 with error 117 [ 107.059510][ T37] EXT4-fs (loop6): This should not happen!! Data will be lost [ 107.059510][ T37] [ 107.118106][ T7626] loop0: detected capacity change from 0 to 512 [ 107.129970][ T12] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 2081 with max blocks 2024 with error 28 [ 107.143451][ T12] EXT4-fs (loop6): This should not happen!! Data will be lost [ 107.143451][ T12] [ 107.153096][ T12] EXT4-fs (loop6): Total free blocks count 0 [ 107.159135][ T12] EXT4-fs (loop6): Free/Dirty block details [ 107.165074][ T12] EXT4-fs (loop6): free_blocks=0 [ 107.170575][ T7626] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 107.194971][ T7626] EXT4-fs (loop0): 1 truncate cleaned up [ 107.201230][ T7626] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.237774][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.346176][ T7633] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1397'. [ 107.355205][ T7634] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 107.362667][ T7634] vhci_hcd: default hub control req: 2314 v0008 i0002 l0 [ 107.417892][ T7641] netlink: 44 bytes leftover after parsing attributes in process `syz.6.1400'. [ 107.422765][ T7643] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1401'. [ 107.548721][ T7649] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 107.663590][ T7649] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 107.977459][ T7663] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1409'. [ 108.012449][ T29] kauditd_printk_skb: 643 callbacks suppressed [ 108.012462][ T29] audit: type=1326 audit(1743750892.084:10794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7661 comm="syz.3.1408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1243ad169 code=0x7ffc0000 [ 108.213696][ T29] audit: type=1326 audit(1743750892.084:10795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7661 comm="syz.3.1408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1243ad169 code=0x7ffc0000 [ 108.237326][ T29] audit: type=1326 audit(1743750892.114:10796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7661 comm="syz.3.1408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7fb1243ad169 code=0x7ffc0000 [ 108.260866][ T29] audit: type=1326 audit(1743750892.114:10797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7661 comm="syz.3.1408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fb1243ad1a3 code=0x7ffc0000 [ 108.284166][ T29] audit: type=1326 audit(1743750892.114:10798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7661 comm="syz.3.1408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fb1243ad1a3 code=0x7ffc0000 [ 108.307583][ T29] audit: type=1326 audit(1743750892.114:10799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7661 comm="syz.3.1408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1243ad169 code=0x7ffc0000 [ 108.331150][ T29] audit: type=1326 audit(1743750892.114:10800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7661 comm="syz.3.1408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1243ad169 code=0x7ffc0000 [ 108.344000][ T7673] netlink: 'syz.0.1413': attribute type 4 has an invalid length. [ 108.354749][ T29] audit: type=1326 audit(1743750892.114:10801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7661 comm="syz.3.1408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb1243ad169 code=0x7ffc0000 [ 108.385873][ T29] audit: type=1326 audit(1743750892.114:10802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7661 comm="syz.3.1408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1243ad169 code=0x7ffc0000 [ 108.409546][ T29] audit: type=1326 audit(1743750892.114:10803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7661 comm="syz.3.1408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1243ad169 code=0x7ffc0000 [ 108.497661][ T7676] netlink: 44 bytes leftover after parsing attributes in process `syz.6.1414'. [ 108.857932][ T7707] loop4: detected capacity change from 0 to 2048 [ 108.877704][ T7707] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 108.904926][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.926339][ T7713] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1429'. [ 109.149260][ T7728] netlink: 'syz.3.1432': attribute type 7 has an invalid length. [ 109.157678][ T7728] netlink: 'syz.3.1432': attribute type 8 has an invalid length. [ 109.183438][ T7730] veth1_to_bond: entered allmulticast mode [ 109.203407][ T7730] veth1_to_bond: entered promiscuous mode [ 109.262813][ T7729] veth1_to_bond: left promiscuous mode [ 109.268413][ T7729] veth1_to_bond: left allmulticast mode [ 109.294683][ T7736] loop0: detected capacity change from 0 to 128 [ 109.307761][ T7738] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1440'. [ 109.335540][ T7742] ================================================================== [ 109.337948][ T7736] syz.0.1439: attempt to access beyond end of device [ 109.337948][ T7736] loop0: rw=2049, sector=233, nr_sectors = 16 limit=128 [ 109.343637][ T7742] BUG: KCSAN: data-race in dequeue_signal / ptrace_check_attach [ 109.343672][ T7742] [ 109.343677][ T7742] read-write to 0xffff88812369c738 of 8 bytes by task 7743 on cpu 0: [ 109.343692][ T7742] dequeue_signal+0x320/0x3c0 [ 109.357294][ T7736] syz.0.1439: attempt to access beyond end of device [ 109.357294][ T7736] loop0: rw=2049, sector=257, nr_sectors = 8 limit=128 [ 109.364820][ T7742] get_signal+0x378/0x1080 [ 109.364863][ T7742] arch_do_signal_or_restart+0x9a/0x4b0 [ 109.367201][ T7736] syz.0.1439: attempt to access beyond end of device [ 109.367201][ T7736] loop0: rw=2049, sector=273, nr_sectors = 8 limit=128 [ 109.375221][ T7742] syscall_exit_to_user_mode+0x62/0x120 [ 109.375257][ T7742] do_syscall_64+0xd6/0x1c0 [ 109.375284][ T7742] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.375305][ T7742] [ 109.375310][ T7742] read to 0xffff88812369c738 of 8 bytes by task 7742 on cpu 1: [ 109.375325][ T7742] ptrace_check_attach+0x7f/0x290 [ 109.447336][ T7742] __se_sys_ptrace+0xd7/0x2b0 [ 109.452009][ T7742] __x64_sys_ptrace+0x55/0x70 [ 109.456687][ T7742] x64_sys_call+0x1fd0/0x2e10 [ 109.461367][ T7742] do_syscall_64+0xc9/0x1c0 [ 109.465879][ T7742] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.471772][ T7742] [ 109.474089][ T7742] value changed: 0x0000000000000000 -> 0x0000000008010000 [ 109.481194][ T7742] [ 109.483507][ T7742] Reported by Kernel Concurrency Sanitizer on: [ 109.489644][ T7742] CPU: 1 UID: 0 PID: 7742 Comm: syz.3.1442 Not tainted 6.14.0-syzkaller-12966-ga2cc6ff5ec8f #0 PREEMPT(voluntary) [ 109.501699][ T7742] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 109.511749][ T7742] ================================================================== [ 109.520465][ T7736] syz.0.1439: attempt to access beyond end of device [ 109.520465][ T7736] loop0: rw=2049, sector=289, nr_sectors = 8 limit=128 [ 109.533912][ T7736] syz.0.1439: attempt to access beyond end of device [ 109.533912][ T7736] loop0: rw=2049, sector=305, nr_sectors = 8 limit=128 [ 109.547370][ T7736] syz.0.1439: attempt to access beyond end of device [ 109.547370][ T7736] loop0: rw=2049, sector=321, nr_sectors = 8 limit=128 [ 109.560807][ T7736] syz.0.1439: attempt to access beyond end of device [ 109.560807][ T7736] loop0: rw=2049, sector=337, nr_sectors = 8 limit=128 [ 109.574210][ T7736] syz.0.1439: attempt to access beyond end of device [ 109.574210][ T7736] loop0: rw=2049, sector=353, nr_sectors = 8 limit=128 [ 109.588297][ T7736] syz.0.1439: attempt to access beyond end of device [ 109.588297][ T7736] loop0: rw=2049, sector=369, nr_sectors = 8 limit=128 [ 109.602259][ T7736] syz.0.1439: attempt to access beyond end of device [ 109.602259][ T7736] loop0: rw=2049, sector=385, nr_sectors = 8 limit=128