last executing test programs: 3.971016808s ago: executing program 0 (id=419): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f3, &(0x7f0000000340)={'sit0\x00', &(0x7f0000000380)={'erspan0\x00', 0x0, 0x0, 0x10, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x1c, 0x14, 0x0, 0x0, 0x3, 0x89, 0x0, @remote, @loopback}}}}) bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00"/13], 0x48) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f00000001c0)={@private2={0xfc, 0x2, '\x00', 0x85}, @private1={0xfc, 0x1, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x1}, 0x5ff, 0x10, 0x3, 0x400, 0xb9bf, 0x1180118}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000ac0)={0x18, 0x5, &(0x7f0000000780)=ANY=[@ANYRES16=r1], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = syz_open_procfs$namespace(0x0, 0x0) syz_emit_ethernet(0x308, &(0x7f0000001100)=ANY=[@ANYBLOB="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"], 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000001b40)={0x1c, 0x20000000000000bb, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x22, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffff55, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x400e, &(0x7f0000000300), 0x1, 0x440, &(0x7f0000000cc0)="$eJzs28tvG8UfAPDv2kn66+uXUJVHH0CgIMoradJSeuACAokDSEhwKMeQpFWo26AmSLSKICBUjqgSJy6IIxJ/ASe4IOCExBXuqFKFcmnhZLT2bmI7thunTlzqz0dad2Z33Jmvd8ee2ckG0LdG05ckYk9E/B4Rw9VsfYHR6j83V5am/15Zmk6iXH7zr6RS7sbK0nReNH/f7jwzEFH4NIlDTepduHT53FSpNHsxy48vnn9vfOHS5Wfnzk+dnT07e2Hy1KkTxyeePzn5XFfiTOO6cfDD+cMHXn376uvTp6++8/O3SR5/QxxdMtru4OPlcper6629NelkoIcNoSPFajeNwUr/H45irJ284Xjlk542DthS5XK5fF/rw8tl4C6WRK9bAPRG/kOfzn/zbZuGHneE6y9WJ0Bp3DezrXpkIApZmcGG+W03jUbE6eV/vkq32Jr7EAAAdb5Pxz/PNBv/FaL2vtD/szWUkYi4JyL2RcTJiNgfEfdGVMreHxEPdFh/4yLJ+vFP4dqmAtugdPz3Qra2VT/+y0d/MVLMcnsr8Q8mZ+ZKs8eyz+RoDO5I8xNt6vjh5d8+b3WsdvyXbmn9+Vgwa8e1gR3175mZWpy6nZhrXf844uBAs/iT1ZWAJCIORMTBTdYx99Q3h1sdu3X8bXRhnan8dcQT1fO/HA3x55L265Pj/4vS7LHx/KpY75dfr7zRqv7bir8L0vO/q+n1vxr/SFK7XrvQyf/+5ZPp65U/Pms5p9ns9T+UvFW374OpxcWLExFDyWvVRtfun2woN7lWPo3/6JHm/X9frH0ShyIivYgfjIiHIuLhrO2PRMSjEXGkzafw00uPvbv5+LdWGv9MR+d/LTEUjXuaJ4rnfvyurtKRTuJPz/+JSupotmcj338baVenVzMAAAD8VxUiYk8khbHVdKEwNlb9G/79satQml9YfPrM/PsXZqrPCIzEYCG/0zVccz90IpvW5/nJhvzx7L7xF8WdlfzY9HxpptfBQ5/b3aL/p/4s9rp1wJbzvBb0L/0f+pf+D/1L/4f+1aT/7+xFO4Dt1+z3/6MetAPYfg3937If9BHzf+hfm+n/vjPg7tC2Lw9tXzuAbbWwM279kLyExLpEFO6IZkhsUaLX30wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADd8W8AAAD//58P56I=") r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYRES8=r3, @ANYRESHEX=r4], &(0x7f00000004c0)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x69e1, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{}, &(0x7f0000000000), &(0x7f00000005c0)=r6}, 0x20) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000600)=ANY=[], 0x50) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0xfff, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffff30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x18) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000080)=0x9, 0x8, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="180600000000000016d159d9addfe946f47111dae6024567272dd7161bf77ed48dd3f1e81ce0387091d2064c371cdd5698e9da13d38a00000000000000"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x810) r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r8, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) r9 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSWINSZ(r9, 0x5414, &(0x7f0000000740)={0xb, 0x0, 0x3, 0x7fff}) 3.253892649s ago: executing program 4 (id=430): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, @void, @value}, 0x94) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000080)='syz1\x00', 0x200002, 0x0) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f00000006c0)='kmem_cache_free\x00'}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={@fallback=r3, 0x13, 0x1, 0x1, &(0x7f0000000000)=[0x0], 0x1, 0x0, &(0x7f0000000040)=[0x0], &(0x7f0000000080)=[0x0], &(0x7f0000000100)=[0x0, 0x0], 0x0}, 0x40) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) splice(r6, 0x0, r5, 0x0, 0x6, 0x0) ioctl$int_in(r5, 0x5452, &(0x7f0000000100)=0x3ff) fcntl$setstatus(r5, 0x4, 0x7c00) ioctl$FS_IOC_GETFLAGS(r1, 0x80086601, &(0x7f0000000300)) dup3(r6, r5, 0x0) sendmsg$IPSET_CMD_PROTOCOL(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB="2c000000010605"], 0x2c}, 0x1, 0x0, 0x0, 0x40001d0}, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000600)=ANY=[@ANYRES32=r5, @ANYRES32, @ANYBLOB="0a0000001000000000000000", @ANYRES32, @ANYBLOB="12864eed4b837a718b044d969d108ec881dfbdabb091c2c1db4d94ed3976b8cb6b196556302cc47e8136c2d61aad43669a98de1567244826d9758877267745b210ce66e811b1cc58726a2f46a3db5be8a7064d688a4466adcc2c6b58f1afa4617660a959daf300630a5ae36cfcfa2c44dc02f2cbe9aeffd68fed784b21b7420300000000000000cbc2ec", @ANYRES64=r4], 0x20) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70800000000ebff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000280)={r1, r2, 0x9, 0x0, @val=@tcx={@void, @value=r8, @void, @void, r4}}, 0x1c) 2.281344264s ago: executing program 4 (id=436): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='\a\x00\x00\x00'], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006900"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x76, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000680)='kfree\x00', r1}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x20c006, &(0x7f0000000480)={[{@grpjquota}, {@mblk_io_submit}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@lazytime}, {@discard}, {@grpquota}], [{@seclabel}]}, 0x1, 0x446, &(0x7f0000000d40)="$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") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000006, 0x31, 0xffffffffffffffff, 0xd0fb6000) r2 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) pwritev2(r2, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x76200}], 0x1, 0x7c00, 0x0, 0x3) 2.218446945s ago: executing program 0 (id=437): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x10) openat$cgroup(0xffffffffffffffff, &(0x7f0000000080)='syz1\x00', 0x200002, 0x0) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f00000006c0)='kmem_cache_free\x00'}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={@fallback=r3, 0x13, 0x1, 0x1, &(0x7f0000000000)=[0x0], 0x1, 0x0, &(0x7f0000000040)=[0x0], &(0x7f0000000080)=[0x0], &(0x7f0000000100)=[0x0, 0x0], 0x0}, 0x40) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) splice(r6, 0x0, r5, 0x0, 0x6, 0x0) ioctl$int_in(r5, 0x5452, &(0x7f0000000100)=0x3ff) fcntl$setstatus(r5, 0x4, 0x7c00) ioctl$FS_IOC_GETFLAGS(r1, 0x80086601, &(0x7f0000000300)) dup3(r6, r5, 0x0) sendmsg$IPSET_CMD_PROTOCOL(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB="2c000000010605"], 0x2c}, 0x1, 0x0, 0x0, 0x40001d0}, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000600)=ANY=[@ANYRES32=r5, @ANYRES32, @ANYBLOB="0a0000001000000000000000", @ANYRES32, @ANYBLOB="12864eed4b837a718b044d969d108ec881dfbdabb091c2c1db4d94ed3976b8cb6b196556302cc47e8136c2d61aad43669a98de1567244826d9758877267745b210ce66e811b1cc58726a2f46a3db5be8a7064d688a4466adcc2c6b58f1afa4617660a959daf300630a5ae36cfcfa2c44dc02f2cbe9aeffd68fed784b21b7420300000000000000cbc2ec", @ANYRES64=r4], 0x20) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70800000000ebff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r8, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) 1.854491551s ago: executing program 3 (id=442): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYRESHEX], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x9, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f00000003c0)=ANY=[@ANYBLOB="faf549d8aba50a4cd65a300339582a7d33e135f666d5aec277eebc0a0463632d532a437642ff2bb1ac45e33d6663432838", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r2, 0x402, 0x4) fcntl$notify(0xffffffffffffffff, 0x402, 0xd) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00'}, 0x10) open(&(0x7f00009e1000)='./file0\x00', 0x62ec1, 0x13) 1.853673371s ago: executing program 3 (id=443): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, &(0x7f0000000800), &(0x7f0000000840)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001640)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='kfree\x00', r2}, 0x18) r3 = socket$inet(0x2, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x33, &(0x7f00000a2000)={0x1, &(0x7f00000002c0)=[{0x6}]}, 0x10) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00'}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="05000000040000000800000044"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000181100", @ANYRES32=r5, @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r6, 0x0, 0x5}, 0x18) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000440)=""/173) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000140)) r8 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r8, 0x29, 0x20, &(0x7f00000000c0)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0xe, 0x7ffc0002}]}) syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000001580)=ANY=[@ANYRESOCT=r8, @ANYRESOCT, @ANYRESOCT, @ANYRES64=0x0, @ANYBLOB="b7ad7cd65c46a5be7840094fc88ed300444000f8ac89758d3a070000000000000096a99f88ba68f3377383de4de11c07aa5d22d9f4f3c58344d6011b6ea5ee82cf40e4ca5976370cb73c872e576f936791a0ffa5639ac237214be5926acea5405e00f1a144cf7a5240bc1e56ed617e19d6a5a268505f0012b4baf36d3a71eb34c8b67281dbba4b20c3d724ef150deff6f7d908bc72575a1f43b608e0d118", @ANYBLOB="a1fffd2e4c38a7b17fef1a78ad1943012e7b7711a1517cd8b4288a2fbb7d202d8c4a1809add074e6dde0703158125f2f114c49f5ee5f249d63ac0d851c212ccd8d82b7c694ead23c417021e8bc78d646d07e3513568bb81d2179a012dcdcb845b0a58b6d5e46a177de56e3e77ed573967e4eea299078019693ca486edbaa44e947802c7f46f1de18cf7f0e1af02964d04cc84d979855e8d3a3fda262f6a7d2b4b4849fd880c9b9af9be818ba05386754a3505e833ca0b9770f63e91f3a9a04e9fca51d88273d5491ed", @ANYRESOCT=r8], 0x1, 0x7dc, &(0x7f0000000d80)="$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") syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210000, &(0x7f00000004c0)={[{@acl}, {@barrier}, {@barrier_val}, {@sysvgroups}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@resuid}, {@nodelalloc}, {@acl}, {@noinit_itable}]}, 0xfc, 0x587, &(0x7f0000002100)="$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") syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1a4a438, &(0x7f00000008c0)=ANY=[], 0xc, 0x0, &(0x7f0000000000)) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) vmsplice(r9, &(0x7f00000005c0)=[{&(0x7f0000001cc0)="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", 0x341}], 0x1, 0x0) fcntl$setpipe(r9, 0x407, 0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000cbffffff00000000000000008500000041000000850000005000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 1.787931712s ago: executing program 0 (id=446): mbind(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, &(0x7f0000000040)=0x6, 0x7, 0x6) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYRES8=0x0], &(0x7f0000000080)='GPL\x00', 0x200008, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x4, &(0x7f0000000000), 0x0, 0x236, &(0x7f0000000300)="$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") r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70300001d000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000380)=[{0x200000000006, 0x1, 0x7, 0x7ffc1ffb}]}) msync(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000001480)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000380)="12", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f0000000240)=' ', 0x1}], 0x1}}], 0x2, 0x48800) syz_usb_disconnect(0xffffffffffffffff) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000100)='hybla\x00', 0x6) shutdown(r3, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r0}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = io_uring_setup(0x6335, &(0x7f0000000300)={0x0, 0x4c49, 0x800, 0x1, 0x1a2}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000000, 0x110, r4, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) r5 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000900)=@mangle={'mangle\x00', 0x44, 0x6, 0x510, 0x3a8, 0x210, 0x210, 0x0, 0x138, 0x478, 0x478, 0x478, 0x478, 0x478, 0x6, 0x0, {[{{@ip={@broadcast, @multicast1=0xe0007600, 0x0, 0x0, 'geneve1\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'batadv_slave_1\x00', 'veth1_virt_wifi\x00', {}, {}, 0x11}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}]}, @unspec=@CHECKSUM={0x28}}, {{@ip={@loopback, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_team\x00'}, 0x0, 0x70, 0x198}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x0, 'system_u:object_r:dbusd_etc_t:s0\x00'}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0xa0, 0xd0, 0x0, {}, [@common=@unspec=@mac={{0x30}, {@multicast}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x570) writev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000001c0)="580000001400192340834b80040d8c560a067f0202ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100040c10000000010000000000", 0x58}], 0x1) 1.745041363s ago: executing program 4 (id=447): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f3, &(0x7f0000000340)={'sit0\x00', &(0x7f0000000380)={'erspan0\x00', 0x0, 0x0, 0x10, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x1c, 0x14, 0x0, 0x0, 0x3, 0x89, 0x0, @remote, @loopback}}}}) bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00"/13], 0x48) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f00000001c0)={@private2={0xfc, 0x2, '\x00', 0x85}, @private1={0xfc, 0x1, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x1}, 0x5ff, 0x10, 0x3, 0x400, 0xb9bf, 0x1180118}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000ac0)={0x18, 0x5, &(0x7f0000000780)=ANY=[@ANYRES16=r1], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r3}, 0x18) r4 = syz_open_procfs$namespace(0x0, 0x0) syz_emit_ethernet(0x308, &(0x7f0000001100)=ANY=[@ANYBLOB="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"], 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000001b40)={0x1c, 0x20000000000000bb, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x22, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffff55, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x400e, &(0x7f0000000300), 0x1, 0x440, &(0x7f0000000cc0)="$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") r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYRES8=r4, @ANYRESHEX=r5], &(0x7f00000004c0)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x69e1, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{}, &(0x7f0000000000), &(0x7f00000005c0)=r7}, 0x20) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000600)=ANY=[], 0x50) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0xfff, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffff30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a, @void, @value}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r8}, 0x18) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000080)=0x9, 0x8, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="180600000000000016d159d9addfe946f47111dae6024567272dd7161bf77ed48dd3f1e81ce0387091d2064c371cdd5698e9da13d38a00000000000000"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x810) r9 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r9, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) r10 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSWINSZ(r10, 0x5414, &(0x7f0000000740)={0xb, 0x0, 0x3, 0x7fff}) 1.397351918s ago: executing program 3 (id=453): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b708000002001e007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000d00)='sched_switch\x00', r4}, 0x10) stat(&(0x7f0000001c40)='./file0\x00', 0x0) r5 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="38000000031401002dbd7000000000000900020073797a3000000000080041007369770014003300"], 0xffaf}, 0x1, 0x0, 0x0, 0x854}, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001d40)={&(0x7f0000000040)=@kern={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001b80)=[{0x0, 0x14}, {0x0}, {0x0}], 0x3, 0x0, 0x50, 0x24040094}, 0x80) lchown(0x0, 0x0, 0x0) getegid() fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f00000007c0)=ANY=[], 0x94, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) lstat(&(0x7f0000000580)='./file0\x00', &(0x7f0000000500)) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000001100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000002000010329bd700010000000010000040300"], 0x38}, 0x1, 0x0, 0x0, 0x240480c4}, 0x0) 1.32402702s ago: executing program 2 (id=454): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000c80)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000300)={0x79b5, 0x8003, 0xce, 0x6, r2}, &(0x7f0000000340)=0x10) syz_read_part_table(0x5d4, &(0x7f0000000000)="$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") r3 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f0000000200)=0x632a, 0x4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) removexattr(&(0x7f00000002c0)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000000)=@known='security.apparmor\x00') bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f0000000200)='asymmetric\x00', &(0x7f00000002c0)=@chain={'key_or_keyring:', r4}) r5 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x14) fcntl$setlease(r5, 0x400, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000180)='wg1\x00') r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r6, 0x0, 0xfffffffff7ffffe9}, 0x18) read$hiddev(r5, &(0x7f0000000240)=""/43, 0x2b) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r7, 0xc004743e, 0x110e22fff6) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r10}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r9}, &(0x7f00000004c0), &(0x7f0000000500)=r10}, 0x20) ioctl$TUNSETOFFLOAD(r8, 0x4004743d, 0x110e22fff6) write$cgroup_type(r8, &(0x7f0000000280), 0xfffffeed) socket$inet_smc(0x2b, 0x1, 0x0) mount(&(0x7f0000000400)=@md0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='overlay\x00', 0xa, &(0x7f00000004c0)='/\x00') openat$nvram(0xffffffffffffff9c, &(0x7f0000000780), 0x408002, 0x0) 918.973806ms ago: executing program 2 (id=456): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0xb) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000200"/15], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, @void, @value}, 0x94) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa2c"], 0xfdef) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="1800"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000001ac0)={{0x0, 0x3, 0x8dc, 0x7, 0x3, 0x6, 0x8000000000000000, 0x9, 0x1, 0x3, 0x1, 0x0, 0x8, 0xffffffffffffffff, 0x7}}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67b}]}, 0x10) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0xfffffffffffffdad, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 791.748898ms ago: executing program 2 (id=457): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, &(0x7f0000000800), &(0x7f0000000840)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001640)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='kfree\x00', r2}, 0x18) r3 = socket$inet(0x2, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x33, &(0x7f00000a2000)={0x1, &(0x7f00000002c0)=[{0x6}]}, 0x10) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00'}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="05000000040000000800000044"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000181100", @ANYRES32=r5, @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r6, 0x0, 0x5}, 0x18) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000440)=""/173) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000140)) r8 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r8, 0x29, 0x20, &(0x7f00000000c0)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0xe, 0x7ffc0002}]}) syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000001580)=ANY=[@ANYRESOCT=r8, @ANYRESOCT, @ANYRESOCT, @ANYRES64=0x0, @ANYBLOB="b7ad7cd65c46a5be7840094fc88ed300444000f8ac89758d3a070000000000000096a99f88ba68f3377383de4de11c07aa5d22d9f4f3c58344d6011b6ea5ee82cf40e4ca5976370cb73c872e576f936791a0ffa5639ac237214be5926acea5405e00f1a144cf7a5240bc1e56ed617e19d6a5a268505f0012b4baf36d3a71eb34c8b67281dbba4b20c3d724ef150deff6f7d908bc72575a1f43b608e0d118", @ANYBLOB="a1fffd2e4c38a7b17fef1a78ad1943012e7b7711a1517cd8b4288a2fbb7d202d8c4a1809add074e6dde0703158125f2f114c49f5ee5f249d63ac0d851c212ccd8d82b7c694ead23c417021e8bc78d646d07e3513568bb81d2179a012dcdcb845b0a58b6d5e46a177de56e3e77ed573967e4eea299078019693ca486edbaa44e947802c7f46f1de18cf7f0e1af02964d04cc84d979855e8d3a3fda262f6a7d2b4b4849fd880c9b9af9be818ba05386754a3505e833ca0b9770f63e91f3a9a04e9fca51d88273d5491ed", @ANYRESOCT=r8], 0x1, 0x7dc, &(0x7f0000000d80)="$eJzs3U9sHGcVAPC3rt0EF0VVqdIQpekkLVIqpe563bpYPbTb9diedr1r7a6RI0Bt1DiVFaetWipoDoRcWkBFiBPHwrU3LgiEBBIH4IRED1y4VeoJFQQSAiEko5nddfxnbSfN37a/nxXP55k3871vPJm3Y3tmAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACIUm26XB4vRT1rLC4l2wxFRHJvL3Z+2+K1tbW1bqu/vd9smuzSb0Qp/xf798eh7qxD915efDD/dDyOdL86Evvzyf64cNfBu5/8wvBQf/3tCV+zY1cYV4r4Tp7UudOrq8uv3YBEbqLv/2q3pcODZv6n+L7Ppo2s3czmq7NpkrWbydTkZPnRuZl2MpPV0/apdiedT2qttNpptpITtYeT8ampiSQdO9VcbMxOV+tpf+YTj1TK5cnk2bGLEdFuNh59dqxdm8vq9awxW8RUyt+MPOaJpDbdei7rJJ20Op8kZ1dWlyf2Gl0eNL7L8iMP3f3hGx/8c2U5PyB3Cir1DszK+HilMj75+NTjT5TLw5VyZfOM8haxHhFDEXnEDTlouX0Up8zdXJ8TN1wHQ736H/XIohGLsRTJgI+RqMV0tKIZ8/nXfx7ZFtHTr/9fevRvf9yt3431v1/lD11efDiK+n+0+9XRner/wFyv58dQL5+dlr8eb8aFOBenYzVWYzleu+EZXePH0BVHHvv8FUTNRhqNyKIdzchiPqrFnKQ3J4mpmIzJKMfzMRcz0Y4kZiKLeqTRjlPRjk6kxRFVi1akUY1ONKMVSZyIWjwcSYzHVEzFRCSRxlicimYsRiNmYzqqxVbOxkqx3ye25HXw2y/88qU/ffhu3l4PGt9lIKX8xVwe9I9dgraV+yuv/2vRi1D/P+uu8xkcPr61fv0HAAAAPrVKxU/f8+v/kbi/aM1k9fSrtzotAAAA4DoqfvN/JJ+M5K37o5Rf/5cHRL5/03MDAAAAro9ScY9dKSJG44Fuq3+71KAfAgAAAACfQMXv/4/mk9GIi8UM1/8AAADwKfPdnZ6x/0H/GbvthX2lX/89Wq2R0qWFpYdK56t5XPX8Hd31epOvrG+xM3O4tD+6Gym2NTl84a5SRAzX0iOl/tMv/7evO/2o+Hx4eH31nZ71X9qSwPoad2wdUp7AgQtbEjhYdPxOHOvGHDvTnZ7pxfWeSDw6k9XTsVqz/mTxSMT8X+eNl1e+FcXwv9eYP1CKsyury2MvvrJ6psjlUr6VS+d7D1Dc9hzFwbkUPa719kDcP3jEI8WNGL1+R7v9ljd+A4aeLlYf2r3P0sY+34rj3Zjjo93p6Obx78/7HB97cjyq1QNDnXSp88bahtH3shi/xpG/FQ92Yx488WB3MiCLyqYsXt6eRWVjFr2dsMe+2DOLkd6B9e6xi0v/+l2zlE7slcXEliz2X2UWALfK2eKpP5er0OeKKvTfta68/l+uu0k3oKd3lrtvfVP5Wa5fBrac5c7G+pL++htq3XBsq+5bX17Ell52OKOf6Mac6L6eGD48oK6UB5zRX1159fe9M/pj7/34J18/+oefffzq9l483I3pTeKe3+5QY/Mx/6AxP9rf6NJTvcZPd+y3Xa+UYiTijm+cfzUOvv7mhUdWzp9+afml5ZcrlYnJ8mPl8uOVGCleKvQmag8AA+z9Hjt7RpQe2+Oq+p71PykYixfjlViNM3GyuNsgIh4YvNXRDX+GcDKOR3GxvMNV6+iGd3g5uce15eXYyvbY/uuKbbETG/bYfT8qJv++gd8UALjBju9Rh6+k/p/c47p7cy3fcnUcO9fyQb58Q/cGAHw2pK2PSqOdt0utVrbw/PjU1Hi1M5cmrWbtuaSVTc+mSdbopK3aXLUxmyYLrWanWev/4Hg6bSftxYWFZquTzDRbyUKznS0V7/ye9N76vZ3OVxudrNZeqKfVdprUmo1OtdZJprN2LVm485l61p5LW8XK7YW0ls1ktWonazaSdnOxVUvHkqSdpsnCYj8wm04bnWwmy5uNZKGVzVdblyKivjifJtNpu9bKFjrN1hfzDdaaUfSVNWaarflis2Pbh//Xm72/AeB28PqbF86dXl1dfm1z40BsnbOlMRxF4y+7xfQbt3qMAMBmqjQAAAAAAAAAAAAAANz+tt+ul8/d85a+QY19cfVr7Yur6uIaG/nQenPe+fnXXvzYI/1kNPLh3QZp3NrGC089dW6nmGcuHpq7su0M/p8y6FbXtw9E3PmLH3bnPH2zRvr+5QP7alZfK+0Sc2vPSwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwyP8DAAD//82FVnI=") syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210000, &(0x7f00000004c0)={[{@acl}, {@barrier}, {@barrier_val}, {@sysvgroups}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@resuid}, {@nodelalloc}, {@acl}, {@noinit_itable}]}, 0xfc, 0x587, &(0x7f0000002100)="$eJzs3U1rG9caAOB3ZMn5cO6NAyHcexeXQBZNSSPHdj9SKDRdljY00O5TYSsmWI6CJYfYDTRZNJtuSiiU0kDpD+i+y9A/0F8RaAOhBNMuSkFl5JGt2JIdOzJSoueBSc6ZD595feY9PqORUABD62T6Ty7ivxHxVRJxtG1bPrKNJ9f2W31yayZdkmg0Pv49iSRb19o/yf4fyyr/iYifv4g4k9vabm15Zb5UqZQXs/pEfeH6RG155ezVhdJcea58bWp6+vwb01Nvv/Vmz2J99dKf33704P3zX55a/ebHR8fuJXEhjmTb2uN4DrfbKydLf2elQlzYtONkDxobJEm/T4A9GcnyvBDpGHA0RrKsB15+n0dEY02uAQyZpJn/YxvjADAkWvOA1r19j+6DXxiP31u7AWrGPtoef37ttZE42Lw3OryaPHVnlN7vjveg/bSNn367fy9dYvvXIQ7tUAfYldt3IuJcPr91/E+y8W/vzjVfPN7e5jaG7e8P9NODdP7zWqf5X259/hMd5j9jHXJ3L3bO/9yjHjTTVTr/e6fj/Hd96BofyWr/as75CsmVq5XyuYj4d0ScjsKBtL7d85zzqw8b3ba1z//SJW2/NRfMzuNR/sDTx8yW6qWIGH2euFse34n4X75T/Ml6/ycd+j/9fVzq+BMLW9acKN//f7f2d45/fzV+iHilY/9vPNFKtn8+OdG8HiZaV8VWf9w98Uu39vsdf9r/h7ePfzxpf15b230b3x/8q9xt216v/9Hkk2a5lQQ3S/X64mTEaPJhs36wff3UxrGtemv/NP7Tp7Yf/zpd/+nN16fPGP/d43e77joI/T+7q/7ffeHhB5991639Z+v/15ul09mabPzrLLtWnvUEn/f3BwAAAAAAAIMkFxFHIskV18u5XLG49v6O43E4V6nW6meuVJeuzUbzs7LjUci1nnQfbXs/xGT2fthWfWpTfToijkXE1yOHmvXiTLUy2+/gAQAAAAAAAAAAAAAAAAAAYECMdfn8f+rXkX6fHbDvml9scKDfZwH0w45f+d+Lb3oCBtKO+Q+8tOQ/DC/5D8NL/sPwkv8wvOQ/DC/5D8NL/gMAAAAAAAAAAAAAAAAAAAAAAAAAAEBPXbp4MV0aq09uzaT12RvLS/PVG2dny7X54sLSTHGmuni9OFetzlXKxZnqwk4/r1KtXp+ciqWbE/VyrT5RW165vFBdula/fHWhNFe+XC5s7Jrb38gAAAAAAAAAAAAAAAAAAADgxVFbXpkvVSrlRYWuhXdjIE5jPwNcs6fD84MShUKXwp2se3d3VB8HJQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADY5J8AAAD//9ybLZI=") syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1a4a438, &(0x7f00000008c0)=ANY=[], 0xc, 0x0, &(0x7f0000000000)) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) vmsplice(r9, &(0x7f00000005c0)=[{&(0x7f0000001cc0)="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", 0x341}], 0x1, 0x0) fcntl$setpipe(r9, 0x407, 0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000cbffffff00000000000000008500000041000000850000005000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 723.615389ms ago: executing program 0 (id=458): socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b000000000000"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000180)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x4f, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000b40)=@filter={'filter\x00', 0x4, 0x4, 0x4b8, 0xffffffff, 0x260, 0x260, 0xe8, 0xfeffffff, 0xffffffff, 0x3e8, 0x3e8, 0x3e8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x29}, @private2, [0xffffffff, 0xff000000, 0xff, 0xffffff00], [0xffffff00, 0xffffffff, 0xffffffff, 0xffffffff], 'hsr0\x00', 'sit0\x00', {}, {}, 0x87, 0x3, 0x4, 0x5}, 0x2f2, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x5, {0x7}}}}, {{@ipv6={@private2, @empty, [], [0x0, 0x0, 0xff000000], 'sit0\x00', 'batadv_slave_1\x00'}, 0x0, 0x138, 0x178, 0x0, {}, [@common=@srh1={{0x90}, {0x21, 0x12, 0xbe, 0x7, 0x5aa9, @ipv4={'\x00', '\xff\xff', @empty}, @private1, @local, [0xff000000, 0xff000000, 0x0, 0xff], [0xffffff00, 0xff000000, 0xff], [0x0, 0xffffff, 0xffffff00, 0x7fffff7f], 0x3c80}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x5, {0x2000010}}}}, {{@uncond, 0x0, 0x160, 0x188, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x21, 0x180, 0x5}}, @common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x3, 0x7, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, @private1, [0x0, 0x0, 0xff, 0xff], [0x0, 0xffffff00], [0x0, 0xff000000], 0x843, 0x1400}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x518) 680.85923ms ago: executing program 4 (id=459): perf_event_open$cgroup(&(0x7f0000000180)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x700, 0x0, 0x6014, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 675.819149ms ago: executing program 2 (id=460): mbind(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, &(0x7f0000000040)=0x6, 0x7, 0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYRES8=0x0], 0x0, 0x200008, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x4, &(0x7f0000000000), 0x0, 0x236, &(0x7f0000000300)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70300001d000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) msync(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000001480)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000380)="12", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f0000000240)=' ', 0x1}], 0x1}}], 0x2, 0x48800) 607.809961ms ago: executing program 2 (id=463): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) rt_sigqueueinfo(0xffffffffffffffff, 0x2b, 0x0) (fail_nth: 4) 607.565771ms ago: executing program 0 (id=464): r0 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, 0x0) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) 574.755381ms ago: executing program 4 (id=466): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41101, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async, rerun: 64) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async, rerun: 64) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) (async, rerun: 64) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) (rerun: 64) futex(0x0, 0xd, 0x0, 0x0, 0x0, 0x0) (async) prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000ffb000/0x2000)=nil) (async, rerun: 32) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000)=0x2000000, 0x300) (async, rerun: 32) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) 530.182112ms ago: executing program 1 (id=467): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000a40)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000800000095000000000000009500a5050000000077d8f3b423cdac8d8000000000000020e16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0f68a7d06d10bfe150a7487535f7866907dc6751dfb261a0e3ccae669e173a649c1cfd6587d452d46b7c57d77578f4c35235138d5521f9453559c3421eed73d5661cfeecf9c66c54c3b3ffe1b4ce25d7c983c044c03bf3ff03fe3e26e7a23129d6606fd28a7f9105f82317874b33d96b39fa4e045469989d552af6200000003a00000000000000abecc2f4a3799af2551ce935b0f327cb3f011a7d06602e2fd5234712596b696418f1623ed38ae89d24e14b40234756ddcebfba2f87925bfacba83109753f543ad027edd68149ee99eebc6f7d6dd4aed4afe1f44ccb19e810879b70a70900000000000000000000d7900a820b6327944e9a217b9800e02a92895614cd50cbf83a1ed25268816b004519c9c5cff097d8000000000009d27d753a30a147b24a48435bd8a568669596e9e08679b3ce48e90defb6670c3d6209000000c773713a66b223fa8b148871c8d31d24000025449f106b99893ed20fa7a050fbbef90327e827e513e9606800000000e89f9c85c822a961546ed5363c17ff1432d08806bc376e3e69ee52b59d13182e1f24ed208ada12f7a1525320e71666f472a972d5eb1affb87ba55b2d72078e9f40b4ae7dc3b2aeb0d11cd22c35d32940f19dff00ffffffff080000ff003853e59de7621e348955735264f34b1046a1813668297a7edad187ef106ae7fcbb25090f17d0baadeb8ae190a1fb5a315f8347fb0379659500000000000000000000000000000000000000002fdf0193ec79c90ed210ebc2fbed6d4216770c1b0dec886b388d138c2b69c6aacb714e7264093061c660a5100b7cc165889eb94c8d7c77b6fa06f1a4d8e4a6b6cb37e319c5c22f276b03cae853f42b07ca0b03b1eb32a6b1a81cd511fd0b59d57a11c6a3ebf9731464ad21f07f618efc31023ac60007426162b57e803519954d7c952197b0a508c0e16fda392fa84be38e937d36af1c35138e05a9e8d6dc0272de72c41500000000304402e22af23437126f330f8eb4075daaeae3134ece35cd86d95bd9836bd186c4b6565e967a4e3e86f299b7400994ba136b4eccf3b0f001a266c0d160b3ce1182001d64b52a5ce7f506295d59eea6903b84ffbabf5a5b91c1d6ecce8728a224aec66c610e3becd60a35e848c224f8251947eed20e2b612cb099bfe8924d33ba7f0691fed04a43e9c64b7a1e3165e86cdb9871c678a6bbb14821f441c6c14d1bd78d8ffdfea12c19ea04264335d60b6b7a7da6fb83f33101db32f6ab137d943dd3c1e8db9f3e1263573dc721ae82fe0bc63598751a5092c9f7dbfc39d564834e3703492c2a651643d8ce5c36d97a4812cf73fc8ea0"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0xb) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000200"/16], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, @void, @value}, 0x94) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa2c"], 0xfdef) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="1800"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000001ac0)={{0x0, 0x3, 0x8dc, 0x7, 0x3, 0x6, 0x8000000000000000, 0x9, 0x1, 0x3, 0x1, 0x0, 0x8, 0xffffffffffffffff, 0x7}}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67b}]}, 0x10) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0xfffffffffffffdad, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 529.922182ms ago: executing program 1 (id=468): prctl$PR_SET_NAME(0xf, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = fsopen(&(0x7f0000000080)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x8, 0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001300)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb01001800000000000000300000003000000002000000000000000000001304000000000000000100000500110000000000000300000000000000000000000000000901"], 0x0, 0x4a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) r2 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) r3 = socket$nl_route(0x10, 0x3, 0x0) fsmount(r1, 0x0, 0x1) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff3}}}, 0x24}}, 0x0) 244.578667ms ago: executing program 0 (id=469): r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r0, 0x0) accept4$unix(r0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYRES16=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000340)=[@window, @window={0x3, 0x2, 0xfffd}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @mss={0x2, 0x7fff}, @mss={0x2, 0xa9bd}, @mss={0x2, 0x1}, @mss={0x2, 0x6}], 0x8) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0), 0x4) recvmmsg(r1, &(0x7f0000003740)=[{{0x0, 0x0, &(0x7f0000001800)=[{0x0}], 0x1}, 0x46}], 0x1, 0x40000002, 0x0) sendto$inet(r1, &(0x7f00000004c0)="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", 0x109e8, 0x805, 0x0, 0x6) unshare(0x22020600) 244.262867ms ago: executing program 2 (id=470): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, &(0x7f0000000800), &(0x7f0000000840)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001640)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='kfree\x00', r2}, 0x18) r3 = socket$inet(0x2, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x33, &(0x7f00000a2000)={0x1, &(0x7f00000002c0)=[{0x6}]}, 0x10) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00'}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="05000000040000000800000044"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000181100", @ANYRES32=r5, @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r6, 0x0, 0x5}, 0x18) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000440)=""/173) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000140)) r8 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r8, 0x29, 0x20, &(0x7f00000000c0)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0xe, 0x7ffc0002}]}) syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000001580)=ANY=[@ANYRESOCT=r8, @ANYRESOCT, @ANYRESOCT, @ANYRES64=0x0, @ANYBLOB="b7ad7cd65c46a5be7840094fc88ed300444000f8ac89758d3a070000000000000096a99f88ba68f3377383de4de11c07aa5d22d9f4f3c58344d6011b6ea5ee82cf40e4ca5976370cb73c872e576f936791a0ffa5639ac237214be5926acea5405e00f1a144cf7a5240bc1e56ed617e19d6a5a268505f0012b4baf36d3a71eb34c8b67281dbba4b20c3d724ef150deff6f7d908bc72575a1f43b608e0d118", @ANYBLOB="a1fffd2e4c38a7b17fef1a78ad1943012e7b7711a1517cd8b4288a2fbb7d202d8c4a1809add074e6dde0703158125f2f114c49f5ee5f249d63ac0d851c212ccd8d82b7c694ead23c417021e8bc78d646d07e3513568bb81d2179a012dcdcb845b0a58b6d5e46a177de56e3e77ed573967e4eea299078019693ca486edbaa44e947802c7f46f1de18cf7f0e1af02964d04cc84d979855e8d3a3fda262f6a7d2b4b4849fd880c9b9af9be818ba05386754a3505e833ca0b9770f63e91f3a9a04e9fca51d88273d5491ed", @ANYRESOCT=r8], 0x1, 0x7dc, &(0x7f0000000d80)="$eJzs3U9sHGcVAPC3rt0EF0VVqdIQpekkLVIqpe563bpYPbTb9diedr1r7a6RI0Bt1DiVFaetWipoDoRcWkBFiBPHwrU3LgiEBBIH4IRED1y4VeoJFQQSAiEko5nddfxnbSfN37a/nxXP55k3871vPJm3Y3tmAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACIUm26XB4vRT1rLC4l2wxFRHJvL3Z+2+K1tbW1bqu/vd9smuzSb0Qp/xf798eh7qxD915efDD/dDyOdL86Evvzyf64cNfBu5/8wvBQf/3tCV+zY1cYV4r4Tp7UudOrq8uv3YBEbqLv/2q3pcODZv6n+L7Ppo2s3czmq7NpkrWbydTkZPnRuZl2MpPV0/apdiedT2qttNpptpITtYeT8ampiSQdO9VcbMxOV+tpf+YTj1TK5cnk2bGLEdFuNh59dqxdm8vq9awxW8RUyt+MPOaJpDbdei7rJJ20Op8kZ1dWlyf2Gl0eNL7L8iMP3f3hGx/8c2U5PyB3Cir1DszK+HilMj75+NTjT5TLw5VyZfOM8haxHhFDEXnEDTlouX0Up8zdXJ8TN1wHQ736H/XIohGLsRTJgI+RqMV0tKIZ8/nXfx7ZFtHTr/9fevRvf9yt3431v1/lD11efDiK+n+0+9XRner/wFyv58dQL5+dlr8eb8aFOBenYzVWYzleu+EZXePH0BVHHvv8FUTNRhqNyKIdzchiPqrFnKQ3J4mpmIzJKMfzMRcz0Y4kZiKLeqTRjlPRjk6kxRFVi1akUY1ONKMVSZyIWjwcSYzHVEzFRCSRxlicimYsRiNmYzqqxVbOxkqx3ye25HXw2y/88qU/ffhu3l4PGt9lIKX8xVwe9I9dgraV+yuv/2vRi1D/P+uu8xkcPr61fv0HAAAAPrVKxU/f8+v/kbi/aM1k9fSrtzotAAAA4DoqfvN/JJ+M5K37o5Rf/5cHRL5/03MDAAAAro9ScY9dKSJG44Fuq3+71KAfAgAAAACfQMXv/4/mk9GIi8UM1/8AAADwKfPdnZ6x/0H/GbvthX2lX/89Wq2R0qWFpYdK56t5XPX8Hd31epOvrG+xM3O4tD+6Gym2NTl84a5SRAzX0iOl/tMv/7evO/2o+Hx4eH31nZ71X9qSwPoad2wdUp7AgQtbEjhYdPxOHOvGHDvTnZ7pxfWeSDw6k9XTsVqz/mTxSMT8X+eNl1e+FcXwv9eYP1CKsyury2MvvrJ6psjlUr6VS+d7D1Dc9hzFwbkUPa719kDcP3jEI8WNGL1+R7v9ljd+A4aeLlYf2r3P0sY+34rj3Zjjo93p6Obx78/7HB97cjyq1QNDnXSp88bahtH3shi/xpG/FQ92Yx488WB3MiCLyqYsXt6eRWVjFr2dsMe+2DOLkd6B9e6xi0v/+l2zlE7slcXEliz2X2UWALfK2eKpP5er0OeKKvTfta68/l+uu0k3oKd3lrtvfVP5Wa5fBrac5c7G+pL++htq3XBsq+5bX17Ell52OKOf6Mac6L6eGD48oK6UB5zRX1159fe9M/pj7/34J18/+oefffzq9l483I3pTeKe3+5QY/Mx/6AxP9rf6NJTvcZPd+y3Xa+UYiTijm+cfzUOvv7mhUdWzp9+afml5ZcrlYnJ8mPl8uOVGCleKvQmag8AA+z9Hjt7RpQe2+Oq+p71PykYixfjlViNM3GyuNsgIh4YvNXRDX+GcDKOR3GxvMNV6+iGd3g5uce15eXYyvbY/uuKbbETG/bYfT8qJv++gd8UALjBju9Rh6+k/p/c47p7cy3fcnUcO9fyQb58Q/cGAHw2pK2PSqOdt0utVrbw/PjU1Hi1M5cmrWbtuaSVTc+mSdbopK3aXLUxmyYLrWanWev/4Hg6bSftxYWFZquTzDRbyUKznS0V7/ye9N76vZ3OVxudrNZeqKfVdprUmo1OtdZJprN2LVm485l61p5LW8XK7YW0ls1ktWonazaSdnOxVUvHkqSdpsnCYj8wm04bnWwmy5uNZKGVzVdblyKivjifJtNpu9bKFjrN1hfzDdaaUfSVNWaarflis2Pbh//Xm72/AeB28PqbF86dXl1dfm1z40BsnbOlMRxF4y+7xfQbt3qMAMBmqjQAAAAAAAAAAAAAANz+tt+ul8/d85a+QY19cfVr7Yur6uIaG/nQenPe+fnXXvzYI/1kNPLh3QZp3NrGC089dW6nmGcuHpq7su0M/p8y6FbXtw9E3PmLH3bnPH2zRvr+5QP7alZfK+0Sc2vPSwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwyP8DAAD//82FVnI=") syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210000, &(0x7f00000004c0)={[{@acl}, {@barrier}, {@barrier_val}, {@sysvgroups}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@resuid}, {@nodelalloc}, {@acl}, {@noinit_itable}]}, 0xfc, 0x587, &(0x7f0000002100)="$eJzs3U1rG9caAOB3ZMn5cO6NAyHcexeXQBZNSSPHdj9SKDRdljY00O5TYSsmWI6CJYfYDTRZNJtuSiiU0kDpD+i+y9A/0F8RaAOhBNMuSkFl5JGt2JIdOzJSoueBSc6ZD595feY9PqORUABD62T6Ty7ivxHxVRJxtG1bPrKNJ9f2W31yayZdkmg0Pv49iSRb19o/yf4fyyr/iYifv4g4k9vabm15Zb5UqZQXs/pEfeH6RG155ezVhdJcea58bWp6+vwb01Nvv/Vmz2J99dKf33704P3zX55a/ebHR8fuJXEhjmTb2uN4DrfbKydLf2elQlzYtONkDxobJEm/T4A9GcnyvBDpGHA0RrKsB15+n0dEY02uAQyZpJn/YxvjADAkWvOA1r19j+6DXxiP31u7AWrGPtoef37ttZE42Lw3OryaPHVnlN7vjveg/bSNn367fy9dYvvXIQ7tUAfYldt3IuJcPr91/E+y8W/vzjVfPN7e5jaG7e8P9NODdP7zWqf5X259/hMd5j9jHXJ3L3bO/9yjHjTTVTr/e6fj/Hd96BofyWr/as75CsmVq5XyuYj4d0ScjsKBtL7d85zzqw8b3ba1z//SJW2/NRfMzuNR/sDTx8yW6qWIGH2euFse34n4X75T/Ml6/ycd+j/9fVzq+BMLW9acKN//f7f2d45/fzV+iHilY/9vPNFKtn8+OdG8HiZaV8VWf9w98Uu39vsdf9r/h7ePfzxpf15b230b3x/8q9xt216v/9Hkk2a5lQQ3S/X64mTEaPJhs36wff3UxrGtemv/NP7Tp7Yf/zpd/+nN16fPGP/d43e77joI/T+7q/7ffeHhB5991639Z+v/15ul09mabPzrLLtWnvUEn/f3BwAAAAAAAIMkFxFHIskV18u5XLG49v6O43E4V6nW6meuVJeuzUbzs7LjUci1nnQfbXs/xGT2fthWfWpTfToijkXE1yOHmvXiTLUy2+/gAQAAAAAAAAAAAAAAAAAAYECMdfn8f+rXkX6fHbDvml9scKDfZwH0w45f+d+Lb3oCBtKO+Q+8tOQ/DC/5D8NL/sPwkv8wvOQ/DC/5D8NL/gMAAAAAAAAAAAAAAAAAAAAAAAAAAEBPXbp4MV0aq09uzaT12RvLS/PVG2dny7X54sLSTHGmuni9OFetzlXKxZnqwk4/r1KtXp+ciqWbE/VyrT5RW165vFBdula/fHWhNFe+XC5s7Jrb38gAAAAAAAAAAAAAAAAAAADgxVFbXpkvVSrlRYWuhXdjIE5jPwNcs6fD84MShUKXwp2se3d3VB8HJQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADY5J8AAAD//9ybLZI=") syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1a4a438, &(0x7f00000008c0)=ANY=[], 0xc, 0x0, &(0x7f0000000000)) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) vmsplice(r9, &(0x7f00000005c0)=[{&(0x7f0000001cc0)="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", 0x341}], 0x1, 0x0) fcntl$setpipe(r9, 0x407, 0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000cbffffff00000000000000008500000041000000850000005000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 244.120987ms ago: executing program 3 (id=471): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000000000000000ac1e000100000000000000000000000000000000000000000a00"], 0xb8}}, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="2400000076001f03000000000000000008000000ffffffff0c000d"], 0x24}], 0x1}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x2500, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="6501000014"], 0x188}}, 0x0) 243.908207ms ago: executing program 4 (id=472): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f3, &(0x7f0000000340)={'sit0\x00', &(0x7f0000000380)={'erspan0\x00', 0x0, 0x0, 0x10, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x1c, 0x14, 0x0, 0x0, 0x3, 0x89, 0x0, @remote, @loopback}}}}) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f00000001c0)={@private2={0xfc, 0x2, '\x00', 0x85}, @private1={0xfc, 0x1, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x1}, 0x5ff, 0x10, 0x3, 0x400, 0xb9bf, 0x1180118}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000ac0)={0x18, 0x5, &(0x7f0000000780)=ANY=[@ANYRES16=r1], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000003c0)='kfree\x00', r3}, 0x10) r4 = syz_open_procfs$namespace(0x0, 0x0) syz_emit_ethernet(0x308, &(0x7f0000001100)=ANY=[@ANYBLOB="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"], 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000001b40)={0x1c, 0x20000000000000bb, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x22, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffff55, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x400e, &(0x7f0000000300), 0x1, 0x440, &(0x7f0000000cc0)="$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") r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYRES8=r4, @ANYRESHEX=r5], &(0x7f00000004c0)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x69e1, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{}, &(0x7f0000000000), &(0x7f00000005c0)=r7}, 0x20) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0xfff, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffff30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a, @void, @value}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r8}, 0x18) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000080)=0x9, 0x8, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="180600000000000016d159d9addfe946f47111dae6024567272dd7161bf77ed48dd3f1e81ce0387091d2064c371cdd5698e9da13d38a00000000000000"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x810) r9 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r9, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) r10 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSWINSZ(r10, 0x5414, &(0x7f0000000740)={0xb, 0x0, 0x3, 0x7fff}) 243.700996ms ago: executing program 1 (id=473): r0 = socket(0x11, 0x2, 0x0) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000000)={r2, 0x2}, 0xc) 170.442497ms ago: executing program 3 (id=474): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="020000e8ff617050000000000020000000000000004590", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800db649b370000000000000000000018110000", @ANYRES32=r1, @ANYRES64=r0], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1200000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000480)='kfree\x00', r2}, 0x10) pipe2(&(0x7f0000001cc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB="b27e9a0ea6a7185ba188937b0ad9e9e065826c000000", @ANYRESDEC=0x0, @ANYBLOB=',\x00']) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="25034fe3000000080000000000000000000000ffff00000000000000"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000c00)=ANY=[@ANYBLOB="18394890000000000000000200000000181100008bce624b9fd7c187a0a2fd4f97d3f09ebd56d6ae952b1cfa66921d20599cf2228acd4c440f9931b1dad8e1ef615619eef95940b1a45f3368b82ff00ba5fd5350ab98928590ae47dd41d8ec1c2459fb2d6786050128ae9da1ffa6317a986f3b7c14241eea64daf8eb6466ed5ef43209dceb2b17b1e9cfbbb6fa78bafce47741f0a1f63770", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x18, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000b00)=ANY=[@ANYBLOB="1809000004000000000000000000000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b703000000d291324492445b3b000000b7000000000000809500000000000000f73a1f8271f8b576624173491165cfa8dbd0cb5c2d186e19acafc0e1dd993d3fa07391b442cfc2e4930cbdda24e767f0e4db0305273d0c213b3926f0adc342173143571f226e06a5c90e45a35a80f233c93579f17c028e0144854f62814e7c20f8845820544304670c429d5bf7002b281c12b044a18f9d32972e76405327b62d1703711ff63334325db64e2c5a67c31098bf3f"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r7}, &(0x7f0000000540), &(0x7f0000000580)=r8}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r7, &(0x7f0000000780)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002d40)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = gettid() r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000e00007b8af8ff00000000bfa200000000000007"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kfree\x00', r12}, 0x18) sendmsg$unix(r10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000007c0)='>', 0x1}], 0x1, &(0x7f0000001040)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r11, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32=r10, @ANYRES32=r9, @ANYRES32=r9, @ANYRES32=r10, @ANYRES32=r9, @ANYRES32=r10, @ANYRES32=r9, @ANYRES32=r10, @ANYBLOB="1c000000000000000100000402000000", @ANYRES32, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r9, @ANYBLOB="e5ffff6e18"], 0xa0}, 0x4004881) recvmsg(r9, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x160) sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000400)=ANY=[@ANYBLOB="e500daaa1eee6c73aa102461aa9b5d25e0c41d7d28aa1791c9899b6fe440e5d5beff8d38ba3ecb4621113bc64ad6f3", @ANYRES16=0x0, @ANYBLOB="010026bd7000fcdbdf2503000000040001800800040008000000"], 0x20}}, 0x4004) r13 = socket(0x10, 0x3, 0x0) r14 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r13, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000d00)=@newqdisc={0x3b4, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r15, {0x0, 0xa}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x384, 0x2, [@TCA_CHOKE_PARMS={0x14}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_PARMS={0x14}, @TCA_CHOKE_PARMS={0x2}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_STAB={0x104, 0x2, "dc542b4e237011fb38ddb228806571a8633206e26df63a43bbc516382325dedd79c1cf0a26379dfaf72cb5ab9ab7efe16f312ee9ab598d1ac0d7903ac69c51f1b6842ebecf00dec5deff737b59f0c1f0b57cc6c2b7b8c5b2c527aafa57222f4bd2355ccab39fa20d4033b6b687491532080101805feb9c6fa8a56a77186efcb394ce1a1cd7f2130835e3bf9e3ac25d0a102a808be13beb51f37da6d10046f131834545ee5013f43e41e91eb18a12c28540ab4106286e0f7568f6a9cd0c0da51df08e42848096b25d455ebec9adfd6e493d8c9725bc2d49bbbae0a5375b359f91d9dad20ed109ffbc52469cffd2cf5df7773f7a4c72ae167485315c326281efc4"}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x0, 0x0, 0x15, 0x0, 0x10}}, @TCA_CHOKE_PARMS={0x14}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}]}}]}, 0x3b4}}, 0x0) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r1, &(0x7f0000000300)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000002c0)={&(0x7f0000000a40)=ANY=[@ANYBLOB="90000000", @ANYRES16=0x0, @ANYBLOB="000129bd7000fbdbdf250500000005000500f900000008000300cccf314f080003000600000008000200010000001c00068008000300ac1414aa08000700", @ANYRES32=r15, @ANYBLOB="0800030064010102080004000300000030000680060005004e220000060001000200000005000200ff00000014000400fe80000000000000000000000000003e0800030002000000"], 0x90}, 0x1, 0x0, 0x0, 0x34000000}, 0x4000000) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000010000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a60000000060a01040000000000001d000200000034000480300001800e000100696d6d6564696174650000001c000280100002800c00028008000180f6fffffc08000140000000000900010073797a30000000000900020073797a32"], 0x88}}, 0x0) 170.232548ms ago: executing program 1 (id=475): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@window, @window={0x3, 0x2, 0xfffd}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @mss={0x2, 0x7fff}, @mss={0x2, 0xa9bd}, @mss={0x2, 0x1}, @mss={0x2, 0x6}], 0x8) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f00000004c0), 0x0, 0x805, 0x0, 0x0) 147.414668ms ago: executing program 1 (id=476): socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b000000000000"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000180)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x4f, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000b40)=@filter={'filter\x00', 0x4, 0x4, 0x4b8, 0xffffffff, 0x260, 0x260, 0xe8, 0xfeffffff, 0xffffffff, 0x3e8, 0x3e8, 0x3e8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x29}, @private2, [0xffffffff, 0xff000000, 0xff, 0xffffff00], [0xffffff00, 0xffffffff, 0xffffffff, 0xffffffff], 'hsr0\x00', 'sit0\x00', {}, {}, 0x87, 0x3, 0x4, 0x5}, 0x2f2, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x5, {0x7}}}}, {{@ipv6={@private2, @empty, [], [0x0, 0x0, 0xff000000], 'sit0\x00', 'batadv_slave_1\x00'}, 0x0, 0x138, 0x178, 0x0, {}, [@common=@srh1={{0x90}, {0x21, 0x12, 0xbe, 0x7, 0x5aa9, @ipv4={'\x00', '\xff\xff', @empty}, @private1, @local, [0xff000000, 0xff000000, 0x0, 0xff], [0xffffff00, 0xff000000, 0xff], [0x0, 0xffffff, 0xffffff00, 0x7fffff7f], 0x3c80}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x5, {0x2000010}}}}, {{@uncond, 0x0, 0x160, 0x188, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x21, 0x180, 0x5}}, @common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x3, 0x7, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, @private1, [0x0, 0x0, 0xff, 0xff], [0x0, 0xffffff00], [0x0, 0xff000000], 0x843, 0x1400}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x518) 95.168269ms ago: executing program 1 (id=477): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f0", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000980)=@delchain={0x34, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x3f, &(0x7f00000001c0)={&(0x7f0000000000)=@delchain={0x24, 0x11, 0x1, 0x1f, 0x0, {0x0, 0x0, 0x0, r6}}, 0x24}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) 0s ago: executing program 3 (id=478): mbind(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, &(0x7f0000000040)=0x6, 0x7, 0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYRES8=0x0], &(0x7f0000000080)='GPL\x00', 0x200008, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x4, &(0x7f0000000000), 0x0, 0x236, &(0x7f0000000300)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70300001d000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000380)=[{0x200000000006, 0x1, 0x7, 0x7ffc1ffb}]}) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) syz_usb_disconnect(0xffffffffffffffff) shutdown(r2, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000000, 0x110, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) r3 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000900)=@mangle={'mangle\x00', 0x44, 0x6, 0x510, 0x3a8, 0x210, 0x210, 0x0, 0x138, 0x478, 0x478, 0x478, 0x478, 0x478, 0x6, 0x0, {[{{@ip={@broadcast, @multicast1=0xe0007600, 0x0, 0x0, 'geneve1\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'batadv_slave_1\x00', 'veth1_virt_wifi\x00', {}, {}, 0x11}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}]}, @unspec=@CHECKSUM={0x28}}, {{@ip={@loopback, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_team\x00'}, 0x0, 0x70, 0x198}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x0, 'system_u:object_r:dbusd_etc_t:s0\x00'}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0xa0, 0xd0, 0x0, {}, [@common=@unspec=@mac={{0x30}, {@multicast}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x570) kernel console output (not intermixed with test programs): 4-fs (loop0): 1 truncate cleaned up [ 41.900809][ T3582] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.074636][ T3596] IPv6: Can't replace route, no match found [ 42.172698][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.256750][ T3602] loop0: detected capacity change from 0 to 512 [ 42.270340][ T3602] EXT4-fs: Ignoring removed mblk_io_submit option [ 42.299813][ T3602] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 42.323203][ T3598] netlink: 'syz.1.38': attribute type 1 has an invalid length. [ 42.331117][ T3598] netlink: 224 bytes leftover after parsing attributes in process `syz.1.38'. [ 42.342463][ T3602] EXT4-fs (loop0): 1 truncate cleaned up [ 42.348746][ T3602] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.433991][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.585325][ T3305] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 42.650311][ T3608] netlink: 112 bytes leftover after parsing attributes in process `syz.4.41'. [ 42.662591][ T3605] netlink: 'syz.0.40': attribute type 1 has an invalid length. [ 42.670404][ T3605] netlink: 224 bytes leftover after parsing attributes in process `syz.0.40'. [ 42.718061][ T3611] x_tables: ip_tables: udp match: only valid for protocol 17 [ 42.797485][ T3615] netlink: 68 bytes leftover after parsing attributes in process `syz.4.44'. [ 42.943120][ T3626] loop3: detected capacity change from 0 to 512 [ 42.952523][ T3626] EXT4-fs: Ignoring removed mblk_io_submit option [ 42.961001][ T3626] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 43.006336][ T3626] EXT4-fs (loop3): 1 truncate cleaned up [ 43.013931][ T3626] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.026691][ T3630] loop2: detected capacity change from 0 to 512 [ 43.040116][ T3624] netlink: 24 bytes leftover after parsing attributes in process `syz.0.49'. [ 43.085032][ T3630] EXT4-fs: Ignoring removed mblk_io_submit option [ 43.155831][ T3634] loop1: detected capacity change from 0 to 512 [ 43.162517][ T3624] netlink: 4 bytes leftover after parsing attributes in process `syz.0.49'. [ 43.184409][ T3630] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 43.236366][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.247300][ T3630] EXT4-fs (loop2): 1 truncate cleaned up [ 43.253348][ T3630] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.271208][ T3634] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 43.338374][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.409405][ T3634] EXT4-fs (loop1): 1 truncate cleaned up [ 43.416978][ T3646] loop2: detected capacity change from 0 to 128 [ 43.475584][ T3648] loop3: detected capacity change from 0 to 512 [ 43.491276][ T3634] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.504606][ T3649] loop0: detected capacity change from 0 to 128 [ 43.513092][ T3646] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 43.543546][ T3649] EXT4-fs: Ignoring removed nobh option [ 43.553946][ T3646] ext4 filesystem being mounted at /5/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 43.567679][ T3648] EXT4-fs: Ignoring removed mblk_io_submit option [ 43.609549][ T3648] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 43.677605][ T3649] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 43.685386][ T3648] EXT4-fs (loop3): 1 truncate cleaned up [ 43.723772][ T3648] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.759349][ T3649] ext4 filesystem being mounted at /12/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 43.833401][ T3646] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 43.985374][ T3659] FAULT_INJECTION: forcing a failure. [ 43.985374][ T3659] name failslab, interval 1, probability 0, space 0, times 0 [ 43.998110][ T3659] CPU: 1 UID: 0 PID: 3659 Comm: syz.4.59 Not tainted 6.16.0-rc2-syzkaller-00269-g11313e2f7812 #0 PREEMPT(voluntary) [ 43.998143][ T3659] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 43.998155][ T3659] Call Trace: [ 43.998161][ T3659] [ 43.998169][ T3659] __dump_stack+0x1d/0x30 [ 43.998188][ T3659] dump_stack_lvl+0xe8/0x140 [ 43.998231][ T3659] dump_stack+0x15/0x1b [ 43.998247][ T3659] should_fail_ex+0x265/0x280 [ 43.998278][ T3659] should_failslab+0x8c/0xb0 [ 43.998312][ T3659] kmem_cache_alloc_node_noprof+0x57/0x320 [ 43.998405][ T3659] ? __alloc_skb+0x101/0x320 [ 43.998441][ T3659] __alloc_skb+0x101/0x320 [ 43.998560][ T3659] tcp_stream_alloc_skb+0x2d/0x1d0 [ 43.998593][ T3659] tcp_sendmsg_locked+0x12f0/0x2cc0 [ 43.998706][ T3659] ? __rcu_read_unlock+0x4f/0x70 [ 43.998747][ T3659] ? __pfx_tcp_sendmsg+0x10/0x10 [ 43.998772][ T3659] tcp_sendmsg+0x2f/0x50 [ 43.998795][ T3659] inet_sendmsg+0x76/0xd0 [ 43.998814][ T3659] __sock_sendmsg+0x102/0x180 [ 43.998849][ T3659] sock_write_iter+0x165/0x1b0 [ 43.998873][ T3659] ? __pfx_sock_write_iter+0x10/0x10 [ 43.998892][ T3659] vfs_write+0x4a0/0x8e0 [ 43.998982][ T3659] ksys_write+0xda/0x1a0 [ 43.999006][ T3659] __x64_sys_write+0x40/0x50 [ 43.999028][ T3659] x64_sys_call+0x2cdd/0x2fb0 [ 43.999123][ T3659] do_syscall_64+0xd2/0x200 [ 43.999144][ T3659] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 43.999174][ T3659] ? clear_bhb_loop+0x40/0x90 [ 43.999199][ T3659] ? clear_bhb_loop+0x40/0x90 [ 43.999257][ T3659] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 43.999356][ T3659] RIP: 0033:0x7f19f4fae929 [ 43.999372][ T3659] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 43.999418][ T3659] RSP: 002b:00007f19f3617038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 43.999438][ T3659] RAX: ffffffffffffffda RBX: 00007f19f51d5fa0 RCX: 00007f19f4fae929 [ 43.999450][ T3659] RDX: 0000000000001006 RSI: 00002000000027c0 RDI: 0000000000000003 [ 43.999463][ T3659] RBP: 00007f19f3617090 R08: 0000000000000000 R09: 0000000000000000 [ 43.999476][ T3659] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 43.999488][ T3659] R13: 0000000000000000 R14: 00007f19f51d5fa0 R15: 00007ffc33f6c7e8 [ 43.999508][ T3659] [ 44.069443][ T3306] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 44.138452][ T29] kauditd_printk_skb: 553 callbacks suppressed [ 44.138467][ T29] audit: type=1400 audit(1750497020.998:663): avc: denied { setcheckreqprot } for pid=3660 comm="syz.0.60" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 44.159311][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.194350][ T3663] FAULT_INJECTION: forcing a failure. [ 44.194350][ T3663] name failslab, interval 1, probability 0, space 0, times 0 [ 44.194383][ T3663] CPU: 0 UID: 0 PID: 3663 Comm: syz.3.61 Not tainted 6.16.0-rc2-syzkaller-00269-g11313e2f7812 #0 PREEMPT(voluntary) [ 44.194447][ T3663] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 44.194460][ T3663] Call Trace: [ 44.194540][ T3663] [ 44.194547][ T3663] __dump_stack+0x1d/0x30 [ 44.194573][ T3663] dump_stack_lvl+0xe8/0x140 [ 44.194598][ T3663] dump_stack+0x15/0x1b [ 44.194618][ T3663] should_fail_ex+0x265/0x280 [ 44.194739][ T3663] should_failslab+0x8c/0xb0 [ 44.194768][ T3663] kmem_cache_alloc_noprof+0x50/0x310 [ 44.194799][ T3663] ? __inet_bhash2_update_saddr+0x12f/0xd40 [ 44.194888][ T3663] __inet_bhash2_update_saddr+0x12f/0xd40 [ 44.195060][ T3663] ? kcsan_setup_watchpoint+0x415/0x430 [ 44.195145][ T3663] inet_bhash2_update_saddr+0x25/0x30 [ 44.195195][ T3663] tcp_v6_connect+0x8a2/0xc10 [ 44.195229][ T3663] ? __account_obj_stock+0x211/0x350 [ 44.195285][ T3663] __inet_stream_connect+0x166/0x7e0 [ 44.195360][ T3663] ? tcp_sendmsg_fastopen+0x172/0x520 [ 44.195390][ T3663] ? should_failslab+0x8c/0xb0 [ 44.195416][ T3663] ? __kmalloc_cache_noprof+0x189/0x320 [ 44.195453][ T3663] tcp_sendmsg_fastopen+0x43a/0x520 [ 44.195515][ T3663] tcp_sendmsg_locked+0x27be/0x2cc0 [ 44.195684][ T3663] ? mntput_no_expire+0x6f/0x3c0 [ 44.195774][ T3663] ? mntput+0x4b/0x80 [ 44.195843][ T3663] ? __rcu_read_unlock+0x4f/0x70 [ 44.195867][ T3663] ? avc_has_perm_noaudit+0x1b1/0x200 [ 44.195904][ T3663] ? avc_has_perm+0xd3/0x150 [ 44.195943][ T3663] ? _raw_spin_unlock_bh+0x36/0x40 [ 44.195989][ T3663] ? __pfx_tcp_sendmsg+0x10/0x10 [ 44.196023][ T3663] tcp_sendmsg+0x2f/0x50 [ 44.196053][ T3663] inet6_sendmsg+0x76/0xd0 [ 44.196074][ T3663] __sock_sendmsg+0x8b/0x180 [ 44.196101][ T3663] __sys_sendto+0x268/0x330 [ 44.196190][ T3663] __x64_sys_sendto+0x76/0x90 [ 44.196230][ T3663] x64_sys_call+0x2eb6/0x2fb0 [ 44.196257][ T3663] do_syscall_64+0xd2/0x200 [ 44.196280][ T3663] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 44.196386][ T3663] ? clear_bhb_loop+0x40/0x90 [ 44.196412][ T3663] ? clear_bhb_loop+0x40/0x90 [ 44.196440][ T3663] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 44.196467][ T3663] RIP: 0033:0x7fb25adee929 [ 44.196567][ T3663] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 44.196643][ T3663] RSP: 002b:00007fb259457038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 44.196725][ T3663] RAX: ffffffffffffffda RBX: 00007fb25b015fa0 RCX: 00007fb25adee929 [ 44.196740][ T3663] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 44.196754][ T3663] RBP: 00007fb259457090 R08: 0000200000b63fe4 R09: 000000000000001c [ 44.196769][ T3663] R10: 0000000022004001 R11: 0000000000000246 R12: 0000000000000001 [ 44.196784][ T3663] R13: 0000000000000000 R14: 00007fb25b015fa0 R15: 00007ffebada6fc8 [ 44.196808][ T3663] [ 44.239083][ T29] audit: type=1400 audit(1750497021.098:664): avc: denied { read write } for pid=3666 comm="syz.3.63" name="uhid" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 44.239118][ T29] audit: type=1400 audit(1750497021.098:665): avc: denied { open } for pid=3666 comm="syz.3.63" path="/dev/uhid" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 44.240795][ T3396] hid-generic 0008:0006:0007.0001: unknown main item tag 0x0 [ 44.240827][ T3396] hid-generic 0008:0006:0007.0001: unknown main item tag 0x0 [ 44.240933][ T3396] hid-generic 0008:0006:0007.0001: unknown main item tag 0x0 [ 44.240960][ T3396] hid-generic 0008:0006:0007.0001: unknown main item tag 0x0 [ 44.240981][ T3396] hid-generic 0008:0006:0007.0001: unknown main item tag 0x0 [ 44.241083][ T3396] hid-generic 0008:0006:0007.0001: unknown main item tag 0x0 [ 44.241185][ T3396] hid-generic 0008:0006:0007.0001: unknown main item tag 0x0 [ 44.241211][ T3396] hid-generic 0008:0006:0007.0001: unknown main item tag 0x0 [ 44.241236][ T3396] hid-generic 0008:0006:0007.0001: unknown main item tag 0x0 [ 44.241263][ T3396] hid-generic 0008:0006:0007.0001: unknown main item tag 0x0 [ 44.241373][ T3396] hid-generic 0008:0006:0007.0001: unknown main item tag 0x0 [ 44.241405][ T3396] hid-generic 0008:0006:0007.0001: unknown main item tag 0x0 [ 44.241426][ T3396] hid-generic 0008:0006:0007.0001: unknown main item tag 0x0 [ 44.241511][ T3396] hid-generic 0008:0006:0007.0001: unknown main item tag 0x0 [ 44.241538][ T3396] hid-generic 0008:0006:0007.0001: unknown main item tag 0x0 [ 44.241562][ T3396] hid-generic 0008:0006:0007.0001: unknown main item tag 0x0 [ 44.241616][ T3396] hid-generic 0008:0006:0007.0001: unknown main item tag 0x0 [ 44.241636][ T3396] hid-generic 0008:0006:0007.0001: unknown main item tag 0x0 [ 44.241727][ T3396] hid-generic 0008:0006:0007.0001: unknown main item tag 0x0 [ 44.241753][ T3396] hid-generic 0008:0006:0007.0001: unknown main item tag 0x0 [ 44.241774][ T3396] hid-generic 0008:0006:0007.0001: unknown main item tag 0x0 [ 44.241793][ T3396] hid-generic 0008:0006:0007.0001: unknown main item tag 0x0 [ 44.241895][ T3396] hid-generic 0008:0006:0007.0001: unknown main item tag 0x0 [ 44.241950][ T3396] hid-generic 0008:0006:0007.0001: unknown main item tag 0x0 [ 44.242019][ T3396] hid-generic 0008:0006:0007.0001: unknown main item tag 0x0 [ 44.242045][ T3396] hid-generic 0008:0006:0007.0001: unknown main item tag 0x0 [ 44.242065][ T3396] hid-generic 0008:0006:0007.0001: unknown main item tag 0x0 [ 44.242085][ T3396] hid-generic 0008:0006:0007.0001: unknown main item tag 0x0 [ 44.242165][ T3396] hid-generic 0008:0006:0007.0001: unknown main item tag 0x0 [ 44.242193][ T3396] hid-generic 0008:0006:0007.0001: unknown main item tag 0x0 [ 44.242214][ T3396] hid-generic 0008:0006:0007.0001: unknown main item tag 0x0 [ 44.242233][ T3396] hid-generic 0008:0006:0007.0001: unknown main item tag 0x0 [ 44.242253][ T3396] hid-generic 0008:0006:0007.0001: unknown main item tag 0x0 [ 44.242272][ T3396] hid-generic 0008:0006:0007.0001: unknown main item tag 0x0 [ 44.242305][ T3396] hid-generic 0008:0006:0007.0001: unknown main item tag 0x0 [ 44.242332][ T3396] hid-generic 0008:0006:0007.0001: unknown main item tag 0x0 [ 44.242358][ T3396] hid-generic 0008:0006:0007.0001: unknown main item tag 0x0 [ 44.242384][ T3396] hid-generic 0008:0006:0007.0001: unknown main item tag 0x0 [ 44.242420][ T3396] hid-generic 0008:0006:0007.0001: unknown main item tag 0x0 [ 44.242514][ T3396] hid-generic 0008:0006:0007.0001: unknown main item tag 0x0 [ 44.242536][ T3396] hid-generic 0008:0006:0007.0001: unknown main item tag 0x0 [ 44.242562][ T3396] hid-generic 0008:0006:0007.0001: unknown main item tag 0x0 [ 44.242591][ T3396] hid-generic 0008:0006:0007.0001: unknown main item tag 0x0 [ 44.242617][ T3396] hid-generic 0008:0006:0007.0001: unknown main item tag 0x0 [ 44.242653][ T3396] hid-generic 0008:0006:0007.0001: unknown main item tag 0x0 [ 44.242674][ T3396] hid-generic 0008:0006:0007.0001: unknown main item tag 0x0 [ 44.242701][ T3396] hid-generic 0008:0006:0007.0001: unknown main item tag 0x0 [ 44.242726][ T3396] hid-generic 0008:0006:0007.0001: unknown main item tag 0x0 [ 44.242752][ T3396] hid-generic 0008:0006:0007.0001: unknown main item tag 0x0 [ 44.242836][ T3396] hid-generic 0008:0006:0007.0001: unknown main item tag 0x0 [ 44.242858][ T3396] hid-generic 0008:0006:0007.0001: unknown main item tag 0x0 [ 44.242884][ T3396] hid-generic 0008:0006:0007.0001: unknown main item tag 0x0 [ 44.242905][ T3396] hid-generic 0008:0006:0007.0001: unknown main item tag 0x0 [ 44.243970][ T3396] hid-generic 0008:0006:0007.0001: hidraw0: HID v0.0b Device [syz1] on syz1 [ 44.249687][ T3667] FAULT_INJECTION: forcing a failure. [ 44.249687][ T3667] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 44.249757][ T3667] CPU: 1 UID: 0 PID: 3667 Comm: syz.3.63 Not tainted 6.16.0-rc2-syzkaller-00269-g11313e2f7812 #0 PREEMPT(voluntary) [ 44.249792][ T3667] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 44.249842][ T3667] Call Trace: [ 44.249850][ T3667] [ 44.249858][ T3667] __dump_stack+0x1d/0x30 [ 44.249883][ T3667] dump_stack_lvl+0xe8/0x140 [ 44.249907][ T3667] dump_stack+0x15/0x1b [ 44.249927][ T3667] should_fail_ex+0x265/0x280 [ 44.249995][ T3667] should_fail+0xb/0x20 [ 44.250024][ T3667] should_fail_usercopy+0x1a/0x20 [ 44.250063][ T3667] _copy_to_user+0x20/0xa0 [ 44.250136][ T3667] simple_read_from_buffer+0xb5/0x130 [ 44.250189][ T3667] proc_fail_nth_read+0x100/0x140 [ 44.250215][ T3667] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 44.250287][ T3667] vfs_read+0x1a0/0x6f0 [ 44.250323][ T3667] ? __rcu_read_unlock+0x4f/0x70 [ 44.250347][ T3667] ? __fget_files+0x184/0x1c0 [ 44.250386][ T3667] ksys_read+0xda/0x1a0 [ 44.250508][ T3667] __x64_sys_read+0x40/0x50 [ 44.250586][ T3667] x64_sys_call+0x2d77/0x2fb0 [ 44.250613][ T3667] do_syscall_64+0xd2/0x200 [ 44.250636][ T3667] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 44.250725][ T3667] ? clear_bhb_loop+0x40/0x90 [ 44.250747][ T3667] ? clear_bhb_loop+0x40/0x90 [ 44.250770][ T3667] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 44.250842][ T3667] RIP: 0033:0x7fb25aded33c [ 44.250856][ T3667] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 44.250873][ T3667] RSP: 002b:00007fb259457030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 44.250894][ T3667] RAX: ffffffffffffffda RBX: 00007fb25b015fa0 RCX: 00007fb25aded33c [ 44.250909][ T3667] RDX: 000000000000000f RSI: 00007fb2594570a0 RDI: 0000000000000007 [ 44.250953][ T3667] RBP: 00007fb259457090 R08: 0000000000000000 R09: 0000000000000000 [ 44.250965][ T3667] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 44.250977][ T3667] R13: 0000000000000000 R14: 00007fb25b015fa0 R15: 00007ffebada6fc8 [ 44.251000][ T3667] [ 44.257642][ T29] audit: type=1326 audit(1750497021.108:666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3664 comm="syz.0.62" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57c6abe929 code=0x7ffc0000 [ 44.257712][ T29] audit: type=1326 audit(1750497021.108:667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3664 comm="syz.0.62" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f57c6abe929 code=0x7ffc0000 [ 44.257747][ T29] audit: type=1326 audit(1750497021.108:668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3664 comm="syz.0.62" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57c6abe929 code=0x7ffc0000 [ 44.257780][ T29] audit: type=1326 audit(1750497021.108:669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3664 comm="syz.0.62" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f57c6abe929 code=0x7ffc0000 [ 44.257829][ T29] audit: type=1326 audit(1750497021.108:670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3664 comm="syz.0.62" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57c6abe929 code=0x7ffc0000 [ 44.257901][ T29] audit: type=1326 audit(1750497021.118:671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3664 comm="syz.0.62" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f57c6abe929 code=0x7ffc0000 [ 44.257935][ T29] audit: type=1326 audit(1750497021.118:672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3664 comm="syz.0.62" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57c6abe929 code=0x7ffc0000 [ 44.320617][ T3668] fido_id[3668]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 44.386518][ T3314] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 45.462615][ T3689] __nla_validate_parse: 4 callbacks suppressed [ 45.462647][ T3689] netlink: 68 bytes leftover after parsing attributes in process `syz.2.69'. [ 46.119056][ T3703] FAULT_INJECTION: forcing a failure. [ 46.119056][ T3703] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 46.119086][ T3703] CPU: 0 UID: 0 PID: 3703 Comm: syz.3.74 Not tainted 6.16.0-rc2-syzkaller-00269-g11313e2f7812 #0 PREEMPT(voluntary) [ 46.119122][ T3703] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 46.119137][ T3703] Call Trace: [ 46.119159][ T3703] [ 46.119165][ T3703] __dump_stack+0x1d/0x30 [ 46.119185][ T3703] dump_stack_lvl+0xe8/0x140 [ 46.119253][ T3703] dump_stack+0x15/0x1b [ 46.119270][ T3703] should_fail_ex+0x265/0x280 [ 46.119301][ T3703] should_fail+0xb/0x20 [ 46.119327][ T3703] should_fail_usercopy+0x1a/0x20 [ 46.119424][ T3703] _copy_from_user+0x1c/0xb0 [ 46.119469][ T3703] ___sys_sendmsg+0xc1/0x1d0 [ 46.119550][ T3703] __x64_sys_sendmsg+0xd4/0x160 [ 46.119586][ T3703] x64_sys_call+0x2999/0x2fb0 [ 46.119609][ T3703] do_syscall_64+0xd2/0x200 [ 46.119660][ T3703] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 46.119686][ T3703] ? clear_bhb_loop+0x40/0x90 [ 46.119707][ T3703] ? clear_bhb_loop+0x40/0x90 [ 46.119735][ T3703] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 46.119902][ T3703] RIP: 0033:0x7fb25adee929 [ 46.119920][ T3703] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 46.119939][ T3703] RSP: 002b:00007fb259457038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 46.120032][ T3703] RAX: ffffffffffffffda RBX: 00007fb25b015fa0 RCX: 00007fb25adee929 [ 46.120046][ T3703] RDX: 0000000000000000 RSI: 0000200000002fc0 RDI: 0000000000000003 [ 46.120057][ T3703] RBP: 00007fb259457090 R08: 0000000000000000 R09: 0000000000000000 [ 46.120068][ T3703] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 46.120082][ T3703] R13: 0000000000000000 R14: 00007fb25b015fa0 R15: 00007ffebada6fc8 [ 46.120170][ T3703] [ 46.317985][ T3707] tipc: Started in network mode [ 46.318036][ T3707] tipc: Node identity 72acdff6fdc, cluster identity 4711 [ 46.318131][ T3707] tipc: Enabled bearer , priority 0 [ 46.616237][ T3634] syz.1.52 (3634) used greatest stack depth: 5880 bytes left [ 46.838120][ T3711] loop4: detected capacity change from 0 to 2048 [ 46.854885][ T3307] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.000460][ T3715] loop2: detected capacity change from 0 to 1024 [ 47.030506][ T3711] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.057519][ T3715] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 47.075246][ T3708] tipc: Disabling bearer [ 47.086995][ T3715] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 47.184792][ T3719] loop1: detected capacity change from 0 to 2048 [ 47.190495][ T3715] EXT4-fs error (device loop2): ext4_get_journal_inode:5796: inode #32: comm syz.2.79: iget: special inode unallocated [ 47.273555][ T3721] netlink: 68 bytes leftover after parsing attributes in process `syz.1.80'. [ 47.277563][ T3715] EXT4-fs (loop2): Remounting filesystem read-only [ 47.398986][ T3715] EXT4-fs (loop2): no journal found [ 47.399000][ T3715] EXT4-fs (loop2): can't get journal size [ 47.402903][ T3715] EXT4-fs (loop2): filesystem is read-only [ 47.426711][ T3715] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 47.440671][ T3715] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.458835][ T3723] process 'syz.1.81' launched './file0' with NULL argv: empty string added [ 47.556360][ T3731] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 47.565378][ T3729] loop0: detected capacity change from 0 to 128 [ 47.566800][ T3727] syz.3.83 uses obsolete (PF_INET,SOCK_PACKET) [ 47.588345][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.603091][ T3733] atomic_op ffff8881195f0528 conn xmit_atomic 0000000000000000 [ 47.633110][ T3729] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 47.686487][ T3729] ext4 filesystem being mounted at /15/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 47.727530][ T3742] loop2: detected capacity change from 0 to 512 [ 47.734896][ T3742] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 47.767105][ T3742] EXT4-fs (loop2): 1 truncate cleaned up [ 47.773874][ T3742] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.840813][ T3754] netlink: 68 bytes leftover after parsing attributes in process `syz.3.91'. [ 47.908037][ T3729] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 47.932547][ T3759] FAULT_INJECTION: forcing a failure. [ 47.932547][ T3759] name failslab, interval 1, probability 0, space 0, times 0 [ 47.945281][ T3759] CPU: 0 UID: 0 PID: 3759 Comm: syz.4.93 Not tainted 6.16.0-rc2-syzkaller-00269-g11313e2f7812 #0 PREEMPT(voluntary) [ 47.945391][ T3759] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 47.945403][ T3759] Call Trace: [ 47.945410][ T3759] [ 47.945418][ T3759] __dump_stack+0x1d/0x30 [ 47.945519][ T3759] dump_stack_lvl+0xe8/0x140 [ 47.945539][ T3759] dump_stack+0x15/0x1b [ 47.945556][ T3759] should_fail_ex+0x265/0x280 [ 47.945589][ T3759] should_failslab+0x8c/0xb0 [ 47.945613][ T3759] __kmalloc_noprof+0xa5/0x3e0 [ 47.945685][ T3759] ? genl_family_rcv_msg_attrs_parse+0x75/0x190 [ 47.945717][ T3759] genl_family_rcv_msg_attrs_parse+0x75/0x190 [ 47.945804][ T3759] ? selinux_capable+0x1f9/0x270 [ 47.945838][ T3759] genl_family_rcv_msg_doit+0x48/0x1b0 [ 47.945905][ T3759] ? security_capable+0x83/0x90 [ 47.945942][ T3759] ? ns_capable+0x7d/0xb0 [ 47.945965][ T3759] genl_rcv_msg+0x422/0x460 [ 47.945994][ T3759] ? __pfx_smc_pnet_add+0x10/0x10 [ 47.946050][ T3759] netlink_rcv_skb+0x120/0x220 [ 47.946103][ T3759] ? __pfx_genl_rcv_msg+0x10/0x10 [ 47.946146][ T3759] genl_rcv+0x28/0x40 [ 47.946177][ T3759] netlink_unicast+0x5a1/0x670 [ 47.946223][ T3759] netlink_sendmsg+0x58b/0x6b0 [ 47.946252][ T3759] ? __pfx_netlink_sendmsg+0x10/0x10 [ 47.946279][ T3759] __sock_sendmsg+0x142/0x180 [ 47.946314][ T3759] ____sys_sendmsg+0x31e/0x4e0 [ 47.946443][ T3759] ___sys_sendmsg+0x17b/0x1d0 [ 47.946506][ T3759] __x64_sys_sendmsg+0xd4/0x160 [ 47.946555][ T3759] x64_sys_call+0x2999/0x2fb0 [ 47.946599][ T3759] do_syscall_64+0xd2/0x200 [ 47.946624][ T3759] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 47.946720][ T3759] ? clear_bhb_loop+0x40/0x90 [ 47.946823][ T3759] ? clear_bhb_loop+0x40/0x90 [ 47.946861][ T3759] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 47.946890][ T3759] RIP: 0033:0x7f19f4fae929 [ 47.946911][ T3759] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 47.946935][ T3759] RSP: 002b:00007f19f3617038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 47.947030][ T3759] RAX: ffffffffffffffda RBX: 00007f19f51d5fa0 RCX: 00007f19f4fae929 [ 47.947047][ T3759] RDX: 000000000000c800 RSI: 00002000000001c0 RDI: 0000000000000004 [ 47.947083][ T3759] RBP: 00007f19f3617090 R08: 0000000000000000 R09: 0000000000000000 [ 47.947100][ T3759] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 47.947117][ T3759] R13: 0000000000000000 R14: 00007f19f51d5fa0 R15: 00007ffc33f6c7e8 [ 47.947145][ T3759] [ 48.002391][ T3766] loop4: detected capacity change from 0 to 2048 [ 48.029040][ T3766] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.439459][ T3776] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 48.480913][ T3306] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 48.520187][ T3782] FAULT_INJECTION: forcing a failure. [ 48.520187][ T3782] name failslab, interval 1, probability 0, space 0, times 0 [ 48.533168][ T3782] CPU: 1 UID: 0 PID: 3782 Comm: syz.3.100 Not tainted 6.16.0-rc2-syzkaller-00269-g11313e2f7812 #0 PREEMPT(voluntary) [ 48.533199][ T3782] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 48.533211][ T3782] Call Trace: [ 48.533218][ T3782] [ 48.533225][ T3782] __dump_stack+0x1d/0x30 [ 48.533245][ T3782] dump_stack_lvl+0xe8/0x140 [ 48.533339][ T3782] dump_stack+0x15/0x1b [ 48.533357][ T3782] should_fail_ex+0x265/0x280 [ 48.533431][ T3782] should_failslab+0x8c/0xb0 [ 48.533458][ T3782] kmem_cache_alloc_node_noprof+0x57/0x320 [ 48.533516][ T3782] ? __alloc_skb+0x101/0x320 [ 48.533544][ T3782] __alloc_skb+0x101/0x320 [ 48.533575][ T3782] tipc_nl_compat_doit+0xcc/0x360 [ 48.533606][ T3782] tipc_nl_compat_recv+0x689/0x800 [ 48.533690][ T3782] ? __pfx___tipc_nl_bearer_disable+0x10/0x10 [ 48.533781][ T3782] ? __pfx_tipc_nl_compat_bearer_disable+0x10/0x10 [ 48.533873][ T3782] genl_family_rcv_msg_doit+0x143/0x1b0 [ 48.533911][ T3782] genl_rcv_msg+0x422/0x460 [ 48.533947][ T3782] ? __pfx_tipc_nl_compat_recv+0x10/0x10 [ 48.533973][ T3782] netlink_rcv_skb+0x120/0x220 [ 48.534015][ T3782] ? __pfx_genl_rcv_msg+0x10/0x10 [ 48.534058][ T3782] genl_rcv+0x28/0x40 [ 48.534149][ T3782] netlink_unicast+0x5a1/0x670 [ 48.534179][ T3782] netlink_sendmsg+0x58b/0x6b0 [ 48.534198][ T3782] ? __pfx_netlink_sendmsg+0x10/0x10 [ 48.534220][ T3782] __sock_sendmsg+0x142/0x180 [ 48.534286][ T3782] ____sys_sendmsg+0x31e/0x4e0 [ 48.534386][ T3782] ___sys_sendmsg+0x17b/0x1d0 [ 48.534430][ T3782] __x64_sys_sendmsg+0xd4/0x160 [ 48.534480][ T3782] x64_sys_call+0x2999/0x2fb0 [ 48.534505][ T3782] do_syscall_64+0xd2/0x200 [ 48.534525][ T3782] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 48.534553][ T3782] ? clear_bhb_loop+0x40/0x90 [ 48.534601][ T3782] ? clear_bhb_loop+0x40/0x90 [ 48.534629][ T3782] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 48.534750][ T3782] RIP: 0033:0x7fb25adee929 [ 48.534767][ T3782] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 48.534871][ T3782] RSP: 002b:00007fb259457038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 48.534890][ T3782] RAX: ffffffffffffffda RBX: 00007fb25b015fa0 RCX: 00007fb25adee929 [ 48.534902][ T3782] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 48.534913][ T3782] RBP: 00007fb259457090 R08: 0000000000000000 R09: 0000000000000000 [ 48.534924][ T3782] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 48.534935][ T3782] R13: 0000000000000000 R14: 00007fb25b015fa0 R15: 00007ffebada6fc8 [ 48.534983][ T3782] [ 48.849305][ T3780] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 48.895004][ T3794] SELinux: syz.1.104 (3794) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 48.910092][ T3780] loop0: detected capacity change from 0 to 512 [ 48.926727][ T3794] FAULT_INJECTION: forcing a failure. [ 48.926727][ T3794] name failslab, interval 1, probability 0, space 0, times 0 [ 48.939812][ T3794] CPU: 1 UID: 0 PID: 3794 Comm: syz.1.104 Not tainted 6.16.0-rc2-syzkaller-00269-g11313e2f7812 #0 PREEMPT(voluntary) [ 48.939908][ T3794] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 48.939923][ T3794] Call Trace: [ 48.939929][ T3794] [ 48.939938][ T3794] __dump_stack+0x1d/0x30 [ 48.939960][ T3794] dump_stack_lvl+0xe8/0x140 [ 48.939979][ T3794] dump_stack+0x15/0x1b [ 48.940050][ T3794] should_fail_ex+0x265/0x280 [ 48.940089][ T3794] should_failslab+0x8c/0xb0 [ 48.940112][ T3794] __kmalloc_noprof+0xa5/0x3e0 [ 48.940217][ T3794] ? sel_write_user+0x1ac/0x440 [ 48.940245][ T3794] sel_write_user+0x1ac/0x440 [ 48.940330][ T3794] selinux_transaction_write+0xc3/0x110 [ 48.940367][ T3794] ? __pfx_selinux_transaction_write+0x10/0x10 [ 48.940401][ T3794] vfs_write+0x269/0x8e0 [ 48.940477][ T3794] ? __rcu_read_unlock+0x4f/0x70 [ 48.940505][ T3794] ? __fget_files+0x184/0x1c0 [ 48.940533][ T3794] ksys_write+0xda/0x1a0 [ 48.940553][ T3794] __x64_sys_write+0x40/0x50 [ 48.940619][ T3794] x64_sys_call+0x2cdd/0x2fb0 [ 48.940694][ T3794] do_syscall_64+0xd2/0x200 [ 48.940715][ T3794] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 48.940815][ T3794] ? clear_bhb_loop+0x40/0x90 [ 48.940934][ T3794] ? clear_bhb_loop+0x40/0x90 [ 48.940955][ T3794] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 48.940992][ T3794] RIP: 0033:0x7f92657ae929 [ 48.941009][ T3794] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 48.941029][ T3794] RSP: 002b:00007f9263e17038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 48.941052][ T3794] RAX: ffffffffffffffda RBX: 00007f92659d5fa0 RCX: 00007f92657ae929 [ 48.941067][ T3794] RDX: 0000000000000027 RSI: 0000200000000740 RDI: 0000000000000005 [ 48.941145][ T3794] RBP: 00007f9263e17090 R08: 0000000000000000 R09: 0000000000000000 [ 48.941157][ T3794] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 48.941173][ T3794] R13: 0000000000000000 R14: 00007f92659d5fa0 R15: 00007ffeae8ddbd8 [ 48.941197][ T3794] [ 48.975084][ T3796] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 48.995696][ T3780] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.006595][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.008122][ T3780] ext4 filesystem being mounted at /16/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 49.201112][ T29] kauditd_printk_skb: 205 callbacks suppressed [ 49.201130][ T29] audit: type=1326 audit(1750497026.058:878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3779 comm="syz.0.99" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f57c6abd290 code=0x7ffc0000 [ 49.230582][ T29] audit: type=1326 audit(1750497026.058:879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3779 comm="syz.0.99" exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7f57c6abd677 code=0x7ffc0000 [ 49.253827][ T29] audit: type=1326 audit(1750497026.058:880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3779 comm="syz.0.99" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f57c6abd290 code=0x7ffc0000 [ 49.277047][ T29] audit: type=1326 audit(1750497026.058:881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3779 comm="syz.0.99" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57c6abe929 code=0x7ffc0000 [ 49.300334][ T29] audit: type=1326 audit(1750497026.058:882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3779 comm="syz.0.99" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57c6abe929 code=0x7ffc0000 [ 49.328048][ T29] audit: type=1326 audit(1750497026.138:883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3779 comm="syz.0.99" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f57c6abe929 code=0x7ffc0000 [ 49.334695][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.351508][ T29] audit: type=1326 audit(1750497026.138:884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3779 comm="syz.0.99" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57c6abe929 code=0x7ffc0000 [ 49.383668][ T29] audit: type=1326 audit(1750497026.138:885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3779 comm="syz.0.99" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57c6abe929 code=0x7ffc0000 [ 49.407002][ T29] audit: type=1326 audit(1750497026.138:886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3779 comm="syz.0.99" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f57c6abe929 code=0x7ffc0000 [ 49.430265][ T29] audit: type=1326 audit(1750497026.138:887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3779 comm="syz.0.99" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57c6abe929 code=0x7ffc0000 [ 49.510012][ T3809] netlink: 12 bytes leftover after parsing attributes in process `syz.2.107'. [ 49.522040][ T3810] loop3: detected capacity change from 0 to 128 [ 49.538996][ T3809] FAULT_INJECTION: forcing a failure. [ 49.538996][ T3809] name failslab, interval 1, probability 0, space 0, times 0 [ 49.551928][ T3809] CPU: 1 UID: 0 PID: 3809 Comm: syz.2.107 Not tainted 6.16.0-rc2-syzkaller-00269-g11313e2f7812 #0 PREEMPT(voluntary) [ 49.552028][ T3809] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 49.552091][ T3809] Call Trace: [ 49.552100][ T3809] [ 49.552121][ T3809] __dump_stack+0x1d/0x30 [ 49.552141][ T3809] dump_stack_lvl+0xe8/0x140 [ 49.552162][ T3809] dump_stack+0x15/0x1b [ 49.552182][ T3809] should_fail_ex+0x265/0x280 [ 49.552231][ T3809] ? alloc_netdev_mqs+0x829/0xab0 [ 49.552261][ T3809] should_failslab+0x8c/0xb0 [ 49.552347][ T3809] __kmalloc_cache_noprof+0x4c/0x320 [ 49.552384][ T3809] alloc_netdev_mqs+0x829/0xab0 [ 49.552417][ T3809] rtnl_create_link+0x239/0x710 [ 49.552476][ T3809] rtnl_newlink_create+0x14c/0x620 [ 49.552530][ T3809] ? __schedule+0x6a8/0xb30 [ 49.552616][ T3809] rtnl_newlink+0xf29/0x12d0 [ 49.552646][ T3809] ? xas_load+0x413/0x430 [ 49.552727][ T3809] ? __rcu_read_unlock+0x4f/0x70 [ 49.552747][ T3809] ? xa_load+0xb1/0xe0 [ 49.552767][ T3809] ? __kfree_skb+0x109/0x150 [ 49.552800][ T3809] ? __rcu_read_unlock+0x4f/0x70 [ 49.552837][ T3809] ? avc_has_perm_noaudit+0x1b1/0x200 [ 49.552879][ T3809] ? selinux_capable+0x1f9/0x270 [ 49.552938][ T3809] ? security_capable+0x83/0x90 [ 49.553073][ T3809] ? ns_capable+0x7d/0xb0 [ 49.553168][ T3809] ? __pfx_rtnl_newlink+0x10/0x10 [ 49.553193][ T3809] rtnetlink_rcv_msg+0x5fb/0x6d0 [ 49.553227][ T3809] netlink_rcv_skb+0x120/0x220 [ 49.553260][ T3809] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 49.553335][ T3809] rtnetlink_rcv+0x1c/0x30 [ 49.553357][ T3809] netlink_unicast+0x5a1/0x670 [ 49.553414][ T3809] netlink_sendmsg+0x58b/0x6b0 [ 49.553441][ T3809] ? __pfx_netlink_sendmsg+0x10/0x10 [ 49.553531][ T3809] __sock_sendmsg+0x142/0x180 [ 49.553560][ T3809] ____sys_sendmsg+0x31e/0x4e0 [ 49.553608][ T3809] ___sys_sendmsg+0x17b/0x1d0 [ 49.553656][ T3809] __x64_sys_sendmsg+0xd4/0x160 [ 49.553760][ T3809] x64_sys_call+0x2999/0x2fb0 [ 49.553783][ T3809] do_syscall_64+0xd2/0x200 [ 49.553805][ T3809] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 49.553831][ T3809] ? clear_bhb_loop+0x40/0x90 [ 49.553888][ T3809] ? clear_bhb_loop+0x40/0x90 [ 49.553971][ T3809] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 49.553997][ T3809] RIP: 0033:0x7f14d00ce929 [ 49.554016][ T3809] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 49.554049][ T3809] RSP: 002b:00007f14ce737038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 49.554144][ T3809] RAX: ffffffffffffffda RBX: 00007f14d02f5fa0 RCX: 00007f14d00ce929 [ 49.554157][ T3809] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000015 [ 49.554207][ T3809] RBP: 00007f14ce737090 R08: 0000000000000000 R09: 0000000000000000 [ 49.554218][ T3809] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 49.554229][ T3809] R13: 0000000000000000 R14: 00007f14d02f5fa0 R15: 00007ffe1c4bcea8 [ 49.554249][ T3809] [ 49.557833][ T3810] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 49.850125][ T3813] loop2: detected capacity change from 0 to 2048 [ 49.855224][ T3810] ext4 filesystem being mounted at /32/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 49.871156][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.899440][ T3813] EXT4-fs (loop2): failed to initialize system zone (-117) [ 49.907705][ T3813] EXT4-fs (loop2): mount failed [ 49.922444][ T3817] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 49.990247][ T3819] loop0: detected capacity change from 0 to 2048 [ 49.998644][ T3819] EXT4-fs: Ignoring removed bh option [ 50.004147][ T3819] ext4: Unknown parameter 'subj_type' [ 50.018579][ T3819] loop0: detected capacity change from 0 to 512 [ 50.037581][ T3819] EXT4-fs (loop0): too many log groups per flexible block group [ 50.045481][ T3819] EXT4-fs (loop0): failed to initialize mballoc (-12) [ 50.055153][ T3826] netlink: 48 bytes leftover after parsing attributes in process `syz.4.113'. [ 50.073722][ T3825] FAULT_INJECTION: forcing a failure. [ 50.073722][ T3825] name failslab, interval 1, probability 0, space 0, times 0 [ 50.086681][ T3825] CPU: 0 UID: 0 PID: 3825 Comm: syz.1.114 Not tainted 6.16.0-rc2-syzkaller-00269-g11313e2f7812 #0 PREEMPT(voluntary) [ 50.086710][ T3825] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 50.086792][ T3825] Call Trace: [ 50.086797][ T3825] [ 50.086803][ T3825] __dump_stack+0x1d/0x30 [ 50.086847][ T3825] dump_stack_lvl+0xe8/0x140 [ 50.086912][ T3825] dump_stack+0x15/0x1b [ 50.086933][ T3825] should_fail_ex+0x265/0x280 [ 50.087040][ T3825] ? alloc_fdtable+0x74/0x1b0 [ 50.087076][ T3825] should_failslab+0x8c/0xb0 [ 50.087158][ T3825] __kmalloc_cache_noprof+0x4c/0x320 [ 50.087188][ T3825] alloc_fdtable+0x74/0x1b0 [ 50.087219][ T3825] dup_fd+0x4c7/0x540 [ 50.087254][ T3825] copy_files+0x98/0xf0 [ 50.087335][ T3825] copy_process+0xc44/0x1fe0 [ 50.087367][ T3825] kernel_clone+0x16c/0x5b0 [ 50.087399][ T3825] ? vfs_write+0x75e/0x8e0 [ 50.087440][ T3825] __x64_sys_clone+0xe6/0x120 [ 50.087551][ T3825] x64_sys_call+0x2c59/0x2fb0 [ 50.087575][ T3825] do_syscall_64+0xd2/0x200 [ 50.087594][ T3825] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 50.087669][ T3825] ? clear_bhb_loop+0x40/0x90 [ 50.087696][ T3825] ? clear_bhb_loop+0x40/0x90 [ 50.087746][ T3825] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 50.087766][ T3825] RIP: 0033:0x7f92657ae929 [ 50.087780][ T3825] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 50.087801][ T3825] RSP: 002b:00007f9263e16fe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 50.087888][ T3825] RAX: ffffffffffffffda RBX: 00007f92659d5fa0 RCX: 00007f92657ae929 [ 50.087904][ T3825] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000080842011 [ 50.087919][ T3825] RBP: 00007f9263e17090 R08: 0000000000000000 R09: 0000000000000000 [ 50.087935][ T3825] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 50.087954][ T3825] R13: 0000000000000000 R14: 00007f92659d5fa0 R15: 00007ffeae8ddbd8 [ 50.088011][ T3825] [ 50.096244][ T3819] EXT4-fs (loop0): mount failed [ 50.188862][ T3810] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 50.271925][ T3831] FAULT_INJECTION: forcing a failure. [ 50.271925][ T3831] name failslab, interval 1, probability 0, space 0, times 0 [ 50.314706][ T3832] loop2: detected capacity change from 0 to 2048 [ 50.322708][ T3831] CPU: 1 UID: 0 PID: 3831 Comm: syz.1.115 Not tainted 6.16.0-rc2-syzkaller-00269-g11313e2f7812 #0 PREEMPT(voluntary) [ 50.322743][ T3831] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 50.322758][ T3831] Call Trace: [ 50.322764][ T3831] [ 50.322841][ T3831] __dump_stack+0x1d/0x30 [ 50.322921][ T3831] dump_stack_lvl+0xe8/0x140 [ 50.322950][ T3831] dump_stack+0x15/0x1b [ 50.323025][ T3831] should_fail_ex+0x265/0x280 [ 50.323067][ T3831] ? alloc_lookup_fw_priv+0x147/0x350 [ 50.323107][ T3831] should_failslab+0x8c/0xb0 [ 50.323139][ T3831] __kmalloc_cache_noprof+0x4c/0x320 [ 50.323214][ T3831] alloc_lookup_fw_priv+0x147/0x350 [ 50.323256][ T3831] _request_firmware+0x28b/0xbb0 [ 50.323374][ T3831] ? __rcu_read_unlock+0x4f/0x70 [ 50.323404][ T3831] ? avc_has_perm_noaudit+0x1b1/0x200 [ 50.323444][ T3831] ? __rcu_read_unlock+0x4f/0x70 [ 50.323476][ T3831] request_firmware+0x36/0x50 [ 50.323547][ T3831] devlink_compat_flash_update+0xb2/0x1b0 [ 50.323589][ T3831] dev_ethtool+0x148b/0x1650 [ 50.323625][ T3831] ? full_name_hash+0x92/0xe0 [ 50.323675][ T3831] dev_ioctl+0x2e0/0x960 [ 50.323702][ T3831] sock_do_ioctl+0x197/0x220 [ 50.323737][ T3831] sock_ioctl+0x41b/0x610 [ 50.323769][ T3831] ? __pfx_sock_ioctl+0x10/0x10 [ 50.323856][ T3831] __se_sys_ioctl+0xce/0x140 [ 50.323896][ T3831] __x64_sys_ioctl+0x43/0x50 [ 50.323934][ T3831] x64_sys_call+0x19a8/0x2fb0 [ 50.324004][ T3831] do_syscall_64+0xd2/0x200 [ 50.324028][ T3831] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 50.324063][ T3831] ? clear_bhb_loop+0x40/0x90 [ 50.324097][ T3831] ? clear_bhb_loop+0x40/0x90 [ 50.324139][ T3831] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 50.324167][ T3831] RIP: 0033:0x7f92657ae929 [ 50.324189][ T3831] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 50.324251][ T3831] RSP: 002b:00007f9263e17038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 50.324276][ T3831] RAX: ffffffffffffffda RBX: 00007f92659d5fa0 RCX: 00007f92657ae929 [ 50.324295][ T3831] RDX: 0000200000000340 RSI: 0000000000008946 RDI: 0000000000000009 [ 50.324312][ T3831] RBP: 00007f9263e17090 R08: 0000000000000000 R09: 0000000000000000 [ 50.324328][ T3831] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 50.324408][ T3831] R13: 0000000000000000 R14: 00007f92659d5fa0 R15: 00007ffeae8ddbd8 [ 50.324433][ T3831] [ 50.349185][ T3819] netlink: 208 bytes leftover after parsing attributes in process `syz.0.112'. [ 50.404918][ T3832] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.406819][ T3819] unsupported nla_type 8573 [ 50.478667][ T3836] loop1: detected capacity change from 0 to 512 [ 50.589067][ T3839] netlink: 4120 bytes leftover after parsing attributes in process `syz.0.118'. [ 50.604195][ T3836] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 50.624109][ T3836] EXT4-fs (loop1): 1 truncate cleaned up [ 50.630324][ T3836] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.646861][ T3839] random: crng reseeded on system resumption [ 50.746329][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.775071][ T3844] xt_SECMARK: invalid mode: 2 [ 50.851567][ T3847] netlink: 8 bytes leftover after parsing attributes in process `syz.4.121'. [ 50.860563][ T3847] netlink: 8 bytes leftover after parsing attributes in process `syz.4.121'. [ 50.901697][ T3848] loop2: detected capacity change from 0 to 512 [ 50.915301][ T3848] EXT4-fs: Ignoring removed mblk_io_submit option [ 50.930893][ T3847] netlink: 4 bytes leftover after parsing attributes in process `syz.4.121'. [ 50.931765][ T3312] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 50.950140][ T3847] netlink: 4 bytes leftover after parsing attributes in process `syz.4.121'. [ 51.018521][ T3851] x_tables: duplicate underflow at hook 3 [ 51.158656][ T3848] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 51.260838][ T3855] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 51.306878][ T3848] EXT4-fs (loop2): 1 truncate cleaned up [ 51.338692][ T3848] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.413842][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.442737][ T3860] loop4: detected capacity change from 0 to 128 [ 51.468601][ T3860] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 51.506967][ T3860] ext4 filesystem being mounted at /20/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 51.777724][ T3870] FAULT_INJECTION: forcing a failure. [ 51.777724][ T3870] name failslab, interval 1, probability 0, space 0, times 0 [ 51.790736][ T3870] CPU: 0 UID: 0 PID: 3870 Comm: syz.2.128 Not tainted 6.16.0-rc2-syzkaller-00269-g11313e2f7812 #0 PREEMPT(voluntary) [ 51.790772][ T3870] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 51.790787][ T3870] Call Trace: [ 51.790795][ T3870] [ 51.790804][ T3870] __dump_stack+0x1d/0x30 [ 51.790845][ T3870] dump_stack_lvl+0xe8/0x140 [ 51.790870][ T3870] dump_stack+0x15/0x1b [ 51.790969][ T3870] should_fail_ex+0x265/0x280 [ 51.791009][ T3870] should_failslab+0x8c/0xb0 [ 51.791039][ T3870] kmem_cache_alloc_node_noprof+0x57/0x320 [ 51.791116][ T3870] ? __alloc_skb+0x101/0x320 [ 51.791152][ T3870] __alloc_skb+0x101/0x320 [ 51.791258][ T3870] ? audit_log_start+0x365/0x6c0 [ 51.791292][ T3870] audit_log_start+0x380/0x6c0 [ 51.791410][ T3870] audit_seccomp+0x48/0x100 [ 51.791444][ T3870] ? __seccomp_filter+0x68c/0x10d0 [ 51.791469][ T3870] __seccomp_filter+0x69d/0x10d0 [ 51.791535][ T3870] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 51.791612][ T3870] ? vfs_write+0x75e/0x8e0 [ 51.791659][ T3870] __secure_computing+0x82/0x150 [ 51.791688][ T3870] syscall_trace_enter+0xcf/0x1e0 [ 51.791718][ T3870] do_syscall_64+0xac/0x200 [ 51.791735][ T3870] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 51.791792][ T3870] ? clear_bhb_loop+0x40/0x90 [ 51.791818][ T3870] ? clear_bhb_loop+0x40/0x90 [ 51.791844][ T3870] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 51.791932][ T3870] RIP: 0033:0x7f14d00ce929 [ 51.791950][ T3870] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 51.791970][ T3870] RSP: 002b:00007f14ce737038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 51.792055][ T3870] RAX: ffffffffffffffda RBX: 00007f14d02f5fa0 RCX: 00007f14d00ce929 [ 51.792069][ T3870] RDX: 0000000004040000 RSI: 0000200000000100 RDI: 0000000000000005 [ 51.792080][ T3870] RBP: 00007f14ce737090 R08: 0000000000000000 R09: 0000000000000000 [ 51.792094][ T3870] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 51.792109][ T3870] R13: 0000000000000000 R14: 00007f14d02f5fa0 R15: 00007ffe1c4bcea8 [ 51.792138][ T3870] [ 52.027556][ T3860] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 52.053746][ T3307] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.073765][ T3877] loop2: detected capacity change from 0 to 512 [ 52.115710][ T3882] netlink: 4120 bytes leftover after parsing attributes in process `syz.0.130'. [ 52.125145][ T3882] random: crng reseeded on system resumption [ 52.127376][ T3877] EXT4-fs: Ignoring removed mblk_io_submit option [ 52.138790][ T3877] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 52.308232][ T3877] EXT4-fs (loop2): 1 truncate cleaned up [ 52.334214][ T3877] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.591973][ T3305] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 52.657076][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.699827][ T3901] FAULT_INJECTION: forcing a failure. [ 52.699827][ T3901] name failslab, interval 1, probability 0, space 0, times 0 [ 52.712676][ T3901] CPU: 0 UID: 0 PID: 3901 Comm: syz.2.139 Not tainted 6.16.0-rc2-syzkaller-00269-g11313e2f7812 #0 PREEMPT(voluntary) [ 52.712711][ T3901] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 52.712734][ T3901] Call Trace: [ 52.712741][ T3901] [ 52.712749][ T3901] __dump_stack+0x1d/0x30 [ 52.712773][ T3901] dump_stack_lvl+0xe8/0x140 [ 52.712791][ T3901] dump_stack+0x15/0x1b [ 52.712806][ T3901] should_fail_ex+0x265/0x280 [ 52.712919][ T3901] should_failslab+0x8c/0xb0 [ 52.712941][ T3901] __kmalloc_node_track_caller_noprof+0xa4/0x410 [ 52.712969][ T3901] ? security_context_to_sid_core+0x69/0x3b0 [ 52.713038][ T3901] kmemdup_nul+0x36/0xc0 [ 52.713127][ T3901] security_context_to_sid_core+0x69/0x3b0 [ 52.713156][ T3901] ? avc_has_perm_noaudit+0x1b1/0x200 [ 52.713257][ T3901] security_context_to_sid+0x2e/0x40 [ 52.713277][ T3901] sel_write_context+0xf8/0x200 [ 52.713379][ T3901] selinux_transaction_write+0xc3/0x110 [ 52.713411][ T3901] ? __pfx_selinux_transaction_write+0x10/0x10 [ 52.713439][ T3901] vfs_write+0x269/0x8e0 [ 52.713506][ T3901] ? __rcu_read_unlock+0x4f/0x70 [ 52.713530][ T3901] ? __fget_files+0x184/0x1c0 [ 52.713561][ T3901] ksys_write+0xda/0x1a0 [ 52.713594][ T3901] __x64_sys_write+0x40/0x50 [ 52.713617][ T3901] x64_sys_call+0x2cdd/0x2fb0 [ 52.713665][ T3901] do_syscall_64+0xd2/0x200 [ 52.713734][ T3901] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 52.713767][ T3901] ? clear_bhb_loop+0x40/0x90 [ 52.713789][ T3901] ? clear_bhb_loop+0x40/0x90 [ 52.713850][ T3901] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 52.713870][ T3901] RIP: 0033:0x7f14d00ce929 [ 52.713886][ T3901] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 52.713905][ T3901] RSP: 002b:00007f14ce737038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 52.713928][ T3901] RAX: ffffffffffffffda RBX: 00007f14d02f5fa0 RCX: 00007f14d00ce929 [ 52.714002][ T3901] RDX: 000000000000001d RSI: 0000200000000340 RDI: 0000000000000003 [ 52.714014][ T3901] RBP: 00007f14ce737090 R08: 0000000000000000 R09: 0000000000000000 [ 52.714026][ T3901] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 52.714037][ T3901] R13: 0000000000000000 R14: 00007f14d02f5fa0 R15: 00007ffe1c4bcea8 [ 52.714059][ T3901] [ 53.023355][ T3904] loop1: detected capacity change from 0 to 512 [ 53.032429][ T3906] loop2: detected capacity change from 0 to 512 [ 53.039522][ T3904] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 53.066120][ T3906] ext4: Unknown parameter 'usrquota"data' [ 53.087574][ T3904] EXT4-fs (loop1): 1 truncate cleaned up [ 53.101017][ T3904] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 53.123540][ T3906] loop2: detected capacity change from 0 to 256 [ 53.225451][ T3913] loop3: detected capacity change from 0 to 512 [ 53.256471][ T3913] EXT4-fs: Ignoring removed mblk_io_submit option [ 53.278341][ T3913] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 53.316071][ T3913] EXT4-fs (loop3): 1 truncate cleaned up [ 53.322376][ T3913] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.336151][ T3922] netlink: 4120 bytes leftover after parsing attributes in process `syz.0.145'. [ 53.345987][ T3922] random: crng reseeded on system resumption [ 53.448081][ T3926] loop2: detected capacity change from 0 to 128 [ 53.454654][ T3924] netdevsim netdevsim0: Direct firmware load for ./file0 failed with error -2 [ 53.497060][ T3926] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 53.518255][ T3926] ext4 filesystem being mounted at /24/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 53.719959][ T3933] loop4: detected capacity change from 0 to 1024 [ 53.750039][ T3933] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 53.786256][ T3933] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 53.883929][ T3926] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 53.915497][ T3933] EXT4-fs error (device loop4): ext4_get_journal_inode:5796: inode #32: comm syz.4.151: iget: special inode unallocated [ 53.984196][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.000249][ T3933] EXT4-fs (loop4): Remounting filesystem read-only [ 54.006948][ T3933] EXT4-fs (loop4): no journal found [ 54.012174][ T3933] EXT4-fs (loop4): can't get journal size [ 54.059440][ T3933] EXT4-fs (loop4): filesystem is read-only [ 54.213546][ T29] kauditd_printk_skb: 575 callbacks suppressed [ 54.213561][ T29] audit: type=1326 audit(1750497031.068:1461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3938 comm="syz.3.152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb25adee929 code=0x7ffc0000 [ 54.228212][ T3945] loop1: detected capacity change from 0 to 512 [ 54.260007][ T29] audit: type=1326 audit(1750497031.108:1462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3938 comm="syz.3.152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb25adee929 code=0x7ffc0000 [ 54.288875][ T3945] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 54.300659][ T3945] EXT4-fs (loop1): 1 truncate cleaned up [ 54.318637][ T29] audit: type=1326 audit(1750497031.178:1463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3944 comm="syz.1.154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92657ae929 code=0x7ffc0000 [ 54.342255][ T29] audit: type=1326 audit(1750497031.178:1464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3944 comm="syz.1.154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92657ae929 code=0x7ffc0000 [ 54.365767][ T29] audit: type=1326 audit(1750497031.178:1465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3944 comm="syz.1.154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f92657ae929 code=0x7ffc0000 [ 54.389430][ T29] audit: type=1326 audit(1750497031.178:1466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3944 comm="syz.1.154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92657ae929 code=0x7ffc0000 [ 54.413629][ T29] audit: type=1326 audit(1750497031.178:1467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3944 comm="syz.1.154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f92657ae929 code=0x7ffc0000 [ 54.437101][ T29] audit: type=1326 audit(1750497031.178:1468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3944 comm="syz.1.154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92657ae929 code=0x7ffc0000 [ 54.501208][ T29] audit: type=1326 audit(1750497031.258:1469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3944 comm="syz.1.154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92657ae929 code=0x7ffc0000 [ 54.524724][ T29] audit: type=1326 audit(1750497031.258:1470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3944 comm="syz.1.154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f92657ae929 code=0x7ffc0000 [ 54.551011][ T3954] netlink: 4120 bytes leftover after parsing attributes in process `syz.0.158'. [ 54.560619][ T3954] random: crng reseeded on system resumption [ 54.592951][ T3958] ieee802154 phy1 wpan1: encryption failed: -22 [ 54.735592][ T3973] loop2: detected capacity change from 0 to 512 [ 54.752460][ T3973] EXT4-fs: Ignoring removed mblk_io_submit option [ 54.764011][ T3975] loop3: detected capacity change from 0 to 1024 [ 54.789496][ T3973] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 54.808161][ T3975] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 54.823394][ T3973] EXT4-fs (loop2): 1 truncate cleaned up [ 54.829340][ T3975] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 54.847328][ T3975] EXT4-fs error (device loop3): ext4_get_journal_inode:5796: inode #32: comm syz.3.165: iget: special inode unallocated [ 54.860961][ T3975] EXT4-fs (loop3): Remounting filesystem read-only [ 54.867586][ T3975] EXT4-fs (loop3): no journal found [ 54.872860][ T3975] EXT4-fs (loop3): can't get journal size [ 54.902771][ T3975] EXT4-fs (loop3): filesystem is read-only [ 55.073917][ T3980] bond1: entered promiscuous mode [ 55.079083][ T3980] bond1: entered allmulticast mode [ 55.095429][ T3980] 8021q: adding VLAN 0 to HW filter on device bond1 [ 55.119273][ T3980] bond1 (unregistering): Released all slaves [ 55.170960][ T3982] loop3: detected capacity change from 0 to 1024 [ 56.172994][ T4014] loop3: detected capacity change from 0 to 128 [ 56.192785][ T4011] netlink: 'syz.0.173': attribute type 1 has an invalid length. [ 56.200533][ T4011] netlink: 224 bytes leftover after parsing attributes in process `syz.0.173'. [ 56.259204][ T4014] ext4 filesystem being mounted at /42/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 56.275901][ T4016] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 56.323096][ T4020] netlink: 24 bytes leftover after parsing attributes in process `syz.2.176'. [ 56.578468][ T4026] loop4: detected capacity change from 0 to 512 [ 56.754387][ T4026] EXT4-fs: Ignoring removed mblk_io_submit option [ 56.762966][ T4014] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 56.778727][ T4026] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 56.862463][ T4026] EXT4-fs (loop4): 1 truncate cleaned up [ 57.079793][ T4031] loop0: detected capacity change from 0 to 2048 [ 57.170494][ T4040] netlink: 4 bytes leftover after parsing attributes in process `syz.4.183'. [ 57.220368][ T4040] netlink: 12 bytes leftover after parsing attributes in process `syz.4.183'. [ 57.457881][ T4051] loop4: detected capacity change from 0 to 512 [ 57.467496][ T4051] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 57.479691][ T4051] EXT4-fs (loop4): 1 truncate cleaned up [ 57.702301][ T4058] netlink: 4 bytes leftover after parsing attributes in process `syz.0.189'. [ 57.711718][ T4059] netlink: 4 bytes leftover after parsing attributes in process `syz.3.188'. [ 57.743297][ T4058] hsr_slave_0 (unregistering): left promiscuous mode [ 57.943305][ T4063] netlink: 4 bytes leftover after parsing attributes in process `syz.1.190'. [ 58.108855][ T4070] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 58.116441][ T4051] syz.4.187 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 58.131335][ T4051] CPU: 0 UID: 0 PID: 4051 Comm: syz.4.187 Not tainted 6.16.0-rc2-syzkaller-00269-g11313e2f7812 #0 PREEMPT(voluntary) [ 58.131366][ T4051] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 58.131380][ T4051] Call Trace: [ 58.131387][ T4051] [ 58.131395][ T4051] __dump_stack+0x1d/0x30 [ 58.131490][ T4051] dump_stack_lvl+0xe8/0x140 [ 58.131515][ T4051] dump_stack+0x15/0x1b [ 58.131632][ T4051] dump_header+0x81/0x220 [ 58.131675][ T4051] oom_kill_process+0x334/0x3f0 [ 58.131791][ T4051] out_of_memory+0x979/0xb80 [ 58.131890][ T4051] try_charge_memcg+0x5e6/0x9e0 [ 58.131917][ T4051] obj_cgroup_charge_pages+0xa6/0x150 [ 58.131952][ T4051] __memcg_kmem_charge_page+0x9f/0x170 [ 58.132054][ T4051] __alloc_frozen_pages_noprof+0x188/0x360 [ 58.132099][ T4051] alloc_pages_mpol+0xb3/0x250 [ 58.132130][ T4051] alloc_pages_noprof+0x90/0x130 [ 58.132166][ T4051] __vmalloc_node_range_noprof+0x6f2/0xe00 [ 58.132222][ T4051] __kvmalloc_node_noprof+0x30f/0x4e0 [ 58.132402][ T4051] ? ip_set_alloc+0x1f/0x30 [ 58.132430][ T4051] ? ip_set_alloc+0x1f/0x30 [ 58.132471][ T4051] ? __kmalloc_cache_noprof+0x189/0x320 [ 58.132567][ T4051] ip_set_alloc+0x1f/0x30 [ 58.132599][ T4051] hash_netiface_create+0x282/0x740 [ 58.132680][ T4051] ? __pfx_hash_netiface_create+0x10/0x10 [ 58.132744][ T4051] ip_set_create+0x3c9/0x960 [ 58.132790][ T4051] ? __nla_parse+0x40/0x60 [ 58.132809][ T4051] nfnetlink_rcv_msg+0x4c6/0x590 [ 58.132835][ T4051] ? should_fail_ex+0x30/0x280 [ 58.132984][ T4051] ? selinux_capable+0x1f9/0x270 [ 58.133031][ T4051] netlink_rcv_skb+0x120/0x220 [ 58.133118][ T4051] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 58.133158][ T4051] nfnetlink_rcv+0x16b/0x1690 [ 58.133191][ T4051] ? __kfree_skb+0x109/0x150 [ 58.133223][ T4051] ? nlmon_xmit+0x4f/0x60 [ 58.133260][ T4051] ? consume_skb+0x49/0x150 [ 58.133341][ T4051] ? nlmon_xmit+0x4f/0x60 [ 58.133363][ T4051] ? dev_hard_start_xmit+0x3b0/0x3e0 [ 58.133408][ T4051] ? __dev_queue_xmit+0x11c0/0x1fb0 [ 58.133438][ T4051] ? __dev_queue_xmit+0x182/0x1fb0 [ 58.133559][ T4051] ? ref_tracker_free+0x37d/0x3e0 [ 58.133640][ T4051] ? __netlink_deliver_tap+0x4dc/0x500 [ 58.133675][ T4051] netlink_unicast+0x5a1/0x670 [ 58.133736][ T4051] netlink_sendmsg+0x58b/0x6b0 [ 58.133762][ T4051] ? __pfx_netlink_sendmsg+0x10/0x10 [ 58.133780][ T4051] __sock_sendmsg+0x142/0x180 [ 58.133857][ T4051] ____sys_sendmsg+0x31e/0x4e0 [ 58.133918][ T4051] ___sys_sendmsg+0x17b/0x1d0 [ 58.134047][ T4051] __x64_sys_sendmsg+0xd4/0x160 [ 58.134122][ T4051] x64_sys_call+0x2999/0x2fb0 [ 58.134142][ T4051] do_syscall_64+0xd2/0x200 [ 58.134159][ T4051] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 58.134185][ T4051] ? clear_bhb_loop+0x40/0x90 [ 58.134225][ T4051] ? clear_bhb_loop+0x40/0x90 [ 58.134254][ T4051] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 58.134278][ T4051] RIP: 0033:0x7f19f4fae929 [ 58.134293][ T4051] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 58.134339][ T4051] RSP: 002b:00007f19f3617038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 58.134364][ T4051] RAX: ffffffffffffffda RBX: 00007f19f51d5fa0 RCX: 00007f19f4fae929 [ 58.134380][ T4051] RDX: 0000000000000810 RSI: 0000200000000040 RDI: 0000000000000007 [ 58.134397][ T4051] RBP: 00007f19f5030b39 R08: 0000000000000000 R09: 0000000000000000 [ 58.134411][ T4051] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 58.134422][ T4051] R13: 0000000000000000 R14: 00007f19f51d5fa0 R15: 00007ffc33f6c7e8 [ 58.134440][ T4051] [ 58.134447][ T4051] memory: usage 307200kB, limit 307200kB, failcnt 337 [ 58.145301][ T4069] loop0: detected capacity change from 0 to 512 [ 58.146984][ T4051] memory+swap: usage 307656kB, limit 9007199254740988kB, failcnt 0 [ 58.147004][ T4051] kmem: usage 307164kB, limit 9007199254740988kB, failcnt 0 [ 58.147020][ T4051] Memory cgroup stats for [ 58.180207][ T4070] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 58.180897][ T4051] /syz4 [ 58.235740][ T4069] EXT4-fs: Ignoring removed mblk_io_submit option [ 58.237691][ T4051] : [ 58.237954][ T4051] cache 32768 [ 58.519377][ T4069] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 58.520984][ T4051] rss 0 [ 58.520995][ T4051] shmem 0 [ 58.521009][ T4051] mapped_file 0 [ 58.563021][ T4051] dirty 0 [ 58.566029][ T4051] writeback 20480 [ 58.569687][ T4051] workingset_refault_anon 167 [ 58.574457][ T4051] workingset_refault_file 36 [ 58.579113][ T4051] swap 466944 [ 58.582477][ T4051] swapcached 4096 [ 58.586199][ T4051] pgpgin 3147 [ 58.589508][ T4051] pgpgout 3138 [ 58.592955][ T4051] pgfault 10210 [ 58.596466][ T4051] pgmajfault 43 [ 58.599938][ T4051] inactive_anon 4096 [ 58.603947][ T4051] active_anon 0 [ 58.607458][ T4051] inactive_file 0 [ 58.611135][ T4051] active_file 32768 [ 58.614979][ T4051] unevictable 0 [ 58.618570][ T4051] hierarchical_memory_limit 314572800 [ 58.623966][ T4051] hierarchical_memsw_limit 9223372036854771712 [ 58.630194][ T4051] total_cache 32768 [ 58.634081][ T4051] total_rss 0 [ 58.637493][ T4051] total_shmem 0 [ 58.640986][ T4051] total_mapped_file 0 [ 58.645031][ T4051] total_dirty 0 [ 58.648568][ T4051] total_writeback 20480 [ 58.652745][ T4051] total_workingset_refault_anon 167 [ 58.658071][ T4051] total_workingset_refault_file 36 [ 58.663314][ T4051] total_swap 466944 [ 58.667174][ T4051] total_swapcached 4096 [ 58.671347][ T4051] total_pgpgin 3147 [ 58.675176][ T4051] total_pgpgout 3138 [ 58.679152][ T4051] total_pgfault 10210 [ 58.683231][ T4051] total_pgmajfault 43 [ 58.687414][ T4051] total_inactive_anon 4096 [ 58.691858][ T4051] total_active_anon 0 [ 58.695862][ T4051] total_inactive_file 0 [ 58.700157][ T4051] total_active_file 32768 [ 58.704601][ T4051] total_unevictable 0 [ 58.708626][ T4051] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.187,pid=4050,uid=0 [ 58.723216][ T4051] Memory cgroup out of memory: Killed process 4050 (syz.4.187) total-vm:93884kB, anon-rss:936kB, file-rss:22376kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 58.795612][ T4069] EXT4-fs (loop0): 1 truncate cleaned up [ 58.938752][ T4085] loop1: detected capacity change from 0 to 1024 [ 58.965332][ T4085] ======================================================= [ 58.965332][ T4085] WARNING: The mand mount option has been deprecated and [ 58.965332][ T4085] and is ignored by this kernel. Remove the mand [ 58.965332][ T4085] option from the mount to silence this warning. [ 58.965332][ T4085] ======================================================= [ 59.090607][ T4085] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 59.143875][ T4085] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 59.200243][ T4085] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c840e02c, mo2=0000] [ 59.239238][ T29] kauditd_printk_skb: 409 callbacks suppressed [ 59.239253][ T29] audit: type=1326 audit(1750497036.098:1880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4087 comm="syz.4.199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19f4fae929 code=0x7ffc0000 [ 59.269542][ T29] audit: type=1326 audit(1750497036.098:1881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4087 comm="syz.4.199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19f4fae929 code=0x7ffc0000 [ 59.378336][ T4085] EXT4-fs error (device loop1): ext4_map_blocks:780: inode #3: block 2: comm syz.1.198: lblock 2 mapped to illegal pblock 2 (length 1) [ 59.396367][ T4085] EXT4-fs (loop1): Remounting filesystem read-only [ 59.402991][ T4085] Quota error (device loop1): qtree_write_dquot: dquota write failed [ 59.414130][ T29] audit: type=1326 audit(1750497036.098:1882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4087 comm="syz.4.199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f19f4fae929 code=0x7ffc0000 [ 59.417528][ T4085] Quota error (device loop1): v2_write_file_info: Can't write info structure [ 59.437733][ T29] audit: type=1326 audit(1750497036.168:1883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4087 comm="syz.4.199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19f4fae929 code=0x7ffc0000 [ 59.469725][ T29] audit: type=1326 audit(1750497036.188:1884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4087 comm="syz.4.199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19f4fae929 code=0x7ffc0000 [ 59.469764][ T29] audit: type=1326 audit(1750497036.198:1885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4087 comm="syz.4.199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19f4fae929 code=0x7ffc0000 [ 59.517149][ T29] audit: type=1326 audit(1750497036.198:1886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4087 comm="syz.4.199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19f4fae929 code=0x7ffc0000 [ 59.540513][ T29] audit: type=1326 audit(1750497036.208:1887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4087 comm="syz.4.199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f19f4fae929 code=0x7ffc0000 [ 59.571893][ T4085] EXT4-fs (loop1): 1 orphan inode deleted [ 59.614780][ T4091] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.734568][ T4091] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.820226][ T4100] netlink: 'syz.4.204': attribute type 3 has an invalid length. [ 59.828016][ T4100] netlink: 'syz.4.204': attribute type 3 has an invalid length. [ 59.927577][ T4100] netlink: 4 bytes leftover after parsing attributes in process `syz.4.204'. [ 60.037702][ T4105] xt_SECMARK: invalid mode: 2 [ 60.048591][ T4103] loop0: detected capacity change from 0 to 512 [ 60.185104][ T4103] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 61.166631][ T4111] x_tables: duplicate underflow at hook 3 [ 61.831306][ T4103] EXT4-fs (loop0): 1 truncate cleaned up [ 62.099071][ T4118] loop3: detected capacity change from 0 to 512 [ 62.122256][ T4122] loop4: detected capacity change from 0 to 512 [ 62.218178][ T4127] x_tables: duplicate underflow at hook 3 [ 62.330612][ T4118] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 62.418449][ T4118] EXT4-fs (loop3): 1 truncate cleaned up [ 62.432748][ T4134] syz_tun: entered allmulticast mode [ 62.597211][ T4138] loop1: detected capacity change from 0 to 512 [ 62.618226][ T4138] EXT4-fs: Ignoring removed mblk_io_submit option [ 62.637050][ T4138] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 62.658052][ T4138] EXT4-fs (loop1): 1 truncate cleaned up [ 62.941382][ T4120] syz_tun: left allmulticast mode [ 63.107270][ T4157] netlink: 'syz.4.217': attribute type 1 has an invalid length. [ 63.114983][ T4157] netlink: 224 bytes leftover after parsing attributes in process `syz.4.217'. [ 63.136361][ T4162] loop0: detected capacity change from 0 to 512 [ 63.149031][ T4162] ext4: Unknown parameter 'usrquota"data' [ 63.359759][ T4175] netlink: 4 bytes leftover after parsing attributes in process `syz.4.224'. [ 63.369130][ T4168] netlink: 4 bytes leftover after parsing attributes in process `syz.0.222'. [ 63.550666][ T4188] netlink: 4 bytes leftover after parsing attributes in process `syz.4.229'. [ 63.653355][ T4188] hsr_slave_0 (unregistering): left promiscuous mode [ 63.689548][ T4193] loop2: detected capacity change from 0 to 512 [ 63.717947][ T4193] ext4: Unknown parameter 'usrquota"data' [ 63.909286][ T4214] netlink: 4 bytes leftover after parsing attributes in process `syz.2.238'. [ 63.935577][ T4212] loop0: detected capacity change from 0 to 512 [ 63.952354][ T4212] ext4: Unknown parameter 'quotaJnoload' [ 63.998235][ T4220] netlink: 'syz.4.234': attribute type 1 has an invalid length. [ 64.006091][ T4220] netlink: 224 bytes leftover after parsing attributes in process `syz.4.234'. [ 64.039088][ T4223] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 64.075123][ T4226] loop0: detected capacity change from 0 to 512 [ 64.108508][ T4226] ext4: Unknown parameter 'usrquota"data' [ 64.201035][ T4234] loop2: detected capacity change from 0 to 2048 [ 64.209285][ T4234] EXT4-fs: Ignoring removed bh option [ 64.214790][ T4234] ext4: Unknown parameter 'subj_type' [ 64.297334][ T4241] netlink: 4 bytes leftover after parsing attributes in process `syz.2.250'. [ 64.357874][ T4247] loop2: detected capacity change from 0 to 128 [ 64.401742][ T4247] ext4 filesystem being mounted at /54/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 64.416970][ T29] kauditd_printk_skb: 308 callbacks suppressed [ 64.416985][ T29] audit: type=1326 audit(1750497041.278:2196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4246 comm="syz.2.253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14d00ce929 code=0x7ffc0000 [ 64.422583][ T3387] IPVS: starting estimator thread 0... [ 64.423966][ T29] audit: type=1326 audit(1750497041.278:2197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4246 comm="syz.2.253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14d00ce929 code=0x7ffc0000 [ 64.475681][ T29] audit: type=1326 audit(1750497041.278:2198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4246 comm="syz.2.253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=26 compat=0 ip=0x7f14d00ce929 code=0x7ffc0000 [ 64.499068][ T29] audit: type=1326 audit(1750497041.278:2199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4246 comm="syz.2.253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14d00ce929 code=0x7ffc0000 [ 64.521581][ T4252] netlink: 8 bytes leftover after parsing attributes in process `syz.0.254'. [ 64.522448][ T29] audit: type=1326 audit(1750497041.278:2200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4246 comm="syz.2.253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14d00ce929 code=0x7ffc0000 [ 64.536030][ T4253] IPVS: using max 2352 ests per chain, 117600 per kthread [ 64.555074][ T29] audit: type=1326 audit(1750497041.308:2201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4246 comm="syz.2.253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f14d00ce929 code=0x7ffc0000 [ 64.585137][ T29] audit: type=1326 audit(1750497041.308:2202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4246 comm="syz.2.253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14d00ce929 code=0x7ffc0000 [ 64.608545][ T29] audit: type=1326 audit(1750497041.308:2203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4246 comm="syz.2.253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f14d00ce929 code=0x7ffc0000 [ 64.628100][ T4252] netlink: 12 bytes leftover after parsing attributes in process `syz.0.254'. [ 64.631806][ T29] audit: type=1326 audit(1750497041.308:2204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4246 comm="syz.2.253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14d00ce929 code=0x7ffc0000 [ 64.640703][ T4252] netlink: 8 bytes leftover after parsing attributes in process `syz.0.254'. [ 64.664049][ T29] audit: type=1326 audit(1750497041.308:2205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4246 comm="syz.2.253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f14d00ce929 code=0x7ffc0000 [ 64.714026][ T4247] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 64.758757][ T4260] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 64.768240][ T4258] loop3: detected capacity change from 0 to 1024 [ 64.804615][ T4258] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 64.872881][ T4258] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 64.903877][ T4258] EXT4-fs error (device loop3): ext4_get_journal_inode:5796: inode #32: comm syz.3.256: iget: special inode unallocated [ 64.926194][ T4258] EXT4-fs (loop3): Remounting filesystem read-only [ 64.932868][ T4258] EXT4-fs (loop3): no journal found [ 64.938156][ T4258] EXT4-fs (loop3): can't get journal size [ 64.947627][ T4258] EXT4-fs (loop3): filesystem is read-only [ 65.127228][ T4269] loop3: detected capacity change from 0 to 2048 [ 65.155211][ T4269] EXT4-fs: Ignoring removed bh option [ 65.188737][ T4269] ext4: Unknown parameter 'subj_type' [ 65.249318][ T4269] loop3: detected capacity change from 0 to 512 [ 65.336447][ T4269] EXT4-fs (loop3): too many log groups per flexible block group [ 65.344225][ T4269] EXT4-fs (loop3): failed to initialize mballoc (-12) [ 65.376848][ T4269] EXT4-fs (loop3): mount failed [ 65.404759][ T4273] netlink: 'syz.0.261': attribute type 1 has an invalid length. [ 65.427324][ T4279] FAULT_INJECTION: forcing a failure. [ 65.427324][ T4279] name failslab, interval 1, probability 0, space 0, times 0 [ 65.440161][ T4279] CPU: 0 UID: 0 PID: 4279 Comm: syz.2.260 Not tainted 6.16.0-rc2-syzkaller-00269-g11313e2f7812 #0 PREEMPT(voluntary) [ 65.440193][ T4279] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 65.440211][ T4279] Call Trace: [ 65.440219][ T4279] [ 65.440228][ T4279] __dump_stack+0x1d/0x30 [ 65.440308][ T4279] dump_stack_lvl+0xe8/0x140 [ 65.440332][ T4279] dump_stack+0x15/0x1b [ 65.440347][ T4279] should_fail_ex+0x265/0x280 [ 65.440462][ T4279] should_failslab+0x8c/0xb0 [ 65.440492][ T4279] kmem_cache_alloc_noprof+0x50/0x310 [ 65.440538][ T4279] ? prepare_creds+0x37/0x4c0 [ 65.440566][ T4279] prepare_creds+0x37/0x4c0 [ 65.440635][ T4279] __sys_setgid+0x6a/0x1d0 [ 65.440673][ T4279] __x64_sys_setgid+0x1e/0x30 [ 65.440709][ T4279] x64_sys_call+0xeaf/0x2fb0 [ 65.440751][ T4279] do_syscall_64+0xd2/0x200 [ 65.440774][ T4279] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 65.440813][ T4279] ? clear_bhb_loop+0x40/0x90 [ 65.440836][ T4279] ? clear_bhb_loop+0x40/0x90 [ 65.440862][ T4279] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 65.440889][ T4279] RIP: 0033:0x7f14d00ce929 [ 65.440908][ T4279] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 65.440972][ T4279] RSP: 002b:00007f14ce716038 EFLAGS: 00000246 ORIG_RAX: 000000000000006a [ 65.441000][ T4279] RAX: ffffffffffffffda RBX: 00007f14d02f6080 RCX: 00007f14d00ce929 [ 65.441015][ T4279] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 65.441030][ T4279] RBP: 00007f14ce716090 R08: 0000000000000000 R09: 0000000000000000 [ 65.441045][ T4279] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 65.441056][ T4279] R13: 0000000000000001 R14: 00007f14d02f6080 R15: 00007ffe1c4bcea8 [ 65.441212][ T4279] [ 65.677730][ T4281] loop3: detected capacity change from 0 to 1764 [ 65.705477][ T4286] loop0: detected capacity change from 0 to 512 [ 65.736659][ T4286] EXT4-fs: Ignoring removed mblk_io_submit option [ 65.764494][ T4286] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 65.773153][ T4288] loop3: detected capacity change from 0 to 2048 [ 65.812036][ T4288] ext4 filesystem being mounted at /57/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 65.853059][ T4286] EXT4-fs (loop0): 1 truncate cleaned up [ 66.098879][ T784] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm kworker/u8:6: bg 0: block 345: padding at end of block bitmap is not set [ 66.167065][ T784] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 171 with error 117 [ 66.179756][ T784] EXT4-fs (loop3): This should not happen!! Data will be lost [ 66.179756][ T784] [ 66.236843][ T4301] loop0: detected capacity change from 0 to 1024 [ 66.253343][ T4305] loop3: detected capacity change from 0 to 128 [ 66.277720][ T4301] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 66.291879][ T4305] ext4 filesystem being mounted at /58/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 66.316663][ T4301] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 66.338166][ T4301] EXT4-fs error (device loop0): ext4_get_journal_inode:5796: inode #32: comm syz.0.269: iget: special inode unallocated [ 66.353086][ T4301] EXT4-fs (loop0): Remounting filesystem read-only [ 66.359746][ T4301] EXT4-fs (loop0): no journal found [ 66.365018][ T4301] EXT4-fs (loop0): can't get journal size [ 66.376515][ T4301] EXT4-fs (loop0): filesystem is read-only [ 66.682890][ T4305] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 67.019523][ T4323] loop0: detected capacity change from 0 to 764 [ 67.049038][ T4323] iso9660: Unknown parameter '000000000000000000000130177777777777777777777701777777777777777777777' [ 67.064848][ T4326] loop1: detected capacity change from 0 to 512 [ 67.077705][ T4326] EXT4-fs: journaled quota format not specified [ 67.114891][ T4323] loop0: detected capacity change from 0 to 1024 [ 67.153964][ T4323] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000. [ 67.312659][ T4333] loop4: detected capacity change from 0 to 512 [ 67.457661][ T4335] loop2: detected capacity change from 0 to 1024 [ 67.491196][ T4333] EXT4-fs: Ignoring removed mblk_io_submit option [ 67.721453][ T4335] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 67.902871][ T4340] hub 9-0:1.0: USB hub found [ 67.907871][ T4340] hub 9-0:1.0: 8 ports detected [ 67.978971][ T4335] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 67.993802][ T4333] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 68.011991][ T4335] EXT4-fs error (device loop2): ext4_get_journal_inode:5796: inode #32: comm syz.2.278: iget: special inode unallocated [ 68.066405][ T4335] EXT4-fs (loop2): Remounting filesystem read-only [ 68.073077][ T4335] EXT4-fs (loop2): no journal found [ 68.078355][ T4335] EXT4-fs (loop2): can't get journal size [ 68.098589][ T4343] loop1: detected capacity change from 0 to 512 [ 68.113700][ T4343] EXT4-fs: Ignoring removed mblk_io_submit option [ 68.123527][ T4333] EXT4-fs (loop4): 1 truncate cleaned up [ 68.135745][ T4343] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 68.152029][ T4335] EXT4-fs (loop2): filesystem is read-only [ 68.235783][ T4349] __nla_validate_parse: 9 callbacks suppressed [ 68.235800][ T4349] netlink: 4 bytes leftover after parsing attributes in process `syz.0.281'. [ 68.252825][ T4343] EXT4-fs (loop1): 1 truncate cleaned up [ 68.432773][ T4352] loop3: detected capacity change from 0 to 1024 [ 68.440310][ T4356] netlink: 4 bytes leftover after parsing attributes in process `syz.4.282'. [ 68.481966][ T4352] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 68.506289][ T4352] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 68.546221][ T4352] EXT4-fs error (device loop3): ext4_get_journal_inode:5796: inode #32: comm syz.3.283: iget: special inode unallocated [ 68.564524][ T4364] netlink: 'syz.0.286': attribute type 1 has an invalid length. [ 68.564733][ T4352] EXT4-fs (loop3): Remounting filesystem read-only [ 68.578916][ T4352] EXT4-fs (loop3): no journal found [ 68.584190][ T4352] EXT4-fs (loop3): can't get journal size [ 68.590436][ T4352] EXT4-fs (loop3): filesystem is read-only [ 68.611523][ T4364] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 68.620513][ T4364] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 68.629474][ T4364] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 68.638393][ T4364] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 68.649648][ T4364] bond1: (slave geneve2): making interface the new active one [ 68.677941][ T4364] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 68.754128][ T4378] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 68.762806][ T4379] netlink: 144 bytes leftover after parsing attributes in process `syz.4.292'. [ 69.286107][ T4391] FAULT_INJECTION: forcing a failure. [ 69.286107][ T4391] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 69.299519][ T4391] CPU: 1 UID: 0 PID: 4391 Comm: syz.4.294 Not tainted 6.16.0-rc2-syzkaller-00269-g11313e2f7812 #0 PREEMPT(voluntary) [ 69.299558][ T4391] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 69.299593][ T4391] Call Trace: [ 69.299599][ T4391] [ 69.299605][ T4391] __dump_stack+0x1d/0x30 [ 69.299625][ T4391] dump_stack_lvl+0xe8/0x140 [ 69.299643][ T4391] dump_stack+0x15/0x1b [ 69.299658][ T4391] should_fail_ex+0x265/0x280 [ 69.299687][ T4391] should_fail_alloc_page+0xf2/0x100 [ 69.299771][ T4391] __alloc_frozen_pages_noprof+0xff/0x360 [ 69.299851][ T4391] alloc_pages_mpol+0xb3/0x250 [ 69.300000][ T4391] vma_alloc_folio_noprof+0x1aa/0x300 [ 69.300110][ T4391] handle_mm_fault+0xec2/0x2be0 [ 69.300135][ T4391] ? __rcu_read_unlock+0x4f/0x70 [ 69.300167][ T4391] do_user_addr_fault+0x3fe/0x1090 [ 69.300259][ T4391] exc_page_fault+0x62/0xa0 [ 69.300294][ T4391] asm_exc_page_fault+0x26/0x30 [ 69.300337][ T4391] RIP: 0010:rep_movs_alternative+0x11/0x90 [ 69.300365][ T4391] Code: e9 94 eb 01 00 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 83 f9 40 73 44 83 f9 08 73 25 85 c9 74 0f 8a 06 <88> 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 cc cc cc cc 66 2e 0f 1f [ 69.300457][ T4391] RSP: 0018:ffffc900012b3b00 EFLAGS: 00050202 [ 69.300477][ T4391] RAX: ffff88811953ec01 RBX: ffffc900012b3da8 RCX: 0000000000000004 [ 69.300493][ T4391] RDX: 0000000000000000 RSI: ffffc900012b3c54 RDI: 0000200000001400 [ 69.300508][ T4391] RBP: 0000000000000000 R08: 0000000000000413 R09: 0000000000000000 [ 69.300523][ T4391] R10: 0001c900012b3c54 R11: 0001c900012b3c57 R12: ffffc900012b3d90 [ 69.300538][ T4391] R13: 0000000000000004 R14: 0000000000000004 R15: 0000000000000004 [ 69.300561][ T4391] _copy_to_iter+0x2d9/0xe30 [ 69.300671][ T4391] ? __schedule+0x6a8/0xb30 [ 69.300752][ T4391] ? __list_del_entry_valid_or_report+0x65/0x130 [ 69.300779][ T4391] tun_do_read+0x982/0x1090 [ 69.300814][ T4391] ? __pfx_default_wake_function+0x10/0x10 [ 69.300893][ T4391] tun_chr_read_iter+0x176/0x250 [ 69.300926][ T4391] do_iter_readv_writev+0x421/0x4c0 [ 69.300957][ T4391] vfs_readv+0x1ea/0x690 [ 69.300998][ T4391] do_readv+0xe7/0x210 [ 69.301027][ T4391] __x64_sys_readv+0x45/0x50 [ 69.301113][ T4391] x64_sys_call+0x29af/0x2fb0 [ 69.301140][ T4391] do_syscall_64+0xd2/0x200 [ 69.301201][ T4391] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 69.301233][ T4391] ? clear_bhb_loop+0x40/0x90 [ 69.301260][ T4391] ? clear_bhb_loop+0x40/0x90 [ 69.301287][ T4391] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.301307][ T4391] RIP: 0033:0x7f19f4fae929 [ 69.301347][ T4391] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 69.301407][ T4391] RSP: 002b:00007f19f3617038 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 69.301425][ T4391] RAX: ffffffffffffffda RBX: 00007f19f51d5fa0 RCX: 00007f19f4fae929 [ 69.301509][ T4391] RDX: 0000000000000004 RSI: 00002000000001c0 RDI: 0000000000000003 [ 69.301535][ T4391] RBP: 00007f19f3617090 R08: 0000000000000000 R09: 0000000000000000 [ 69.301547][ T4391] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 69.301557][ T4391] R13: 0000000000000000 R14: 00007f19f51d5fa0 R15: 00007ffc33f6c7e8 [ 69.301614][ T4391] [ 69.303411][ T4393] netlink: 4 bytes leftover after parsing attributes in process `syz.0.295'. [ 69.636279][ T4398] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.664471][ T4405] netlink: 24 bytes leftover after parsing attributes in process `syz.3.298'. [ 69.686849][ T4405] netlink: 4 bytes leftover after parsing attributes in process `syz.3.298'. [ 69.713762][ T29] kauditd_printk_skb: 256 callbacks suppressed [ 69.713780][ T29] audit: type=1400 audit(1750497046.568:2462): avc: denied { name_bind } for pid=4407 comm="syz.0.300" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 69.747607][ T4398] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.761416][ T29] audit: type=1400 audit(1750497046.618:2463): avc: denied { create } for pid=4407 comm="syz.0.300" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 69.761926][ T4408] SELinux: security policydb version 18 (MLS) not backwards compatible [ 69.781078][ T29] audit: type=1400 audit(1750497046.618:2464): avc: denied { connect } for pid=4407 comm="syz.0.300" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 69.809434][ T29] audit: type=1400 audit(1750497046.618:2465): avc: denied { load_policy } for pid=4407 comm="syz.0.300" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 69.830383][ T4408] SELinux: failed to load policy [ 69.879830][ T29] audit: type=1326 audit(1750497046.738:2466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4418 comm="syz.0.304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57c6abe929 code=0x7ffc0000 [ 69.914542][ T4398] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.948858][ T29] audit: type=1326 audit(1750497046.758:2467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4418 comm="syz.0.304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f57c6abe929 code=0x7ffc0000 [ 69.972366][ T29] audit: type=1326 audit(1750497046.758:2468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4418 comm="syz.0.304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57c6abe929 code=0x7ffc0000 [ 69.996136][ T29] audit: type=1326 audit(1750497046.768:2469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4418 comm="syz.0.304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f57c6abe929 code=0x7ffc0000 [ 70.019415][ T29] audit: type=1326 audit(1750497046.768:2470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4418 comm="syz.0.304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57c6abe929 code=0x7ffc0000 [ 70.042880][ T29] audit: type=1326 audit(1750497046.768:2471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4418 comm="syz.0.304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f57c6abe929 code=0x7ffc0000 [ 70.091228][ T4425] loop1: detected capacity change from 0 to 512 [ 70.166892][ T4398] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.197923][ T4425] EXT4-fs mount: 50 callbacks suppressed [ 70.197942][ T4425] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.211322][ T4434] loop0: detected capacity change from 0 to 512 [ 70.237513][ T4425] ext4 filesystem being mounted at /52/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 70.241969][ T4434] EXT4-fs: Ignoring removed mblk_io_submit option [ 70.263960][ T4398] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.282981][ T4437] loop4: detected capacity change from 0 to 128 [ 70.284183][ T4398] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.303832][ T4398] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.314325][ T4434] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 70.327392][ T4398] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.361946][ T4434] EXT4-fs (loop0): 1 truncate cleaned up [ 70.466954][ T4434] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.486366][ T4437] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 70.519870][ T4437] ext4 filesystem being mounted at /54/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 70.679691][ T4425] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 70.714113][ T4425] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 70.855789][ T4437] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 70.969626][ T3307] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.042434][ T4448] loop1: detected capacity change from 0 to 2048 [ 71.049268][ T4448] EXT4-fs: Ignoring removed bh option [ 71.054758][ T4448] ext4: Unknown parameter 'subj_type' [ 71.075504][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.110065][ T4448] netlink: 420 bytes leftover after parsing attributes in process `syz.1.312'. [ 71.140058][ T4452] loop1: detected capacity change from 0 to 512 [ 71.147082][ T4452] EXT4-fs: Ignoring removed nomblk_io_submit option [ 71.170989][ T4452] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 71.179027][ T4452] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842c01d, mo2=0102] [ 71.187208][ T4452] EXT4-fs (loop1): couldn't mount RDWR because of unsupported optional features (80) [ 71.196896][ T4452] EXT4-fs (loop1): Skipping orphan cleanup due to unknown ROCOMPAT features [ 71.206578][ T4452] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 71.308478][ T4452] infiniband syz!: set active [ 71.313247][ T4452] infiniband syz!: added team_slave_0 [ 71.322069][ T4465] hub 9-0:1.0: USB hub found [ 71.327249][ T4465] hub 9-0:1.0: 8 ports detected [ 71.344108][ T4465] EXT4-fs warning (device loop1): dx_probe:861: inode #2: comm syz.1.314: dx entry: limit 65535 != root limit 120 [ 71.347354][ T4452] RDS/IB: syz!: added [ 71.356320][ T4465] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.314: Corrupt directory, running e2fsck is recommended [ 71.376798][ T4452] smc: adding ib device syz! with port count 1 [ 71.383078][ T4452] smc: ib device syz! port 1 has pnetid [ 71.400892][ T3305] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 71.472173][ T4471] FAULT_INJECTION: forcing a failure. [ 71.472173][ T4471] name failslab, interval 1, probability 0, space 0, times 0 [ 71.484879][ T4471] CPU: 0 UID: 0 PID: 4471 Comm: syz.4.319 Not tainted 6.16.0-rc2-syzkaller-00269-g11313e2f7812 #0 PREEMPT(voluntary) [ 71.484966][ T4471] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 71.484983][ T4471] Call Trace: [ 71.484991][ T4471] [ 71.485000][ T4471] __dump_stack+0x1d/0x30 [ 71.485027][ T4471] dump_stack_lvl+0xe8/0x140 [ 71.485077][ T4471] dump_stack+0x15/0x1b [ 71.485092][ T4471] should_fail_ex+0x265/0x280 [ 71.485132][ T4471] should_failslab+0x8c/0xb0 [ 71.485236][ T4471] kmem_cache_alloc_noprof+0x50/0x310 [ 71.485268][ T4471] ? sctp_get_port_local+0x420/0xab0 [ 71.485308][ T4471] sctp_get_port_local+0x420/0xab0 [ 71.485350][ T4471] sctp_do_bind+0x398/0x4b0 [ 71.485447][ T4471] sctp_connect_new_asoc+0x153/0x3a0 [ 71.485480][ T4471] sctp_sendmsg+0xf10/0x18d0 [ 71.485517][ T4471] ? selinux_socket_sendmsg+0xd1/0x1b0 [ 71.485560][ T4471] ? __pfx_sctp_sendmsg+0x10/0x10 [ 71.485661][ T4471] inet_sendmsg+0xc2/0xd0 [ 71.485701][ T4471] __sock_sendmsg+0x102/0x180 [ 71.485730][ T4471] ____sys_sendmsg+0x31e/0x4e0 [ 71.485775][ T4471] ___sys_sendmsg+0x17b/0x1d0 [ 71.485882][ T4471] __x64_sys_sendmsg+0xd4/0x160 [ 71.485935][ T4471] x64_sys_call+0x2999/0x2fb0 [ 71.485968][ T4471] do_syscall_64+0xd2/0x200 [ 71.486067][ T4471] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 71.486101][ T4471] ? clear_bhb_loop+0x40/0x90 [ 71.486170][ T4471] ? clear_bhb_loop+0x40/0x90 [ 71.486198][ T4471] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 71.486226][ T4471] RIP: 0033:0x7f19f4fae929 [ 71.486301][ T4471] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 71.486360][ T4471] RSP: 002b:00007f19f3617038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 71.486400][ T4471] RAX: ffffffffffffffda RBX: 00007f19f51d5fa0 RCX: 00007f19f4fae929 [ 71.486416][ T4471] RDX: 0000000000000851 RSI: 0000200000000000 RDI: 0000000000000006 [ 71.486431][ T4471] RBP: 00007f19f3617090 R08: 0000000000000000 R09: 0000000000000000 [ 71.486446][ T4471] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 71.486459][ T4471] R13: 0000000000000000 R14: 00007f19f51d5fa0 R15: 00007ffc33f6c7e8 [ 71.486496][ T4471] [ 71.733869][ T3307] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.768665][ T4479] loop1: detected capacity change from 0 to 128 [ 71.781215][ T4479] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 71.814485][ T4479] ext4 filesystem being mounted at /55/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 71.814791][ T4482] loop3: detected capacity change from 0 to 128 [ 71.836809][ T4482] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 71.849893][ T4485] netlink: 4120 bytes leftover after parsing attributes in process `syz.4.324'. [ 71.850788][ T4487] netlink: 16 bytes leftover after parsing attributes in process `syz.2.325'. [ 71.862021][ T4485] random: crng reseeded on system resumption [ 71.874568][ T4482] ext4 filesystem being mounted at /68/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 71.895175][ T3307] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 72.054695][ T4499] netlink: 'syz.2.329': attribute type 1 has an invalid length. [ 72.062613][ T4499] netlink: 224 bytes leftover after parsing attributes in process `syz.2.329'. [ 72.161293][ T4482] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 72.411267][ T4515] loop0: detected capacity change from 0 to 1756 [ 72.688109][ T4526] loop1: detected capacity change from 0 to 1024 [ 72.817495][ T4526] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 72.827495][ T4526] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 72.854397][ T3312] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 72.873899][ T4526] EXT4-fs error (device loop1): ext4_get_journal_inode:5796: inode #32: comm syz.1.337: iget: special inode unallocated [ 72.909272][ T4526] EXT4-fs (loop1): Remounting filesystem read-only [ 72.915878][ T4526] EXT4-fs (loop1): no journal found [ 72.921249][ T4526] EXT4-fs (loop1): can't get journal size [ 72.988958][ T4526] EXT4-fs (loop1): filesystem is read-only [ 73.006715][ T4526] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 73.029667][ T4526] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.143069][ T4549] loop4: detected capacity change from 0 to 512 [ 73.163585][ T4549] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 73.198233][ T4551] loop1: detected capacity change from 0 to 1024 [ 73.216981][ T4549] EXT4-fs (loop4): 1 truncate cleaned up [ 73.244206][ T4549] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 73.275550][ T4551] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 73.301048][ T4551] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 73.363555][ T4551] EXT4-fs error (device loop1): ext4_get_journal_inode:5796: inode #32: comm syz.1.348: iget: special inode unallocated [ 73.426228][ T4551] EXT4-fs (loop1): Remounting filesystem read-only [ 73.432908][ T4551] EXT4-fs (loop1): no journal found [ 73.438229][ T4551] EXT4-fs (loop1): can't get journal size [ 73.453621][ T4551] EXT4-fs (loop1): filesystem is read-only [ 73.467701][ T4551] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 73.491033][ T4551] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.666617][ T4564] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 73.693444][ T4566] __nla_validate_parse: 3 callbacks suppressed [ 73.693465][ T4566] netlink: 16 bytes leftover after parsing attributes in process `syz.3.350'. [ 73.723282][ T4568] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 73.744235][ T4570] loop3: detected capacity change from 0 to 764 [ 73.757871][ T4570] iso9660: Unknown parameter '000000000000000000000130177777777777777777777701777777777777777777777' [ 73.834661][ T4572] capability: warning: `syz.1.354' uses deprecated v2 capabilities in a way that may be insecure [ 73.835119][ T4575] netlink: 4120 bytes leftover after parsing attributes in process `syz.3.355'. [ 73.857427][ T4575] random: crng reseeded on system resumption [ 74.041870][ T4595] loop0: detected capacity change from 0 to 128 [ 74.053997][ T4595] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 74.085792][ T4595] ext4 filesystem being mounted at /82/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 74.118682][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.164231][ T4605] netlink: 8 bytes leftover after parsing attributes in process `syz.4.363'. [ 74.197859][ T4607] loop4: detected capacity change from 0 to 1024 [ 74.219012][ T4607] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.269411][ T4607] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 74.290128][ T4614] netlink: 4120 bytes leftover after parsing attributes in process `syz.2.368'. [ 74.290136][ T4607] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 14 with max blocks 1 with error 28 [ 74.311669][ T4607] EXT4-fs (loop4): This should not happen!! Data will be lost [ 74.311669][ T4607] [ 74.313434][ T4614] random: crng reseeded on system resumption [ 74.321423][ T4607] EXT4-fs (loop4): Total free blocks count 0 [ 74.321442][ T4607] EXT4-fs (loop4): Free/Dirty block details [ 74.332984][ T4595] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 74.333439][ T4607] EXT4-fs (loop4): free_blocks=68451041280 [ 74.353883][ T4607] EXT4-fs (loop4): dirty_blocks=16 [ 74.359160][ T4607] EXT4-fs (loop4): Block reservation details [ 74.365165][ T4607] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 74.381701][ T4620] loop3: detected capacity change from 0 to 128 [ 74.392530][ T4606] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 15 with error 28 [ 74.408491][ T4622] xt_SECMARK: invalid mode: 2 [ 74.434950][ T4620] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 74.449189][ T4620] ext4 filesystem being mounted at /80/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 74.478333][ T3312] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 74.520527][ T4626] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 74.557178][ T4630] loop4: detected capacity change from 0 to 512 [ 74.581740][ T4630] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 74.618044][ T4631] x_tables: duplicate underflow at hook 3 [ 74.824387][ T4630] EXT4-fs (loop4): 1 truncate cleaned up [ 74.848066][ T4630] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.906020][ T29] kauditd_printk_skb: 614 callbacks suppressed [ 74.906103][ T29] audit: type=1326 audit(1750497052.738:3086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4629 comm="syz.4.373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19f4fae929 code=0x7ffc0000 [ 74.935870][ T29] audit: type=1326 audit(1750497052.738:3087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4629 comm="syz.4.373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19f4fae929 code=0x7ffc0000 [ 74.959372][ T29] audit: type=1326 audit(1750497052.738:3088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4629 comm="syz.4.373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f19f4fae929 code=0x7ffc0000 [ 74.982904][ T29] audit: type=1326 audit(1750497052.738:3089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4629 comm="syz.4.373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19f4fae929 code=0x7ffc0000 [ 75.006431][ T29] audit: type=1326 audit(1750497052.738:3090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4629 comm="syz.4.373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19f4fae929 code=0x7ffc0000 [ 75.029930][ T29] audit: type=1326 audit(1750497052.738:3091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4629 comm="syz.4.373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f19f4fae929 code=0x7ffc0000 [ 75.054003][ T29] audit: type=1326 audit(1750497052.738:3092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4629 comm="syz.4.373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19f4fae929 code=0x7ffc0000 [ 75.077584][ T29] audit: type=1326 audit(1750497052.738:3093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4629 comm="syz.4.373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19f4fae929 code=0x7ffc0000 [ 75.101102][ T29] audit: type=1326 audit(1750497052.738:3094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4629 comm="syz.4.373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f19f4fae929 code=0x7ffc0000 [ 75.124583][ T29] audit: type=1326 audit(1750497052.738:3095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4629 comm="syz.4.373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19f4fae929 code=0x7ffc0000 [ 75.193320][ T3306] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 75.246871][ T4642] netlink: 8 bytes leftover after parsing attributes in process `syz.0.377'. [ 75.422722][ T4652] netlink: 24 bytes leftover after parsing attributes in process `syz.1.376'. [ 75.806567][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.878277][ T4659] netlink: 'syz.3.381': attribute type 1 has an invalid length. [ 75.886044][ T4659] netlink: 224 bytes leftover after parsing attributes in process `syz.3.381'. [ 76.179250][ T4674] netlink: 4 bytes leftover after parsing attributes in process `syz.0.388'. [ 76.363308][ T4678] hub 9-0:1.0: USB hub found [ 76.368101][ T4678] hub 9-0:1.0: 8 ports detected [ 76.650040][ T4686] netlink: 24 bytes leftover after parsing attributes in process `syz.0.389'. [ 76.699534][ T4688] capability: warning: `syz.1.390' uses 32-bit capabilities (legacy support in use) [ 76.784865][ T4690] loop0: detected capacity change from 0 to 512 [ 76.810419][ T4690] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 76.943666][ T4690] EXT4-fs (loop0): 1 truncate cleaned up [ 76.953256][ T4690] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 77.188187][ T4706] netlink: 'syz.2.394': attribute type 1 has an invalid length. [ 77.195975][ T4706] netlink: 224 bytes leftover after parsing attributes in process `syz.2.394'. [ 78.344788][ T4731] loop3: detected capacity change from 0 to 512 [ 78.368843][ T4731] ext4: Unknown parameter 'usrquota"data' [ 78.380365][ T4733] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 78.435660][ T4736] xt_SECMARK: invalid mode: 2 [ 78.447119][ T4734] loop4: detected capacity change from 0 to 2048 [ 78.487519][ T4734] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 78.587447][ T4744] FAULT_INJECTION: forcing a failure. [ 78.587447][ T4744] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 78.600697][ T4744] CPU: 0 UID: 0 PID: 4744 Comm: syz.2.407 Not tainted 6.16.0-rc2-syzkaller-00269-g11313e2f7812 #0 PREEMPT(voluntary) [ 78.600729][ T4744] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 78.600745][ T4744] Call Trace: [ 78.600754][ T4744] [ 78.600764][ T4744] __dump_stack+0x1d/0x30 [ 78.600791][ T4744] dump_stack_lvl+0xe8/0x140 [ 78.600815][ T4744] dump_stack+0x15/0x1b [ 78.600852][ T4744] should_fail_ex+0x265/0x280 [ 78.600961][ T4744] should_fail+0xb/0x20 [ 78.600995][ T4744] should_fail_usercopy+0x1a/0x20 [ 78.601077][ T4744] _copy_to_user+0x20/0xa0 [ 78.601096][ T4744] simple_read_from_buffer+0xb5/0x130 [ 78.601130][ T4744] proc_fail_nth_read+0x100/0x140 [ 78.601153][ T4744] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 78.601186][ T4744] vfs_read+0x1a0/0x6f0 [ 78.601282][ T4744] ? __cond_resched+0x4e/0x90 [ 78.601345][ T4744] ksys_read+0xda/0x1a0 [ 78.601422][ T4744] __x64_sys_read+0x40/0x50 [ 78.601461][ T4744] x64_sys_call+0x2d77/0x2fb0 [ 78.601522][ T4744] do_syscall_64+0xd2/0x200 [ 78.601540][ T4744] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 78.601572][ T4744] ? clear_bhb_loop+0x40/0x90 [ 78.601598][ T4744] ? clear_bhb_loop+0x40/0x90 [ 78.601680][ T4744] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 78.601744][ T4744] RIP: 0033:0x7f14d00cd33c [ 78.601763][ T4744] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 78.601785][ T4744] RSP: 002b:00007f14ce737030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 78.601868][ T4744] RAX: ffffffffffffffda RBX: 00007f14d02f5fa0 RCX: 00007f14d00cd33c [ 78.601884][ T4744] RDX: 000000000000000f RSI: 00007f14ce7370a0 RDI: 0000000000000006 [ 78.601896][ T4744] RBP: 00007f14ce737090 R08: 0000000000000000 R09: 0000000000000000 [ 78.601908][ T4744] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000002 [ 78.601919][ T4744] R13: 0000000000000000 R14: 00007f14d02f5fa0 R15: 00007ffe1c4bcea8 [ 78.601936][ T4744] [ 78.818796][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.861207][ T4747] x_tables: duplicate underflow at hook 3 [ 79.221474][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.296671][ T4754] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 79.384277][ T4758] netlink: 'syz.0.409': attribute type 1 has an invalid length. [ 79.392088][ T4758] netlink: 224 bytes leftover after parsing attributes in process `syz.0.409'. [ 79.417754][ T4751] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 79.443025][ T4763] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 80.011268][ T4776] loop0: detected capacity change from 0 to 512 [ 80.038139][ T4776] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 80.049909][ T4776] EXT4-fs (loop0): 1 truncate cleaned up [ 80.056013][ T4776] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 80.070008][ T29] kauditd_printk_skb: 153 callbacks suppressed [ 80.070022][ T29] audit: type=1326 audit(1750497057.938:3249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4775 comm="syz.0.419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57c6abe929 code=0x7ffc0000 [ 80.110094][ T29] audit: type=1326 audit(1750497057.938:3250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4775 comm="syz.0.419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57c6abe929 code=0x7ffc0000 [ 80.134006][ T29] audit: type=1326 audit(1750497057.938:3251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4775 comm="syz.0.419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f57c6abe929 code=0x7ffc0000 [ 80.157566][ T29] audit: type=1326 audit(1750497057.938:3252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4775 comm="syz.0.419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57c6abe929 code=0x7ffc0000 [ 80.181190][ T29] audit: type=1326 audit(1750497057.938:3253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4775 comm="syz.0.419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f57c6abe929 code=0x7ffc0000 [ 80.208619][ T29] audit: type=1326 audit(1750497057.938:3254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4775 comm="syz.0.419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57c6abe929 code=0x7ffc0000 [ 80.232255][ T29] audit: type=1326 audit(1750497057.938:3255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4775 comm="syz.0.419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f57c6abe929 code=0x7ffc0000 [ 80.257467][ T29] audit: type=1326 audit(1750497057.938:3256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4775 comm="syz.0.419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57c6abe929 code=0x7ffc0000 [ 80.280909][ T29] audit: type=1326 audit(1750497057.938:3257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4775 comm="syz.0.419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=237 compat=0 ip=0x7f57c6abe929 code=0x7ffc0000 [ 80.302468][ T4785] netlink: 24 bytes leftover after parsing attributes in process `syz.1.420'. [ 80.304285][ T29] audit: type=1326 audit(1750497057.938:3258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4775 comm="syz.0.419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57c6abe929 code=0x7ffc0000 [ 80.511440][ T4794] netlink: 4120 bytes leftover after parsing attributes in process `syz.2.424'. [ 80.556171][ T4794] random: crng reseeded on system resumption [ 80.815290][ T4811] netlink: 24 bytes leftover after parsing attributes in process `syz.4.430'. [ 81.516617][ T4822] loop3: detected capacity change from 0 to 512 [ 81.536432][ T4822] EXT4-fs: Ignoring removed mblk_io_submit option [ 81.544676][ T4822] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 81.558245][ T4822] EXT4-fs (loop3): 1 truncate cleaned up [ 81.564479][ T4822] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.639883][ T4827] loop4: detected capacity change from 0 to 512 [ 81.666611][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.677764][ T4827] EXT4-fs: Ignoring removed mblk_io_submit option [ 81.694400][ T4827] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 81.699831][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.724649][ T4827] EXT4-fs (loop4): 1 truncate cleaned up [ 81.731242][ T4827] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.782856][ T4832] netlink: 4120 bytes leftover after parsing attributes in process `syz.3.438'. [ 81.819903][ T4832] random: crng reseeded on system resumption [ 81.908950][ T4843] netlink: 24 bytes leftover after parsing attributes in process `syz.0.437'. [ 81.918886][ T4840] netlink: 14593 bytes leftover after parsing attributes in process `syz.3.440'. [ 81.931561][ T4838] vlan2: entered allmulticast mode [ 82.056963][ T4848] netlink: 24 bytes leftover after parsing attributes in process `syz.2.441'. [ 82.145544][ T4856] loop0: detected capacity change from 0 to 128 [ 82.151229][ T4852] loop3: detected capacity change from 0 to 764 [ 82.163044][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.187024][ T4852] iso9660: Unknown parameter '000000000000000000000130177777777777777777777701777777777777777777777' [ 82.189337][ T4859] loop4: detected capacity change from 0 to 512 [ 82.217588][ T4859] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 82.229480][ T4859] EXT4-fs (loop4): 1 truncate cleaned up [ 82.235786][ T4859] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 82.267370][ T4856] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 82.284688][ T4856] ext4 filesystem being mounted at /91/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 82.305034][ T4852] loop3: detected capacity change from 0 to 1024 [ 82.418591][ T4852] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 82.439857][ T4852] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000. [ 82.512264][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.531173][ T4856] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 82.625874][ T4875] mmap: syz.1.452 (4875) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 83.182471][ T3306] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 83.238325][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.252002][ T4892] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 83.316020][ T4902] FAULT_INJECTION: forcing a failure. [ 83.316020][ T4902] name failslab, interval 1, probability 0, space 0, times 0 [ 83.328727][ T4902] CPU: 1 UID: 0 PID: 4902 Comm: syz.2.463 Not tainted 6.16.0-rc2-syzkaller-00269-g11313e2f7812 #0 PREEMPT(voluntary) [ 83.328782][ T4902] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 83.328797][ T4902] Call Trace: [ 83.328878][ T4902] [ 83.328885][ T4902] __dump_stack+0x1d/0x30 [ 83.328905][ T4902] dump_stack_lvl+0xe8/0x140 [ 83.328922][ T4902] dump_stack+0x15/0x1b [ 83.328937][ T4902] should_fail_ex+0x265/0x280 [ 83.329003][ T4902] should_failslab+0x8c/0xb0 [ 83.329027][ T4902] __kmalloc_node_track_caller_noprof+0xa4/0x410 [ 83.329059][ T4902] ? sidtab_sid2str_get+0xa0/0x130 [ 83.329082][ T4902] kmemdup_noprof+0x2b/0x70 [ 83.329176][ T4902] sidtab_sid2str_get+0xa0/0x130 [ 83.329197][ T4902] security_sid_to_context_core+0x1eb/0x2e0 [ 83.329220][ T4902] security_sid_to_context+0x27/0x40 [ 83.329243][ T4902] selinux_lsmprop_to_secctx+0x67/0xf0 [ 83.329316][ T4902] security_lsmprop_to_secctx+0x43/0x80 [ 83.329349][ T4902] audit_log_task_context+0x77/0x190 [ 83.329418][ T4902] audit_log_task+0xf4/0x250 [ 83.329453][ T4902] audit_seccomp+0x61/0x100 [ 83.329501][ T4902] ? __seccomp_filter+0x68c/0x10d0 [ 83.329588][ T4902] __seccomp_filter+0x69d/0x10d0 [ 83.329614][ T4902] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 83.329632][ T4902] ? vfs_write+0x75e/0x8e0 [ 83.329718][ T4902] __secure_computing+0x82/0x150 [ 83.329741][ T4902] syscall_trace_enter+0xcf/0x1e0 [ 83.329770][ T4902] do_syscall_64+0xac/0x200 [ 83.329791][ T4902] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 83.329817][ T4902] ? clear_bhb_loop+0x40/0x90 [ 83.329871][ T4902] ? clear_bhb_loop+0x40/0x90 [ 83.329949][ T4902] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.330033][ T4902] RIP: 0033:0x7f14d00ce929 [ 83.330052][ T4902] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 83.330073][ T4902] RSP: 002b:00007f14ce737038 EFLAGS: 00000246 ORIG_RAX: 0000000000000081 [ 83.330127][ T4902] RAX: ffffffffffffffda RBX: 00007f14d02f5fa0 RCX: 00007f14d00ce929 [ 83.330142][ T4902] RDX: 0000000000000000 RSI: 000000000000002b RDI: ffffffffffffffff [ 83.330156][ T4902] RBP: 00007f14ce737090 R08: 0000000000000000 R09: 0000000000000000 [ 83.330209][ T4902] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 83.330223][ T4902] R13: 0000000000000000 R14: 00007f14d02f5fa0 R15: 00007ffe1c4bcea8 [ 83.330245][ T4902] [ 83.588808][ T4912] netlink: 4 bytes leftover after parsing attributes in process `syz.1.468'. [ 83.680142][ T4928] loop4: detected capacity change from 0 to 512 [ 83.688748][ T4928] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 83.717808][ T4928] EXT4-fs (loop4): 1 truncate cleaned up [ 83.719821][ T4931] 9pnet_fd: Insufficient options for proto=fd [ 83.723919][ T4928] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 83.769156][ T4937] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 83.784399][ T4931] netlink: 596 bytes leftover after parsing attributes in process `syz.3.474'. [ 83.864751][ T4928] ================================================================== [ 83.872897][ T4928] BUG: KCSAN: data-race in delete_from_page_cache_batch / folio_mapping [ 83.881260][ T4928] [ 83.883592][ T4928] write to 0xffffea0004e5b298 of 8 bytes by task 4939 on cpu 1: [ 83.891230][ T4928] delete_from_page_cache_batch+0x2f6/0x6f0 [ 83.897164][ T4928] truncate_inode_pages_range+0x1b8/0x690 [ 83.902897][ T4928] truncate_inode_pages+0x24/0x30 [ 83.907941][ T4928] ext4_write_end+0x443/0x730 [ 83.912742][ T4928] generic_perform_write+0x312/0x490 [ 83.918049][ T4928] ext4_buffered_write_iter+0x1ee/0x3c0 [ 83.923617][ T4928] ext4_file_write_iter+0x383/0xf00 [ 83.928827][ T4928] vfs_write+0x4a0/0x8e0 [ 83.933100][ T4928] __x64_sys_pwrite64+0xfd/0x150 [ 83.938050][ T4928] x64_sys_call+0xe45/0x2fb0 [ 83.942659][ T4928] do_syscall_64+0xd2/0x200 [ 83.947174][ T4928] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.953095][ T4928] [ 83.955429][ T4928] read to 0xffffea0004e5b298 of 8 bytes by task 4928 on cpu 0: [ 83.962991][ T4928] folio_mapping+0xa1/0x120 [ 83.967514][ T4928] evict_folios+0x298e/0x33d0 [ 83.972208][ T4928] try_to_shrink_lruvec+0x45a/0x7e0 [ 83.977430][ T4928] shrink_lruvec+0x22e/0x1b40 [ 83.982120][ T4928] shrink_node+0x686/0x2120 [ 83.986636][ T4928] do_try_to_free_pages+0x3f6/0xcd0 [ 83.991849][ T4928] try_to_free_mem_cgroup_pages+0x1ab/0x410 [ 83.997761][ T4928] try_charge_memcg+0x358/0x9e0 [ 84.002713][ T4928] obj_cgroup_charge_pages+0xa6/0x150 [ 84.008128][ T4928] __memcg_kmem_charge_page+0x9f/0x170 [ 84.013614][ T4928] __alloc_frozen_pages_noprof+0x188/0x360 [ 84.019447][ T4928] alloc_pages_mpol+0xb3/0x250 [ 84.024234][ T4928] alloc_pages_noprof+0x90/0x130 [ 84.029234][ T4928] __vmalloc_node_range_noprof+0x6f2/0xe00 [ 84.035246][ T4928] __kvmalloc_node_noprof+0x30f/0x4e0 [ 84.040640][ T4928] ip_set_alloc+0x1f/0x30 [ 84.044996][ T4928] hash_netiface_create+0x282/0x740 [ 84.050219][ T4928] ip_set_create+0x3c9/0x960 [ 84.054839][ T4928] nfnetlink_rcv_msg+0x4c6/0x590 [ 84.059820][ T4928] netlink_rcv_skb+0x120/0x220 [ 84.064625][ T4928] nfnetlink_rcv+0x16b/0x1690 [ 84.069330][ T4928] netlink_unicast+0x5a1/0x670 [ 84.074117][ T4928] netlink_sendmsg+0x58b/0x6b0 [ 84.078893][ T4928] __sock_sendmsg+0x142/0x180 [ 84.083601][ T4928] ____sys_sendmsg+0x31e/0x4e0 [ 84.088389][ T4928] ___sys_sendmsg+0x17b/0x1d0 [ 84.093107][ T4928] __x64_sys_sendmsg+0xd4/0x160 [ 84.097992][ T4928] x64_sys_call+0x2999/0x2fb0 [ 84.102688][ T4928] do_syscall_64+0xd2/0x200 [ 84.107212][ T4928] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.113126][ T4928] [ 84.115479][ T4928] value changed: 0xffff888106b65838 -> 0x0000000000000000 [ 84.122620][ T4928] [ 84.124965][ T4928] Reported by Kernel Concurrency Sanitizer on: [ 84.131134][ T4928] CPU: 0 UID: 0 PID: 4928 Comm: syz.4.472 Not tainted 6.16.0-rc2-syzkaller-00269-g11313e2f7812 #0 PREEMPT(voluntary) [ 84.143506][ T4928] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 84.153575][ T4928] ================================================================== [ 84.183245][ T4944] loop3: detected capacity change from 0 to 128 [ 84.194947][ T4944] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 84.211120][ T4944] ext4 filesystem being mounted at /103/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 84.447223][ T4944] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 84.623504][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.988247][ T3312] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.