last executing test programs: 3.668246753s ago: executing program 1 (id=779): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000000)=0x4, 0x4) sendto$inet6(r0, &(0x7f0000000500)="a4", 0x34000, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) ioperm(0x0, 0x3, 0x2) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7020000140000e5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="010028bd706975e7192504"], 0x14}, 0x1, 0x0, 0x0, 0x24000050}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r4) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x200}, 0x1c) listen(r5, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r7 = accept(r5, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0x2400c840}, 0x0) recvfrom(r6, &(0x7f0000000280)=""/90, 0xfffffffffffffe22, 0x500, 0x0, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000700000045000000a000020095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000003c0)='kfree\x00', r8}, 0x10) connect$unix(r7, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYRES64=r2, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9b, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 3.667861393s ago: executing program 4 (id=780): ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffc, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0xfffffffd, 0x0, 0x3, 0x0}) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000000000008f00000000000015c33e2acab18e8a20009040000010300000009210000400122"], 0x0) syz_usb_connect(0x2, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x9b, &(0x7f0000000000)=ANY=[@ANYBLOB="9b03abe98397850d9289638d7120310994176d76ee8005e3bf5de76d569d98cc3ce7d4419c84da5f7e420900d136a14f65099d"]}]}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a010100000100000000000200fffc0900010073797a30000000000800024000000001cc000000030a01020000000000000000020000000900010073797a300000"], 0x1e4}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x7fff, 0x0) 2.908504225s ago: executing program 0 (id=793): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) 2.717208067s ago: executing program 2 (id=794): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) gettid() bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x62, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff}, 0x0) close(0xffffffffffffffff) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kfree\x00', r3, 0x0, 0x3e}, 0x18) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x40107446, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) mkdir(0x0, 0x74) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{0x1, 0xffffffffffffffff}, 0x0, 0x0}, 0x20) r6 = syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(0xffffffffffffffff, 0x8982, 0x0) openat(0xffffffffffffff9c, 0x0, 0x515001, 0x408) r8 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYRES64=r5, @ANYRESHEX=r6, @ANYRESOCT, @ANYRES32=r2, @ANYRESOCT=r4, @ANYRES16=r0], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x0, 0x4, &(0x7f0000000080)=ANY=[@ANYRESHEX], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r9}, &(0x7f0000000180), &(0x7f00000001c0)=r8}, 0x20) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r10}, 0x10) r11 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r11, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCSPASS(r11, 0x40107447, &(0x7f00000000c0)={0x1, &(0x7f0000000200)=[{0x16, 0xff, 0x0, 0x4}]}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000b00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r7, {}, {}, {0x8, 0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x8881}, 0x0) 2.716564748s ago: executing program 1 (id=795): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000840)=ANY=[@ANYRES64=r1, @ANYRES32=r1, @ANYRESDEC=r1], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, 0x0, 0x8094) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x48, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) lsm_list_modules(&(0x7f0000000380)=[0x0, 0x0], &(0x7f00000003c0)=0x10, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000001680)=ANY=[@ANYBLOB], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r4, 0x108, 0x7, 0x0, &(0x7f0000000340)="63eced8e46dc3f", 0x0, 0xf48f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r3}, 0x10) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xa2, 0x7}}, './file0\x00'}) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r7 = getpid() process_vm_readv(r7, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r5, 0x0, 0x1000, 0xa1, &(0x7f0000000bc0)="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", &(0x7f0000000680)=""/161, 0x2, 0x0, 0x7a, 0xce, &(0x7f00000003c0)="a8d666d5568982813d8dc5d7615fce60eeb3f6a8943e812559138e2867080ea4bc792ee7b1b7a8e6b573659a326694e314511f64fc1c6af7c8db1fcadebc6329312564a33d674bebedc587c61d90e1a1d079dc98b206977a3666d3fecd19fc9ff6f6da57dfc897cf3dc301f4f73fa3eb0a7222f1c54ea122e1b3", &(0x7f0000001bc0)="56416ab55f67cf107aef02db3b91a9d255312b898453179e4a79fd508426872ac7e276673d5d9d7b18266b532eb57fd067e2c03928c070d86dbde234ce9e68a9929772c60bc2c374fceeeb5a26a707aabbbc3d711e49d5f8f43b4f62cb2a0ac1c2523138a8bad4694aa76a53aaa2c120e22672a6b9b791c7c7ba16c35980901ad090cf3dbbc485539091023e2a23fceefcac39e473cd0aa650b6cfdcf01aaa0416b6e585cb068adad993395ff1515d75cab9aabaddba821fa2d42f1724e65a6fcc1bec7c1ddef93f1de3f7822bd6"}, 0x50) syz_clone(0x80000000, &(0x7f0000000440)="a25c68fd4f2ff000b6b61c684b4edcd1fd78ed43bd1c7f7f29330d268b109466cd1ceb8d10f37e244b4f1cee", 0x2c, &(0x7f0000000580), &(0x7f00000008c0), &(0x7f0000000900)="31cb05d98d3612acc715bfb26c92f53cb8e29e18c482e89f7cc2c06a669a0654490e235364a5cf2126a2ae78d8b58463449e66c02a58229814b1168ebb281f808937bebe48507510839b07c7933a32fe30eedcd1ab1fae39a2cebb1aef0f51f135415497bace4ac96a85a2d3acf10c2d614a105ae40c21615ba96b") 2.309240364s ago: executing program 3 (id=798): r0 = perf_event_open(&(0x7f00000003c0)={0x5, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7, 0x800, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_bp={&(0x7f0000000200), 0x1eb280bb2a9237a7}, 0x0, 0x400000000000, 0x0, 0x0, 0x7}, 0x0, 0xd, 0xffffffffffffffff, 0x2) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000020000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYRES64=r0, @ANYRESDEC=r1, @ANYRES32=r0, @ANYRES32=r1, @ANYRESDEC=r0, @ANYRES32, @ANYRES32=0x0], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000", @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) syz_emit_ethernet(0x6e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd60e400ff00383a00fc020000000000000000000000000000ff0200000000000000000000000000010200907800000000600000000000110000000000000000000000000000000000000000000000000000009effe000000117c166df77c47065"], 0x0) io_uring_setup(0x192, &(0x7f0000000300)={0x0, 0x4178, 0x400, 0x8000002, 0x3d7}) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3f8, 0x0, 0x3}, 0x10) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000480)=ANY=[@ANYBLOB="2400000010000100000000000000000008000000", @ANYRES32=r4, @ANYBLOB='\b\x00\x00\x00', @ANYRES32, @ANYBLOB="04002b804a00b52994362275f6f1bc0bf16d6206c75850df16f59e1cbc6707ce1c3432915507ce98e51c4e27c74bf61735c700000000"], 0x24}], 0x1}, 0x880) r5 = socket(0x1e, 0xa, 0x1) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r7, 0x4, 0x40400000, 0x0, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x4040080}, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) r8 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r8, &(0x7f0000000040)={&(0x7f00000002c0)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1c000000000000000000000007000000830ba700"/32], 0x20}, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x380008, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], 0xfe, 0x2ae, &(0x7f0000000a40)="$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") r9 = syz_open_procfs(0x0, &(0x7f0000000580)='net/igmp\x00') lseek(r9, 0x10001, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000c500000001f0ffff95"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r10, 0x0, 0xfffffffffffffffd}, 0x18) r11 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r11, 0x1, 0x19, 0x0, 0x0) syz_emit_ethernet(0x83, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030086dd601b8b97004d88c19edace00000000000000002100000002ff02000000000000000000000000000104004e20004d13"], 0x0) r12 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r12, &(0x7f0000000440)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0) 2.216039226s ago: executing program 3 (id=799): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x30, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0, 0x0, 0x9135}, 0x18) r1 = creat(&(0x7f0000000000)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf32(r1, &(0x7f0000000740)=ANY=[@ANYBLOB="7f454c4604030003000000000000000002003e00000000000103000038000000000000000f000000000020000100040000000000000000000300000008000000f30000008100000004"], 0x58) close(r1) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) 2.183499106s ago: executing program 2 (id=800): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x30, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0, 0x0, 0x9135}, 0x18) r1 = creat(&(0x7f0000000000)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf32(r1, &(0x7f0000000740)=ANY=[@ANYBLOB="7f454c4604030003000000000000000002003e00000000000103000038000000000000000f000000000020000100040000000000000000000300000008000000f30000008100000004"], 0x58) close(r1) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) 2.167165916s ago: executing program 3 (id=801): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x48, &(0x7f00000000c0)=0xcb7c, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000180)=@newtfilter={0x50, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r4, {0x5, 0x7}, {0xb}, {0xa, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x20, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x55, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x100c}]}, @TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x4}]}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000a9}, 0x20008004) io_setup(0x5, &(0x7f0000000500)) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000580)='./file1\x00', 0x800040, &(0x7f0000000340), 0x1, 0x597, &(0x7f0000000b80)="$eJzs3U1sG2UaAOB3xvH2L9t0pV1pd9VDtYtUpKpO0h8onNorolKlHpC4lMhxoyhOHMUONFEO6b1C9IAA9VJucOAI4sABcUHiwpULiDNSRSOQmh7AyH9pm9jBKXWdxs8jjT3ffON5v2/G73hmNCMHMLCO1V7SiP9ExKUkYuShuqFoVh5rzLe+tpK/v7aST6JavfxzEklE3FtbybfmT5rvhyJiNSL+HRFfZSNOpFvjlpeWZyaKxcJCszxamZ0fLS8tn5yenZgqTBXmTr/40tlzZ86Onxrv3Pjszvp644ebb9/49pXbNz/+5Ohq/t2JJM7HcLPu4X48SY11ko3zm6af6UWwPkr63QAeS6aZ57VU+leMRKaZ9e1UR55q04Aeq+6LqO5Esrqj2YHdLNlZ/gN7Rus4oHb+2xoeOUDI9Pb4486FxglILe56c2jUDDWuTcT++rnJwV+SR85MauebR3rbNAbA6vWIGBsa2vr9T5rfv8c39iQaSE99eaGxobZu/3Rj/xNt9j/DrWunf1Fr/7e+Zf/3IH6mw/7vUpcxfnv9xw86xr8e8d+28ZON+Emb+GlEvNFl/FuvfX6uU131w4jj0T5+S7L99eHRq9PFwljjtW2ML44ffXm7/h/sEL9xzXZ//Wem3fqf77L/n3396f9Wt4n//P+33/7t1v+BiHiny/j/uPfRq53q7lxP7taOAna6/WvTbncZ/4Xzx77vUHWgy0UAAAAAAAAAAABtpPV72ZI0tzGeprlc4xnef8bBtFgqV05cLS3OTTbueTsS2bR1p9VIo5zUyuPN+3Fb5VObyqdb9xFnDtTLuXypONnnvgMAAAAAAAAAAAAAAAAAAMBucWjT8/+/ZurP/2/+u2pgr+r8l9/AXif/YXA9mv9JxL6+NQV4yvz+w8Cqyn8YXPIfBpf8h8El/2FwyX8YXPIfBpf8BwAAAAAAAAAAAAAAAAAAAAAAAACAnrh08WJtqN5fW8nXypNDS4szpTdPThbKM7nZxXwuX1qYz02VSlPFQi5fmv2z5RVLpfmxmFu8NloplCuj5aXlK7OlxbnKlenZianClUL2qfQKAAAAAAAAAAAAAAAAAAAAni3D9SFJcxGR1sfTNJeL+HtEHIlscnW6WBiLiMMR8V0mu69WHu93owEAAAAAAAAAAAAAAAAAAGCPKS8tz0wUi4WFARkZ2jLlm84zR8Tqk21GbYk7/lS2ua12yzp81kYObz9PJvrewt040ucdEwAAAAAAAAAAAAAAAAAADKAHD/12+4nfe9sgAAAAAAAAAAAAAAAAAAAAGEjpT0lE1IbjI88Nb679W7Keqb9HxFu3Lr93baJSWRivTb+7Mb3yfnP6qX60H+hWK09beQwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8UF5anpkoFgsLPRzpdx8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHscfAQAA//+aXtbd") r5 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000740), 0x0) getresuid(0x0, 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x824, &(0x7f0000000840)=ANY=[]) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r6, &(0x7f0000001140)="5137aa73", 0x4, 0x200980) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r7 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r8 = ioctl$LOOP_CTL_GET_FREE(r7, 0x4c82) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000823000005000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b70800000000ebff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r10}, 0x10) ioctl$LOOP_CTL_REMOVE(r7, 0x4c81, r8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) 2.136585707s ago: executing program 2 (id=802): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000840)=ANY=[@ANYRES64=r1, @ANYRES32=r1, @ANYRESDEC=r1], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x8094) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x48, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) lsm_list_modules(&(0x7f0000000380)=[0x0, 0x0], &(0x7f00000003c0)=0x10, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000001680)=ANY=[@ANYBLOB], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r4, 0x108, 0x7, 0x0, &(0x7f0000000340)="63eced8e46dc3f", 0x0, 0xf48f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r3}, 0x10) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xa2, 0x7}}, './file0\x00'}) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r7 = getpid() process_vm_readv(r7, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r5, 0x0, 0x1000, 0xa1, &(0x7f0000000bc0)="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", &(0x7f0000000680)=""/161, 0x2, 0x0, 0x7a, 0xce, &(0x7f00000003c0)="a8d666d5568982813d8dc5d7615fce60eeb3f6a8943e812559138e2867080ea4bc792ee7b1b7a8e6b573659a326694e314511f64fc1c6af7c8db1fcadebc6329312564a33d674bebedc587c61d90e1a1d079dc98b206977a3666d3fecd19fc9ff6f6da57dfc897cf3dc301f4f73fa3eb0a7222f1c54ea122e1b3", &(0x7f0000001bc0)="56416ab55f67cf107aef02db3b91a9d255312b898453179e4a79fd508426872ac7e276673d5d9d7b18266b532eb57fd067e2c03928c070d86dbde234ce9e68a9929772c60bc2c374fceeeb5a26a707aabbbc3d711e49d5f8f43b4f62cb2a0ac1c2523138a8bad4694aa76a53aaa2c120e22672a6b9b791c7c7ba16c35980901ad090cf3dbbc485539091023e2a23fceefcac39e473cd0aa650b6cfdcf01aaa0416b6e585cb068adad993395ff1515d75cab9aabaddba821fa2d42f1724e65a6fcc1bec7c1ddef93f1de3f7822bd6"}, 0x50) syz_clone(0x80000000, &(0x7f0000000440)="a25c68fd4f2ff000b6b61c684b4edcd1fd78ed43bd1c7f7f29330d268b109466cd1ceb8d10f37e244b4f1cee", 0x2c, &(0x7f0000000580), &(0x7f00000008c0), &(0x7f0000000900)="31cb05d98d3612acc715bfb26c92f53cb8e29e18c482e89f7cc2c06a669a0654490e235364a5cf2126a2ae78d8b58463449e66c02a58229814b1168ebb281f808937bebe48507510839b07c7933a32fe30eedcd1ab1fae39a2cebb1aef0f51f135415497bace4ac96a85a2d3acf10c2d614a105ae40c21615ba96b") 1.9578123s ago: executing program 0 (id=803): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = add_key$fscrypt_provisioning(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x2}, &(0x7f0000000340)=ANY=[@ANYBLOB="802026f66a8b43000000"], 0xa, 0xfffffffffffffffd) r2 = add_key$keyring(&(0x7f00000085c0), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000008540), &(0x7f0000008580)={'syz', 0x3}, 0x0, 0x0, r2) keyctl$search(0xa, r1, &(0x7f0000000380)='.dead\x00', &(0x7f00000003c0)={'syz', 0x3}, r2) ppoll(&(0x7f0000000180)=[{0xffffffffffffffff, 0x44}, {r0, 0x8400}, {0xffffffffffffffff, 0x2}, {0xffffffffffffffff, 0x260}, {r0, 0x10}, {r0, 0x8}, {r0, 0x2000}, {r0, 0x410}], 0x8, &(0x7f00000001c0)={0x77359400}, &(0x7f0000000200)={[0x4]}, 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) syz_emit_ethernet(0x86, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffff0180c200000086dd6012000800503a00fe8000000000000000000000000000bbfe8000000000000000000000000000aa0802907800000000600008100000110000000000000000000000ffff00000000fc02000000000000000000000000008000000000000000000521000000000000fb36eeca6fad50b375a22a584d16ca55"], 0x0) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r3}, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183341, 0x0) r4 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r4, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @dev}}, 0x8c, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffdef}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0xff4c) 1.751039093s ago: executing program 3 (id=804): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x80000001, 0x8, 0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000180)={0x6}, 0x8) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) sendmsg$ETHTOOL_MSG_COALESCE_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000300)={0x2c, 0x0, 0x1, 0x0, 0x0, {0x1c}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}]}]}, 0x2c}}, 0x4000000) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000007c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x378, 0x1d8, 0x12, 0x60d, 0x1d8, 0x202, 0x2a8, 0x2e8, 0x2e8, 0x2a8, 0x2c0, 0x4, 0x0, {[{{@ipv6={@local, @mcast1, [0x0, 0x0, 0xc0], [], 'veth0_to_team\x00', 'macsec0\x00', {0xff}}, 0x0, 0x190, 0x1d8, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "000000165a8c2e0617ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f672225d6147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac05a602061c96baebc989f1f34a214e6726401fe4b124e0f7323a587d2a1fcf07000000eca0a7b66c60c527bac2b5", 0x4, 0x2}}, @inet=@rpfilter={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d8) 1.540417966s ago: executing program 1 (id=805): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000000)=0x4, 0x4) sendto$inet6(r0, &(0x7f0000000500)="a4", 0x34000, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) ioperm(0x0, 0x3, 0x2) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7020000140000e5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="010028bd706975e7192504"], 0x14}, 0x1, 0x0, 0x0, 0x24000050}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r4) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x200}, 0x1c) listen(r5, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r7 = accept(r5, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0x2400c840}, 0x0) recvfrom(r6, &(0x7f0000000280)=""/90, 0xfffffffffffffe22, 0x500, 0x0, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000700000045000000a000020095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000003c0)='kfree\x00', r8}, 0x10) connect$unix(r7, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYRES64=r2, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9b, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 1.420261628s ago: executing program 3 (id=806): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) syz_emit_ethernet(0x6c, &(0x7f0000000080)={@link_local, @link_local, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x3, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x2f, 0x0, @private, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x6558, 0x0, 0x0, [0x0, 0x0]}, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x800, [0x0]}}}}}}, 0x0) 1.333018139s ago: executing program 3 (id=807): bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x2000040, &(0x7f0000000280), 0x10, 0x4dc, &(0x7f0000000d80)="$eJzs3d9rHFsdAPDvTLK3v3JNrvpwveBtsZW0aHeTxrbBh1pB7FPBWt9rTDYhZJMN2U3bhCIpviuIqOCTT74I/gGC9E8QoaDvUkURbfXBB3VlZ2drG3eTlG52LsnnA9M5M2d3v9/TsGfmzBx2Aji2zkXEzYgYiYhLETGe70/z5Va7/k7ndS+eP5pvL0m0Wnf/mkSS7+t+VpKvz0TETkScjIiv34r4VvL/cRtb2ytztVp1I9+uNFfXK42t7cvLq3NL1aXq2szM9LXZ67NXZ6cG0s6JiLjxlT/+8Hs/++qNX33+we/v/fnit9tpjeX1r7ZjkDpNL2X/F12jEbFxGMEKMJKvS33qvzsyxGQAANhX+xz/4xHxmez8fzxGsrNTAAAA4ChpfWks/pVEtAAAAIAjK83mwCZpOZ8LMBZpWi535vB+Mk6ntXqj+bnF+ubaQmeu7ESU0sXlWnUqnys8EaWkvT2dz7Htbl/ZtT0TEe9FxA/GT2Xb5fl6baHoix8AAABwTJzZNf7/x3g2/j9RdF4AAADAgE0UnQAAAABw6Iz/AQAA4Ogz/gcAAIAj7Wu3b7eXVvf51wv3tzZX6vcvL1QbK+XVzfnyfH1jvbxUry9lv9m3ut/n1er19S/E2ubDSrPaaFYaW9v3Vuuba817y689AhsAAAAYovfOPvldEhE7XzyVLW3vFJ0UMBTJPvXZQ0Ke5Rt/GEJCwNCMFJ0AUJjRohMAClMqOgGgcPtdB+g7eefXg88FAAA4HJOf6n//37UBONrSohMAAIbO/X84vkqvzwC8WlwmQFE+tk/929//b7XeKCEAAGDgxrIlScv5vcCxSNNyOeLd7LEApWRxuVadyscHvx0vnWhvT2fvTPadMwwAAAAAAAAAAAAAAAAAAAAAAAAAdLRaSbQAAACAIy0i/VOS/Zp/xOT4hbHd1wfeSf45nq0j4sFP7v7o4VyzuTHd3v+3l/ubP873XyniCgYAAACwW3ec3h3HAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMAgvXj+aL67DDPuX74cERM94589ma1ORikiTv89idFX3pdExMgA4u88joj3e8VP2mnFRHSy6BX/VIHx04g4M4D4cJw9afc/N3t9/9I4l617f/9G8+Vt9e//0uj2fyN9+p93Dxjjg6e/qPSN/zjig9He/U83ftIn/vkDxv/mN7a3+9W1fhox2fP4k7wWq9JcXa80trYvL6/OLVWXqmszM9PXZq/PXp2dqiwu16r5vz1jfP/Tv/zPXu0/3Sf+xD7tv3DA9v/76cPnn+gUS73iXzzf+/j7fp/4aX7s+2xebtdPdss7nfKrPvz5bz7cq/0Lfdr/8u/f40DbjnnxgO2/dOc7zw74UgBgCBpb2ytztVp1460Kg/qcNyykUUBQhUMqnPhopKHQKezVayTD66AAAICB+d9Jf9GZAAAAAAAAAAAAAAAAAAAAwPE1jJ8T2x1zp5imAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADs6b8BAAD///JI2KQ=") getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, &(0x7f0000000240)) r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="33fe0000"], 0xfe33) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000001480)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b40)={&(0x7f0000000380)='kfree\x00', r2}, 0x18) r3 = dup(r1) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r3, 0x40605346, &(0x7f0000001280)={0x0, 0x0, {0x1, 0x0, 0x0, 0x0, 0xf963}}) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7) getpid() accept$inet6(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002eb0e00000000000000000105000600200000000a00000040010000000500e50000070000001f00001a000000030000a95a6e870200010000e9ff070040000200000000050005000000cc580a"], 0x80}}, 0x0) sendmmsg(r6, &(0x7f0000000180), 0x400008a, 0x0) 1.075365433s ago: executing program 0 (id=808): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x2, 0x0) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000200)=0x7ffffffc) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000380)='sched_switch\x00', r2, 0x0, 0x4}, 0x18) ioctl$EVIOCGRAB(r0, 0x40044590, 0x0) 977.432645ms ago: executing program 0 (id=809): syz_read_part_table(0x5be, &(0x7f00000005c0)="$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") bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[], &(0x7f0000000180), 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x107842, 0x42) sendfile(r0, r0, 0x0, 0x80000000) write$selinux_load(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757897cdd60ee12acbd0bd8e4ed7896187d2d2d7da5c6230da5165b2fe57ed379f4461126b1b67bb8b72f78bf206d9a9dcf3f5ae32139937"], 0x46) 915.129566ms ago: executing program 0 (id=810): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x8000, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x2, @perf_config_ext={0xf60, 0x40ffffffff}, 0x1100, 0x5, 0x3a65, 0x5, 0x0, 0x5, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b40)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) rt_sigaction(0x19, &(0x7f0000000000)={0xfffffffffffffffc, 0x44000006, 0x0}, 0x0, 0x8, &(0x7f0000000440)) memfd_create(&(0x7f00000006c0)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\xf2\xed\x04\x00\x00\x00\xd4N\x12\x9b\x1f\t\xd1Z+\x86T\x16\xf8\x01\x00\x00\x00\x9f+\x8d!\x0fG\xab\xc2\xdc\xa3\xb3\xae8\x9f9?\xefo\xa4k\x01\xb2>\xa1\x9c\x86xm\xe6\x9bZ4\x91\x1a\xdb\xdd\x89\xb9\xc0LF;\xd6\x84\x195\x06\x00\x00\x00~\xf3S\x12\"p^\xc1jP\x8a\xc6[\xbd\xe7q]\xdd\r\x1aZS\x01*\x1b\xfd\xbcMA\xdcq\xa1\x00\xb3\xf9\x91r\x7f\xdc\xf1\xc3G,\xdb\xccS\x15\x95b\x17\xab\xe4?\x96\x95\xa4kP\x99YO\xb8V\xd5p\x90X\xaaf', 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r3, 0xa02000000000000, 0x60, &(0x7f0000000880)={'filter\x00', 0xb001, 0x4, 0x400, 0x0, 0x230, 0x230, 0x318, 0x318, 0x318, 0x7fffffe, 0x0, {[{{@uncond, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f67b23ffdfa27f907a03732da3acbc6518e62a77ca06f258762e88c0d9f9d2f413b94a105f4bdf01425ce81c5d000000000000000500ffffffff00"}}}, {{@arp={@multicast2, @loopback, 0x0, 0x0, 0xfe, 0x4, {@empty, {[0x0, 0x0, 0xff]}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 'veth0_to_team\x00', 'ip6tnl0\x00', {}, {0xff}}, 0xc0, 0x100}, @unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "a103efe7765cc8901996aa10ee8d074e2753cd5bbbc8ac0131e60b33c524"}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x0, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x450) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="3900000013000318680907070000000f0000ff3f04000000170a001700000000040037000d00030001332564aa58b9a64411f6bbf44dc48f57", 0x39}], 0x1) 714.288209ms ago: executing program 2 (id=811): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x30, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0, 0x0, 0x9135}, 0x18) r1 = creat(&(0x7f0000000000)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf32(r1, &(0x7f0000000740)=ANY=[@ANYBLOB="7f454c4604030003000000000000000002003e00000000000103000038000000000000000f000000000020000100040000000000000000000300000008000000f30000008100000004"], 0x58) close(r1) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) 674.25934ms ago: executing program 2 (id=812): syz_io_uring_setup(0x24f6, &(0x7f0000000540)={0x0, 0xe62a, 0x10100, 0xffffffff, 0x134}, &(0x7f0000000240)=0x0, &(0x7f0000000200)=0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000000)=@IORING_OP_READ_FIXED) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r2, 0x800448d5, 0x0) r3 = socket$pppoe(0x18, 0x1, 0x0) r4 = syz_open_dev$mouse(0x0, 0x40, 0x105200) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x41100, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r6}, 0x10) r7 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$selinux_user(r7, &(0x7f0000000040)=ANY=[@ANYBLOB='system_u:object_r:auth_cache_t root'], 0x27) sendmmsg(r3, &(0x7f0000003c00)=[{{&(0x7f0000000100)=@generic={0x2a, "ac8eaf031d302a61c76362c988b3a802faee576e1732357191b57e96d0d13669450080000000000000c4e599f3a272526ed736a9ab315e53f2d513107b66ab0e5e9561de083c0d6a7a9a57897b814fb6472ba036eb0fd08442713daf3ddbf4feae14cff8d8cc16de589fa4de22d8bf4ab9e4c0a95bfebdd385ca7356c892"}, 0x80, &(0x7f0000001280)=[{&(0x7f0000002600)="416d72c00697a9976528c352fe7adc03ba64726ccd4afe2f6a0787ee3882cfa5c69c9ac0acaa3a1c55947c3e38e6f940c6b182fa2ccb5c9a77d1c0a00c2b90ee7afb6d746043c6ddc32fbb140fdc854b2db44739e3d619b8f53bca6777a6a181f3f07a9d27a5", 0x66}, {&(0x7f0000000200)="e220987d2ed7ae10f9ebe7095767398240614ff0a8c448fc5a8f64ba2711af52e4421ef00c7e338c69a450acd0155018e46c2dfb30682bd243ac28f73e1e10ce1c1d04c732d9998d09b27254d09f0ace424d233735a325970f429893fb5025c563461e93dd6cb4fb44fece59ef9f12", 0x6f}, {&(0x7f0000000280)="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", 0x1000}, {&(0x7f0000000000)="093fc4ff3f390f24d0f88a34d08026775b793926c41a606517c05db3290385c52f2236e6cd9caa61d4778efaabde8e174cb5803bdc8d32e884b2ae04b76817", 0x3f}], 0x4, &(0x7f00000012c0)=ANY=[@ANYBLOB="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"], 0x10f8}}, {{&(0x7f00000023c0)=@generic={0x22, "edcb36e341d756ce6cbb0d5434f6615d1d652f188fadd4b915c308b4e098cb5cd8e51b109431e07fd7ce5ac58536b02246b7c13b7beecd8dda93bd1e0650f24d6de2e3e9861866f1b2977dcf54f6787893418734dc8842f027fa8d70a71425382d0bee9777f662a899f4d7c2389fbfbbe06a1f048169a23b798374f72768"}, 0x80, &(0x7f00000025c0)=[{&(0x7f0000002440)="1e1ecdd0edd2dc917b67fa16dba0559d2ea6bbf9fb6a6d78ff7f5ebf0595e1fa1abcd3aa1641df1f54c7fb9a0ac100d376f47833f3c97d5553c91fbe75ff6c437524c398c6efd89d511af65398e298844d062b1d1152aa7381665fb8a14b3a8bff127299eed8faa2ddcedf7e0ca05a90d7d299315ad0ce57d00b0949a882ba12f794fdfa7fe729dd8c11e83eb640962e7f94b20e7cb17d520be41a882defd26209a50d8a226c15b1f205a2f70735268eb74e1392b59f7a0d", 0xb8}, {&(0x7f0000002500)="7d4aa3333fa3023b0663a60332faf840aa4b846f5beb4e1af0645bacbc2be0e8538adedf623d3414a4ff6d976556ab8f186fd2c61fe96581544bb5a364cff0e13f8190854cc766222dee52aab9c827a2a03f9820cd9a5951b0feae32bad4a5a45167c50ae2ceb22bd53c2076eb0747ff864e9da9e995eacbf0979dea28946b818429ba7a54e87968", 0x88}], 0x2, &(0x7f00000001c0)}}, {{&(0x7f0000002800)=@in6={0xa, 0x4e20, 0x84, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xffff6c9a}, 0x80, &(0x7f0000002900)=[{&(0x7f0000002880)="7c7d67576ea4249d0f5157e3f81fa8fbc40b8973d3fbf38a949c03922334dc0a7b7975a6e1e0982a2df0449d4272accceae1a1e5f8800af697d570cba1190dd816cbf2e73e3629ce70f1b4111276f286a8bbb0d6cd21ada9760b1ac86fd8c86c58ff855905f7c995ea136808714fe35ccc757e", 0x73}], 0x1, &(0x7f00000045c0)=ANY=[@ANYBLOB="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"], 0x408}}, {{0x0, 0x0, &(0x7f0000002f80)=[{&(0x7f0000002c80)="aa5ac8fe2d25fef0de461f9872fe05c4994c022e4aedd9a348ec0430e775da31e72b654087e12ee526653c0b20ee4a3eb47837f39cacd1631c6915434641a813631dd9", 0x43}, {&(0x7f0000002680)="ddf4ff56a8b736093bed5238046968ac6fda7582cbf3927d8b68b135f07643578ee63c5a0d7dee64f7e92d98766caedc470c309699dadc677ff9acda60f0e503b8289aa905603ded03536a8226de3828456f1858168f73fa8001c857d85c6227eb08789afd393c224605ccb4e7f8763234a17003ef0781e74f51d232c7f19baf58cc124149388a578bc51c1144062a8896b6f252ab95dd1eca7e58ab2993eeeb9889f39c8d00000000000000", 0xac}, {&(0x7f0000002dc0)="358c9e2c33e392d527c9a0aea1f012ab025d5635a1b97ecb3f9fe0c62c277f03ce594ad2bc3b14a8b0ca337d6c659ceeb621adbcaf41fbeb6ce25910997e347a7fdfa4a3f38b53ffd7f579bc35aaf9196ae410d385f65b2184e37759d7af57f3b0afd25e1b91814a8c394e8a60c61584db462a6949ba7feefa491c84b0a7931098ae4b15510c69838022c84bcd6c914688a6196938202da153833da733f6cdd102733b778c4c84f9775db6ac60e6b308f10b03dd875b786792f873f7db246204bccede9ed36aff8e66697ed706472513e388a690a8a91671831108b7585cff8be68b5f416bd4a21e3871b67049f3555643", 0xf1}, {&(0x7f0000002ec0)="0b5c7a438962b0f49259ff6901e40f32630d7bb56f26fe6f270dca702aec69c1ffe0ce5bd4dbf8060b2ff3b2718d401f67dbf049be4d9e37012fbfbfa73f704b87943677eccb9e8eeaa3c97f3c72ec3f6d7a06877e01d54fe8e328fdaef3a78b17d7d765248f4946386cd96a4e4689e0aa74b0d0971745c552a9419a9e0a77d08b408f7128d358e7fd5fccd91d274859b336932336e64e4d6c2581c4f7c4148c9d323b4fa9e55ed36cbbb6cffb01de0d06e4f291bebc", 0xb6}], 0x4, &(0x7f0000002fc0)=ANY=[@ANYBLOB="4000000000000000020100000100000078f9cd066ee36a22a05a2a106c4533ca52dc14c3678959b0cab5f2be54e12bf9e6cbc077fbc56b3f0f00000000000000c00000000000000097a822aa70000000e394c0dbf837c1ec50276f8ccbb8e27617ae35f7a8c0c51b08ef33a2e95ce27940678cd9003159bc6b958bf8842d092438ac4954d03cded36238311570cbd8caff88f27f4584a35532baa06547d59669af7c07594881e7d3419cee3fcd2dde1e4a24c8c294fe951e15d35c669f11729d63431fd45d8a4c1fdb6fa9acff2ec43eea374b18dcc8a47b2b9a283fef7078de72edd1ac10f3e8dc340ba0e9403c5b51c44c994d82fbcae3f89aaf0000000000"], 0x100}}, {{&(0x7f00000030c0)=@isdn={0x22, 0xb8, 0xfd, 0x3, 0x2}, 0x80, &(0x7f0000003200)=[{&(0x7f0000003140)="0bd56304610677753616713044674f90077e686c3c7cb6b247586634f9eefde685935a27c521c49cf899740e1d694879010710614bae7a08930c446856b1c7b55ae537336c2643a6dec1ded96292de6b7239789cab6803296f8ed7fe613de8b4c4a2a263679b34e1cfd95564c99096cf10f78fd695195eedabe12a7fd15d3859e36f7c0b4ea29981d490235c877e66d0e4e5c0065dbf9eb98bf5b2a2d15d9c3dab9ede9d1631c92fded2b0a32431c3780dc78122", 0xb4}], 0x1, &(0x7f0000003d80)=ANY=[], 0x178}}, {{&(0x7f00000033c0)=@vsock={0x28, 0x0, 0x0, @my=0x1}, 0x80, 0x0}}], 0x6, 0x14) r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r8, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) r9 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x107842, 0x42) lseek(r9, 0x5, 0x3) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='kfree\x00'}, 0x10) r11 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$selinux_user(r11, &(0x7f0000000180)=ANY=[@ANYBLOB="4af6e89bdb98b681eab9a2f6d55bb0c9c0aab6229de8ecb1788024dab97c4c59152b466dd10da1"], 0x27) chown(&(0x7f0000000040)='./file1\x00', 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x8, &(0x7f0000000040), 0x9, 0x52e, &(0x7f0000000500)="$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") ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000140)) openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) r12 = open(&(0x7f0000000080)='./file1\x00', 0x64842, 0x86) pwritev2(r12, &(0x7f0000000240)=[{}], 0x1, 0x7800, 0x0, 0x3) 614.158291ms ago: executing program 4 (id=813): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000faffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r2}, 0x18) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) fcntl$setlease(r3, 0x400, 0x1) close(r3) 577.731061ms ago: executing program 0 (id=814): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) 561.483262ms ago: executing program 4 (id=815): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x80000001, 0x8, 0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000180)={0x6}, 0x8) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000d80)={0x11, 0xf, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) sendmsg$ETHTOOL_MSG_COALESCE_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000300)={0x2c, 0x0, 0x1, 0x0, 0x0, {0x1c}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}]}]}, 0x2c}}, 0x4000000) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000007c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x378, 0x1d8, 0x12, 0x60d, 0x1d8, 0x202, 0x2a8, 0x2e8, 0x2e8, 0x2a8, 0x2c0, 0x4, 0x0, {[{{@ipv6={@local, @mcast1, [0x0, 0x0, 0xc0], [], 'veth0_to_team\x00', 'macsec0\x00', {0xff}}, 0x0, 0x190, 0x1d8, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "000000165a8c2e0617ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f672225d6147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac05a602061c96baebc989f1f34a214e6726401fe4b124e0f7323a587d2a1fcf07000000eca0a7b66c60c527bac2b5", 0x4, 0x2}}, @inet=@rpfilter={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d8) 477.043852ms ago: executing program 1 (id=816): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r2 = openat$selinux_create(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$selinux_create(r2, &(0x7f0000000040)=@access={'system_u:object_r:gpg_helper_exec_t:s0', 0x20, '/usr/sbin/cupsd', 0x20, 0x2b00, 0x2b}, 0x4c) 456.867043ms ago: executing program 4 (id=817): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r1, 0xc0f85403, 0x0) 449.157943ms ago: executing program 1 (id=818): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000040)=@name={0x1e, 0x2, 0x2, {{0x42, 0x3}, 0x1}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) bind$tipc(r0, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10) bind$tipc(r1, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x3}}}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100003020702500000000002020207b1af8ff00000000bfa1000000000000070100003affffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000040)={0x53, 0x0, 0x6, 0x0, @buffer={0x17, 0x44, &(0x7f0000000200)=""/68}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x0, 0x0, 0x0, 0x0}) 364.043434ms ago: executing program 1 (id=819): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCMIWAIT(r3, 0x5453, 0x7cb7562f2d67) r4 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040), 0xc02200, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x5, &(0x7f0000001500)=ANY=[@ANYBLOB="1801000075981400000000003b810000850000007d000000760000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000005c0)='sys_enter\x00', r5}, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000009900000001"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x2000008, &(0x7f00000003c0), 0x0, 0x52e, &(0x7f0000000f00)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x18) r8 = openat$autofs(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r8, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x5f, 0xffffffffffffffff, {0x29}}, './file0\x00'}) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r10 = openat$procfs(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/vmallocinfo\x00', 0x0, 0x0) read$hiddev(r10, &(0x7f00000000c0)=""/4092, 0xffc) r11 = ioctl$TIOCGPTPEER(r3, 0x5441, 0x1) ioctl$KDGETKEYCODE(r11, 0x4b4c, &(0x7f00000014c0)={0x1b5, 0x3e}) pread64(r10, &(0x7f00000013c0)=""/208, 0xd0, 0x800) symlink(&(0x7f0000001780)='./file0/../file0\x00', &(0x7f00000017c0)='./file0\x00') name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[], &(0x7f0000000180), 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x204600) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc11a900e8d164a40, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='btrfs_clear_extent_bit\x00', r9, 0x0, 0x9}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r12}, 0x10) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) 363.705774ms ago: executing program 4 (id=820): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x2000008, &(0x7f00000003c0), 0x0, 0x52e, &(0x7f0000000f00)="$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") r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x5f, 0xffffffffffffffff, {0x29}}, './file0\x00'}) symlink(&(0x7f0000001780)='./file0/../file0\x00', &(0x7f00000017c0)='./file0\x00') name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[], &(0x7f0000000180), 0x0) 89.316719ms ago: executing program 2 (id=821): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCMIWAIT(r3, 0x5453, 0x7cb7562f2d67) r4 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040), 0xc02200, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x5, &(0x7f0000001500)=ANY=[@ANYBLOB="1801000075981400000000003b810000850000007d000000760000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000005c0)='sys_enter\x00', r5}, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000009900000001"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x2000008, &(0x7f00000003c0), 0x0, 0x52e, &(0x7f0000000f00)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x18) r8 = openat$autofs(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r8, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x5f, 0xffffffffffffffff, {0x29}}, './file0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r9 = openat$procfs(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/vmallocinfo\x00', 0x0, 0x0) read$hiddev(r9, &(0x7f00000000c0)=""/4092, 0xffc) r10 = ioctl$TIOCGPTPEER(r3, 0x5441, 0x1) ioctl$KDGETKEYCODE(r10, 0x4b4c, &(0x7f00000014c0)={0x1b5, 0x3e}) pread64(r9, &(0x7f00000013c0)=""/208, 0xd0, 0x800) symlink(&(0x7f0000001780)='./file0/../file0\x00', &(0x7f00000017c0)='./file0\x00') name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[], &(0x7f0000000180), 0x0) 0s ago: executing program 4 (id=822): r0 = socket$key(0xf, 0x3, 0x2) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/devices\x00', 0x0, 0x0) io_setup(0x3, &(0x7f0000000140)=0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newsa={0x13c, 0x10, 0x413, 0x0, 0x25dfdbf9, {{@in6=@dev, @in6=@ipv4={'\x00', '\xff\xff', @multicast2}}, {@in6=@private1, 0x0, 0x32}, @in=@empty, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {0x0, 0x0, 0x3}, {}, 0x70bd2a, 0x0, 0x2, 0x2, 0x0, 0x62}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}, 0x1, 0x0, 0x0, 0x4000}, 0x40c0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) close(0xffffffffffffffff) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f00000000c0)=0x4) utime(0x0, &(0x7f0000000200)={0x80, 0xffbdffffffffffff}) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000580)='./file1\x00', 0x40, &(0x7f0000000340), 0x1, 0x573, &(0x7f0000000ec0)="$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") r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) pwrite64(r5, &(0x7f0000000100)="03", 0x1, 0xfecc) io_submit(r2, 0x1, &(0x7f0000000a40)=[&(0x7f0000000840)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000400)={[{@nogrpid}, {@noblock_validity}, {@noquota}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x4}}, {@orlov}]}, 0x4, 0x4f5, &(0x7f0000000c00)="$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") lremovexattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=@known='system.posix_acl_access\x00') sendmsg$key(r0, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x7, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000024"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000080)='kfree\x00', r6, 0x0, 0x8}, 0x18) kernel console output (not intermixed with test programs): bb6b9bf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 57.471510][ T4196] RAX: ffffffffffffffda RBX: 00007fbb6d575fa0 RCX: 00007fbb6d35d169 [ 57.471524][ T4196] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000006 [ 57.471539][ T4196] RBP: 00007fbb6b9bf090 R08: 0000000000000000 R09: 0000000000000000 [ 57.471561][ T4196] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 57.471575][ T4196] R13: 0000000000000000 R14: 00007fbb6d575fa0 R15: 00007fffcbe6f9b8 [ 57.471593][ T4196] [ 57.680622][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.918648][ T4214] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 57.985140][ T4215] tmpfs: Bad value for 'mpol' [ 57.985304][ T29] kauditd_printk_skb: 383 callbacks suppressed [ 57.985321][ T29] audit: type=1400 audit(1744574944.098:1970): avc: denied { mounton } for pid=4213 comm="syz.3.252" path="/syzcgroup/unified/syz3" dev="cgroup2" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 58.000434][ T4215] syz.3.252 uses obsolete (PF_INET,SOCK_PACKET) [ 58.058897][ T29] audit: type=1400 audit(1744574944.148:1971): avc: denied { create } for pid=4213 comm="syz.3.252" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 58.078565][ T29] audit: type=1400 audit(1744574944.168:1972): avc: denied { ioctl } for pid=4213 comm="syz.3.252" path="socket:[5996]" dev="sockfs" ino=5996 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 58.081013][ T4215] loop3: detected capacity change from 0 to 512 [ 58.105581][ T29] audit: type=1400 audit(1744574944.228:1973): avc: denied { map } for pid=4216 comm="syz.1.254" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=6572 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 58.133707][ T29] audit: type=1400 audit(1744574944.228:1974): avc: denied { read write } for pid=4216 comm="syz.1.254" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=6572 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 58.159521][ T29] audit: type=1400 audit(1744574944.288:1975): avc: denied { create } for pid=4216 comm="syz.1.254" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 58.172960][ T4215] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 58.180966][ T29] audit: type=1400 audit(1744574944.308:1976): avc: denied { ioctl } for pid=4216 comm="syz.1.254" path="socket:[6575]" dev="sockfs" ino=6575 ioctlcmd=0x48d5 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 58.192423][ T4215] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 58.219878][ T4217] SELinux: syz.1.254 (4217) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 58.256711][ T29] audit: type=1400 audit(1744574944.348:1977): avc: denied { create } for pid=4216 comm="syz.1.254" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 58.294968][ T29] audit: type=1400 audit(1744574944.378:1978): avc: denied { write } for pid=4216 comm="syz.1.254" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 58.306359][ T4224] ip6gre1: entered allmulticast mode [ 58.325099][ T4215] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 58.347338][ T4227] FAULT_INJECTION: forcing a failure. [ 58.347338][ T4227] name failslab, interval 1, probability 0, space 0, times 0 [ 58.357140][ T4215] EXT4-fs (loop3): 1 truncate cleaned up [ 58.360022][ T4227] CPU: 1 UID: 0 PID: 4227 Comm: syz.4.256 Not tainted 6.15.0-rc1-syzkaller-00333-g5aaaedb0cb54 #0 PREEMPT(voluntary) [ 58.360059][ T4227] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 58.360074][ T4227] Call Trace: [ 58.360081][ T4227] [ 58.360090][ T4227] dump_stack_lvl+0xf6/0x150 [ 58.360119][ T4227] dump_stack+0x15/0x1a [ 58.360140][ T4227] should_fail_ex+0x261/0x270 [ 58.360223][ T4227] should_failslab+0x8f/0xb0 [ 58.360342][ T4227] kmem_cache_alloc_node_noprof+0x5c/0x340 [ 58.360371][ T4227] ? __alloc_skb+0x10d/0x320 [ 58.360479][ T4227] __alloc_skb+0x10d/0x320 [ 58.360576][ T4227] netlink_alloc_large_skb+0xad/0xe0 [ 58.360605][ T4227] netlink_sendmsg+0x3da/0x720 [ 58.360711][ T4227] ? __pfx_netlink_sendmsg+0x10/0x10 [ 58.360743][ T4227] __sock_sendmsg+0x140/0x180 [ 58.360767][ T4227] ____sys_sendmsg+0x350/0x4e0 [ 58.360826][ T4227] __sys_sendmsg+0x1a0/0x240 [ 58.360878][ T4227] __x64_sys_sendmsg+0x46/0x50 [ 58.360911][ T4227] x64_sys_call+0x26f3/0x2e10 [ 58.360939][ T4227] do_syscall_64+0xc9/0x1c0 [ 58.361013][ T4227] ? clear_bhb_loop+0x25/0x80 [ 58.361039][ T4227] ? clear_bhb_loop+0x25/0x80 [ 58.361066][ T4227] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 58.361154][ T4227] RIP: 0033:0x7f751ab4d169 [ 58.361185][ T4227] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 58.361206][ T4227] RSP: 002b:00007f75191af038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 58.361240][ T4227] RAX: ffffffffffffffda RBX: 00007f751ad65fa0 RCX: 00007f751ab4d169 [ 58.361255][ T4227] RDX: 0000000000000000 RSI: 00002000000037c0 RDI: 0000000000000005 [ 58.361270][ T4227] RBP: 00007f75191af090 R08: 0000000000000000 R09: 0000000000000000 [ 58.361284][ T4227] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 58.361297][ T4227] R13: 0000000000000000 R14: 00007f751ad65fa0 R15: 00007ffc2c81bb68 [ 58.361320][ T4227] [ 58.368651][ T29] audit: type=1400 audit(1744574944.468:1979): avc: denied { ioctl } for pid=4226 comm="syz.4.256" path="socket:[6023]" dev="sockfs" ino=6023 ioctlcmd=0x7436 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 58.393522][ T4215] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 58.395840][ T4230] SELinux: syz.1.254 (4230) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 58.624045][ T4232] loop1: detected capacity change from 0 to 512 [ 58.658802][ T4232] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 58.681176][ T4232] ext4 filesystem being mounted at /53/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 58.691960][ T4239] loop2: detected capacity change from 0 to 1024 [ 58.736465][ T4239] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 58.738723][ T4232] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 58.748635][ T4239] ext4 filesystem being mounted at /59/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 58.771490][ T4239] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 58.786487][ T4239] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 63 with max blocks 1 with error 28 [ 58.798813][ T4239] EXT4-fs (loop2): This should not happen!! Data will be lost [ 58.798813][ T4239] [ 58.808478][ T4239] EXT4-fs (loop2): Total free blocks count 0 [ 58.814486][ T4239] EXT4-fs (loop2): Free/Dirty block details [ 58.820413][ T4239] EXT4-fs (loop2): free_blocks=4293918720 [ 58.826253][ T4239] EXT4-fs (loop2): dirty_blocks=16 [ 58.831395][ T4239] EXT4-fs (loop2): Block reservation details [ 58.837443][ T4239] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 58.859038][ T4245] bridge0: port 4(bond0) entered blocking state [ 58.865798][ T4245] bridge0: port 4(bond0) entered disabled state [ 58.876665][ T4245] bond0: entered allmulticast mode [ 58.881955][ T4245] bond_slave_0: entered allmulticast mode [ 58.888126][ T4245] bond_slave_1: entered allmulticast mode [ 58.908959][ T4245] bond0: entered promiscuous mode [ 58.914084][ T4245] bond_slave_0: entered promiscuous mode [ 58.919970][ T4245] bond_slave_1: entered promiscuous mode [ 58.932825][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.953433][ T4245] bridge0: port 4(bond0) entered blocking state [ 58.960080][ T4245] bridge0: port 4(bond0) entered forwarding state [ 58.970908][ T4244] bond0: left allmulticast mode [ 58.976041][ T4244] bond_slave_0: left allmulticast mode [ 58.982213][ T4244] bond_slave_1: left allmulticast mode [ 58.988421][ T4244] bond0: left promiscuous mode [ 58.993259][ T4244] bond_slave_0: left promiscuous mode [ 58.999898][ T4244] bond_slave_1: left promiscuous mode [ 59.006124][ T4244] bridge0: port 4(bond0) entered disabled state [ 59.082970][ T4249] hub 2-0:1.0: USB hub found [ 59.116263][ T4249] hub 2-0:1.0: 8 ports detected [ 59.153254][ T4257] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 59.188563][ T4257] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 59.317824][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.654668][ T4276] loop0: detected capacity change from 0 to 1024 [ 59.688739][ T4276] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 59.701329][ T4276] ext4 filesystem being mounted at /59/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 59.721527][ T4276] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 59.736884][ T4276] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 63 with max blocks 1 with error 28 [ 59.749166][ T4276] EXT4-fs (loop0): This should not happen!! Data will be lost [ 59.749166][ T4276] [ 59.758837][ T4276] EXT4-fs (loop0): Total free blocks count 0 [ 59.764825][ T4276] EXT4-fs (loop0): Free/Dirty block details [ 59.770819][ T4276] EXT4-fs (loop0): free_blocks=4293918720 [ 59.776584][ T4276] EXT4-fs (loop0): dirty_blocks=16 [ 59.781760][ T4276] EXT4-fs (loop0): Block reservation details [ 59.787762][ T4276] EXT4-fs (loop0): i_reserved_data_blocks=1 [ 60.104883][ T4296] IPv6: NLM_F_REPLACE set, but no existing node found! [ 60.114727][ T3308] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.135173][ T4298] FAULT_INJECTION: forcing a failure. [ 60.135173][ T4298] name failslab, interval 1, probability 0, space 0, times 0 [ 60.147963][ T4298] CPU: 0 UID: 0 PID: 4298 Comm: syz.0.277 Not tainted 6.15.0-rc1-syzkaller-00333-g5aaaedb0cb54 #0 PREEMPT(voluntary) [ 60.147997][ T4298] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 60.148012][ T4298] Call Trace: [ 60.148019][ T4298] [ 60.148027][ T4298] dump_stack_lvl+0xf6/0x150 [ 60.148086][ T4298] dump_stack+0x15/0x1a [ 60.148102][ T4298] should_fail_ex+0x261/0x270 [ 60.148134][ T4298] should_failslab+0x8f/0xb0 [ 60.148255][ T4298] kmem_cache_alloc_node_noprof+0x5c/0x340 [ 60.148278][ T4298] ? __alloc_skb+0x10d/0x320 [ 60.148303][ T4298] __alloc_skb+0x10d/0x320 [ 60.148393][ T4298] netlink_alloc_large_skb+0xad/0xe0 [ 60.148478][ T4298] netlink_sendmsg+0x3da/0x720 [ 60.148515][ T4298] ? __pfx_netlink_sendmsg+0x10/0x10 [ 60.148604][ T4298] __sock_sendmsg+0x140/0x180 [ 60.148627][ T4298] ____sys_sendmsg+0x350/0x4e0 [ 60.148666][ T4298] __sys_sendmsg+0x1a0/0x240 [ 60.148726][ T4298] __x64_sys_sendmsg+0x46/0x50 [ 60.148758][ T4298] x64_sys_call+0x26f3/0x2e10 [ 60.148823][ T4298] do_syscall_64+0xc9/0x1c0 [ 60.148854][ T4298] ? clear_bhb_loop+0x25/0x80 [ 60.148879][ T4298] ? clear_bhb_loop+0x25/0x80 [ 60.148900][ T4298] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 60.148989][ T4298] RIP: 0033:0x7fbb6d35d169 [ 60.149005][ T4298] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 60.149026][ T4298] RSP: 002b:00007fbb6b9bf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 60.149048][ T4298] RAX: ffffffffffffffda RBX: 00007fbb6d575fa0 RCX: 00007fbb6d35d169 [ 60.149060][ T4298] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 60.149071][ T4298] RBP: 00007fbb6b9bf090 R08: 0000000000000000 R09: 0000000000000000 [ 60.149082][ T4298] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 60.149095][ T4298] R13: 0000000000000000 R14: 00007fbb6d575fa0 R15: 00007fffcbe6f9b8 [ 60.149137][ T4298] [ 60.349589][ T4299] sch_fq: defrate 0 ignored. [ 60.390707][ T4303] loop2: detected capacity change from 0 to 764 [ 60.508211][ T4306] loop2: detected capacity change from 0 to 128 [ 60.526625][ T4306] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 60.548112][ T4306] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 60.560507][ T4306] ext2 filesystem being mounted at /62/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaatask supports timestamps until 2038-01-19 (0x7fffffff) [ 60.590916][ T3301] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 60.594925][ T4315] FAULT_INJECTION: forcing a failure. [ 60.594925][ T4315] name failslab, interval 1, probability 0, space 0, times 0 [ 60.612548][ T4315] CPU: 1 UID: 0 PID: 4315 Comm: syz.4.284 Not tainted 6.15.0-rc1-syzkaller-00333-g5aaaedb0cb54 #0 PREEMPT(voluntary) [ 60.612574][ T4315] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 60.612585][ T4315] Call Trace: [ 60.612621][ T4315] [ 60.612629][ T4315] dump_stack_lvl+0xf6/0x150 [ 60.612652][ T4315] dump_stack+0x15/0x1a [ 60.612667][ T4315] should_fail_ex+0x261/0x270 [ 60.612695][ T4315] should_failslab+0x8f/0xb0 [ 60.612787][ T4315] kmem_cache_alloc_noprof+0x59/0x340 [ 60.612810][ T4315] ? security_file_alloc+0x32/0x100 [ 60.612888][ T4315] security_file_alloc+0x32/0x100 [ 60.612961][ T4315] init_file+0x5e/0x1e0 [ 60.612991][ T4315] alloc_empty_file+0x8e/0x200 [ 60.613083][ T4315] alloc_file_pseudo+0xcb/0x160 [ 60.613156][ T4315] __shmem_file_setup+0x1bb/0x1f0 [ 60.613186][ T4315] shmem_file_setup+0x3b/0x50 [ 60.613279][ T4315] __se_sys_memfd_create+0x2e1/0x5a0 [ 60.613306][ T4315] __x64_sys_memfd_create+0x31/0x40 [ 60.613330][ T4315] x64_sys_call+0x1163/0x2e10 [ 60.613397][ T4315] do_syscall_64+0xc9/0x1c0 [ 60.613432][ T4315] ? clear_bhb_loop+0x25/0x80 [ 60.613457][ T4315] ? clear_bhb_loop+0x25/0x80 [ 60.613479][ T4315] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 60.613515][ T4315] RIP: 0033:0x7f751ab4d169 [ 60.613531][ T4315] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 60.613551][ T4315] RSP: 002b:00007f75191aee18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 60.613572][ T4315] RAX: ffffffffffffffda RBX: 000000000000049d RCX: 00007f751ab4d169 [ 60.613583][ T4315] RDX: 00007f75191aeef0 RSI: 0000000000000000 RDI: 00007f751abcf32c [ 60.613596][ T4315] RBP: 0000200000000940 R08: 00007f75191aebb7 R09: 00007f75191aee40 [ 60.613609][ T4315] R10: 000000000000000a R11: 0000000000000202 R12: 0000200000000000 [ 60.613671][ T4315] R13: 00007f75191aeef0 R14: 00007f75191aeeb0 R15: 0000200000000100 [ 60.613688][ T4315] [ 61.607890][ T4349] ip6gre1: entered allmulticast mode [ 61.667343][ T4350] tmpfs: Bad value for 'mpol' [ 61.703148][ T4350] loop0: detected capacity change from 0 to 512 [ 61.711996][ T4350] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 61.739020][ T4350] EXT4-fs (loop0): 1 truncate cleaned up [ 61.747653][ T4350] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 61.872063][ T3308] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.926700][ T4374] netlink: 'ext4 Õm¯lìâ=': attribute type 4 has an invalid length. [ 61.941577][ T4375] IPv6: NLM_F_REPLACE set, but no existing node found! [ 62.039695][ T4388] ip6gre1: entered allmulticast mode [ 62.062154][ T4391] capability: warning: `syz.0.311' uses deprecated v2 capabilities in a way that may be insecure [ 62.101969][ T4393] loop0: detected capacity change from 0 to 1024 [ 62.118088][ T4393] EXT4-fs: Ignoring removed nobh option [ 62.123694][ T4393] EXT4-fs: Ignoring removed bh option [ 62.137875][ T4393] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 62.153839][ T4393] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4113: comm syz.0.312: Allocating blocks 385-513 which overlap fs metadata [ 62.172911][ T4393] EXT4-fs (loop0): pa ffff88810611b0e0: logic 16, phys. 129, len 24 [ 62.180995][ T4393] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8 [ 62.193241][ T4393] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 28 [ 62.205545][ T4393] EXT4-fs (loop0): This should not happen!! Data will be lost [ 62.205545][ T4393] [ 62.215368][ T4393] EXT4-fs (loop0): Total free blocks count 0 [ 62.221497][ T4393] EXT4-fs (loop0): Free/Dirty block details [ 62.227545][ T4393] EXT4-fs (loop0): free_blocks=128 [ 62.232714][ T4393] EXT4-fs (loop0): dirty_blocks=0 [ 62.237799][ T4393] EXT4-fs (loop0): Block reservation details [ 62.243848][ T4393] EXT4-fs (loop0): i_reserved_data_blocks=0 [ 62.250418][ T4399] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 62.622650][ T4417] netlink: 'ext4 Õm¯lìâ=': attribute type 4 has an invalid length. [ 62.737075][ T4426] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 62.750634][ T4427] ip6gre1: entered allmulticast mode [ 62.757969][ T4426] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 62.872069][ T4436] loop3: detected capacity change from 0 to 764 [ 63.009880][ T4443] usb usb8: usbfs: process 4443 (syz.3.331) did not claim interface 0 before use [ 63.120964][ T29] kauditd_printk_skb: 344 callbacks suppressed [ 63.120980][ T29] audit: type=1400 audit(1744574949.238:2324): avc: denied { create } for pid=4445 comm="syz.3.332" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 63.148850][ T4449] mmap: syz.3.332 (4449) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 63.161602][ T4449] Invalid ELF header magic: != ELF [ 63.167983][ T29] audit: type=1400 audit(1744574949.268:2325): avc: denied { bind } for pid=4445 comm="syz.3.332" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 63.187289][ T29] audit: type=1400 audit(1744574949.268:2326): avc: denied { write } for pid=4445 comm="syz.3.332" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 63.206648][ T29] audit: type=1400 audit(1744574949.288:2327): avc: denied { module_load } for pid=4445 comm="syz.3.332" path="/sys/kernel/notes" dev="sysfs" ino=210 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=system permissive=1 [ 63.234035][ T29] audit: type=1326 audit(1744574949.358:2328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4445 comm="syz.3.332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa718d2d169 code=0x7ffc0000 [ 63.251734][ T4455] ip6gre2: entered allmulticast mode [ 63.257568][ T29] audit: type=1326 audit(1744574949.358:2329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4445 comm="syz.3.332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa718d2d169 code=0x7ffc0000 [ 63.286171][ T29] audit: type=1326 audit(1744574949.358:2330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4445 comm="syz.3.332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa718d2d169 code=0x7ffc0000 [ 63.309507][ T29] audit: type=1326 audit(1744574949.358:2331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4445 comm="syz.3.332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa718d2d169 code=0x7ffc0000 [ 63.332883][ T29] audit: type=1326 audit(1744574949.358:2332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4445 comm="syz.3.332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa718d2d169 code=0x7ffc0000 [ 63.356324][ T29] audit: type=1326 audit(1744574949.358:2333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4445 comm="syz.3.332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa718d2d169 code=0x7ffc0000 [ 63.657387][ T4470] usb usb8: usbfs: process 4470 (syz.1.340) did not claim interface 0 before use [ 63.670019][ T4474] FAULT_INJECTION: forcing a failure. [ 63.670019][ T4474] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 63.683155][ T4474] CPU: 1 UID: 0 PID: 4474 Comm: syz.2.342 Not tainted 6.15.0-rc1-syzkaller-00333-g5aaaedb0cb54 #0 PREEMPT(voluntary) [ 63.683345][ T4474] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 63.683359][ T4474] Call Trace: [ 63.683365][ T4474] [ 63.683372][ T4474] dump_stack_lvl+0xf6/0x150 [ 63.683485][ T4474] dump_stack+0x15/0x1a [ 63.683503][ T4474] should_fail_ex+0x261/0x270 [ 63.683537][ T4474] should_fail+0xb/0x10 [ 63.683641][ T4474] should_fail_usercopy+0x1a/0x20 [ 63.683702][ T4474] _copy_from_iter+0xd8/0xd10 [ 63.683736][ T4474] ? __alloc_skb+0x1bd/0x320 [ 63.683763][ T4474] ? kmalloc_reserve+0x16e/0x190 [ 63.683789][ T4474] ? __build_skb_around+0x199/0x1f0 [ 63.683854][ T4474] ? __alloc_skb+0x227/0x320 [ 63.683901][ T4474] ? __virt_addr_valid+0x1ed/0x250 [ 63.683936][ T4474] ? __check_object_size+0x367/0x510 [ 63.683970][ T4474] netlink_sendmsg+0x492/0x720 [ 63.684006][ T4474] ? __pfx_netlink_sendmsg+0x10/0x10 [ 63.684104][ T4474] __sock_sendmsg+0x140/0x180 [ 63.684121][ T4474] ____sys_sendmsg+0x350/0x4e0 [ 63.684155][ T4474] __sys_sendmsg+0x1a0/0x240 [ 63.684285][ T4474] __x64_sys_sendmsg+0x46/0x50 [ 63.684332][ T4474] x64_sys_call+0x26f3/0x2e10 [ 63.684435][ T4474] do_syscall_64+0xc9/0x1c0 [ 63.684471][ T4474] ? clear_bhb_loop+0x25/0x80 [ 63.684495][ T4474] ? clear_bhb_loop+0x25/0x80 [ 63.684533][ T4474] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 63.684553][ T4474] RIP: 0033:0x7f8e48e7d169 [ 63.684572][ T4474] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 63.684649][ T4474] RSP: 002b:00007f8e474df038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 63.684671][ T4474] RAX: ffffffffffffffda RBX: 00007f8e49095fa0 RCX: 00007f8e48e7d169 [ 63.684743][ T4474] RDX: 0000000000000000 RSI: 0000200000001200 RDI: 0000000000000006 [ 63.684811][ T4474] RBP: 00007f8e474df090 R08: 0000000000000000 R09: 0000000000000000 [ 63.684843][ T4474] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 63.684854][ T4474] R13: 0000000000000000 R14: 00007f8e49095fa0 R15: 00007ffed5b6a388 [ 63.684872][ T4474] [ 63.937145][ T4478] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 63.956598][ T4478] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 63.964990][ T4478] FAULT_INJECTION: forcing a failure. [ 63.964990][ T4478] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 63.978351][ T4478] CPU: 0 UID: 0 PID: 4478 Comm: syz.2.344 Not tainted 6.15.0-rc1-syzkaller-00333-g5aaaedb0cb54 #0 PREEMPT(voluntary) [ 63.978376][ T4478] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 63.978387][ T4478] Call Trace: [ 63.978392][ T4478] [ 63.978418][ T4478] dump_stack_lvl+0xf6/0x150 [ 63.978490][ T4478] dump_stack+0x15/0x1a [ 63.978505][ T4478] should_fail_ex+0x261/0x270 [ 63.978576][ T4478] should_fail_alloc_page+0xfd/0x110 [ 63.978610][ T4478] __alloc_frozen_pages_noprof+0x11d/0x360 [ 63.978694][ T4478] alloc_pages_mpol+0xb6/0x260 [ 63.978724][ T4478] alloc_pages_noprof+0xe8/0x130 [ 63.978794][ T4478] anon_pipe_write+0x695/0xb10 [ 63.978825][ T4478] vfs_write+0x79b/0x950 [ 63.978857][ T4478] ? __pfx_anon_pipe_write+0x10/0x10 [ 63.978881][ T4478] ksys_write+0xeb/0x1b0 [ 63.979042][ T4478] __x64_sys_write+0x42/0x50 [ 63.979074][ T4478] x64_sys_call+0x2a45/0x2e10 [ 63.979099][ T4478] do_syscall_64+0xc9/0x1c0 [ 63.979129][ T4478] ? clear_bhb_loop+0x25/0x80 [ 63.979171][ T4478] ? clear_bhb_loop+0x25/0x80 [ 63.979211][ T4478] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 63.979230][ T4478] RIP: 0033:0x7f8e48e7bc1f [ 63.979243][ T4478] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 63.979310][ T4478] RSP: 002b:00007f8e474dcd30 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 63.979331][ T4478] RAX: ffffffffffffffda RBX: 0000000000000029 RCX: 00007f8e48e7bc1f [ 63.979425][ T4478] RDX: 0000000000000029 RSI: 00007f8e474dcf30 RDI: 0000000000000002 [ 63.979436][ T4478] RBP: 00007f8e474dcf30 R08: 0000000000000000 R09: 0000000000000000 [ 63.979447][ T4478] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000029 [ 63.979537][ T4478] R13: 00007f8e4906d620 R14: 0000000000000029 R15: 00007f8e4906ec80 [ 63.979555][ T4478] [ 64.202857][ T4490] ip6gre2: entered allmulticast mode [ 64.315201][ T4494] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 64.329733][ T4494] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 64.362166][ T4500] Invalid ELF header magic: != ELF [ 64.370272][ T4500] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 64.380558][ T4500] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 64.466862][ T4506] usb usb8: usbfs: process 4506 (syz.0.359) did not claim interface 0 before use [ 64.476967][ T4506] FAULT_INJECTION: forcing a failure. [ 64.476967][ T4506] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 64.490087][ T4506] CPU: 1 UID: 0 PID: 4506 Comm: syz.0.359 Not tainted 6.15.0-rc1-syzkaller-00333-g5aaaedb0cb54 #0 PREEMPT(voluntary) [ 64.490114][ T4506] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 64.490125][ T4506] Call Trace: [ 64.490131][ T4506] [ 64.490138][ T4506] dump_stack_lvl+0xf6/0x150 [ 64.490204][ T4506] dump_stack+0x15/0x1a [ 64.490225][ T4506] should_fail_ex+0x261/0x270 [ 64.490328][ T4506] should_fail+0xb/0x10 [ 64.490356][ T4506] should_fail_usercopy+0x1a/0x20 [ 64.490407][ T4506] _copy_to_user+0x20/0xa0 [ 64.490439][ T4506] simple_read_from_buffer+0xb2/0x130 [ 64.490492][ T4506] proc_fail_nth_read+0x103/0x140 [ 64.490516][ T4506] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 64.490601][ T4506] vfs_read+0x1b2/0x710 [ 64.490632][ T4506] ? __rcu_read_unlock+0x4e/0x70 [ 64.490696][ T4506] ? __fget_files+0x186/0x1c0 [ 64.490729][ T4506] ksys_read+0xeb/0x1b0 [ 64.490805][ T4506] __x64_sys_read+0x42/0x50 [ 64.490834][ T4506] x64_sys_call+0x2a3b/0x2e10 [ 64.490859][ T4506] do_syscall_64+0xc9/0x1c0 [ 64.490953][ T4506] ? clear_bhb_loop+0x25/0x80 [ 64.490976][ T4506] ? clear_bhb_loop+0x25/0x80 [ 64.490996][ T4506] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 64.491088][ T4506] RIP: 0033:0x7fbb6d35bb7c [ 64.491104][ T4506] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 64.491123][ T4506] RSP: 002b:00007fbb6b9bf030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 64.491140][ T4506] RAX: ffffffffffffffda RBX: 00007fbb6d575fa0 RCX: 00007fbb6d35bb7c [ 64.491151][ T4506] RDX: 000000000000000f RSI: 00007fbb6b9bf0a0 RDI: 0000000000000006 [ 64.491180][ T4506] RBP: 00007fbb6b9bf090 R08: 0000000000000000 R09: 0000000000000000 [ 64.491191][ T4506] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 64.491273][ T4506] R13: 0000000000000000 R14: 00007fbb6d575fa0 R15: 00007fffcbe6f9b8 [ 64.491289][ T4506] [ 64.729855][ T4512] loop2: detected capacity change from 0 to 512 [ 64.746925][ T4512] EXT4-fs: Mount option(s) incompatible with ext2 [ 64.778253][ T4516] ip6gre2: entered allmulticast mode [ 64.819677][ T4518] netlink: 'ext4 Õm¯lìâ=': attribute type 4 has an invalid length. [ 64.990227][ T4536] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(11) [ 64.996876][ T4536] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 65.004410][ T4536] vhci_hcd vhci_hcd.0: Device attached [ 65.072212][ T4547] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 65.080869][ T4547] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 65.122444][ T4547] syzkaller0: entered promiscuous mode [ 65.128002][ T4547] syzkaller0: entered allmulticast mode [ 65.168029][ T4549] ip6gre3: entered allmulticast mode [ 65.249316][ T4556] netlink: 'ext4 Õm¯lìâ=': attribute type 4 has an invalid length. [ 65.771344][ T4565] netlink: 'syz.4.379': attribute type 3 has an invalid length. [ 65.779526][ T4565] netlink: 'syz.4.379': attribute type 3 has an invalid length. [ 65.790811][ T4565] netlink: 32 bytes leftover after parsing attributes in process `syz.4.379'. [ 65.805535][ T4540] vhci_hcd: connection closed [ 65.805880][ T39] vhci_hcd: stop threads [ 65.814845][ T39] vhci_hcd: release socket [ 65.819349][ T39] vhci_hcd: disconnect device [ 65.842764][ T4568] FAULT_INJECTION: forcing a failure. [ 65.842764][ T4568] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 65.856024][ T4568] CPU: 1 UID: 0 PID: 4568 Comm: syz.1.380 Not tainted 6.15.0-rc1-syzkaller-00333-g5aaaedb0cb54 #0 PREEMPT(voluntary) [ 65.856054][ T4568] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 65.856068][ T4568] Call Trace: [ 65.856074][ T4568] [ 65.856083][ T4568] dump_stack_lvl+0xf6/0x150 [ 65.856110][ T4568] dump_stack+0x15/0x1a [ 65.856126][ T4568] should_fail_ex+0x261/0x270 [ 65.856221][ T4568] should_fail+0xb/0x10 [ 65.856249][ T4568] should_fail_usercopy+0x1a/0x20 [ 65.856282][ T4568] _copy_from_user+0x1c/0xa0 [ 65.856385][ T4568] perf_copy_attr+0x150/0x5d0 [ 65.856415][ T4568] ? __rcu_read_unlock+0x4e/0x70 [ 65.856464][ T4568] __se_sys_perf_event_open+0x70/0x2220 [ 65.856542][ T4568] ? proc_fail_nth_write+0x12d/0x160 [ 65.856561][ T4568] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 65.856581][ T4568] ? vfs_write+0x669/0x950 [ 65.856608][ T4568] ? putname+0xe1/0x100 [ 65.856635][ T4568] __x64_sys_perf_event_open+0x67/0x80 [ 65.856784][ T4568] x64_sys_call+0x27bb/0x2e10 [ 65.856810][ T4568] do_syscall_64+0xc9/0x1c0 [ 65.856844][ T4568] ? clear_bhb_loop+0x25/0x80 [ 65.856870][ T4568] ? clear_bhb_loop+0x25/0x80 [ 65.856895][ T4568] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 65.856974][ T4568] RIP: 0033:0x7f7b30efd169 [ 65.856992][ T4568] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 65.857013][ T4568] RSP: 002b:00007f7b2f55f038 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 65.857071][ T4568] RAX: ffffffffffffffda RBX: 00007f7b31115fa0 RCX: 00007f7b30efd169 [ 65.857086][ T4568] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000000 [ 65.857100][ T4568] RBP: 00007f7b2f55f090 R08: 0000000000000000 R09: 0000000000000000 [ 65.857113][ T4568] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001 [ 65.857124][ T4568] R13: 0000000000000000 R14: 00007f7b31115fa0 R15: 00007ffea165ede8 [ 65.857142][ T4568] [ 66.112980][ T4571] sch_fq: defrate 0 ignored. [ 66.145349][ T4581] loop4: detected capacity change from 0 to 512 [ 66.158883][ T4581] EXT4-fs (loop4): VFS: Found ext4 filesystem with unknown checksum algorithm. [ 66.202744][ T4584] ip6gre2: entered allmulticast mode [ 66.318243][ T4593] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 66.343684][ T4593] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 66.413581][ T4599] netlink: 'ext4 Õm¯lìâ=': attribute type 4 has an invalid length. [ 66.557152][ T4615] IPv6: NLM_F_REPLACE set, but no existing node found! [ 66.577393][ T4616] loop0: detected capacity change from 0 to 1024 [ 66.611771][ T4616] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 66.624079][ T4616] ext4 filesystem being mounted at /89/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 66.647798][ T4616] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 66.662770][ T4616] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 63 with max blocks 1 with error 28 [ 66.675066][ T4616] EXT4-fs (loop0): This should not happen!! Data will be lost [ 66.675066][ T4616] [ 66.684825][ T4616] EXT4-fs (loop0): Total free blocks count 0 [ 66.690934][ T4616] EXT4-fs (loop0): Free/Dirty block details [ 66.696852][ T4616] EXT4-fs (loop0): free_blocks=4293918720 [ 66.702588][ T4616] EXT4-fs (loop0): dirty_blocks=16 [ 66.707812][ T4616] EXT4-fs (loop0): Block reservation details [ 66.713803][ T4616] EXT4-fs (loop0): i_reserved_data_blocks=1 [ 66.773775][ T4626] IPv6: NLM_F_REPLACE set, but no existing node found! [ 67.076737][ T3308] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.138889][ T4630] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 67.146698][ T4630] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 67.181289][ T4634] FAULT_INJECTION: forcing a failure. [ 67.181289][ T4634] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 67.194457][ T4634] CPU: 1 UID: 0 PID: 4634 Comm: syz.0.404 Not tainted 6.15.0-rc1-syzkaller-00333-g5aaaedb0cb54 #0 PREEMPT(voluntary) [ 67.194482][ T4634] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 67.194496][ T4634] Call Trace: [ 67.194503][ T4634] [ 67.194511][ T4634] dump_stack_lvl+0xf6/0x150 [ 67.194536][ T4634] dump_stack+0x15/0x1a [ 67.194551][ T4634] should_fail_ex+0x261/0x270 [ 67.194624][ T4634] should_fail+0xb/0x10 [ 67.194645][ T4634] should_fail_usercopy+0x1a/0x20 [ 67.194668][ T4634] _copy_from_user+0x1c/0xa0 [ 67.194705][ T4634] copy_msghdr_from_user+0x54/0x2b0 [ 67.194733][ T4634] ? __fget_files+0x186/0x1c0 [ 67.194751][ T4634] __sys_sendmsg+0x141/0x240 [ 67.194843][ T4634] __x64_sys_sendmsg+0x46/0x50 [ 67.194920][ T4634] x64_sys_call+0x26f3/0x2e10 [ 67.194937][ T4634] do_syscall_64+0xc9/0x1c0 [ 67.194961][ T4634] ? clear_bhb_loop+0x25/0x80 [ 67.195022][ T4634] ? clear_bhb_loop+0x25/0x80 [ 67.195040][ T4634] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 67.195057][ T4634] RIP: 0033:0x7fbb6d35d169 [ 67.195069][ T4634] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 67.195083][ T4634] RSP: 002b:00007fbb6b9bf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 67.195098][ T4634] RAX: ffffffffffffffda RBX: 00007fbb6d575fa0 RCX: 00007fbb6d35d169 [ 67.195107][ T4634] RDX: 0000000020000000 RSI: 0000200000000080 RDI: 0000000000000005 [ 67.195119][ T4634] RBP: 00007fbb6b9bf090 R08: 0000000000000000 R09: 0000000000000000 [ 67.195147][ T4634] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 67.195156][ T4634] R13: 0000000000000000 R14: 00007fbb6d575fa0 R15: 00007fffcbe6f9b8 [ 67.195173][ T4634] [ 67.208578][ T4635] sch_fq: defrate 0 ignored. [ 67.464121][ T4641] atomic_op ffff888108634928 conn xmit_atomic 0000000000000000 [ 67.528852][ T4647] netlink: 'ext4 Õm¯lìâ=': attribute type 4 has an invalid length. [ 68.195474][ T29] kauditd_printk_skb: 287 callbacks suppressed [ 68.195489][ T29] audit: type=1400 audit(1744574954.308:2621): avc: denied { ioctl } for pid=4674 comm="syz.1.419" path="user:[4026531837]" dev="nsfs" ino=4026531837 ioctlcmd=0xb706 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 68.662656][ T29] audit: type=1326 audit(1744574954.778:2622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4676 comm="syz.4.420" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f751ab4d169 code=0x0 [ 68.818172][ T29] audit: type=1400 audit(1744574954.938:2623): avc: denied { shutdown } for pid=4683 comm="syz.3.423" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 68.866466][ T4688] tipc: Started in network mode [ 68.871438][ T4688] tipc: Node identity 7f000001, cluster identity 4711 [ 68.878308][ T4688] tipc: Enabling of bearer rejected, failed to enable media [ 68.888628][ T4688] tipc: Enabled bearer , priority 0 [ 68.921121][ T4693] FAULT_INJECTION: forcing a failure. [ 68.921121][ T4693] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 68.934337][ T4693] CPU: 1 UID: 0 PID: 4693 Comm: syz.3.426 Not tainted 6.15.0-rc1-syzkaller-00333-g5aaaedb0cb54 #0 PREEMPT(voluntary) [ 68.934368][ T4693] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 68.934380][ T4693] Call Trace: [ 68.934385][ T4693] [ 68.934392][ T4693] dump_stack_lvl+0xf6/0x150 [ 68.934417][ T4693] dump_stack+0x15/0x1a [ 68.934437][ T4693] should_fail_ex+0x261/0x270 [ 68.934474][ T4693] should_fail+0xb/0x10 [ 68.934569][ T4693] should_fail_usercopy+0x1a/0x20 [ 68.934597][ T4693] _copy_to_user+0x20/0xa0 [ 68.934632][ T4693] con_get_trans_old+0x27e/0x2c0 [ 68.934702][ T4693] vt_ioctl+0x101c/0x18e0 [ 68.934721][ T4693] ? tty_jobctrl_ioctl+0x2ab/0x810 [ 68.934755][ T4693] tty_ioctl+0x813/0xbd0 [ 68.934779][ T4693] ? __pfx_tty_ioctl+0x10/0x10 [ 68.934869][ T4693] __se_sys_ioctl+0xc9/0x140 [ 68.934899][ T4693] __x64_sys_ioctl+0x43/0x50 [ 68.934925][ T4693] x64_sys_call+0x168d/0x2e10 [ 68.934963][ T4693] do_syscall_64+0xc9/0x1c0 [ 68.934994][ T4693] ? clear_bhb_loop+0x25/0x80 [ 68.935020][ T4693] ? clear_bhb_loop+0x25/0x80 [ 68.935045][ T4693] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 68.935143][ T4693] RIP: 0033:0x7fa718d2d169 [ 68.935156][ T4693] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 68.935174][ T4693] RSP: 002b:00007fa71738f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 68.935191][ T4693] RAX: ffffffffffffffda RBX: 00007fa718f45fa0 RCX: 00007fa718d2d169 [ 68.935204][ T4693] RDX: 00002000000002c0 RSI: 0000000000004b40 RDI: 0000000000000004 [ 68.935215][ T4693] RBP: 00007fa71738f090 R08: 0000000000000000 R09: 0000000000000000 [ 68.935241][ T4693] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 68.935252][ T4693] R13: 0000000000000000 R14: 00007fa718f45fa0 R15: 00007fff9f616ff8 [ 68.935270][ T4693] [ 69.144889][ T4693] tipc: Enabling of bearer rejected, failed to enable media [ 69.154284][ T4693] tipc: Enabling of bearer rejected, already enabled [ 69.181055][ T4695] netlink: 'syz.3.427': attribute type 2 has an invalid length. [ 69.189255][ T4695] netlink: 51 bytes leftover after parsing attributes in process `syz.3.427'. [ 69.264764][ T4700] sch_fq: defrate 0 ignored. [ 69.293961][ T29] audit: type=1326 audit(1744574955.408:2624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4696 comm="syz.1.428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b30efd169 code=0x7ffc0000 [ 69.344606][ T29] audit: type=1326 audit(1744574955.408:2625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4696 comm="syz.1.428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b30efd169 code=0x7ffc0000 [ 69.368088][ T29] audit: type=1326 audit(1744574955.448:2626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4696 comm="syz.1.428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7b30efd169 code=0x7ffc0000 [ 69.391522][ T29] audit: type=1326 audit(1744574955.448:2627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4696 comm="syz.1.428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b30efd169 code=0x7ffc0000 [ 69.414898][ T29] audit: type=1326 audit(1744574955.448:2628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4696 comm="syz.1.428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b30efd169 code=0x7ffc0000 [ 69.438287][ T29] audit: type=1326 audit(1744574955.448:2629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4696 comm="syz.1.428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7b30efd169 code=0x7ffc0000 [ 69.461792][ T29] audit: type=1326 audit(1744574955.448:2630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4696 comm="syz.1.428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b30efd169 code=0x7ffc0000 [ 69.542977][ T4701] IPv6: NLM_F_REPLACE set, but no existing node found! [ 69.575157][ T4706] netlink: 8 bytes leftover after parsing attributes in process `syz.2.430'. [ 69.584162][ T4706] netlink: 12 bytes leftover after parsing attributes in process `syz.2.430'. [ 69.616215][ T4709] loop0: detected capacity change from 0 to 1024 [ 69.717509][ T4709] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 69.729679][ T4709] ext4 filesystem being mounted at /101/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 69.745040][ T4709] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 69.760036][ T4709] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 63 with max blocks 1 with error 28 [ 69.772324][ T4709] EXT4-fs (loop0): This should not happen!! Data will be lost [ 69.772324][ T4709] [ 69.782009][ T4709] EXT4-fs (loop0): Total free blocks count 0 [ 69.788129][ T4709] EXT4-fs (loop0): Free/Dirty block details [ 69.794044][ T4709] EXT4-fs (loop0): free_blocks=4293918720 [ 69.799860][ T4709] EXT4-fs (loop0): dirty_blocks=16 [ 69.804990][ T4709] EXT4-fs (loop0): Block reservation details [ 69.811003][ T4709] EXT4-fs (loop0): i_reserved_data_blocks=1 [ 70.015680][ T3377] tipc: Node number set to 2130706433 [ 70.277503][ T3308] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.305140][ T4731] netlink: 'ext4 Õm¯lìâ=': attribute type 4 has an invalid length. [ 70.612841][ T4751] loop2: detected capacity change from 0 to 1024 [ 70.628695][ T4751] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.640967][ T4751] ext4 filesystem being mounted at /87/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 70.657599][ T4751] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 70.672570][ T4751] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 63 with max blocks 1 with error 28 [ 70.682985][ T4759] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 70.684994][ T4751] EXT4-fs (loop2): This should not happen!! Data will be lost [ 70.684994][ T4751] [ 70.701694][ T4759] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 70.702989][ T4751] EXT4-fs (loop2): Total free blocks count 0 [ 70.716710][ T4751] EXT4-fs (loop2): Free/Dirty block details [ 70.722760][ T4751] EXT4-fs (loop2): free_blocks=4293918720 [ 70.728557][ T4751] EXT4-fs (loop2): dirty_blocks=16 [ 70.733706][ T4751] EXT4-fs (loop2): Block reservation details [ 70.739725][ T4751] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 70.791955][ T4749] tipc: Started in network mode [ 70.797490][ T4749] tipc: Node identity 7f000001, cluster identity 4711 [ 70.804512][ T4749] tipc: Enabling of bearer rejected, failed to enable media [ 70.820012][ T4749] tipc: Enabled bearer , priority 0 [ 70.992870][ T4767] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 71.023101][ T4767] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 71.090337][ T4768] netlink: 172 bytes leftover after parsing attributes in process `syz.4.444'. [ 71.158135][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.177271][ T4770] netlink: 'ext4 Õm¯lìâ=': attribute type 4 has an invalid length. [ 71.251851][ T4777] IPv6: NLM_F_REPLACE set, but no existing node found! [ 71.438455][ T4789] FAULT_INJECTION: forcing a failure. [ 71.438455][ T4789] name failslab, interval 1, probability 0, space 0, times 0 [ 71.451216][ T4789] CPU: 1 UID: 0 PID: 4789 Comm: syz.3.452 Not tainted 6.15.0-rc1-syzkaller-00333-g5aaaedb0cb54 #0 PREEMPT(voluntary) [ 71.451248][ T4789] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 71.451263][ T4789] Call Trace: [ 71.451271][ T4789] [ 71.451279][ T4789] dump_stack_lvl+0xf6/0x150 [ 71.451308][ T4789] dump_stack+0x15/0x1a [ 71.451328][ T4789] should_fail_ex+0x261/0x270 [ 71.451396][ T4789] should_failslab+0x8f/0xb0 [ 71.451429][ T4789] kmem_cache_alloc_noprof+0x59/0x340 [ 71.451456][ T4789] ? __proc_create+0x25f/0x4b0 [ 71.451486][ T4789] __proc_create+0x25f/0x4b0 [ 71.451569][ T4789] proc_create_data+0xb0/0x200 [ 71.451600][ T4789] recent_mt_check+0x6dd/0x860 [ 71.451640][ T4789] recent_mt_check_v0+0x6a/0x90 [ 71.451762][ T4789] xt_check_match+0x265/0x4d0 [ 71.451785][ T4789] ? strcmp+0x21/0x50 [ 71.451887][ T4789] ? xt_find_match+0x1d2/0x210 [ 71.451929][ T4789] translate_table+0xadb/0xfe0 [ 71.452002][ T4789] ? _copy_from_user+0x89/0xa0 [ 71.452072][ T4789] do_ipt_set_ctl+0x7ac/0x8a0 [ 71.452093][ T4789] ? _raw_spin_unlock_bh+0x36/0x40 [ 71.452112][ T4789] ? tcp_release_cb+0x108/0x390 [ 71.452212][ T4789] nf_setsockopt+0x195/0x1b0 [ 71.452269][ T4789] ip_setsockopt+0xea/0x100 [ 71.452293][ T4789] tcp_setsockopt+0x93/0xb0 [ 71.452319][ T4789] sock_common_setsockopt+0x64/0x80 [ 71.452343][ T4789] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 71.452363][ T4789] __sys_setsockopt+0x187/0x200 [ 71.452393][ T4789] __x64_sys_setsockopt+0x66/0x80 [ 71.452499][ T4789] x64_sys_call+0x2a09/0x2e10 [ 71.452526][ T4789] do_syscall_64+0xc9/0x1c0 [ 71.452591][ T4789] ? clear_bhb_loop+0x25/0x80 [ 71.452612][ T4789] ? clear_bhb_loop+0x25/0x80 [ 71.452632][ T4789] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 71.452657][ T4789] RIP: 0033:0x7fa718d2d169 [ 71.452675][ T4789] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 71.452749][ T4789] RSP: 002b:00007fa71738f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 71.452767][ T4789] RAX: ffffffffffffffda RBX: 00007fa718f45fa0 RCX: 00007fa718d2d169 [ 71.452778][ T4789] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000005 [ 71.452802][ T4789] RBP: 00007fa71738f090 R08: 0000000000000410 R09: 0000000000000000 [ 71.452816][ T4789] R10: 0000200000000580 R11: 0000000000000246 R12: 0000000000000001 [ 71.452830][ T4789] R13: 0000000000000000 R14: 00007fa718f45fa0 R15: 00007fff9f616ff8 [ 71.452849][ T4789] [ 71.777896][ T4793] sg_write: data in/out 122/14 bytes for SCSI command 0x0-- guessing data in; [ 71.777896][ T4793] program syz.3.453 not setting count and/or reply_len properly [ 71.935650][ T3377] tipc: Node number set to 2130706433 [ 72.165295][ T4802] loop3: detected capacity change from 0 to 8192 [ 72.321392][ T4816] loop2: detected capacity change from 0 to 1024 [ 72.351778][ T4816] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.364098][ T4816] ext4 filesystem being mounted at /95/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 72.382213][ T4816] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 72.397152][ T4816] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 63 with max blocks 1 with error 28 [ 72.409469][ T4816] EXT4-fs (loop2): This should not happen!! Data will be lost [ 72.409469][ T4816] [ 72.419146][ T4816] EXT4-fs (loop2): Total free blocks count 0 [ 72.425141][ T4816] EXT4-fs (loop2): Free/Dirty block details [ 72.431111][ T4816] EXT4-fs (loop2): free_blocks=4293918720 [ 72.437016][ T4816] EXT4-fs (loop2): dirty_blocks=16 [ 72.442137][ T4816] EXT4-fs (loop2): Block reservation details [ 72.448229][ T4816] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 72.662891][ T4831] netlink: 'syz.3.468': attribute type 2 has an invalid length. [ 72.671110][ T4831] netlink: 51 bytes leftover after parsing attributes in process `syz.3.468'. [ 72.758439][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.769584][ T4835] FAULT_INJECTION: forcing a failure. [ 72.769584][ T4835] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 72.782700][ T4835] CPU: 1 UID: 0 PID: 4835 Comm: syz.0.470 Not tainted 6.15.0-rc1-syzkaller-00333-g5aaaedb0cb54 #0 PREEMPT(voluntary) [ 72.782732][ T4835] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 72.782747][ T4835] Call Trace: [ 72.782754][ T4835] [ 72.782826][ T4835] dump_stack_lvl+0xf6/0x150 [ 72.782850][ T4835] dump_stack+0x15/0x1a [ 72.782870][ T4835] should_fail_ex+0x261/0x270 [ 72.782910][ T4835] should_fail+0xb/0x10 [ 72.782938][ T4835] should_fail_usercopy+0x1a/0x20 [ 72.782985][ T4835] _copy_from_user+0x1c/0xa0 [ 72.783070][ T4835] __sys_bpf+0x16a/0x800 [ 72.783114][ T4835] __x64_sys_bpf+0x43/0x50 [ 72.783136][ T4835] x64_sys_call+0x23da/0x2e10 [ 72.783236][ T4835] do_syscall_64+0xc9/0x1c0 [ 72.783272][ T4835] ? clear_bhb_loop+0x25/0x80 [ 72.783297][ T4835] ? clear_bhb_loop+0x25/0x80 [ 72.783322][ T4835] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 72.783347][ T4835] RIP: 0033:0x7fbb6d35d169 [ 72.783402][ T4835] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 72.783424][ T4835] RSP: 002b:00007fbb6b9bf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 72.783446][ T4835] RAX: ffffffffffffffda RBX: 00007fbb6d575fa0 RCX: 00007fbb6d35d169 [ 72.783481][ T4835] RDX: 0000000000000094 RSI: 0000200000000440 RDI: 0000000000000005 [ 72.783496][ T4835] RBP: 00007fbb6b9bf090 R08: 0000000000000000 R09: 0000000000000000 [ 72.783510][ T4835] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 72.783524][ T4835] R13: 0000000000000000 R14: 00007fbb6d575fa0 R15: 00007fffcbe6f9b8 [ 72.783544][ T4835] [ 73.112241][ T4845] SELinux: syz.2.474 (4845) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 73.139694][ T4847] SELinux: syz.0.475 (4847) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 73.258366][ T4850] SELinux: syz.2.474 (4850) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 73.275250][ T4851] SELinux: syz.0.475 (4851) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 73.352894][ T4852] loop2: detected capacity change from 0 to 512 [ 73.389313][ T4852] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 73.416555][ T4853] loop0: detected capacity change from 0 to 512 [ 73.422398][ T4852] ext4 filesystem being mounted at /97/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 73.468666][ T4853] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 73.514444][ T4853] ext4 filesystem being mounted at /110/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 73.550993][ T4853] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 73.575326][ T4852] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 73.783925][ T4860] loop1: detected capacity change from 0 to 1024 [ 73.798864][ T4860] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 73.811507][ T4860] ext4 filesystem being mounted at /93/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 73.829891][ T4860] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 73.844775][ T4860] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 63 with max blocks 1 with error 28 [ 73.857124][ T4860] EXT4-fs (loop1): This should not happen!! Data will be lost [ 73.857124][ T4860] [ 73.866843][ T4860] EXT4-fs (loop1): Total free blocks count 0 [ 73.872884][ T4860] EXT4-fs (loop1): Free/Dirty block details [ 73.878861][ T4860] EXT4-fs (loop1): free_blocks=4293918720 [ 73.884602][ T4860] EXT4-fs (loop1): dirty_blocks=16 [ 73.889804][ T4860] EXT4-fs (loop1): Block reservation details [ 73.895829][ T4860] EXT4-fs (loop1): i_reserved_data_blocks=1 [ 74.225458][ T29] kauditd_printk_skb: 89 callbacks suppressed [ 74.225475][ T29] audit: type=1400 audit(1744574960.338:2720): avc: denied { bind } for pid=4881 comm="syz.0.482" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 74.274104][ T29] audit: type=1400 audit(1744574960.368:2721): avc: denied { setopt } for pid=4881 comm="syz.0.482" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 74.314563][ T4890] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 74.326035][ T4890] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 74.340356][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.398190][ T4893] loop2: detected capacity change from 0 to 1024 [ 74.419185][ T4893] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.431505][ T4893] ext4 filesystem being mounted at /101/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 74.446491][ T4893] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 74.461451][ T4893] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 63 with max blocks 1 with error 28 [ 74.473770][ T4893] EXT4-fs (loop2): This should not happen!! Data will be lost [ 74.473770][ T4893] [ 74.483433][ T4893] EXT4-fs (loop2): Total free blocks count 0 [ 74.489443][ T4893] EXT4-fs (loop2): Free/Dirty block details [ 74.495346][ T4893] EXT4-fs (loop2): free_blocks=4293918720 [ 74.501105][ T4893] EXT4-fs (loop2): dirty_blocks=16 [ 74.506286][ T4893] EXT4-fs (loop2): Block reservation details [ 74.512365][ T4893] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 74.604743][ T4899] netlink: 88 bytes leftover after parsing attributes in process `syz.1.488'. [ 74.642920][ T4901] loop3: detected capacity change from 0 to 512 [ 74.668776][ T4901] Quota error (device loop3): do_check_range: Getting dqdh_entries 1536 out of range 0-14 [ 74.678946][ T4901] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 74.688897][ T4901] EXT4-fs error (device loop3): ext4_acquire_dquot:6935: comm syz.3.490: Failed to acquire dquot type 1 [ 74.711270][ T4901] EXT4-fs (loop3): 1 truncate cleaned up [ 74.721757][ T29] audit: type=1326 audit(1744574960.848:2722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4904 comm="syz.1.491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b30efd169 code=0x7ffc0000 [ 74.725079][ T4901] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.745113][ T29] audit: type=1326 audit(1744574960.848:2723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4904 comm="syz.1.491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b30efd169 code=0x7ffc0000 [ 74.757681][ T4901] ext4 filesystem being mounted at /98/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 74.780822][ T29] audit: type=1326 audit(1744574960.848:2724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4904 comm="syz.1.491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f7b30efd169 code=0x7ffc0000 [ 74.814547][ T29] audit: type=1326 audit(1744574960.848:2725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4904 comm="syz.1.491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f7b30efd1a3 code=0x7ffc0000 [ 74.817426][ T4905] loop1: detected capacity change from 0 to 764 [ 74.855045][ T29] audit: type=1326 audit(1744574960.918:2726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4904 comm="syz.1.491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f7b30efbc1f code=0x7ffc0000 [ 74.878340][ T29] audit: type=1326 audit(1744574960.918:2727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4904 comm="syz.1.491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f7b30efd1f7 code=0x7ffc0000 [ 75.068925][ T4914] loop0: detected capacity change from 0 to 764 [ 75.108928][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.131599][ T4918] netlink: 'syz.1.498': attribute type 2 has an invalid length. [ 75.140791][ T4918] netlink: 51 bytes leftover after parsing attributes in process `syz.1.498'. [ 75.271694][ T4929] FAULT_INJECTION: forcing a failure. [ 75.271694][ T4929] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 75.284845][ T4929] CPU: 0 UID: 0 PID: 4929 Comm: syz.2.501 Not tainted 6.15.0-rc1-syzkaller-00333-g5aaaedb0cb54 #0 PREEMPT(voluntary) [ 75.284878][ T4929] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 75.284892][ T4929] Call Trace: [ 75.284899][ T4929] [ 75.284907][ T4929] dump_stack_lvl+0xf6/0x150 [ 75.284935][ T4929] dump_stack+0x15/0x1a [ 75.284975][ T4929] should_fail_ex+0x261/0x270 [ 75.285035][ T4929] should_fail+0xb/0x10 [ 75.285062][ T4929] should_fail_usercopy+0x1a/0x20 [ 75.285158][ T4929] strncpy_from_user+0x25/0x230 [ 75.285183][ T4929] ? getname_flags+0x81/0x3b0 [ 75.285246][ T4929] getname_flags+0xb0/0x3b0 [ 75.285271][ T4929] user_path_at+0x26/0x140 [ 75.285298][ T4929] __se_sys_mount+0x25e/0x2e0 [ 75.285340][ T4929] __x64_sys_mount+0x67/0x80 [ 75.285380][ T4929] x64_sys_call+0xd11/0x2e10 [ 75.285435][ T4929] do_syscall_64+0xc9/0x1c0 [ 75.285469][ T4929] ? clear_bhb_loop+0x25/0x80 [ 75.285494][ T4929] ? clear_bhb_loop+0x25/0x80 [ 75.285518][ T4929] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.285540][ T4929] RIP: 0033:0x7f8e48e7d169 [ 75.285607][ T4929] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 75.285627][ T4929] RSP: 002b:00007f8e474df038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 75.285721][ T4929] RAX: ffffffffffffffda RBX: 00007f8e49095fa0 RCX: 00007f8e48e7d169 [ 75.285782][ T4929] RDX: 0000200000000040 RSI: 0000200000000080 RDI: 0000000000000000 [ 75.285796][ T4929] RBP: 00007f8e474df090 R08: 0000200000000400 R09: 0000000000000000 [ 75.285808][ T4929] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 75.285821][ T4929] R13: 0000000000000000 R14: 00007f8e49095fa0 R15: 00007ffed5b6a388 [ 75.285842][ T4929] [ 75.546591][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.606442][ T4931] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 75.625765][ T4931] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 75.698601][ T4935] netlink: 172 bytes leftover after parsing attributes in process `syz.3.502'. [ 76.020250][ T4939] sch_fq: defrate 0 ignored. [ 76.282451][ T4944] loop0: detected capacity change from 0 to 1024 [ 76.308608][ T4944] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 76.320902][ T4944] ext4 filesystem being mounted at /117/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 76.334176][ T4944] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 76.349051][ T4944] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 63 with max blocks 1 with error 28 [ 76.361376][ T4944] EXT4-fs (loop0): This should not happen!! Data will be lost [ 76.361376][ T4944] [ 76.371069][ T4944] EXT4-fs (loop0): Total free blocks count 0 [ 76.377125][ T4944] EXT4-fs (loop0): Free/Dirty block details [ 76.383023][ T4944] EXT4-fs (loop0): free_blocks=4293918720 [ 76.388769][ T4944] EXT4-fs (loop0): dirty_blocks=16 [ 76.393893][ T4944] EXT4-fs (loop0): Block reservation details [ 76.399911][ T4944] EXT4-fs (loop0): i_reserved_data_blocks=1 [ 76.446065][ T4950] netlink: 8 bytes leftover after parsing attributes in process `syz.1.507'. [ 76.455079][ T4950] netlink: 12 bytes leftover after parsing attributes in process `syz.1.507'. [ 76.653408][ T4965] FAULT_INJECTION: forcing a failure. [ 76.653408][ T4965] name failslab, interval 1, probability 0, space 0, times 0 [ 76.666542][ T4965] CPU: 0 UID: 0 PID: 4965 Comm: syz.1.510 Not tainted 6.15.0-rc1-syzkaller-00333-g5aaaedb0cb54 #0 PREEMPT(voluntary) [ 76.666651][ T4965] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 76.666663][ T4965] Call Trace: [ 76.666669][ T4965] [ 76.666675][ T4965] dump_stack_lvl+0xf6/0x150 [ 76.666699][ T4965] dump_stack+0x15/0x1a [ 76.666764][ T4965] should_fail_ex+0x261/0x270 [ 76.666795][ T4965] should_failslab+0x8f/0xb0 [ 76.666826][ T4965] __kmalloc_cache_noprof+0x55/0x320 [ 76.666849][ T4965] ? rtnl_newlink+0x5f/0x12d0 [ 76.666962][ T4965] rtnl_newlink+0x5f/0x12d0 [ 76.666999][ T4965] ? xas_load+0x3ba/0x3d0 [ 76.667033][ T4965] ? cgroup_rstat_updated+0xa4/0x590 [ 76.667159][ T4965] ? xas_load+0x3ba/0x3d0 [ 76.667192][ T4965] ? __rcu_read_unlock+0x4e/0x70 [ 76.667225][ T4965] ? xa_load+0xbd/0xe0 [ 76.667294][ T4965] ? __memcg_slab_free_hook+0xc9/0x1e0 [ 76.667339][ T4965] ? mod_objcg_state+0x3f9/0x530 [ 76.667360][ T4965] ? __rcu_read_unlock+0x4e/0x70 [ 76.667386][ T4965] ? avc_has_perm_noaudit+0x1cc/0x210 [ 76.667416][ T4965] ? selinux_capable+0x1f9/0x260 [ 76.667522][ T4965] ? security_capable+0x81/0x90 [ 76.667548][ T4965] ? ns_capable+0x7d/0xb0 [ 76.667566][ T4965] ? __pfx_rtnl_newlink+0x10/0x10 [ 76.667597][ T4965] rtnetlink_rcv_msg+0x65a/0x740 [ 76.667674][ T4965] ? should_fail_ex+0xd7/0x270 [ 76.667774][ T4965] ? ref_tracker_free+0x3b8/0x420 [ 76.667812][ T4965] netlink_rcv_skb+0x12f/0x230 [ 76.667835][ T4965] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 76.667873][ T4965] rtnetlink_rcv+0x1c/0x30 [ 76.667925][ T4965] netlink_unicast+0x605/0x6c0 [ 76.667948][ T4965] netlink_sendmsg+0x609/0x720 [ 76.667977][ T4965] ? __pfx_netlink_sendmsg+0x10/0x10 [ 76.668001][ T4965] __sock_sendmsg+0x140/0x180 [ 76.668019][ T4965] ____sys_sendmsg+0x350/0x4e0 [ 76.668072][ T4965] __sys_sendmsg+0x1a0/0x240 [ 76.668113][ T4965] __x64_sys_sendmsg+0x46/0x50 [ 76.668144][ T4965] x64_sys_call+0x26f3/0x2e10 [ 76.668165][ T4965] do_syscall_64+0xc9/0x1c0 [ 76.668194][ T4965] ? clear_bhb_loop+0x25/0x80 [ 76.668215][ T4965] ? clear_bhb_loop+0x25/0x80 [ 76.668302][ T4965] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.668370][ T4965] RIP: 0033:0x7f7b30efd169 [ 76.668384][ T4965] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 76.668401][ T4965] RSP: 002b:00007f7b2f55f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 76.668418][ T4965] RAX: ffffffffffffffda RBX: 00007f7b31115fa0 RCX: 00007f7b30efd169 [ 76.668430][ T4965] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000003 [ 76.668441][ T4965] RBP: 00007f7b2f55f090 R08: 0000000000000000 R09: 0000000000000000 [ 76.668452][ T4965] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 76.668494][ T4965] R13: 0000000000000000 R14: 00007f7b31115fa0 R15: 00007ffea165ede8 [ 76.668511][ T4965] [ 77.013289][ T4969] netlink: 84 bytes leftover after parsing attributes in process `syz.1.511'. [ 77.034474][ T3308] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.119636][ T4987] SELinux: syz.1.519 (4987) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 77.211752][ T4997] bond1: entered promiscuous mode [ 77.216934][ T4997] bond1: entered allmulticast mode [ 77.223486][ T4997] 8021q: adding VLAN 0 to HW filter on device bond1 [ 77.234390][ T4997] bond1 (unregistering): Released all slaves [ 77.242098][ T4999] SELinux: syz.1.519 (4999) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 77.337102][ T4987] loop1: detected capacity change from 0 to 512 [ 77.357549][ T4987] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 77.370092][ T4987] ext4 filesystem being mounted at /104/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 77.381305][ T4987] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 77.435281][ T5013] netlink: 'syz.4.524': attribute type 1 has an invalid length. [ 77.490234][ T5015] netlink: 8 bytes leftover after parsing attributes in process `syz.0.529'. [ 77.585416][ T5023] netlink: 268 bytes leftover after parsing attributes in process `syz.1.532'. [ 77.587839][ T5026] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 77.594444][ T5023] unsupported nla_type 65024 [ 77.622027][ T5026] vhci_hcd: default hub control req: 2314 v0008 i0002 l0 [ 77.631761][ T5028] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 77.641229][ T5028] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 77.652749][ T5015] netlink: 8 bytes leftover after parsing attributes in process `syz.0.529'. [ 77.787344][ T5034] sch_fq: defrate 0 ignored. [ 77.839116][ T5031] SET target dimension over the limit! [ 78.014972][ T5038] SET target dimension over the limit! [ 78.164448][ T5030] Set syz1 is full, maxelem 65536 reached [ 78.266684][ T5051] loop2: detected capacity change from 0 to 764 [ 78.330203][ T5037] Set syz1 is full, maxelem 65536 reached [ 78.384705][ T5059] netlink: 56 bytes leftover after parsing attributes in process `syz.2.547'. [ 78.402972][ T5060] loop1: detected capacity change from 0 to 512 [ 78.542654][ T5065] netlink: 20 bytes leftover after parsing attributes in process `syz.2.548'. [ 78.553967][ T5065] netlink: 16 bytes leftover after parsing attributes in process `syz.2.548'. [ 78.622858][ T5071] loop2: detected capacity change from 0 to 764 [ 78.643005][ T5073] loop3: detected capacity change from 0 to 764 [ 78.725013][ T5075] FAULT_INJECTION: forcing a failure. [ 78.725013][ T5075] name failslab, interval 1, probability 0, space 0, times 0 [ 78.737747][ T5075] CPU: 0 UID: 0 PID: 5075 Comm: syz.2.553 Not tainted 6.15.0-rc1-syzkaller-00333-g5aaaedb0cb54 #0 PREEMPT(voluntary) [ 78.737807][ T5075] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 78.737822][ T5075] Call Trace: [ 78.737835][ T5075] [ 78.737844][ T5075] dump_stack_lvl+0xf6/0x150 [ 78.737872][ T5075] dump_stack+0x15/0x1a [ 78.737923][ T5075] should_fail_ex+0x261/0x270 [ 78.737957][ T5075] should_failslab+0x8f/0xb0 [ 78.738063][ T5075] __kmalloc_cache_noprof+0x55/0x320 [ 78.738088][ T5075] ? kobject_uevent_env+0x1a4/0x550 [ 78.738168][ T5075] ? __pfx_dev_uevent_name+0x10/0x10 [ 78.738203][ T5075] kobject_uevent_env+0x1a4/0x550 [ 78.738226][ T5075] ? _raw_spin_unlock+0x26/0x50 [ 78.738261][ T5075] ? kobject_put+0x10a/0x180 [ 78.738315][ T5075] kobject_uevent+0x1c/0x30 [ 78.738344][ T5075] device_release_driver_internal+0x478/0x4f0 [ 78.738376][ T5075] device_release_driver+0x19/0x20 [ 78.738446][ T5075] usb_driver_release_interface+0xf2/0x100 [ 78.738480][ T5075] proc_ioctl+0x1ef/0x420 [ 78.738519][ T5075] usbdev_ioctl+0x1dd6/0x3e70 [ 78.738637][ T5075] ? do_vfs_ioctl+0x977/0x1570 [ 78.738672][ T5075] ? selinux_file_ioctl+0x2f9/0x380 [ 78.738697][ T5075] ? __fget_files+0x186/0x1c0 [ 78.738720][ T5075] ? __pfx_usbdev_ioctl+0x10/0x10 [ 78.738764][ T5075] __se_sys_ioctl+0xc9/0x140 [ 78.738796][ T5075] __x64_sys_ioctl+0x43/0x50 [ 78.738828][ T5075] x64_sys_call+0x168d/0x2e10 [ 78.738855][ T5075] do_syscall_64+0xc9/0x1c0 [ 78.738930][ T5075] ? clear_bhb_loop+0x25/0x80 [ 78.738958][ T5075] ? clear_bhb_loop+0x25/0x80 [ 78.739019][ T5075] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 78.739043][ T5075] RIP: 0033:0x7f8e48e7d169 [ 78.739128][ T5075] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 78.739213][ T5075] RSP: 002b:00007f8e474df038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 78.739231][ T5075] RAX: ffffffffffffffda RBX: 00007f8e49095fa0 RCX: 00007f8e48e7d169 [ 78.739243][ T5075] RDX: 0000200000000200 RSI: 00000000c0105512 RDI: 0000000000000003 [ 78.739254][ T5075] RBP: 00007f8e474df090 R08: 0000000000000000 R09: 0000000000000000 [ 78.739268][ T5075] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 78.739279][ T5075] R13: 0000000000000000 R14: 00007f8e49095fa0 R15: 00007ffed5b6a388 [ 78.739297][ T5075] [ 78.783236][ T5075] hub 2-0:1.0: USB hub found [ 78.896343][ T5084] FAULT_INJECTION: forcing a failure. [ 78.896343][ T5084] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 78.900617][ T5075] hub 2-0:1.0: 8 ports detected [ 78.906441][ T5084] CPU: 0 UID: 0 PID: 5084 Comm: syz.3.556 Not tainted 6.15.0-rc1-syzkaller-00333-g5aaaedb0cb54 #0 PREEMPT(voluntary) [ 78.906517][ T5084] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 78.906532][ T5084] Call Trace: [ 78.906540][ T5084] [ 78.906549][ T5084] dump_stack_lvl+0xf6/0x150 [ 78.906577][ T5084] dump_stack+0x15/0x1a [ 78.906598][ T5084] should_fail_ex+0x261/0x270 [ 78.906631][ T5084] should_fail+0xb/0x10 [ 78.906731][ T5084] should_fail_usercopy+0x1a/0x20 [ 78.906766][ T5084] _copy_to_user+0x20/0xa0 [ 78.906806][ T5084] simple_read_from_buffer+0xb2/0x130 [ 78.906882][ T5084] proc_fail_nth_read+0x103/0x140 [ 78.906907][ T5084] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 78.906966][ T5084] vfs_read+0x1b2/0x710 [ 78.906993][ T5084] ? __rcu_read_unlock+0x4e/0x70 [ 78.907019][ T5084] ? __fget_files+0x186/0x1c0 [ 78.907043][ T5084] ksys_read+0xeb/0x1b0 [ 78.907095][ T5084] __x64_sys_read+0x42/0x50 [ 78.907128][ T5084] x64_sys_call+0x2a3b/0x2e10 [ 78.907237][ T5084] do_syscall_64+0xc9/0x1c0 [ 78.907275][ T5084] ? clear_bhb_loop+0x25/0x80 [ 78.907324][ T5084] ? clear_bhb_loop+0x25/0x80 [ 78.907351][ T5084] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 78.907377][ T5084] RIP: 0033:0x7fa718d2bb7c [ 78.907395][ T5084] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 78.907461][ T5084] RSP: 002b:00007fa71734d030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 78.907484][ T5084] RAX: ffffffffffffffda RBX: 00007fa718f46160 RCX: 00007fa718d2bb7c [ 78.907499][ T5084] RDX: 000000000000000f RSI: 00007fa71734d0a0 RDI: 000000000000000b [ 78.907513][ T5084] RBP: 00007fa71734d090 R08: 0000000000000000 R09: 0000000000000000 [ 78.907528][ T5084] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 78.907542][ T5084] R13: 0000000000000000 R14: 00007fa718f46160 R15: 00007fff9f616ff8 [ 78.907566][ T5084] [ 78.989172][ T5086] loop3: detected capacity change from 0 to 764 [ 79.052544][ T5088] netlink: 28 bytes leftover after parsing attributes in process `syz.2.558'. [ 79.085477][ T5088] erspan0: entered promiscuous mode [ 79.091958][ T5088] batadv_slave_1: entered promiscuous mode [ 79.226677][ T29] kauditd_printk_skb: 526 callbacks suppressed [ 79.226690][ T29] audit: type=1326 audit(1744574965.328:3254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5085 comm="syz.3.557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa718d2d169 code=0x7ffc0000 [ 79.256361][ T29] audit: type=1326 audit(1744574965.348:3255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5085 comm="syz.3.557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa718d2d169 code=0x7ffc0000 [ 79.279798][ T29] audit: type=1400 audit(1744574965.348:3256): avc: denied { prog_run } for pid=5085 comm="syz.3.557" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 79.298787][ T29] audit: type=1326 audit(1744574965.348:3257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5085 comm="syz.3.557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa718d2d169 code=0x7ffc0000 [ 79.322223][ T29] audit: type=1326 audit(1744574965.348:3258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5085 comm="syz.3.557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa718d2d169 code=0x7ffc0000 [ 79.346045][ T29] audit: type=1326 audit(1744574965.468:3259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5085 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa718d2d169 code=0x7ffc0000 [ 79.369030][ T29] audit: type=1326 audit(1744574965.468:3260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5085 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa718d2d169 code=0x7ffc0000 [ 79.392286][ T29] audit: type=1326 audit(1744574965.518:3261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5085 comm="syz.3.557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa718d2d169 code=0x7ffc0000 [ 79.415814][ T29] audit: type=1326 audit(1744574965.518:3262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5085 comm="syz.3.557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa718d2d169 code=0x7ffc0000 [ 79.439158][ T29] audit: type=1326 audit(1744574965.518:3263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5085 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa718d2d169 code=0x7ffc0000 [ 79.486539][ T5092] loop1: detected capacity change from 0 to 256 [ 79.547888][ T5093] process 'syz.1.559' launched './file1' with NULL argv: empty string added [ 79.659438][ T5106] loop0: detected capacity change from 0 to 764 [ 79.666067][ T5117] SELinux: Context system_u:object_r:net_conf_t:s0 is not valid (left unmapped). [ 79.682523][ T5121] FAULT_INJECTION: forcing a failure. [ 79.682523][ T5121] name failslab, interval 1, probability 0, space 0, times 0 [ 79.695260][ T5121] CPU: 1 UID: 0 PID: 5121 Comm: syz.3.567 Not tainted 6.15.0-rc1-syzkaller-00333-g5aaaedb0cb54 #0 PREEMPT(voluntary) [ 79.695293][ T5121] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 79.695309][ T5121] Call Trace: [ 79.695316][ T5121] [ 79.695325][ T5121] dump_stack_lvl+0xf6/0x150 [ 79.695355][ T5121] dump_stack+0x15/0x1a [ 79.695384][ T5121] should_fail_ex+0x261/0x270 [ 79.695421][ T5121] should_failslab+0x8f/0xb0 [ 79.695484][ T5121] kmem_cache_alloc_noprof+0x59/0x340 [ 79.695512][ T5121] ? audit_log_start+0x37f/0x6e0 [ 79.695542][ T5121] audit_log_start+0x37f/0x6e0 [ 79.695571][ T5121] ? kstrtouint+0x7b/0xc0 [ 79.695644][ T5121] audit_seccomp+0x4b/0x130 [ 79.695669][ T5121] __seccomp_filter+0x694/0x10e0 [ 79.695708][ T5121] ? vfs_write+0x669/0x950 [ 79.695742][ T5121] ? putname+0xe1/0x100 [ 79.695772][ T5121] __secure_computing+0x7e/0x160 [ 79.695817][ T5121] syscall_trace_enter+0xcf/0x1f0 [ 79.695854][ T5121] ? fpregs_assert_state_consistent+0x83/0xa0 [ 79.695897][ T5121] do_syscall_64+0xaa/0x1c0 [ 79.696021][ T5121] ? clear_bhb_loop+0x25/0x80 [ 79.696048][ T5121] ? clear_bhb_loop+0x25/0x80 [ 79.696076][ T5121] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 79.696113][ T5121] RIP: 0033:0x7fa718d2d169 [ 79.696133][ T5121] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 79.696155][ T5121] RSP: 002b:00007fa71738f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000074 [ 79.696178][ T5121] RAX: ffffffffffffffda RBX: 00007fa718f45fa0 RCX: 00007fa718d2d169 [ 79.696193][ T5121] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 79.696208][ T5121] RBP: 00007fa71738f090 R08: 0000000000000000 R09: 0000000000000000 [ 79.696272][ T5121] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 79.696287][ T5121] R13: 0000000000000000 R14: 00007fa718f45fa0 R15: 00007fff9f616ff8 [ 79.696310][ T5121] [ 80.017112][ T5145] loop3: detected capacity change from 0 to 764 [ 80.070627][ T5149] loop0: detected capacity change from 0 to 512 [ 80.078587][ T5149] EXT4-fs: Ignoring removed i_version option [ 80.086162][ T5149] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 80.096312][ T5149] EXT4-fs error (device loop0): ext4_get_journal_inode:5798: comm syz.0.576: inode #196608: comm syz.0.576: iget: illegal inode # [ 80.112931][ T5149] EXT4-fs (loop0): no journal found [ 80.118256][ T5149] EXT4-fs (loop0): can't get journal size [ 80.133229][ T5149] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 80.149070][ T5149] EXT4-fs (loop0): failed to initialize system zone (-22) [ 80.157514][ T5149] EXT4-fs (loop0): mount failed [ 80.169088][ T5148] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 80.181073][ T5149] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 80.189895][ T5148] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 80.190399][ T5149] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 80.348316][ T5165] batadv0: entered promiscuous mode [ 80.353662][ T5165] macvtap1: entered promiscuous mode [ 80.360654][ T5165] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 80.690210][ T5192] loop4: detected capacity change from 0 to 512 [ 80.710720][ T5192] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 80.750814][ T5195] FAULT_INJECTION: forcing a failure. [ 80.750814][ T5195] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 80.763982][ T5195] CPU: 1 UID: 0 PID: 5195 Comm: syz.1.595 Not tainted 6.15.0-rc1-syzkaller-00333-g5aaaedb0cb54 #0 PREEMPT(voluntary) [ 80.764049][ T5195] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 80.764065][ T5195] Call Trace: [ 80.764073][ T5195] [ 80.764083][ T5195] dump_stack_lvl+0xf6/0x150 [ 80.764141][ T5195] dump_stack+0x15/0x1a [ 80.764162][ T5195] should_fail_ex+0x261/0x270 [ 80.764195][ T5195] should_fail+0xb/0x10 [ 80.764223][ T5195] should_fail_usercopy+0x1a/0x20 [ 80.764286][ T5195] _copy_from_user+0x1c/0xa0 [ 80.764358][ T5195] copy_msghdr_from_user+0x54/0x2b0 [ 80.764488][ T5195] ? __fget_files+0x186/0x1c0 [ 80.764517][ T5195] __sys_sendmsg+0x141/0x240 [ 80.764569][ T5195] __x64_sys_sendmsg+0x46/0x50 [ 80.764598][ T5195] x64_sys_call+0x26f3/0x2e10 [ 80.764620][ T5195] do_syscall_64+0xc9/0x1c0 [ 80.764791][ T5195] ? clear_bhb_loop+0x25/0x80 [ 80.764812][ T5195] ? clear_bhb_loop+0x25/0x80 [ 80.764882][ T5195] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 80.764902][ T5195] RIP: 0033:0x7f7b30efd169 [ 80.764916][ T5195] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 80.764934][ T5195] RSP: 002b:00007f7b2f55f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 80.764955][ T5195] RAX: ffffffffffffffda RBX: 00007f7b31115fa0 RCX: 00007f7b30efd169 [ 80.764970][ T5195] RDX: 0000000004000054 RSI: 0000200000000480 RDI: 0000000000000005 [ 80.764984][ T5195] RBP: 00007f7b2f55f090 R08: 0000000000000000 R09: 0000000000000000 [ 80.764998][ T5195] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 80.765072][ T5195] R13: 0000000000000000 R14: 00007f7b31115fa0 R15: 00007ffea165ede8 [ 80.765095][ T5195] [ 80.995436][ T5192] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.019948][ T5192] ext4 filesystem being mounted at /86/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 81.056054][ T5205] loop2: detected capacity change from 0 to 1024 [ 81.074300][ T5197] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 81.115885][ T5205] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 81.128156][ T5205] ext4 filesystem being mounted at /130/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 81.146094][ T5205] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 81.161112][ T5205] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 63 with max blocks 1 with error 28 [ 81.173397][ T5205] EXT4-fs (loop2): This should not happen!! Data will be lost [ 81.173397][ T5205] [ 81.183123][ T5205] EXT4-fs (loop2): Total free blocks count 0 [ 81.189178][ T5205] EXT4-fs (loop2): Free/Dirty block details [ 81.195089][ T5205] EXT4-fs (loop2): free_blocks=4293918720 [ 81.200901][ T5205] EXT4-fs (loop2): dirty_blocks=16 [ 81.206257][ T5205] EXT4-fs (loop2): Block reservation details [ 81.212283][ T5205] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 81.310546][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.429427][ T1039] kernel write not supported for file /306/attr/exec (pid: 1039 comm: kworker/1:2) [ 81.460357][ T5216] __nla_validate_parse: 6 callbacks suppressed [ 81.460372][ T5216] netlink: 8 bytes leftover after parsing attributes in process `syz.3.601'. [ 81.489193][ T5216] IPVS: Error joining to the multicast group [ 81.530760][ T5229] netlink: 28 bytes leftover after parsing attributes in process `syz.4.606'. [ 81.539708][ T5229] netlink: 28 bytes leftover after parsing attributes in process `syz.4.606'. [ 81.567078][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.567657][ T5229] erspan0: entered promiscuous mode [ 81.596463][ T5229] batadv_slave_1: entered promiscuous mode [ 81.617358][ T5229] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 81.640813][ T5229] Cannot create hsr debugfs directory [ 81.702885][ T5242] netlink: 16 bytes leftover after parsing attributes in process `syz.3.612'. [ 81.885892][ T5258] netlink: 'syz.4.620': attribute type 21 has an invalid length. [ 81.912048][ T3381] kernel write not supported for file /324/attr/exec (pid: 3381 comm: kworker/1:3) [ 81.914986][ T5258] netlink: 'syz.4.620': attribute type 1 has an invalid length. [ 81.929357][ T5258] netlink: 144 bytes leftover after parsing attributes in process `syz.4.620'. [ 81.993847][ T5266] loop2: detected capacity change from 0 to 512 [ 82.016881][ T5266] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 82.039934][ T5267] SELinux: Context system_u:object_r:systemd_logind_var_run_t:s0 is not valid (left unmapped). [ 82.040624][ T5266] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00cc128, mo2=0002] [ 82.065637][ T5266] System zones: 1-12 [ 82.070507][ T5266] EXT4-fs (loop2): 1 truncate cleaned up [ 82.076678][ T5266] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.141092][ T5275] netlink: 16 bytes leftover after parsing attributes in process `syz.4.625'. [ 82.141546][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.217488][ T5283] FAULT_INJECTION: forcing a failure. [ 82.217488][ T5283] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 82.230629][ T5283] CPU: 0 UID: 0 PID: 5283 Comm: syz.2.628 Not tainted 6.15.0-rc1-syzkaller-00333-g5aaaedb0cb54 #0 PREEMPT(voluntary) [ 82.230661][ T5283] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 82.230677][ T5283] Call Trace: [ 82.230683][ T5283] [ 82.230690][ T5283] dump_stack_lvl+0xf6/0x150 [ 82.230714][ T5283] dump_stack+0x15/0x1a [ 82.230730][ T5283] should_fail_ex+0x261/0x270 [ 82.230758][ T5283] should_fail+0xb/0x10 [ 82.230820][ T5283] should_fail_usercopy+0x1a/0x20 [ 82.230848][ T5283] _copy_to_user+0x20/0xa0 [ 82.230881][ T5283] simple_read_from_buffer+0xb2/0x130 [ 82.230958][ T5283] proc_fail_nth_read+0x103/0x140 [ 82.230978][ T5283] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 82.230997][ T5283] vfs_read+0x1b2/0x710 [ 82.231023][ T5283] ? __rcu_read_unlock+0x4e/0x70 [ 82.231054][ T5283] ? __fget_files+0x186/0x1c0 [ 82.231076][ T5283] ksys_read+0xeb/0x1b0 [ 82.231104][ T5283] __x64_sys_read+0x42/0x50 [ 82.231131][ T5283] x64_sys_call+0x2a3b/0x2e10 [ 82.231162][ T5283] do_syscall_64+0xc9/0x1c0 [ 82.231193][ T5283] ? clear_bhb_loop+0x25/0x80 [ 82.231214][ T5283] ? clear_bhb_loop+0x25/0x80 [ 82.231267][ T5283] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.231287][ T5283] RIP: 0033:0x7f8e48e7bb7c [ 82.231307][ T5283] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 82.231400][ T5283] RSP: 002b:00007f8e474df030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 82.231418][ T5283] RAX: ffffffffffffffda RBX: 00007f8e49095fa0 RCX: 00007f8e48e7bb7c [ 82.231430][ T5283] RDX: 000000000000000f RSI: 00007f8e474df0a0 RDI: 0000000000000007 [ 82.231442][ T5283] RBP: 00007f8e474df090 R08: 0000000000000000 R09: 0000000000000000 [ 82.231453][ T5283] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 82.231465][ T5283] R13: 0000000000000000 R14: 00007f8e49095fa0 R15: 00007ffed5b6a388 [ 82.231483][ T5283] [ 82.466502][ T5288] sch_fq: defrate 0 ignored. [ 82.480006][ T5287] SELinux: syz.3.631 (5287) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 82.529316][ T3371] kernel write not supported for file /252/attr/exec (pid: 3371 comm: kworker/0:2) [ 82.637004][ T5308] SELinux: syz.3.631 (5308) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 82.735934][ T5319] loop1: detected capacity change from 0 to 764 [ 82.743487][ T5308] loop3: detected capacity change from 0 to 512 [ 82.778364][ T5308] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 82.814166][ T5308] ext4 filesystem being mounted at /132/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 82.840802][ T5308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 82.995576][ T5332] FAULT_INJECTION: forcing a failure. [ 82.995576][ T5332] name failslab, interval 1, probability 0, space 0, times 0 [ 83.008288][ T5332] CPU: 1 UID: 0 PID: 5332 Comm: syz.1.648 Not tainted 6.15.0-rc1-syzkaller-00333-g5aaaedb0cb54 #0 PREEMPT(voluntary) [ 83.008317][ T5332] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 83.008329][ T5332] Call Trace: [ 83.008336][ T5332] [ 83.008344][ T5332] dump_stack_lvl+0xf6/0x150 [ 83.008371][ T5332] dump_stack+0x15/0x1a [ 83.008388][ T5332] should_fail_ex+0x261/0x270 [ 83.008416][ T5332] should_failslab+0x8f/0xb0 [ 83.008450][ T5332] kmem_cache_alloc_noprof+0x59/0x340 [ 83.008473][ T5332] ? mas_alloc_nodes+0x1f4/0x4a0 [ 83.008511][ T5332] mas_alloc_nodes+0x1f4/0x4a0 [ 83.008543][ T5332] mas_preallocate+0x48d/0x6b0 [ 83.008578][ T5332] __split_vma+0x23e/0x630 [ 83.008608][ T5332] vma_modify+0x105/0x200 [ 83.008647][ T5332] vma_modify_flags+0x10a/0x140 [ 83.008684][ T5332] mlock_fixup+0x113/0x3f0 [ 83.008717][ T5332] apply_vma_lock_flags+0x196/0x260 [ 83.008754][ T5332] do_mlock+0x407/0x580 [ 83.008784][ T5332] ? __bpf_trace_sys_enter+0x10/0x30 [ 83.008812][ T5332] ? trace_sys_enter+0xcd/0x110 [ 83.008845][ T5332] __x64_sys_mlock2+0x72/0x90 [ 83.008872][ T5332] x64_sys_call+0x2671/0x2e10 [ 83.008895][ T5332] do_syscall_64+0xc9/0x1c0 [ 83.008923][ T5332] ? clear_bhb_loop+0x25/0x80 [ 83.008987][ T5332] ? clear_bhb_loop+0x25/0x80 [ 83.009013][ T5332] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.009038][ T5332] RIP: 0033:0x7f7b30efd169 [ 83.009053][ T5332] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 83.009069][ T5332] RSP: 002b:00007f7b2f55f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000145 [ 83.009087][ T5332] RAX: ffffffffffffffda RBX: 00007f7b31115fa0 RCX: 00007f7b30efd169 [ 83.009098][ T5332] RDX: 0000000000000000 RSI: 0000000000004000 RDI: 0000200000004000 [ 83.009111][ T5332] RBP: 00007f7b2f55f090 R08: 0000000000000000 R09: 0000000000000000 [ 83.009125][ T5332] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 83.009139][ T5332] R13: 0000000000000000 R14: 00007f7b31115fa0 R15: 00007ffea165ede8 [ 83.009160][ T5332] [ 83.247975][ T5335] netlink: 16 bytes leftover after parsing attributes in process `syz.3.645'. [ 83.296968][ T5337] netlink: 24 bytes leftover after parsing attributes in process `syz.1.649'. [ 83.312546][ T5342] loop1: detected capacity change from 0 to 512 [ 83.322371][ T5342] EXT4-fs: Ignoring removed oldalloc option [ 83.329936][ T5342] journal_path: Non-blockdev passed as './file0' [ 83.336341][ T5342] EXT4-fs: error: could not find journal device path [ 83.354088][ T5348] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 83.368417][ T5348] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 83.428000][ T5359] netlink: 172 bytes leftover after parsing attributes in process `syz.3.652'. [ 83.658273][ T5380] netlink: 4 bytes leftover after parsing attributes in process `syz.1.664'. [ 83.668491][ T5380] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 83.684181][ T5380] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 83.719061][ T5382] FAULT_INJECTION: forcing a failure. [ 83.719061][ T5382] name failslab, interval 1, probability 0, space 0, times 0 [ 83.731769][ T5382] CPU: 0 UID: 0 PID: 5382 Comm: syz.0.665 Not tainted 6.15.0-rc1-syzkaller-00333-g5aaaedb0cb54 #0 PREEMPT(voluntary) [ 83.731803][ T5382] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 83.731818][ T5382] Call Trace: [ 83.731825][ T5382] [ 83.731833][ T5382] dump_stack_lvl+0xf6/0x150 [ 83.731868][ T5382] dump_stack+0x15/0x1a [ 83.731957][ T5382] should_fail_ex+0x261/0x270 [ 83.732002][ T5382] should_failslab+0x8f/0xb0 [ 83.732029][ T5382] kmem_cache_alloc_lru_noprof+0x5e/0x330 [ 83.732106][ T5382] ? sock_alloc_inode+0x34/0xa0 [ 83.732145][ T5382] ? __rcu_read_unlock+0x4e/0x70 [ 83.732174][ T5382] sock_alloc_inode+0x34/0xa0 [ 83.732189][ T5382] ? __pfx_sock_alloc_inode+0x10/0x10 [ 83.732204][ T5382] alloc_inode+0x40/0x170 [ 83.732246][ T5382] do_accept+0xb0/0x3b0 [ 83.732298][ T5382] __sys_accept4+0xcd/0x160 [ 83.732318][ T5382] __x64_sys_accept+0x44/0x50 [ 83.732337][ T5382] x64_sys_call+0x2bc1/0x2e10 [ 83.732355][ T5382] do_syscall_64+0xc9/0x1c0 [ 83.732462][ T5382] ? clear_bhb_loop+0x25/0x80 [ 83.732480][ T5382] ? clear_bhb_loop+0x25/0x80 [ 83.732498][ T5382] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.732515][ T5382] RIP: 0033:0x7fbb6d35d169 [ 83.732528][ T5382] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 83.732542][ T5382] RSP: 002b:00007fbb6b9bf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002b [ 83.732632][ T5382] RAX: ffffffffffffffda RBX: 00007fbb6d575fa0 RCX: 00007fbb6d35d169 [ 83.732645][ T5382] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 83.732655][ T5382] RBP: 00007fbb6b9bf090 R08: 0000000000000000 R09: 0000000000000000 [ 83.732665][ T5382] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 83.732675][ T5382] R13: 0000000000000000 R14: 00007fbb6d575fa0 R15: 00007fffcbe6f9b8 [ 83.732691][ T5382] [ 83.960043][ T5387] sch_fq: defrate 0 ignored. [ 84.076170][ T5389] netlink: 'ext4 Õm¯lìâ=': attribute type 4 has an invalid length. [ 84.365005][ T29] kauditd_printk_skb: 589 callbacks suppressed [ 84.365022][ T29] audit: type=1326 audit(1744574970.478:3849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5407 comm="syz.2.674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e48e7d169 code=0x7ffc0000 [ 84.402098][ T29] audit: type=1326 audit(1744574970.478:3850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5407 comm="syz.2.674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e48e7d169 code=0x7ffc0000 [ 84.425571][ T29] audit: type=1326 audit(1744574970.478:3851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5407 comm="syz.2.674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8e48e7d169 code=0x7ffc0000 [ 84.449116][ T29] audit: type=1326 audit(1744574970.478:3852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5407 comm="syz.2.674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e48e7d169 code=0x7ffc0000 [ 84.472649][ T29] audit: type=1326 audit(1744574970.478:3853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5407 comm="syz.2.674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e48e7d169 code=0x7ffc0000 [ 84.494346][ T5410] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 84.496120][ T29] audit: type=1326 audit(1744574970.478:3854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5407 comm="syz.2.674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8e48e7d169 code=0x7ffc0000 [ 84.525770][ T29] audit: type=1326 audit(1744574970.478:3855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5407 comm="syz.2.674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e48e7d169 code=0x7ffc0000 [ 84.549361][ T29] audit: type=1326 audit(1744574970.478:3856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5407 comm="syz.2.674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e48e7d169 code=0x7ffc0000 [ 84.572972][ T29] audit: type=1326 audit(1744574970.478:3857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5407 comm="syz.2.674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8e48e7d169 code=0x7ffc0000 [ 84.596334][ T29] audit: type=1326 audit(1744574970.478:3858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5407 comm="syz.2.674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e48e7d169 code=0x7ffc0000 [ 84.703156][ T3377] kernel write not supported for file /379/attr/exec (pid: 3377 comm: kworker/0:3) [ 84.843413][ T5434] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.850706][ T5434] bond0: (slave sit0): The slave device specified does not support setting the MAC address [ 84.862292][ T5434] bond0: (slave sit0): Error -95 calling set_mac_address [ 85.055470][ T5467] loop0: detected capacity change from 0 to 512 [ 85.080834][ T5467] EXT4-fs error (device loop0): ext4_acquire_dquot:6935: comm syz.0.686: Failed to acquire dquot type 1 [ 85.114732][ T5467] EXT4-fs (loop0): 1 truncate cleaned up [ 85.129959][ T5467] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 85.161342][ T5467] ext4 filesystem being mounted at /152/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 85.181582][ T5486] FAULT_INJECTION: forcing a failure. [ 85.181582][ T5486] name failslab, interval 1, probability 0, space 0, times 0 [ 85.194319][ T5486] CPU: 1 UID: 0 PID: 5486 Comm: syz.1.689 Not tainted 6.15.0-rc1-syzkaller-00333-g5aaaedb0cb54 #0 PREEMPT(voluntary) [ 85.194390][ T5486] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 85.194406][ T5486] Call Trace: [ 85.194414][ T5486] [ 85.194423][ T5486] dump_stack_lvl+0xf6/0x150 [ 85.194451][ T5486] dump_stack+0x15/0x1a [ 85.194487][ T5486] should_fail_ex+0x261/0x270 [ 85.194521][ T5486] should_failslab+0x8f/0xb0 [ 85.194560][ T5486] kmem_cache_alloc_noprof+0x59/0x340 [ 85.194589][ T5486] ? security_file_alloc+0x32/0x100 [ 85.194616][ T5486] security_file_alloc+0x32/0x100 [ 85.194688][ T5486] init_file+0x5e/0x1e0 [ 85.194794][ T5486] alloc_empty_file+0x8e/0x200 [ 85.194822][ T5486] alloc_file_pseudo+0xcb/0x160 [ 85.194854][ T5486] __shmem_file_setup+0x1bb/0x1f0 [ 85.194894][ T5486] shmem_file_setup+0x3b/0x50 [ 85.195077][ T5486] __se_sys_memfd_create+0x2e1/0x5a0 [ 85.195113][ T5486] __x64_sys_memfd_create+0x31/0x40 [ 85.195146][ T5486] x64_sys_call+0x1163/0x2e10 [ 85.195215][ T5486] do_syscall_64+0xc9/0x1c0 [ 85.195250][ T5486] ? clear_bhb_loop+0x25/0x80 [ 85.195296][ T5486] ? clear_bhb_loop+0x25/0x80 [ 85.195323][ T5486] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.195353][ T5486] RIP: 0033:0x7f7b30efd169 [ 85.195371][ T5486] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 85.195393][ T5486] RSP: 002b:00007f7b2f55ee18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 85.195417][ T5486] RAX: ffffffffffffffda RBX: 0000000000000567 RCX: 00007f7b30efd169 [ 85.195432][ T5486] RDX: 00007f7b2f55eef0 RSI: 0000000000000000 RDI: 00007f7b30f7f32c [ 85.195446][ T5486] RBP: 0000200000000b00 R08: 00007f7b2f55ebb7 R09: 00007f7b2f55ee40 [ 85.195529][ T5486] R10: 000000000000000a R11: 0000000000000202 R12: 0000200000000000 [ 85.195544][ T5486] R13: 00007f7b2f55eef0 R14: 00007f7b2f55eeb0 R15: 0000200000000a40 [ 85.195568][ T5486] [ 85.828309][ T5476] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 248: padding at end of block bitmap is not set [ 85.845222][ T5492] sch_fq: defrate 0 ignored. [ 85.963710][ T3308] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.233786][ T5517] loop4: detected capacity change from 0 to 1024 [ 86.246803][ T5530] loop2: detected capacity change from 0 to 512 [ 86.253775][ T5517] EXT4-fs: Ignoring removed bh option [ 86.261842][ T5530] EXT4-fs: Ignoring removed i_version option [ 86.280867][ T5517] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 86.288414][ T5530] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 86.307632][ T5517] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 86.316517][ T5530] EXT4-fs error (device loop2): ext4_get_journal_inode:5798: comm syz.2.704: inode #196608: comm syz.2.704: iget: illegal inode # [ 86.317934][ T5517] EXT4-fs (loop4): can't mount with commit=, fs mounted w/o journal [ 86.370997][ T5530] EXT4-fs (loop2): no journal found [ 86.376449][ T5530] EXT4-fs (loop2): can't get journal size [ 86.406825][ T5530] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 86.431439][ T5530] EXT4-fs (loop2): failed to initialize system zone (-22) [ 86.485053][ T5530] EXT4-fs (loop2): mount failed [ 86.529192][ T5527] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 86.567954][ T5527] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 86.596316][ T5546] loop4: detected capacity change from 0 to 1024 [ 86.620861][ T5546] EXT4-fs: Ignoring removed nobh option [ 86.650104][ T5546] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 86.695531][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.804834][ T5561] netlink: 'ext4 Õm¯lìâ=': attribute type 4 has an invalid length. [ 86.806482][ T5557] __nla_validate_parse: 5 callbacks suppressed [ 86.806499][ T5557] netlink: 4 bytes leftover after parsing attributes in process `syz.4.715'. [ 86.855741][ T5557] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 86.876835][ T5557] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 86.986423][ T5570] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 86.994958][ T5570] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 87.075844][ T5571] netlink: 172 bytes leftover after parsing attributes in process `syz.1.719'. [ 87.192907][ T5572] sch_fq: defrate 0 ignored. [ 87.254167][ T5576] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 87.262894][ T5576] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 87.386773][ T5584] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 87.455512][ T5591] FAULT_INJECTION: forcing a failure. [ 87.455512][ T5591] name failslab, interval 1, probability 0, space 0, times 0 [ 87.468513][ T5591] CPU: 0 UID: 0 PID: 5591 Comm: syz.3.728 Not tainted 6.15.0-rc1-syzkaller-00333-g5aaaedb0cb54 #0 PREEMPT(voluntary) [ 87.468546][ T5591] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 87.468615][ T5591] Call Trace: [ 87.468623][ T5591] [ 87.468632][ T5591] dump_stack_lvl+0xf6/0x150 [ 87.468790][ T5591] dump_stack+0x15/0x1a [ 87.468810][ T5591] should_fail_ex+0x261/0x270 [ 87.468841][ T5591] should_failslab+0x8f/0xb0 [ 87.468889][ T5591] kmem_cache_alloc_noprof+0x59/0x340 [ 87.468914][ T5591] ? audit_log_start+0x37f/0x6e0 [ 87.468942][ T5591] audit_log_start+0x37f/0x6e0 [ 87.468984][ T5591] ? kstrtouint+0x7b/0xc0 [ 87.469008][ T5591] audit_seccomp+0x4b/0x130 [ 87.469028][ T5591] __seccomp_filter+0x694/0x10e0 [ 87.469116][ T5591] ? vfs_write+0x669/0x950 [ 87.469191][ T5591] ? putname+0xe1/0x100 [ 87.469216][ T5591] __secure_computing+0x7e/0x160 [ 87.469315][ T5591] syscall_trace_enter+0xcf/0x1f0 [ 87.469436][ T5591] ? fpregs_assert_state_consistent+0x83/0xa0 [ 87.469477][ T5591] do_syscall_64+0xaa/0x1c0 [ 87.469568][ T5591] ? clear_bhb_loop+0x25/0x80 [ 87.469589][ T5591] ? clear_bhb_loop+0x25/0x80 [ 87.469609][ T5591] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.469632][ T5591] RIP: 0033:0x7fa718d2d169 [ 87.469645][ T5591] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 87.469682][ T5591] RSP: 002b:00007fa71738f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000074 [ 87.469700][ T5591] RAX: ffffffffffffffda RBX: 00007fa718f45fa0 RCX: 00007fa718d2d169 [ 87.469712][ T5591] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 87.469725][ T5591] RBP: 00007fa71738f090 R08: 0000000000000000 R09: 0000000000000000 [ 87.469739][ T5591] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 87.469753][ T5591] R13: 0000000000000000 R14: 00007fa718f45fa0 R15: 00007fff9f616ff8 [ 87.469781][ T5591] [ 87.691969][ T5592] netlink: 12 bytes leftover after parsing attributes in process `syz.0.721'. [ 87.708125][ T3381] kernel write not supported for file /293/attr/exec (pid: 3381 comm: kworker/1:3) [ 87.720187][ T5596] RDS: rds_bind could not find a transport for ::ffff:172.20.20.187, load rds_tcp or rds_rdma? [ 87.821183][ T5607] loop2: detected capacity change from 0 to 512 [ 87.838380][ T5607] EXT4-fs: Ignoring removed i_version option [ 87.853999][ T5607] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 87.864249][ T5613] loop3: detected capacity change from 0 to 512 [ 87.871545][ T5607] EXT4-fs error (device loop2): ext4_get_journal_inode:5798: comm syz.2.734: inode #196608: comm syz.2.734: iget: illegal inode # [ 87.887483][ T5613] EXT4-fs (loop3): 1 truncate cleaned up [ 87.888244][ T5607] EXT4-fs (loop2): no journal found [ 87.893637][ T5613] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 87.898546][ T5607] EXT4-fs (loop2): can't get journal size [ 87.918240][ T5607] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 87.927858][ T5607] EXT4-fs (loop2): failed to initialize system zone (-22) [ 87.928447][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.935059][ T5607] EXT4-fs (loop2): mount failed [ 87.951906][ T5607] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 87.962537][ T5607] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 88.046057][ T5626] loop3: detected capacity change from 0 to 4096 [ 88.055549][ T5626] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 88.071064][ T5626] vhci_hcd: default hub control req: 0503 v0006 i0004 l0 [ 88.078684][ T5626] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000. [ 88.087463][ T5626] xt_ecn: cannot match TCP bits for non-tcp packets [ 88.104157][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.224911][ T5635] 9pnet_virtio: no channels available for device [ 88.476025][ T5644] sch_fq: defrate 0 ignored. [ 88.575909][ T5652] FAULT_INJECTION: forcing a failure. [ 88.575909][ T5652] name failslab, interval 1, probability 0, space 0, times 0 [ 88.588644][ T5652] CPU: 0 UID: 0 PID: 5652 Comm: syz.3.753 Not tainted 6.15.0-rc1-syzkaller-00333-g5aaaedb0cb54 #0 PREEMPT(voluntary) [ 88.588676][ T5652] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 88.588690][ T5652] Call Trace: [ 88.588697][ T5652] [ 88.588703][ T5652] dump_stack_lvl+0xf6/0x150 [ 88.588730][ T5652] dump_stack+0x15/0x1a [ 88.588748][ T5652] should_fail_ex+0x261/0x270 [ 88.588772][ T5652] should_failslab+0x8f/0xb0 [ 88.588799][ T5652] kmem_cache_alloc_noprof+0x59/0x340 [ 88.588817][ T5652] ? mas_alloc_nodes+0x1f4/0x4a0 [ 88.588846][ T5652] mas_alloc_nodes+0x1f4/0x4a0 [ 88.588872][ T5652] mas_preallocate+0x48d/0x6b0 [ 88.588901][ T5652] __split_vma+0x23e/0x630 [ 88.588922][ T5652] vma_modify+0x105/0x200 [ 88.588948][ T5652] vma_modify_flags+0x10a/0x140 [ 88.588988][ T5652] mlock_fixup+0x113/0x3f0 [ 88.589019][ T5652] apply_vma_lock_flags+0x196/0x260 [ 88.589050][ T5652] do_mlock+0x407/0x580 [ 88.589078][ T5652] ? __bpf_trace_sys_enter+0x10/0x30 [ 88.589102][ T5652] ? trace_sys_enter+0xcd/0x110 [ 88.589140][ T5652] __x64_sys_mlock2+0x72/0x90 [ 88.589159][ T5652] x64_sys_call+0x2671/0x2e10 [ 88.589177][ T5652] do_syscall_64+0xc9/0x1c0 [ 88.589201][ T5652] ? clear_bhb_loop+0x25/0x80 [ 88.589219][ T5652] ? clear_bhb_loop+0x25/0x80 [ 88.589236][ T5652] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.589253][ T5652] RIP: 0033:0x7fa718d2d169 [ 88.589265][ T5652] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 88.589279][ T5652] RSP: 002b:00007fa71738f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000145 [ 88.589294][ T5652] RAX: ffffffffffffffda RBX: 00007fa718f45fa0 RCX: 00007fa718d2d169 [ 88.589304][ T5652] RDX: 0000000000000000 RSI: 0000000000004000 RDI: 0000200000004000 [ 88.589314][ T5652] RBP: 00007fa71738f090 R08: 0000000000000000 R09: 0000000000000000 [ 88.589324][ T5652] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 88.589333][ T5652] R13: 0000000000000000 R14: 00007fa718f45fa0 R15: 00007fff9f616ff8 [ 88.589350][ T5652] [ 88.839199][ T5654] FAULT_INJECTION: forcing a failure. [ 88.839199][ T5654] name failslab, interval 1, probability 0, space 0, times 0 [ 88.851962][ T5654] CPU: 1 UID: 0 PID: 5654 Comm: syz.2.754 Not tainted 6.15.0-rc1-syzkaller-00333-g5aaaedb0cb54 #0 PREEMPT(voluntary) [ 88.851992][ T5654] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 88.852006][ T5654] Call Trace: [ 88.852014][ T5654] [ 88.852022][ T5654] dump_stack_lvl+0xf6/0x150 [ 88.852052][ T5654] dump_stack+0x15/0x1a [ 88.852153][ T5654] should_fail_ex+0x261/0x270 [ 88.852184][ T5654] should_failslab+0x8f/0xb0 [ 88.852214][ T5654] kmem_cache_alloc_noprof+0x59/0x340 [ 88.852235][ T5654] ? skb_clone+0x154/0x1f0 [ 88.852288][ T5654] skb_clone+0x154/0x1f0 [ 88.852321][ T5654] __netlink_deliver_tap+0x2bd/0x4f0 [ 88.852359][ T5654] netlink_unicast+0x69e/0x6c0 [ 88.852388][ T5654] netlink_sendmsg+0x609/0x720 [ 88.852422][ T5654] ? __pfx_netlink_sendmsg+0x10/0x10 [ 88.852493][ T5654] __sock_sendmsg+0x140/0x180 [ 88.852512][ T5654] ____sys_sendmsg+0x350/0x4e0 [ 88.852547][ T5654] __sys_sendmsg+0x1a0/0x240 [ 88.852668][ T5654] __x64_sys_sendmsg+0x46/0x50 [ 88.852754][ T5654] x64_sys_call+0x26f3/0x2e10 [ 88.852778][ T5654] do_syscall_64+0xc9/0x1c0 [ 88.852810][ T5654] ? clear_bhb_loop+0x25/0x80 [ 88.852831][ T5654] ? clear_bhb_loop+0x25/0x80 [ 88.852865][ T5654] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.852890][ T5654] RIP: 0033:0x7f8e48e7d169 [ 88.852927][ T5654] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 88.852974][ T5654] RSP: 002b:00007f8e474df038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 88.853075][ T5654] RAX: ffffffffffffffda RBX: 00007f8e49095fa0 RCX: 00007f8e48e7d169 [ 88.853090][ T5654] RDX: 0000000000048890 RSI: 0000200000000380 RDI: 0000000000000003 [ 88.853105][ T5654] RBP: 00007f8e474df090 R08: 0000000000000000 R09: 0000000000000000 [ 88.853119][ T5654] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 88.853133][ T5654] R13: 0000000000000000 R14: 00007f8e49095fa0 R15: 00007ffed5b6a388 [ 88.853155][ T5654] [ 88.853170][ T5654] netlink: 80 bytes leftover after parsing attributes in process `syz.2.754'. [ 88.925245][ T5659] 9pnet_virtio: no channels available for device [ 89.162241][ T5671] SELinux: syz.3.763 (5671) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 89.242156][ T5677] loop4: detected capacity change from 0 to 512 [ 89.257473][ T5677] EXT4-fs: Ignoring removed i_version option [ 89.279532][ T5677] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 89.289717][ T5679] SELinux: syz.3.763 (5679) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 89.307955][ T5677] EXT4-fs error (device loop4): ext4_get_journal_inode:5798: comm syz.4.765: inode #196608: comm syz.4.765: iget: illegal inode # [ 89.341966][ T5677] EXT4-fs (loop4): no journal found [ 89.347239][ T5677] EXT4-fs (loop4): can't get journal size [ 89.353244][ T5678] loop3: detected capacity change from 0 to 512 [ 89.361937][ T5677] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 89.371555][ T5677] EXT4-fs (loop4): failed to initialize system zone (-22) [ 89.380427][ T5677] EXT4-fs (loop4): mount failed [ 89.402722][ T29] kauditd_printk_skb: 168 callbacks suppressed [ 89.402737][ T29] audit: type=1400 audit(1744574975.518:4023): avc: denied { ioctl } for pid=5676 comm="syz.4.765" path="/dev/raw-gadget" dev="devtmpfs" ino=142 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 89.418366][ T5678] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 89.434356][ T5677] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 89.446555][ T5678] ext4 filesystem being mounted at /162/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 89.456543][ T5677] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 89.465627][ T5678] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 89.475365][ T29] audit: type=1400 audit(1744574975.568:4024): avc: denied { mount } for pid=5670 comm="syz.3.763" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 89.608413][ T29] audit: type=1400 audit(1744574975.728:4025): avc: denied { create } for pid=5684 comm="syz.3.766" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 89.628115][ T29] audit: type=1400 audit(1744574975.728:4026): avc: denied { write } for pid=5684 comm="syz.3.766" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 89.682668][ T29] audit: type=1326 audit(1744574975.798:4027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5689 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa718d2d169 code=0x7ffc0000 [ 89.705899][ T29] audit: type=1326 audit(1744574975.798:4028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5689 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa718d2d169 code=0x7ffc0000 [ 89.729188][ T29] audit: type=1326 audit(1744574975.798:4029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5689 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7fa718d2d169 code=0x7ffc0000 [ 89.752276][ T29] audit: type=1326 audit(1744574975.798:4030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5689 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa718d2d169 code=0x7ffc0000 [ 89.775199][ T29] audit: type=1326 audit(1744574975.798:4031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5689 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa718d2d169 code=0x7ffc0000 [ 89.798129][ T29] audit: type=1326 audit(1744574975.798:4032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5689 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=208 compat=0 ip=0x7fa718d2d169 code=0x7ffc0000 [ 90.018887][ T5692] 9pnet_virtio: no channels available for device [ 90.091200][ T5702] netlink: 12 bytes leftover after parsing attributes in process `syz.4.774'. [ 90.119426][ T5704] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 90.182832][ T5710] FAULT_INJECTION: forcing a failure. [ 90.182832][ T5710] name failslab, interval 1, probability 0, space 0, times 0 [ 90.195637][ T5710] CPU: 1 UID: 0 PID: 5710 Comm: syz.1.777 Not tainted 6.15.0-rc1-syzkaller-00333-g5aaaedb0cb54 #0 PREEMPT(voluntary) [ 90.195740][ T5710] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 90.195752][ T5710] Call Trace: [ 90.195758][ T5710] [ 90.195764][ T5710] dump_stack_lvl+0xf6/0x150 [ 90.195814][ T5710] dump_stack+0x15/0x1a [ 90.195852][ T5710] should_fail_ex+0x261/0x270 [ 90.195914][ T5710] should_failslab+0x8f/0xb0 [ 90.195952][ T5710] kmem_cache_alloc_node_noprof+0x5c/0x340 [ 90.195981][ T5710] ? __alloc_skb+0x10d/0x320 [ 90.196010][ T5710] __alloc_skb+0x10d/0x320 [ 90.196130][ T5710] netlink_alloc_large_skb+0xad/0xe0 [ 90.196217][ T5710] netlink_sendmsg+0x3da/0x720 [ 90.196253][ T5710] ? __pfx_netlink_sendmsg+0x10/0x10 [ 90.196341][ T5710] __sock_sendmsg+0x140/0x180 [ 90.196419][ T5710] ____sys_sendmsg+0x350/0x4e0 [ 90.196454][ T5710] __sys_sendmsg+0x1a0/0x240 [ 90.196497][ T5710] __x64_sys_sendmsg+0x46/0x50 [ 90.196533][ T5710] x64_sys_call+0x26f3/0x2e10 [ 90.196567][ T5710] do_syscall_64+0xc9/0x1c0 [ 90.196602][ T5710] ? clear_bhb_loop+0x25/0x80 [ 90.196629][ T5710] ? clear_bhb_loop+0x25/0x80 [ 90.196655][ T5710] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.196730][ T5710] RIP: 0033:0x7f7b30efd169 [ 90.196748][ T5710] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 90.196769][ T5710] RSP: 002b:00007f7b2f55f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 90.196792][ T5710] RAX: ffffffffffffffda RBX: 00007f7b31115fa0 RCX: 00007f7b30efd169 [ 90.196806][ T5710] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000006 [ 90.196820][ T5710] RBP: 00007f7b2f55f090 R08: 0000000000000000 R09: 0000000000000000 [ 90.196881][ T5710] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 90.196892][ T5710] R13: 0000000000000000 R14: 00007f7b31115fa0 R15: 00007ffea165ede8 [ 90.196912][ T5710] [ 90.479630][ T5716] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 90.505800][ T5716] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 90.571615][ T5718] netlink: 172 bytes leftover after parsing attributes in process `syz.4.780'. [ 90.612984][ T5722] Cannot find add_set index 0 as target [ 90.649240][ T5720] loop0: detected capacity change from 0 to 512 [ 90.686377][ T5720] EXT4-fs: Ignoring removed i_version option [ 90.717033][ T5720] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 90.725461][ T5720] EXT4-fs error (device loop0): ext4_get_journal_inode:5798: comm syz.0.781: inode #196608: comm syz.0.781: iget: illegal inode # [ 90.782834][ T5720] EXT4-fs (loop0): no journal found [ 90.788161][ T5720] EXT4-fs (loop0): can't get journal size [ 90.825248][ T5732] netlink: 12 bytes leftover after parsing attributes in process `syz.3.785'. [ 90.829134][ T5720] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 90.868163][ T5720] EXT4-fs (loop0): failed to initialize system zone (-22) [ 90.875371][ T5720] EXT4-fs (loop0): mount failed [ 90.954916][ T5738] netlink: 16 bytes leftover after parsing attributes in process `syz.3.787'. [ 91.020334][ T5736] netlink: 4 bytes leftover after parsing attributes in process `syz.0.788'. [ 91.093189][ T5744] netlink: 'syz.0.790': attribute type 2 has an invalid length. [ 91.100937][ T5744] netlink: 'syz.0.790': attribute type 1 has an invalid length. [ 91.108646][ T5744] netlink: 199820 bytes leftover after parsing attributes in process `syz.0.790'. [ 91.165556][ T5748] loop2: detected capacity change from 0 to 1024 [ 91.185120][ T5748] EXT4-fs: Ignoring removed nobh option [ 91.190818][ T5748] EXT4-fs: Ignoring removed bh option [ 91.218617][ T5748] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 91.241995][ T5748] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4113: comm syz.2.792: Allocating blocks 385-513 which overlap fs metadata [ 91.287266][ T5747] EXT4-fs (loop2): pa ffff8881061750e0: logic 16, phys. 129, len 24 [ 91.295340][ T5747] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8 [ 91.352110][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.571487][ T5757] team0 (unregistering): Port device team_slave_0 removed [ 91.660585][ T5757] team0 (unregistering): Port device team_slave_1 removed [ 91.823589][ T5765] loop3: detected capacity change from 0 to 256 [ 91.999878][ T5771] loop3: detected capacity change from 0 to 1024 [ 92.047407][ T5771] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 92.066931][ T5771] ext4 filesystem being mounted at /177/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 92.311591][ T1743] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm kworker/u8:6: bg 0: block 393: padding at end of block bitmap is not set [ 92.384068][ T1743] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 2050 with max blocks 1 with error 28 [ 92.396639][ T1743] EXT4-fs (loop3): This should not happen!! Data will be lost [ 92.396639][ T1743] [ 92.406381][ T1743] EXT4-fs (loop3): Total free blocks count 0 [ 92.412373][ T1743] EXT4-fs (loop3): Free/Dirty block details [ 92.418372][ T1743] EXT4-fs (loop3): free_blocks=0 [ 92.423387][ T1743] EXT4-fs (loop3): dirty_blocks=16 [ 92.428535][ T1743] EXT4-fs (loop3): Block reservation details [ 92.434604][ T1743] EXT4-fs (loop3): i_reserved_data_blocks=1 [ 92.609455][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.660058][ T5787] Cannot find add_set index 0 as target [ 92.735710][ T5790] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 92.819041][ T5792] loop3: detected capacity change from 0 to 512 [ 92.837274][ T5792] EXT4-fs (loop3): blocks per group (71) and clusters per group (20800) inconsistent [ 92.857634][ T5792] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5792 comm=syz.3.807 [ 93.251222][ T5799] __nla_validate_parse: 2 callbacks suppressed [ 93.251242][ T5799] netlink: 5 bytes leftover after parsing attributes in process `syz.0.810'. [ 93.303911][ T5799] 0ªX¹¦D: renamed from gretap0 (while UP) [ 93.324532][ T5799] 0ªX¹¦D: entered allmulticast mode [ 93.342984][ T5799] A link change request failed with some changes committed already. Interface 30ªX¹¦D may have been left with an inconsistent configuration, please check. [ 93.473088][ T5804] SELinux: syz.2.812 (5804) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 93.567324][ T5811] Cannot find add_set index 0 as target [ 93.607302][ T5813] SELinux: syz.2.812 (5813) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 93.717753][ T5813] loop2: detected capacity change from 0 to 512 [ 93.763012][ T5823] loop4: detected capacity change from 0 to 512 [ 93.799286][ T5813] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 93.840890][ T5813] ext4 filesystem being mounted at /173/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 93.842510][ T5824] loop1: detected capacity change from 0 to 512 [ 93.873099][ T5813] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 93.918613][ T5823] EXT4-fs error (device loop4): ext4_acquire_dquot:6935: comm syz.4.820: Failed to acquire dquot type 1 [ 93.935212][ T5824] EXT4-fs error (device loop1): ext4_acquire_dquot:6935: comm syz.1.819: Failed to acquire dquot type 1 [ 93.959411][ T5823] EXT4-fs (loop4): 1 truncate cleaned up [ 93.981735][ T5824] EXT4-fs (loop1): 1 truncate cleaned up [ 93.988950][ T5823] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 94.006113][ T5824] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 94.025853][ T5823] ext4 filesystem being mounted at /128/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 94.045687][ T5824] ext4 filesystem being mounted at /168/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 94.101068][ T5832] loop2: detected capacity change from 0 to 512 [ 94.110204][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.148556][ T5832] EXT4-fs error (device loop2): ext4_acquire_dquot:6935: comm syz.2.821: Failed to acquire dquot type 1 [ 94.176885][ T5832] EXT4-fs (loop2): 1 truncate cleaned up [ 94.182950][ T5832] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 94.259028][ T5832] ext4 filesystem being mounted at /174/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 94.288760][ T5824] ================================================================== [ 94.296889][ T5824] BUG: KCSAN: data-race in vmalloc_info_show / vmalloc_info_show [ 94.304646][ T5824] [ 94.306968][ T5824] read to 0xffff88810100e228 of 4 bytes by task 5832 on cpu 0: [ 94.314532][ T5824] vmalloc_info_show+0x54a/0x780 [ 94.319485][ T5824] seq_read_iter+0x2c8/0x970 [ 94.324080][ T5824] proc_reg_read_iter+0x118/0x190 [ 94.329114][ T5824] vfs_read+0x5e6/0x710 [ 94.333272][ T5824] ksys_read+0xeb/0x1b0 [ 94.337434][ T5824] __x64_sys_read+0x42/0x50 [ 94.341945][ T5824] x64_sys_call+0x2a3b/0x2e10 [ 94.346635][ T5824] do_syscall_64+0xc9/0x1c0 [ 94.351151][ T5824] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.357044][ T5824] [ 94.359374][ T5824] read-write to 0xffff88810100e228 of 4 bytes by task 5824 on cpu 1: [ 94.367433][ T5824] vmalloc_info_show+0x476/0x780 [ 94.372389][ T5824] seq_read_iter+0x2c8/0x970 [ 94.376986][ T5824] proc_reg_read_iter+0x118/0x190 [ 94.382018][ T5824] vfs_read+0x5e6/0x710 [ 94.386179][ T5824] ksys_read+0xeb/0x1b0 [ 94.390348][ T5824] __x64_sys_read+0x42/0x50 [ 94.394855][ T5824] x64_sys_call+0x2a3b/0x2e10 [ 94.399545][ T5824] do_syscall_64+0xc9/0x1c0 [ 94.404057][ T5824] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.409949][ T5824] [ 94.412335][ T5824] value changed: 0x000000c2 -> 0x00000000 [ 94.418064][ T5824] [ 94.420393][ T5824] Reported by Kernel Concurrency Sanitizer on: [ 94.426543][ T5824] CPU: 1 UID: 0 PID: 5824 Comm: syz.1.819 Not tainted 6.15.0-rc1-syzkaller-00333-g5aaaedb0cb54 #0 PREEMPT(voluntary) [ 94.438885][ T5824] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 94.448947][ T5824] ================================================================== [ 94.477660][ T5839] loop4: detected capacity change from 0 to 1024 [ 94.512986][ T5824] ================================================================== [ 94.521128][ T5824] BUG: KCSAN: data-race in vmalloc_info_show / vmalloc_info_show [ 94.528897][ T5824] [ 94.531232][ T5824] read-write to 0xffff88810100e228 of 4 bytes by task 5832 on cpu 0: [ 94.539314][ T5824] vmalloc_info_show+0x476/0x780 [ 94.544286][ T5824] seq_read_iter+0x2c8/0x970 [ 94.548893][ T5824] proc_reg_read_iter+0x118/0x190 [ 94.553930][ T5824] vfs_read+0x5e6/0x710 [ 94.558122][ T5824] ksys_read+0xeb/0x1b0 [ 94.562310][ T5824] __x64_sys_read+0x42/0x50 [ 94.566848][ T5824] x64_sys_call+0x2a3b/0x2e10 [ 94.571547][ T5824] do_syscall_64+0xc9/0x1c0 [ 94.576075][ T5824] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.581987][ T5824] [ 94.584316][ T5824] read-write to 0xffff88810100e228 of 4 bytes by task 5824 on cpu 1: [ 94.592396][ T5824] vmalloc_info_show+0x476/0x780 [ 94.597368][ T5824] seq_read_iter+0x2c8/0x970 [ 94.601969][ T5824] proc_reg_read_iter+0x118/0x190 [ 94.606997][ T5824] vfs_read+0x5e6/0x710 [ 94.611160][ T5824] ksys_read+0xeb/0x1b0 [ 94.615339][ T5824] __x64_sys_read+0x42/0x50 [ 94.619845][ T5824] x64_sys_call+0x2a3b/0x2e10 [ 94.624520][ T5824] do_syscall_64+0xc9/0x1c0 [ 94.629030][ T5824] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.634939][ T5824] [ 94.637267][ T5824] value changed: 0x00000004 -> 0x00000012 [ 94.642979][ T5824] [ 94.645292][ T5824] Reported by Kernel Concurrency Sanitizer on: [ 94.651431][ T5824] CPU: 1 UID: 0 PID: 5824 Comm: syz.1.819 Not tainted 6.15.0-rc1-syzkaller-00333-g5aaaedb0cb54 #0 PREEMPT(voluntary) [ 94.663763][ T5824] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 94.673818][ T5824] ================================================================== [ 94.908908][ T5839] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 94.921152][ T5839] ext4 filesystem being mounted at /129/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 95.011610][ T5839] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 95.027063][ T5839] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 63 with max blocks 1 with error 28 [ 95.039767][ T5839] EXT4-fs (loop4): This should not happen!! Data will be lost [ 95.039767][ T5839] [ 95.049451][ T5839] EXT4-fs (loop4): Total free blocks count 0 [ 95.055505][ T5839] EXT4-fs (loop4): Free/Dirty block details [ 95.061446][ T5839] EXT4-fs (loop4): free_blocks=4293918720 [ 95.067278][ T5839] EXT4-fs (loop4): dirty_blocks=16 [ 95.072401][ T5839] EXT4-fs (loop4): Block reservation details [ 95.078488][ T5839] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 95.107513][ T29] kauditd_printk_skb: 111 callbacks suppressed [ 95.107539][ T29] audit: type=1400 audit(1744574981.218:4136): avc: denied { setattr } for pid=5834 comm="syz.4.822" name="file0" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 95.138481][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.198635][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.405467][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.