last executing test programs: 5.922853103s ago: executing program 1 (id=1675): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe70, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kmem_cache_free\x00', r1}, 0x18) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffed3) 5.818696065s ago: executing program 1 (id=1677): r0 = creat(&(0x7f00000000c0)='./file0\x00', 0xc9028ba210c11f8b) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)=ANY=[@ANYRESDEC, @ANYRESOCT=r2], 0x154}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000180)='kfree\x00', r2, 0x0, 0x10000}, 0x14) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000580)='sched_switch\x00', r5}, 0x10) clock_nanosleep(0x2, 0x0, &(0x7f0000000300)={0x0, 0x989680}, 0x0) timer_create(0x5, &(0x7f0000000200)={0x0, 0x32, 0x2, @thr={&(0x7f0000000640), &(0x7f00000006c0)="3f23bf90dbe5388279bfb5a285e1f6f2989f6ee8a501f9a9aa254782678b8e2bc2b0e8182af39285166f7c249f7542b4"}}, &(0x7f00000002c0)) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000001440)={'team0\x00', 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000100), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r7, 0x8933, &(0x7f0000000080)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r7, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000880)=ANY=[@ANYBLOB="2c020000", @ANYRES16=r8, @ANYBLOB="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", @ANYRES32=r9], 0x22c}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r11, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r12, {}, {}, {0x8, 0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x8881}, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000001700)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000016c0)={&(0x7f0000001000)=ANY=[@ANYBLOB="0c020000", @ANYRES16=0x0, @ANYBLOB="000225bd7000fbdbdf25190000005800018008000100", @ANYRES32=0x0, @ANYBLOB="0800030001000000080003000300000014000200766574683000000000000000000000000800030000000000080003000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="280001801400020064766d72703100000000000000000000080003000700000008000100", @ANYRES32=0x0, @ANYBLOB="4000018014000200776730000000000000000000000000001400020067656e6576653000000000000000000014000200726f736530000000000000000000000034000180080003000000000008000100", @ANYRES32=0x0, @ANYBLOB="0800030001000000080003000100000008000100", @ANYRES32, @ANYBLOB="0800030001000000cabe575cb17069db1856e246ad5684000180080003000300000008000100", @ANYRES32=r6, @ANYBLOB="0800030001000000080003000500000008000100", @ANYRES32=r9, @ANYBLOB="1400020073697430000000000000000000000000140002006e72300000000000000000000000000014000200697036746e6c300000000000000000001400020067656e657665310000000000000000000800030001000000400001800800030001000000080003000000000008000100", @ANYRES32=0x0, @ANYBLOB="140002006272696467655f736c6176655f310000080003000200000008000100", @ANYRES32=0x0, @ANYBLOB="2800018008000100", @ANYRES32=r12, @ANYBLOB="08000300010000001400020076657468305f746f5f627269646765001800018014000200766c616e3000"/52], 0x20c}, 0x1, 0x0, 0x0, 0x4000010}, 0x4000000) unshare(0x40000000) syz_mount_image$ext4(&(0x7f0000000600)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x4042, &(0x7f00000000c0), 0x7, 0x4c6, &(0x7f0000000b00)="$eJzs3E1sVNUeAPD/nc70Ax6PPh6PJ4hJEY2NxhYKCgs3GE1caGLEhS6bthCkUENrIoRISQwuDYl749ItC7fqzrgycYsLFyaGhBgSA7gac2funU7no5/TjjC/XzKdc+49955z7rnn3jP3zDSAnjWS/kki/hURtyNidzW6PMFI9e3BvatTD+9dnYrFcvn0H0kl3f00nilk7zuzfY4WIgqfJg07rJq/fOX85OzszKUsPr5w4cPx+ctXXjx3YfLszNmZixMnTx4/dvTEyxMvrb9SLfJL63X/wCdzB/e/8f7Nt6aK+fLB7L2+Hp0yEiP1RblVX6xnO51Zl+2qCyfFLhaEdUnbLW2uUqX/746+0HjQK8rlcnmg/erFcqPrTUuAR1YSbVYMZpcH4DGV3+jTz7/5q3b3H9ry4UfX3T1V/QCU1vtB9qquKdaeZ5QaPt920khEvLf415fpK1Z6DvHrFhUAAOg5353KR4KN479C7KtL9+9sDmU4Iv4TEXsi4r8RsTci/hdRSfv/iHiiMYMkorxC/nsb4s3jn8KdzdRvNen475Vsbmv5+C8f/cVwXxbblX4eri6bOZIdk9EoDZw5NztzdIU8vn/t58/brasf/6WvNP98LJiV406x4QHd9OTC5IYr3ODu9YgDxcb6J8W04fKZgCQi9kfEgXXsd7gufO75rw/WIqXl6Vavf0W5xZRedGKqovxVxHPV9l+MZe2/lGOy8vzk+GDMzhwZT8+CIy3z+PGnG2+3y3/V+n/zW+Mmr5/49vRmq12Ttv+OuvM/8vnbpfoPJxFJbb52fv153Pjls8p+Rw43r9vo+d+fvFsJ92fLPp5cWLh0NKI/ebN5+cTStnk8T5/Wf/Rw6/6/J9smPRJPRkR6Ej9VdwKnZT8UEU9HRIuq1fzw6jMftFu3xvN/y6T1n25x/bu2vP2X5us3EOg7f+j2wzYXj7W1//FKaDRb0vr6lyy7RKy1gB05iAAAAPAPV4jKd/8LY7VwoTA2Vn0GtDd2FGbn5hdeODP30cXp6m8EhqNUyJ90VZ8Hl5L8+edwXXyiIX4se278Rd9QJT42NTc73e3KQ4/bWenzSVP/T/3e1+3SAVvOT36gd63W//fd3KaCANvO/R96V13/X2yTZNE3ZeDx5P4PvatV/7+2gW2AR0tZX4aepv9D7yrGO7VwoaslAbab+z/0pM38rn/1QHmgYclANTAYzYljcGuKMdQirxaBg1t2EPJAOrJa51Z/9kdsPvehjWyV/zeFtmmisL4dDkTzqr7o9HEuxRqO2Nl9HT/5y9l35Tt92tzaln7aKtCVyxEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEDH/R0AAP//b9HZQw==") 4.513691616s ago: executing program 1 (id=1689): unshare(0x2040600) fsync(0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0x10) r1 = accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000080), 0x0) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000ffb000/0x4000)=nil) bind$unix(r1, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000180)=0x4, 0x4) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000700002c0000000000000004850000002a00000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2, 0x0, 0xfffffffffffffffc}, 0x18) sendto$inet6(0xffffffffffffffff, &(0x7f0000000040)="aa", 0x1, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x3}, 0x3}, 0x1c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0xfffffffffffffffc}, 0x18) shutdown(0xffffffffffffffff, 0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r4, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) 3.01341035s ago: executing program 3 (id=1699): r0 = creat(&(0x7f00000000c0)='./file0\x00', 0xc9028ba210c11f8b) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)=ANY=[@ANYRESDEC, @ANYRESOCT=r2], 0x154}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000180)='kfree\x00', r2, 0x0, 0x10000}, 0x14) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000580)='sched_switch\x00', r5}, 0x10) clock_nanosleep(0x2, 0x0, &(0x7f0000000300)={0x0, 0x989680}, 0x0) timer_create(0x5, &(0x7f0000000200)={0x0, 0x32, 0x2, @thr={&(0x7f0000000640), &(0x7f00000006c0)="3f23bf90dbe5388279bfb5a285e1f6f2989f6ee8a501f9a9aa254782678b8e2bc2b0e8182af39285166f7c249f7542b4"}}, &(0x7f00000002c0)) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000001440)={'team0\x00', 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000100), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r7, 0x8933, &(0x7f0000000080)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r7, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000880)=ANY=[@ANYBLOB="2c020000", @ANYRES16=r8, @ANYBLOB="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", @ANYRES32=r9], 0x22c}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r11, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r12, {}, {}, {0x8, 0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x8881}, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000001700)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000016c0)={&(0x7f0000001000)=ANY=[@ANYBLOB="0c020000", @ANYRES16=0x0, @ANYBLOB="000225bd7000fbdbdf25190000005800018008000100", @ANYRES32=0x0, @ANYBLOB="0800030001000000080003000300000014000200766574683000000000000000000000000800030000000000080003000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="280001801400020064766d72703100000000000000000000080003000700000008000100", @ANYRES32=0x0, @ANYBLOB="4000018014000200776730000000000000000000000000001400020067656e6576653000000000000000000014000200726f736530000000000000000000000034000180080003000000000008000100", @ANYRES32=0x0, @ANYBLOB="0800030001000000080003000100000008000100", @ANYRES32, @ANYBLOB="0800030001000000cabe575cb17069db1856e246ad5684000180080003000300000008000100", @ANYRES32=r6, @ANYBLOB="0800030001000000080003000500000008000100", @ANYRES32=r9, @ANYBLOB="1400020073697430000000000000000000000000140002006e72300000000000000000000000000014000200697036746e6c300000000000000000001400020067656e657665310000000000000000000800030001000000400001800800030001000000080003000000000008000100", @ANYRES32=0x0, @ANYBLOB="140002006272696467655f736c6176655f310000080003000200000008000100", @ANYRES32=0x0, @ANYBLOB="2800018008000100", @ANYRES32=r12, @ANYBLOB="08000300010000001400020076657468305f746f5f627269646765001800018014000200766c616e3000"/52], 0x20c}, 0x1, 0x0, 0x0, 0x4000010}, 0x4000000) unshare(0x40000000) syz_mount_image$ext4(&(0x7f0000000600)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x4042, &(0x7f00000000c0), 0x7, 0x4c6, &(0x7f0000000b00)="$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") 2.790242974s ago: executing program 4 (id=1702): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) times(0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) rseq(0x0, 0x0, 0x1, 0x0) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = fcntl$dupfd(r2, 0x0, r3) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, 0x0, &(0x7f00000000c0)) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x240007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x8, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) close(r5) 2.742034515s ago: executing program 2 (id=1703): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'team_slave_0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000200)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', r2, 0x1, 0x80, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x3f, 0x14, 0x67, 0x0, 0x0, 0x0, 0x0, @multicast1, @empty}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f3, &(0x7f0000000940)={'syztnl0\x00', &(0x7f0000000140)={'ip_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0xfffffffe, {{0x5, 0x4, 0x0, 0x1, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @empty}}}}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x0, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000002306000000000000030000850000007b00000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x10) mknod$loop(&(0x7f0000000400)='./file0\x00', 0x100000000000600d, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="000000f8ff00000000bfa200000000000007029817a485ffffb703000008230000b7040000000000008500000001000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000060ff85000000040000009517fb1abaefff2e7a1c931245b9ab88dc1baed15ad83c5f8f6db5c33dd28e1491f9a954c5b4c20787"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000500)=ANY=[@ANYRESHEX], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5b, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='tlb_flush\x00', r5}, 0x10) bpf$TOKEN_CREATE(0x24, &(0x7f0000000380)={0x0, r3}, 0x8) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffe80, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0xfffffff7) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r7}, 0x10) r8 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) pwrite64(r8, &(0x7f0000000080)='3', 0x1, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x3, &(0x7f0000000280)=@framed, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r9}, 0x10) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000000000000000000004b84ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20048800}, 0x0) sendmsg$NFT_BATCH(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="140000001000010400000000000000000100000a74000000060a0b04000000000000000002000008400004803c000180080001006c6f670030000280060004400001000008000340fffffffa0a0002407d5def2e21000000080003400000000806000140000100000900010073797a30000000000900020073797a3200"], 0x9c}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r10}, 0x10) r12 = creat(&(0x7f0000000280)='./file0\x00', 0x0) r13 = dup2(r12, r12) madvise(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x17) ioctl$BLKTRACESETUP(r13, 0xc0481273, &(0x7f0000000000)={'\x00', 0x8, 0x200000a, 0x1, 0x8}) 2.642762786s ago: executing program 4 (id=1704): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48284b70043dc6124d877142a48448b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68af2ad0810000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d4023f210fa34b63a715a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900000000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b6c7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48fc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f01000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb796ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab04000000ffe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890decace0200f404e4e1f74b7eed82571be54c72d978cf906df0042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef29cd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9fdc75aaaf0100483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a998de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270bb29b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214d00000000d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ce21d69993e9960ff5f76015e6c354463d7d0917fc80e5009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab4000000000000000028df75cf43f8ecc8d37b126602111b40e761fd21081920382f14d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd63bed8d31c31c37a373d4efd89fa516dab183ee65744fb8fc4f9ce2242e0f00000000010000000000000000000057d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fa03b84f63e022fe755f4007a4a899eaf52c4f49198e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c716357d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c24936615ee68538e8fddd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba1c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63c41cbde2ba66ad81168070c8c6e18a6e452a31bde54ad3e16304d06a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c514b37c668554d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c7340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b9e6626f19eecb87e39175e85eff010000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f14eafe4b28ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1bfeef448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1099e40550a1cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732ab916a781b9912160a3fd2a2e74dd690c57bdfdc1f069f9491bca7a8c59363799be70018c25ece5ad7307dc7a95c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2cdfb7fea73ca18874664d60a4b9423f3297bc8eb91b4ee1d73272abbef3e7a828a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece58e752b47e6f677ec97c5c568a89d6e36b165c391339878b699644c96bd6ea589765ed2a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae2676384ff799783f55d7e5a1a092a01b965dc99cb7a9d98440c355927629f2bcf9dc2396eb2f5d25829715b24327642ac4741201014a95e0e65e12cdf27e19043e3c5d3e798375cead35b9a93190a52cdecaaccc854a1d41ef365303f0e9b4fc969c9dab6d00000000000000000000008f6555f3b7d5021dfc8eb504f1e4fef716d60f0d50b03fc014fd3dff46f56750f0ba4f1b9f7de5c17e7d1f18522897edab8e9e76b667ec6b01908400f55e16f0cfbf026be5f5acc681053f697d62b3545aec4606e190216c22c1d8807b6c43f0f0a4b53619fe5c9412821c3816194a5e29cf12cc7a197b5bdafb096d2d7f6be483814c92ef29c3a21c169794c7de3b4c706f4de5f4b93c831944c7b66fa49f317aa22dbc211e19f031c4f8bee14ecd5eb061a052044adc4dd1b63a1500a9c0e09dbba23f2726a55975efb4519d864d984dcb3a1dcafa1124a6b004029a706478df3be2438d2e35e6ca674dc190143a0b6f7db3408c0c08011e5d8f54711a0bd410ab53a15b1596cb77d2b58df2d8d8"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) llistxattr(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) 2.065308236s ago: executing program 4 (id=1705): mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) keyctl$get_keyring_id(0x0, 0x0, 0x2) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0xc9028ba210c11f88) r1 = dup2(r0, r0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000000)={'\x00', 0x7ffb, 0x8, 0x1, 0x9, 0x36}) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) lsetxattr$trusted_overlay_upper(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f0000000380), 0x0, 0x0, 0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffdfc, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r3}, &(0x7f0000000180), &(0x7f00000001c0)=r2}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x10000, &(0x7f0000000100), 0x106, 0x6}}, 0x20) ioctl$BLKTRACESETUP(r1, 0x1276, 0x0) 1.891613198s ago: executing program 4 (id=1706): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) r1 = socket$inet6(0xa, 0x6, 0xffffffff) setsockopt$inet6_int(r1, 0x29, 0x19, &(0x7f0000000000)=0x84, 0xfde1) socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x1320, 0xffffffff, 0x3, 0x5, 0x0, 0x1, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1c, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x3f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r2}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) r4 = socket$inet6_dccp(0xa, 0x6, 0x0) bind$inet6(r4, 0x0, 0x0) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) 1.840465329s ago: executing program 2 (id=1708): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2, 0x0, 0x2}, 0x18) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r3, &(0x7f0000001f00)=[{{&(0x7f00000003c0)={0xa, 0x4e23, 0x0, @loopback, 0x200}, 0x1c, &(0x7f0000000340)=[{&(0x7f0000000080)='\b', 0x1}], 0x1}}], 0x1, 0x14018891) 1.82961535s ago: executing program 3 (id=1709): symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00') r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) creat(&(0x7f00000002c0)='./file0\x00', 0x0) 1.78600691s ago: executing program 0 (id=1710): socket$inet(0x2, 0x4000000000000001, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x18) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a30000000000800034000"], 0x64}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000d80)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d00)=ANY=[@ANYBLOB="140000001000010000000000000000000020000a3c000000120a09080000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a"], 0x64}, 0x1, 0x0, 0x0, 0x5}, 0x0) 1.78372342s ago: executing program 3 (id=1711): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="219a53f271a76d2608004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1.612874853s ago: executing program 0 (id=1712): ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00\x00\x00!\x00', @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xb17040, 0x91) renameat2(r1, 0x0, 0xffffffffffffffff, &(0x7f0000000380)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x7) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x7, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f00001d8000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000140)=ANY=[], 0x7) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x8404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x1}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1fffffff, 0x0, 0x0, 0x40}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$inet6(0xa, 0x3, 0x2c) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x538, 0x3a0, 0x150, 0x150, 0x0, 0xf8010000, 0x468, 0x238, 0x238, 0x468, 0x238, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, [], [], 'team_slave_0\x00', 'hsr0\x00', {}, {}, 0x84}, 0x0, 0x338, 0x3a0, 0x0, {}, [@common=@inet=@sctp={{0x148}, {[], [], [], 0x2, [], 0x0, 0x4}}, @common=@inet=@sctp={{0x148}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}, {{@ipv6={@empty, @mcast1, [], [], 'batadv_slave_0\x00', 'veth1\x00'}, 0x0, 0xa8, 0xc8}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x598) syz_emit_ethernet(0x5e, &(0x7f0000000340)={@random="0ffa990500", @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x28, 0x3a, 0xff, @empty, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @dev, @dev}}}}}}, 0x0) 1.009604673s ago: executing program 0 (id=1713): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='\n\x00'], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000480)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$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") open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x88882, 0x0) mmap(&(0x7f0000ffc000/0x1000)=nil, 0xfffffffffffff002, 0x0, 0x32, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000003c0)='kfree\x00'}, 0x10) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0xfffffffc, 0xff, 0x80000000}, 0x1c) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r3, 0xffffffffffffffff, 0x0) 923.188515ms ago: executing program 4 (id=1714): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) times(0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) rseq(0x0, 0x0, 0x1, 0x0) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = fcntl$dupfd(r2, 0x0, r3) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, 0x0, &(0x7f00000000c0)) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x240007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x8, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) close(r5) 907.025285ms ago: executing program 2 (id=1715): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00'}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) llistxattr(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) 847.014566ms ago: executing program 1 (id=1716): mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) keyctl$get_keyring_id(0x0, 0x0, 0x2) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0xc9028ba210c11f88) r1 = dup2(r0, r0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000000)={'\x00', 0x7ffb, 0x8, 0x1, 0x9, 0x36}) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) lsetxattr$trusted_overlay_upper(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f0000000380), 0x0, 0x0, 0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffdfc, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r3}, &(0x7f0000000180), &(0x7f00000001c0)=r2}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x10000, &(0x7f0000000100), 0x106, 0x6}}, 0x20) ioctl$BLKTRACESETUP(r1, 0x1276, 0x0) 794.199176ms ago: executing program 0 (id=1717): r0 = socket(0x1d, 0x2, 0x6) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000004000085000000720000"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x18) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000380)={0x1d, r2, 0x2, {0x1, 0x0, 0x3}, 0xfd}, 0x18) sendmmsg$sock(r0, &(0x7f0000000280)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="1f", 0x1}], 0x1}}], 0x206c, 0x0) 793.589657ms ago: executing program 3 (id=1718): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)="03", 0x1}], 0x1, &(0x7f0000000280)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000060000000000000000008500000007000000850000000e00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000012c0)={&(0x7f0000000040)='kfree\x00', r2}, 0x10) recvmmsg(r1, &(0x7f00000011c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001140)=""/88, 0x58}, 0x10}], 0x1, 0x2002, 0x0) syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000740)='./file0\x00', 0x800, &(0x7f00000006c0)=ANY=[], 0x5, 0x7fd, &(0x7f0000000840)="$eJzs3U1oHPfZAPBnZMmRlfc1Ie+LX2NsZ+LkBRscZSU7CiKFZLMayZOsdsXuKtiEkphaDsZyE+IGah/q+JLS0hJ66jHJoZf2VHppKbTQHtpTob32Fgj0kLS0t5aAyszs2pL14S/FNunvJ6z5eub/f+av9TwaSTMbAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEAkjZlabSKJZt5aPJlurjHTac9vsX3Q3q/XTLboNyIp/sXoaOytVu393+ub9xSfDsX+aml/jBaT0bj88J5Hnvuf4aHB/lsktN2GN1p58dLl86eXl5fevpUWRrY9p+3y3V+uWfzRWNziyM5lrbzbzufrc1mad9vp9NRU7ekTs910Nm9m3VPdXjafNjpZvdfupIcbR9KJ6eljaTZ+qr3YmpupN7N0uFr57FOTtdpU+tL4QlbvdNutp18a7zZO5M1m3pordyw2FzHPFi/El/Ne2svq82l69tzy0rG1Ke1al2QRNLFmzecrq5f2P/nIJ+98/I9zS5M3O9zJ2uTkxMTk5MRUEhG12vD1Fc9MP/NsrTZcu0Gsi7inL1oeQNt8Boc7N9Sv/9GMPFqxGCcj3fCjETPRiXbMx/UX8OrtfYP6//9P//UPW/X7/qr6X1X5of17r2/eF2X9P1gtHdys/ld973xok5y/qI/SV4pPF+NSXI7zcTqWYzmW4u0vpL9k+9oa2t7M5iKLVuTRjXbkMR/1ck3aX5PGdEzFVNTitTgRs9GNNGYjj2Zk0Y1T0Y1eZOUrqhGdyKIevWhHJ9I4HI04EmlMxHRMx7FII4vxOBXtWIxWzMVM1MtWzsa5ctyP3ZDXnm+9/os3/vjJB+VXaxA0sdUQvxtRBv19i6B1xVz957ZFxG+37wQOd2FlUP8BAACAL62k/Ol7cf0/EgfKudm8mb26JubVz27ca7j49O49TBMAAAC4C+Vv/vdHUs3EgUiK6//a2qCfjJSTh+5DfgAAAMDdS8p77IqL/7F4rJob3C5Vu9+5AQAAANuj/LX/wWIyFnGlXOH6HwAAAL5kXvlZf+bGZ+x/PHjG7tDCQ8mv/hadzkhy/MOTTyYX6kVc/cKOar/+5JVrLfZm9w3uJqjamhq+/HCxPNzI9ieDBwV/3r+ZoHq0wL7ha7uvzeOFXdXaJEmKBK4ubJpArElgd/8oriVQLsX34vEq5vEz1fTMYEt1tGOzeTMbb7Sbz01Evb57qJed7L3z9XPfjPLwv9Oa353E2XPLS+Nfe3P5TJnL1aKVqxf6x7vuOYpb5LIyuJ3iwPqnGxdNjZQ3YvT7Hav6ra0+/qGLu4uZoRvHYIs+34tD/1XGHBqrYsfWHv9o0efE+GZHP1Yd38S6Ix9e/8KqsjjVXyqyuHb7yHvxRDXzxOEnqskGWUxulUUxFpOrs6jGLIZuY/w3ySIeiYgPHr9y8sBoRHbsZlkcu8ssAO6Xs+VTf4oqVJ2eqyr0r5VKUf87nZGdsabuVDvc6lkuKXu5yTv5jBSn/luq7v9c2eKMfriKOVx9PzG8b4O6UtvgjP7Wubd+1z+jH//xDz/86sHf//SO6/roIGTXYObR3zw8FGUWu/pZXO5v6Ywk379WSaqq+lGx/qNN++02J5NiCHd848JbsefipctPnbtw+o2lN5Z2RsRU7Xit9kyS9L94K+V3DGoPABs4FAerQr7pe+xs8i485TcAZURyfKur6h2RPHrtTwqKmvhmLMeZOFrebRARj23c79iqP0M4Gof6yW581Tq26h1ejm50VXclrsUWdbKKndw4dsN2j60asf/7wRf59QCAe+HQTerwpvX/ekRy9CbX3Wtr+ZEq9sggg81reUQ8f29HAwD+M2Sdz5Kx3reTTidfeG1ienqi3juRpZ124+W0k8/MZWne6mWdGK635rJ0odPutRvtZjHzSj6TddPu4sJCu9NLZ9uddKHdzU+W7/ye9t/6vZvN11u9vNFdaGb1bpY22q1evdFLZ/JuI11YfLGZd09knXLn7kLWyGfzRr2Xt1tpt73YaWTjadrNslWB+UzW6uWzeTHbShc6+Xy9czUimovzWTqTdRudfKHXrhoc9JW3Ztud+bLZv+y+36MNAA+Gi5cunz+9vLz09p3N/PlWgjfvfXTkXh4rAFC5XqU//e8bt/nhOwAAAAAAAAAAAAAAPBju8v6/9TO7trfB0a1iVq5ErN+UrKys3EYXu+ImMTurkdoR2ztQ92Tm6ra0MxQbjfODM5Nsvun1558/v9nuL17Ze+LWurjp/5ThiOjf6vrupzt//n616YU7Opyh29/rTxFxB32tJFvE3OcTEwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABs4N8BAAD//2uxZPA=") (fail_nth: 6) 790.524347ms ago: executing program 4 (id=1719): r0 = creat(&(0x7f00000000c0)='./file0\x00', 0xc9028ba210c11f8b) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)=ANY=[@ANYRESDEC, @ANYRESOCT=r2], 0x154}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000180)='kfree\x00', r2, 0x0, 0x10000}, 0x14) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000580)='sched_switch\x00', r5}, 0x10) clock_nanosleep(0x2, 0x0, &(0x7f0000000300)={0x0, 0x989680}, 0x0) timer_create(0x5, &(0x7f0000000200)={0x0, 0x32, 0x2, @thr={&(0x7f0000000640), &(0x7f00000006c0)="3f23bf90dbe5388279bfb5a285e1f6f2989f6ee8a501f9a9aa254782678b8e2bc2b0e8182af39285166f7c249f7542b4"}}, &(0x7f00000002c0)) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000001440)={'team0\x00', 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000100), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r7, 0x8933, &(0x7f0000000080)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r7, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000880)=ANY=[@ANYBLOB="2c020000", @ANYRES16=r8, @ANYBLOB="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", @ANYRES32=r9], 0x22c}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r11, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r12, {}, {}, {0x8, 0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x8881}, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000001700)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000016c0)={&(0x7f0000001000)=ANY=[@ANYBLOB="0c020000", @ANYRES16=0x0, @ANYBLOB="000225bd7000fbdbdf25190000005800018008000100", @ANYRES32=0x0, @ANYBLOB="0800030001000000080003000300000014000200766574683000000000000000000000000800030000000000080003000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="280001801400020064766d72703100000000000000000000080003000700000008000100", @ANYRES32=0x0, @ANYBLOB="4000018014000200776730000000000000000000000000001400020067656e6576653000000000000000000014000200726f736530000000000000000000000034000180080003000000000008000100", @ANYRES32=0x0, @ANYBLOB="0800030001000000080003000100000008000100", @ANYRES32, @ANYBLOB="0800030001000000cabe575cb17069db1856e246ad5684000180080003000300000008000100", @ANYRES32=r6, @ANYBLOB="0800030001000000080003000500000008000100", @ANYRES32=r9, @ANYBLOB="1400020073697430000000000000000000000000140002006e72300000000000000000000000000014000200697036746e6c300000000000000000001400020067656e657665310000000000000000000800030001000000400001800800030001000000080003000000000008000100", @ANYRES32=0x0, @ANYBLOB="140002006272696467655f736c6176655f310000080003000200000008000100", @ANYRES32=0x0, @ANYBLOB="2800018008000100", @ANYRES32=r12, @ANYBLOB="08000300010000001400020076657468305f746f5f627269646765001800018014000200766c616e3000"/52], 0x20c}, 0x1, 0x0, 0x0, 0x4000010}, 0x4000000) unshare(0x40000000) syz_mount_image$ext4(&(0x7f0000000600)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x4042, &(0x7f00000000c0), 0x7, 0x4c6, &(0x7f0000000b00)="$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") 547.352351ms ago: executing program 2 (id=1720): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x29) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r2}, 0x10) setpriority(0x2, 0xff, 0x0) 468.411592ms ago: executing program 3 (id=1721): r0 = socket$packet(0x11, 0x3, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) writev(r2, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x180204}], 0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000004c0)={r3, 0x3, 0x6, @broadcast}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000040)={r3, 0x1, 0x6, @local}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x1, 0x0, 0x6000001, {0x0, 0x0, 0x0, r3, {0x7}, {0xd}, {0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400c840}, 0x20048054) 468.168132ms ago: executing program 2 (id=1722): socket$inet(0x2, 0x4000000000000001, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x18) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a30000000000800034000"], 0x64}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000d80)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d00)=ANY=[@ANYBLOB="140000001000010000000000000000000020000a3c000000120a09080000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a"], 0x64}, 0x1, 0x0, 0x0, 0x5}, 0x0) 433.506852ms ago: executing program 0 (id=1723): ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00\x00\x00!\x00', @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xb17040, 0x91) renameat2(r1, 0x0, 0xffffffffffffffff, &(0x7f0000000380)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x7) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x7, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f00001d8000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000140)=ANY=[], 0x7) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x8404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x1}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1fffffff, 0x0, 0x0, 0x40}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$inet6(0xa, 0x3, 0x2c) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x538, 0x3a0, 0x150, 0x150, 0x0, 0xf8010000, 0x468, 0x238, 0x238, 0x468, 0x238, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, [], [], 'team_slave_0\x00', 'hsr0\x00', {}, {}, 0x84}, 0x0, 0x338, 0x3a0, 0x0, {}, [@common=@inet=@sctp={{0x148}, {[], [], [], 0x2, [], 0x0, 0x4}}, @common=@inet=@sctp={{0x148}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}, {{@ipv6={@empty, @mcast1, [], [], 'batadv_slave_0\x00', 'veth1\x00'}, 0x0, 0xa8, 0xc8}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x598) syz_emit_ethernet(0x5e, &(0x7f0000000340)={@random="0ffa990500", @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x28, 0x3a, 0xff, @empty, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @dev, @dev}}}}}}, 0x0) 232.593536ms ago: executing program 1 (id=1724): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) r1 = socket$inet6(0xa, 0x6, 0xffffffff) setsockopt$inet6_int(r1, 0x29, 0x19, &(0x7f0000000000)=0x84, 0xfde1) socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x1320, 0xffffffff, 0x3, 0x5, 0x0, 0x1, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1c, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x3f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r2}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) r4 = socket$inet6_dccp(0xa, 0x6, 0x0) bind$inet6(r4, 0x0, 0x0) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) 148.545917ms ago: executing program 2 (id=1725): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1, 0x0, 0x2}, 0x18) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r2, &(0x7f0000001f00)=[{{&(0x7f00000003c0)={0xa, 0x4e23, 0x0, @loopback, 0x200}, 0x1c, &(0x7f0000000340)=[{&(0x7f0000000080)='\b', 0x1}], 0x1}}], 0x1, 0x14018891) 99.512808ms ago: executing program 0 (id=1726): unshare(0x2040600) fsync(0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0x10) r1 = accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000080), 0x0) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000ffb000/0x4000)=nil) bind$unix(r1, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000180)=0x4, 0x4) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000700002c0000000000000004850000002a00000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2, 0x0, 0xfffffffffffffffc}, 0x18) sendto$inet6(0xffffffffffffffff, &(0x7f0000000040)="aa", 0x1, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x3}, 0x3}, 0x1c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0xfffffffffffffffc}, 0x18) shutdown(0xffffffffffffffff, 0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r4, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) 70.942089ms ago: executing program 3 (id=1727): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000fcffffff18110000", @ANYRES32, @ANYRES8=r0], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r1}, 0x10) (async) r2 = creat(&(0x7f0000000000)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf32(r2, &(0x7f0000000740)=ANY=[@ANYBLOB="7f454c4604030003000000000000000002003e00000000000103000038000000000000000f000000000020000100040000000000000000000300000008000000f30000008100000004"], 0x58) (async) close(r2) (async, rerun: 32) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'xfrm0\x00'}) 0s ago: executing program 1 (id=1728): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) pipe2(&(0x7f0000000380), 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000003c0)={0x1, &(0x7f0000000400)=[{0x34d, 0x7, 0x2d, 0x800}]}) r0 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000000c0)=@generic={&(0x7f0000000080)='./file0\x00'}, 0x18) r1 = socket(0x10, 0x3, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$poke(0x1, r2, &(0x7f0000000040), 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000002a00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000300)='kfree\x00', r4}, 0x18) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000014c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r5, 0xfeffff, 0xa40, 0x3f000002, &(0x7f0000000700)="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", 0x0, 0xf0, 0x0, 0xf0, 0xffffff0c}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa2000000000000070200e2f7ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x15, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6b04, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000e80)='/sys/kernel/profiling', 0x22042, 0x0) write$binfmt_misc(r8, &(0x7f0000000000), 0xfffffecc) splice(r7, 0x0, r9, 0x0, 0xbfd1, 0x0) r10 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r10, &(0x7f0000000040)=[{&(0x7f0000000280)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000014001080800418e00000004fcff", 0x58}], 0x1) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=@newqdisc={0x40, 0x24, 0xd0f, 0x70bd25, 0x0, {0x60, 0x0, 0x0, 0x0, {}, {0x10, 0xffff}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x80000000, 0xb, 0xef39bdd396ae7deb}}}}]}, 0x40}}, 0x0) r11 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/sync_retries\x00', 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x8, &(0x7f0000000100)=ANY=[@ANYBLOB="87f802001051f6bcc728751e", @ANYRES32=r0, @ANYBLOB="00000000000000001853000010000000000000000000000085100000fdffffff18000000ffffff7f0000000001800000"], &(0x7f0000000140)='syzkaller\x00', 0x9, 0x0, &(0x7f0000000180), 0x41100, 0x2f, '\x00', 0x0, 0x25, r11, 0x8, &(0x7f0000000200)={0x9, 0x3}, 0x8, 0x10, &(0x7f0000000240)={0x5, 0xd, 0x5dd30205, 0x4}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@bloom_filter={0x1e, 0xfffffffa, 0x9, 0x5, 0xa, 0x1, 0x3, '\x00', 0x0, r8, 0x2, 0x2, 0x1, 0x2, @void, @value, @void, @value}, 0x50) getgid() kernel console output (not intermixed with test programs): 9] loop2: detected capacity change from 0 to 1024 [ 131.933127][ T6999] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 131.943002][ T6999] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 131.965906][ T6999] jbd2_journal_init_inode: Cannot locate journal superblock [ 131.973322][ T6999] EXT4-fs (loop2): Could not load journal inode [ 132.293492][ T7007] loop4: detected capacity change from 0 to 512 [ 132.298055][ T6962] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.320109][ T7007] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 132.330618][ T7007] EXT4-fs (loop4): orphan cleanup on readonly fs [ 132.337526][ T7007] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.1105: invalid indirect mapped block 256 (level 2) [ 132.367673][ T7007] EXT4-fs (loop4): 2 truncates cleaned up [ 132.373992][ T7007] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 132.388874][ T7007] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.410587][ T7020] FAULT_INJECTION: forcing a failure. [ 132.410587][ T7020] name failslab, interval 1, probability 0, space 0, times 0 [ 132.423882][ T7020] CPU: 0 UID: 0 PID: 7020 Comm: syz.0.1108 Not tainted 6.15.0-rc2-syzkaller-00048-gc62f4b82d571 #0 PREEMPT(voluntary) [ 132.423924][ T7020] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 132.423980][ T7020] Call Trace: [ 132.423988][ T7020] [ 132.423997][ T7020] dump_stack_lvl+0xf6/0x150 [ 132.424026][ T7020] dump_stack+0x15/0x1a [ 132.424045][ T7020] should_fail_ex+0x261/0x270 [ 132.424116][ T7020] should_failslab+0x8f/0xb0 [ 132.424152][ T7020] kmem_cache_alloc_noprof+0x59/0x340 [ 132.424178][ T7020] ? alloc_empty_file+0x78/0x200 [ 132.424210][ T7020] alloc_empty_file+0x78/0x200 [ 132.424237][ T7020] path_openat+0x6f/0x2000 [ 132.424317][ T7020] ? _parse_integer_limit+0x167/0x180 [ 132.424349][ T7020] ? _parse_integer+0x27/0x30 [ 132.424374][ T7020] ? kstrtoull+0x115/0x140 [ 132.424402][ T7020] ? kstrtouint+0x7b/0xc0 [ 132.424427][ T7020] ? kstrtouint_from_user+0xbf/0x100 [ 132.424571][ T7020] do_filp_open+0x115/0x240 [ 132.424661][ T7020] do_sys_openat2+0xaa/0x110 [ 132.424689][ T7020] __x64_sys_creat+0x6a/0x90 [ 132.424717][ T7020] x64_sys_call+0x10b4/0x2e10 [ 132.424742][ T7020] do_syscall_64+0xc9/0x1c0 [ 132.424777][ T7020] ? clear_bhb_loop+0x25/0x80 [ 132.424876][ T7020] ? clear_bhb_loop+0x25/0x80 [ 132.424910][ T7020] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.424934][ T7020] RIP: 0033:0x7f1a05a3e169 [ 132.424949][ T7020] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 132.424967][ T7020] RSP: 002b:00007f1a040a7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 132.424984][ T7020] RAX: ffffffffffffffda RBX: 00007f1a05c65fa0 RCX: 00007f1a05a3e169 [ 132.424997][ T7020] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000100 [ 132.425065][ T7020] RBP: 00007f1a040a7090 R08: 0000000000000000 R09: 0000000000000000 [ 132.425077][ T7020] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 132.425088][ T7020] R13: 0000000000000000 R14: 00007f1a05c65fa0 R15: 00007fff2204d358 [ 132.425164][ T7020] [ 132.435405][ T6962] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.465225][ T6962] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.648100][ T7015] lo speed is unknown, defaulting to 1000 [ 132.653215][ T6962] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.669432][ T6962] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.679605][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.688750][ T7015] vcan0 speed is unknown, defaulting to 1000 [ 132.730847][ T7023] FAULT_INJECTION: forcing a failure. [ 132.730847][ T7023] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 132.744691][ T7023] CPU: 0 UID: 0 PID: 7023 Comm: syz.1.1109 Not tainted 6.15.0-rc2-syzkaller-00048-gc62f4b82d571 #0 PREEMPT(voluntary) [ 132.744788][ T7023] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 132.744803][ T7023] Call Trace: [ 132.744810][ T7023] [ 132.744818][ T7023] dump_stack_lvl+0xf6/0x150 [ 132.744843][ T7023] dump_stack+0x15/0x1a [ 132.744864][ T7023] should_fail_ex+0x261/0x270 [ 132.744898][ T7023] should_fail+0xb/0x10 [ 132.744964][ T7023] should_fail_usercopy+0x1a/0x20 [ 132.744998][ T7023] _copy_from_iter+0xd8/0xd10 [ 132.745032][ T7023] ? _copy_from_iter+0x16c/0xd10 [ 132.745115][ T7023] copy_page_from_iter+0x14f/0x280 [ 132.745154][ T7023] skb_copy_datagram_from_iter+0x23b/0x490 [ 132.745195][ T7023] tun_get_user+0x10ea/0x2640 [ 132.745228][ T7023] ? avc_has_perm+0xd6/0x150 [ 132.745271][ T7023] ? ref_tracker_alloc+0x1ff/0x310 [ 132.745307][ T7023] tun_chr_write_iter+0x188/0x240 [ 132.745334][ T7023] vfs_write+0x79b/0x950 [ 132.745435][ T7023] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 132.745463][ T7023] ksys_write+0xeb/0x1b0 [ 132.745526][ T7023] __x64_sys_write+0x42/0x50 [ 132.745554][ T7023] x64_sys_call+0x2a45/0x2e10 [ 132.745627][ T7023] do_syscall_64+0xc9/0x1c0 [ 132.745658][ T7023] ? clear_bhb_loop+0x25/0x80 [ 132.745741][ T7023] ? clear_bhb_loop+0x25/0x80 [ 132.745767][ T7023] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.745792][ T7023] RIP: 0033:0x7fce73dbcc1f [ 132.745871][ T7023] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 132.745892][ T7023] RSP: 002b:00007fce72427000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 132.745914][ T7023] RAX: ffffffffffffffda RBX: 00007fce73fe5fa0 RCX: 00007fce73dbcc1f [ 132.745929][ T7023] RDX: 000000000000fdef RSI: 0000200000000100 RDI: 00000000000000c8 [ 132.745943][ T7023] RBP: 00007fce72427090 R08: 0000000000000000 R09: 0000000000000000 [ 132.745957][ T7023] R10: 000000000000fdef R11: 0000000000000293 R12: 0000000000000001 [ 132.745971][ T7023] R13: 0000000000000000 R14: 00007fce73fe5fa0 R15: 00007ffc163d2fa8 [ 132.745993][ T7023] [ 132.997039][ T7026] tipc: Enabling of bearer rejected, failed to enable media [ 133.051423][ T7029] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0) [ 133.078967][ T7029] SELinux: failed to load policy [ 133.132263][ T7034] xt_hashlimit: max too large, truncated to 1048576 [ 133.145482][ T7032] loop2: detected capacity change from 0 to 512 [ 133.153574][ T7032] EXT4-fs: Ignoring removed orlov option [ 133.159431][ T7032] EXT4-fs: inline encryption not supported [ 133.174763][ T7036] loop1: detected capacity change from 0 to 1024 [ 133.182996][ T7040] __nla_validate_parse: 31 callbacks suppressed [ 133.183042][ T7040] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1114'. [ 133.211247][ T7032] EXT4-fs error (device loop2): ext4_iget_extra_inode:4693: inode #15: comm syz.2.1115: corrupted in-inode xattr: invalid ea_ino [ 133.241392][ T7032] EXT4-fs error (device loop2): ext4_orphan_get:1395: comm syz.2.1115: couldn't read orphan inode 15 (err -117) [ 133.257274][ T7036] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 133.292993][ T7036] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 133.316202][ T7032] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 133.386433][ T7036] jbd2_journal_init_inode: Cannot locate journal superblock [ 133.393781][ T7036] EXT4-fs (loop1): Could not load journal inode [ 133.445470][ T7044] xt_CT: No such helper "syz0" [ 133.476865][ T7032] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.1115: bg 0: block 411: padding at end of block bitmap is not set [ 133.520632][ T7032] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 133.569619][ T7060] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1118'. [ 133.592764][ T7032] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.1115: invalid indirect mapped block 234881024 (level 0) [ 133.721765][ T7061] FAULT_INJECTION: forcing a failure. [ 133.721765][ T7061] name failslab, interval 1, probability 0, space 0, times 0 [ 133.734461][ T7061] CPU: 1 UID: 0 PID: 7061 Comm: syz.4.1119 Not tainted 6.15.0-rc2-syzkaller-00048-gc62f4b82d571 #0 PREEMPT(voluntary) [ 133.734497][ T7061] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 133.734512][ T7061] Call Trace: [ 133.734520][ T7061] [ 133.734529][ T7061] dump_stack_lvl+0xf6/0x150 [ 133.734595][ T7061] dump_stack+0x15/0x1a [ 133.734615][ T7061] should_fail_ex+0x261/0x270 [ 133.734647][ T7061] should_failslab+0x8f/0xb0 [ 133.734683][ T7061] __kmalloc_cache_noprof+0x55/0x320 [ 133.734841][ T7061] ? sf_setstate+0x18c/0x300 [ 133.734879][ T7061] sf_setstate+0x18c/0x300 [ 133.734918][ T7061] ip_mc_add_src+0x3de/0x5f0 [ 133.734951][ T7061] ? should_fail_ex+0xd7/0x270 [ 133.735032][ T7061] ____ip_mc_inc_group+0x167/0x5d0 [ 133.735067][ T7061] __ip_mc_join_group+0x242/0x2c0 [ 133.735181][ T7061] ip_mc_join_group+0x1f/0x30 [ 133.735213][ T7061] ip_mcast_join_leave+0x13c/0x190 [ 133.735265][ T7061] do_ip_setsockopt+0x198d/0x22a0 [ 133.735310][ T7061] ip_setsockopt+0x63/0x100 [ 133.735400][ T7061] udp_setsockopt+0x95/0xb0 [ 133.735479][ T7061] sock_common_setsockopt+0x64/0x80 [ 133.735526][ T7061] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 133.735562][ T7061] __sys_setsockopt+0x187/0x200 [ 133.735594][ T7061] __x64_sys_setsockopt+0x66/0x80 [ 133.735626][ T7061] x64_sys_call+0x2a09/0x2e10 [ 133.735653][ T7061] do_syscall_64+0xc9/0x1c0 [ 133.735689][ T7061] ? clear_bhb_loop+0x25/0x80 [ 133.735778][ T7061] ? clear_bhb_loop+0x25/0x80 [ 133.735833][ T7061] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.735870][ T7061] RIP: 0033:0x7efd7cfde169 [ 133.735888][ T7061] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 133.735908][ T7061] RSP: 002b:00007efd7b605038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 133.735929][ T7061] RAX: ffffffffffffffda RBX: 00007efd7d206160 RCX: 00007efd7cfde169 [ 133.735943][ T7061] RDX: 000000000000002a RSI: 0000000000000000 RDI: 0000000000000007 [ 133.735983][ T7061] RBP: 00007efd7b605090 R08: 0000000000000088 R09: 0000000000000000 [ 133.735997][ T7061] R10: 0000200000000180 R11: 0000000000000246 R12: 0000000000000001 [ 133.736010][ T7061] R13: 0000000000000000 R14: 00007efd7d206160 R15: 00007ffe61a546d8 [ 133.736035][ T7061] [ 133.978560][ T7054] loop3: detected capacity change from 0 to 512 [ 134.069758][ T7051] lo speed is unknown, defaulting to 1000 [ 134.076169][ T7051] vcan0 speed is unknown, defaulting to 1000 [ 134.087050][ T7054] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 134.095418][ T7054] EXT4-fs (loop3): orphan cleanup on readonly fs [ 134.108346][ T7054] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.1118: invalid indirect mapped block 256 (level 2) [ 134.122474][ T7054] EXT4-fs (loop3): 2 truncates cleaned up [ 134.371356][ T7054] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 134.440774][ T7080] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 134.444537][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.451232][ T7054] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.496880][ T7083] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1125'. [ 134.604977][ T7089] loop2: detected capacity change from 0 to 1024 [ 134.614354][ T7089] EXT4-fs: Ignoring removed nobh option [ 134.620006][ T7089] EXT4-fs: Ignoring removed nobh option [ 134.625639][ T7089] ext3: Unknown parameter 'dont_hash' [ 134.683910][ T7089] tipc: Bearer : already 2 bearers with priority 10 [ 134.694412][ T7089] tipc: Bearer : trying with adjusted priority [ 134.704551][ T7089] tipc: Enabling of bearer rejected, failed to enable media [ 134.731421][ T7095] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1126'. [ 134.771683][ T7096] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0) [ 134.793903][ T7096] SELinux: failed to load policy [ 134.818719][ T7090] loop4: detected capacity change from 0 to 512 [ 134.866218][ T7090] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 134.886052][ T7090] EXT4-fs (loop4): orphan cleanup on readonly fs [ 134.922435][ T7090] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.1126: invalid indirect mapped block 256 (level 2) [ 134.942217][ T7090] EXT4-fs (loop4): 2 truncates cleaned up [ 134.995066][ T7090] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 135.085983][ T7085] lo speed is unknown, defaulting to 1000 [ 135.102745][ T7085] vcan0 speed is unknown, defaulting to 1000 [ 135.118290][ T7090] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.404821][ T7115] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1130'. [ 135.595544][ T7120] loop2: detected capacity change from 0 to 512 [ 135.705436][ T7114] xt_CT: No such helper "syz0" [ 135.821652][ T7120] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 135.845753][ T7120] EXT4-fs (loop2): orphan cleanup on readonly fs [ 135.954721][ T7120] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.1130: invalid indirect mapped block 256 (level 2) [ 136.081976][ T7118] lo speed is unknown, defaulting to 1000 [ 136.120982][ T7118] vcan0 speed is unknown, defaulting to 1000 [ 136.188492][ T7120] EXT4-fs (loop2): 2 truncates cleaned up [ 136.268818][ T7120] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 136.315968][ T7120] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.366051][ T7137] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 137.410409][ T7143] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 137.455641][ T7136] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 137.462258][ T7136] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 137.470629][ T7136] vhci_hcd vhci_hcd.0: Device attached [ 137.540824][ T7146] loop4: detected capacity change from 0 to 1024 [ 137.564056][ T7140] vhci_hcd: connection closed [ 137.564455][ T1810] vhci_hcd: stop threads [ 137.573944][ T1810] vhci_hcd: release socket [ 137.578419][ T1810] vhci_hcd: disconnect device [ 137.586394][ T7146] EXT4-fs: Ignoring removed nobh option [ 137.591991][ T7146] EXT4-fs: Ignoring removed nobh option [ 137.597635][ T7146] ext3: Unknown parameter 'dont_hash' [ 137.646609][ T7146] tipc: Enabling of bearer rejected, failed to enable media [ 137.681682][ T7146] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0) [ 137.691266][ T7146] SELinux: failed to load policy [ 138.175139][ T7159] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1141'. [ 138.184171][ T7159] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1141'. [ 138.263243][ T7159] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1141'. [ 138.349192][ T7159] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1141'. [ 138.358977][ T7159] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1141'. [ 138.400682][ T7159] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1141'. [ 138.463024][ T7174] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1143'. [ 138.580237][ T7167] loop2: detected capacity change from 0 to 512 [ 138.632082][ T7178] loop3: detected capacity change from 0 to 512 [ 138.693785][ T7178] EXT4-fs: Ignoring removed i_version option [ 138.714877][ T7162] lo speed is unknown, defaulting to 1000 [ 138.726027][ T7178] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 138.750761][ T7162] vcan0 speed is unknown, defaulting to 1000 [ 138.956447][ T7178] EXT4-fs (loop3): 1 truncate cleaned up [ 138.963619][ T7167] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 138.990296][ T7178] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 139.015368][ T7167] EXT4-fs (loop2): orphan cleanup on readonly fs [ 139.023089][ T7167] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.1143: invalid indirect mapped block 256 (level 2) [ 139.040091][ T7178] netlink: 'syz.3.1145': attribute type 29 has an invalid length. [ 139.048053][ T7178] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1145'. [ 139.059338][ T7167] EXT4-fs (loop2): 2 truncates cleaned up [ 139.135795][ T7167] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 139.166653][ T7167] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.298768][ T7188] FAULT_INJECTION: forcing a failure. [ 139.298768][ T7188] name failslab, interval 1, probability 0, space 0, times 0 [ 139.311649][ T7188] CPU: 0 UID: 0 PID: 7188 Comm: syz.4.1147 Not tainted 6.15.0-rc2-syzkaller-00048-gc62f4b82d571 #0 PREEMPT(voluntary) [ 139.311741][ T7188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 139.311756][ T7188] Call Trace: [ 139.311764][ T7188] [ 139.311774][ T7188] dump_stack_lvl+0xf6/0x150 [ 139.311801][ T7188] dump_stack+0x15/0x1a [ 139.311817][ T7188] should_fail_ex+0x261/0x270 [ 139.311849][ T7188] should_failslab+0x8f/0xb0 [ 139.311903][ T7188] __kmalloc_cache_noprof+0x55/0x320 [ 139.311926][ T7188] ? __tcf_chain_get+0x93/0x290 [ 139.311953][ T7188] __tcf_chain_get+0x93/0x290 [ 139.311973][ T7188] ? __tcf_block_find+0x11c/0x1a0 [ 139.312075][ T7188] tc_new_tfilter+0x5e8/0x1110 [ 139.312107][ T7188] ? __rcu_read_unlock+0x4e/0x70 [ 139.312158][ T7188] ? __pfx_tc_new_tfilter+0x10/0x10 [ 139.312190][ T7188] rtnetlink_rcv_msg+0x65a/0x740 [ 139.312234][ T7188] ? should_fail_ex+0xd7/0x270 [ 139.312263][ T7188] ? ref_tracker_free+0x3b8/0x420 [ 139.312303][ T7188] netlink_rcv_skb+0x12f/0x230 [ 139.312332][ T7188] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 139.312439][ T7188] rtnetlink_rcv+0x1c/0x30 [ 139.312535][ T7188] netlink_unicast+0x605/0x6c0 [ 139.312562][ T7188] netlink_sendmsg+0x609/0x720 [ 139.312598][ T7188] ? __pfx_netlink_sendmsg+0x10/0x10 [ 139.312629][ T7188] __sock_sendmsg+0x140/0x180 [ 139.312652][ T7188] ____sys_sendmsg+0x350/0x4e0 [ 139.312879][ T7188] __sys_sendmsg+0x1a0/0x240 [ 139.312935][ T7188] __x64_sys_sendmsg+0x46/0x50 [ 139.312968][ T7188] x64_sys_call+0x26f3/0x2e10 [ 139.312995][ T7188] do_syscall_64+0xc9/0x1c0 [ 139.313032][ T7188] ? clear_bhb_loop+0x25/0x80 [ 139.313231][ T7188] ? clear_bhb_loop+0x25/0x80 [ 139.313258][ T7188] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.313281][ T7188] RIP: 0033:0x7efd7cfde169 [ 139.313297][ T7188] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 139.313315][ T7188] RSP: 002b:00007efd7b647038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 139.313335][ T7188] RAX: ffffffffffffffda RBX: 00007efd7d205fa0 RCX: 00007efd7cfde169 [ 139.313349][ T7188] RDX: 0000000020000000 RSI: 0000200000006040 RDI: 0000000000000004 [ 139.313413][ T7188] RBP: 00007efd7b647090 R08: 0000000000000000 R09: 0000000000000000 [ 139.313427][ T7188] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 139.313441][ T7188] R13: 0000000000000000 R14: 00007efd7d205fa0 R15: 00007ffe61a546d8 [ 139.313466][ T7188] [ 139.379332][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.737747][ T7194] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1148'. [ 139.746848][ T7194] netlink: 'syz.3.1148': attribute type 7 has an invalid length. [ 139.754626][ T7194] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1148'. [ 139.938478][ T7203] loop3: detected capacity change from 0 to 164 [ 139.969272][ T7207] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1151'. [ 139.991903][ T7203] Unable to read rock-ridge attributes [ 140.034075][ T7207] loop2: detected capacity change from 0 to 512 [ 140.042176][ T29] kauditd_printk_skb: 36 callbacks suppressed [ 140.042230][ T29] audit: type=1326 audit(1744854413.707:2714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7201 comm="syz.3.1154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12e51de169 code=0x7ffc0000 [ 140.076375][ T29] audit: type=1326 audit(1744854413.707:2715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7201 comm="syz.3.1154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12e51de169 code=0x7ffc0000 [ 140.085323][ T7207] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 140.139556][ T29] audit: type=1326 audit(1744854413.727:2716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7201 comm="syz.3.1154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f12e51de169 code=0x7ffc0000 [ 140.156985][ T7207] EXT4-fs (loop2): orphan cleanup on readonly fs [ 140.163615][ T29] audit: type=1326 audit(1744854413.727:2717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7201 comm="syz.3.1154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12e51de169 code=0x7ffc0000 [ 140.193795][ T29] audit: type=1326 audit(1744854413.727:2718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7201 comm="syz.3.1154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f12e51de169 code=0x7ffc0000 [ 140.217386][ T29] audit: type=1326 audit(1744854413.727:2719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7201 comm="syz.3.1154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12e51de169 code=0x7ffc0000 [ 140.240940][ T29] audit: type=1326 audit(1744854413.727:2720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7201 comm="syz.3.1154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=285 compat=0 ip=0x7f12e51de169 code=0x7ffc0000 [ 140.264778][ T29] audit: type=1326 audit(1744854413.727:2721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7201 comm="syz.3.1154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=96 compat=0 ip=0xffffffffff600000 code=0x7ffc0000 [ 140.289033][ T29] audit: type=1326 audit(1744854413.727:2722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7201 comm="syz.3.1154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12e51de169 code=0x7ffc0000 [ 140.312537][ T29] audit: type=1326 audit(1744854413.727:2723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7201 comm="syz.3.1154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f12e51de169 code=0x7ffc0000 [ 140.433474][ T7207] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.1151: invalid indirect mapped block 256 (level 2) [ 140.482989][ T7207] EXT4-fs (loop2): 2 truncates cleaned up [ 140.531443][ T7196] lo speed is unknown, defaulting to 1000 [ 140.539272][ T7196] vcan0 speed is unknown, defaulting to 1000 [ 140.601756][ T7220] netlink: 277 bytes leftover after parsing attributes in process `syz.4.1158'. [ 140.605722][ T7203] Unable to read rock-ridge attributes [ 140.649817][ T7207] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 140.663837][ T7222] loop1: detected capacity change from 0 to 1024 [ 140.684924][ T7203] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 140.692688][ T7222] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 140.703634][ T7222] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 140.749283][ T7222] JBD2: no valid journal superblock found [ 140.755043][ T7222] EXT4-fs (loop1): Could not load journal inode [ 140.762638][ T7207] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.068842][ T7230] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.090141][ T7228] SELinux: syz.0.1159 (7228) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 141.179195][ T7236] loop1: detected capacity change from 0 to 256 [ 141.285029][ T7242] loop2: detected capacity change from 0 to 1024 [ 141.292730][ T7242] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 141.302932][ T7242] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 141.319983][ T7242] jbd2_journal_init_inode: Cannot locate journal superblock [ 141.327452][ T7242] EXT4-fs (loop2): Could not load journal inode [ 141.344758][ T7230] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.644250][ T7230] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.819623][ T7260] xt_CT: No such helper "syz0" [ 142.075960][ T7230] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.181016][ T7230] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.204943][ T7230] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.264299][ T7230] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.318465][ T7230] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.405463][ T7284] netlink: 'syz.1.1175': attribute type 21 has an invalid length. [ 142.775831][ T7292] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 142.805469][ T7288] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 142.812182][ T7288] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 142.820006][ T7288] vhci_hcd vhci_hcd.0: Device attached [ 142.874232][ T7293] vhci_hcd: connection closed [ 142.874771][ T296] vhci_hcd: stop threads [ 142.883782][ T296] vhci_hcd: release socket [ 142.888268][ T296] vhci_hcd: disconnect device [ 142.891742][ T7295] SELinux: syz.1.1176 (7295) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 142.927592][ T7307] loop2: detected capacity change from 0 to 164 [ 142.932166][ T7298] lo speed is unknown, defaulting to 1000 [ 142.940797][ T7307] Unable to read rock-ridge attributes [ 142.944330][ T7298] vcan0 speed is unknown, defaulting to 1000 [ 143.303784][ T7330] loop1: detected capacity change from 0 to 128 [ 143.318351][ T7330] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 143.634887][ T7334] loop2: detected capacity change from 0 to 1024 [ 143.780220][ T7336] netlink: 'syz.0.1190': attribute type 3 has an invalid length. [ 143.884188][ T7338] __nla_validate_parse: 13 callbacks suppressed [ 143.884205][ T7338] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 144.124418][ T7340] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1191'. [ 144.208210][ T7341] loop4: detected capacity change from 0 to 164 [ 144.230795][ T7341] Unable to read rock-ridge attributes [ 144.348511][ T7351] loop4: detected capacity change from 0 to 1024 [ 144.355773][ T7351] EXT4-fs: Ignoring removed oldalloc option [ 144.361801][ T7351] EXT4-fs: Ignoring removed orlov option [ 144.369487][ T7351] EXT4-fs (loop4): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 144.380042][ T12] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 144.435133][ T7334] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 144.592577][ T7356] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1196'. [ 144.805627][ T7348] lo speed is unknown, defaulting to 1000 [ 144.846553][ T7348] vcan0 speed is unknown, defaulting to 1000 [ 146.548305][ T7351] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 146.774497][ T7381] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4113: comm syz.4.1195: Allocating blocks 449-513 which overlap fs metadata [ 146.813929][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.851566][ T7381] EXT4-fs (loop4): pa ffff888106493070: logic 48, phys. 177, len 21 [ 146.860417][ T7381] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 4 [ 147.165189][ T7392] loop3: detected capacity change from 0 to 164 [ 147.178969][ T7392] Unable to read rock-ridge attributes [ 147.208245][ T29] kauditd_printk_skb: 152 callbacks suppressed [ 147.208265][ T29] audit: type=1326 audit(1744854420.857:2876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7391 comm="syz.3.1205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12e51de169 code=0x7ffc0000 [ 147.238001][ T29] audit: type=1326 audit(1744854420.857:2877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7391 comm="syz.3.1205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f12e51de169 code=0x7ffc0000 [ 147.261376][ T29] audit: type=1326 audit(1744854420.857:2878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7391 comm="syz.3.1205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12e51de169 code=0x7ffc0000 [ 147.285001][ T29] audit: type=1326 audit(1744854420.857:2879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7391 comm="syz.3.1205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f12e51de169 code=0x7ffc0000 [ 147.308953][ T29] audit: type=1326 audit(1744854420.857:2880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7391 comm="syz.3.1205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12e51de169 code=0x7ffc0000 [ 147.316301][ T7375] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 147.332629][ T29] audit: type=1326 audit(1744854420.857:2881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7391 comm="syz.3.1205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=285 compat=0 ip=0x7f12e51de169 code=0x7ffc0000 [ 147.338869][ T7375] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 147.339042][ T7375] vhci_hcd vhci_hcd.0: Device attached [ 147.362405][ T29] audit: type=1326 audit(1744854420.857:2882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7391 comm="syz.3.1205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=96 compat=0 ip=0xffffffffff600000 code=0x7ffc0000 [ 147.399304][ T29] audit: type=1326 audit(1744854420.857:2883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7391 comm="syz.3.1205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12e51de169 code=0x7ffc0000 [ 147.422835][ T29] audit: type=1326 audit(1744854420.857:2884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7391 comm="syz.3.1205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f12e51de169 code=0x7ffc0000 [ 147.446350][ T29] audit: type=1326 audit(1744854420.857:2885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7391 comm="syz.3.1205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12e51de169 code=0x7ffc0000 [ 147.539867][ T7376] vhci_hcd: connection closed [ 147.540394][ T7364] vhci_hcd: stop threads [ 147.549882][ T7364] vhci_hcd: release socket [ 147.554304][ T7364] vhci_hcd: disconnect device [ 147.592724][ T7401] loop3: detected capacity change from 0 to 512 [ 147.600069][ T7401] EXT4-fs: Ignoring removed i_version option [ 147.623028][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.641867][ T7401] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 147.715309][ T7401] EXT4-fs (loop3): 1 truncate cleaned up [ 147.756933][ T7401] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 147.827017][ T7401] netlink: 'syz.3.1207': attribute type 29 has an invalid length. [ 147.834889][ T7401] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1207'. [ 147.876249][ T7409] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 147.915600][ T7409] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 147.926084][ T7412] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1211'. [ 148.055105][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.122106][ T7417] syzkaller0: entered promiscuous mode [ 148.127703][ T7417] syzkaller0: entered allmulticast mode [ 148.171788][ T7417] loop3: detected capacity change from 0 to 764 [ 148.182212][ T7417] Symlink component flag not implemented [ 148.189621][ T7417] Symlink component flag not implemented (116) [ 148.193488][ T7414] pimreg: left allmulticast mode [ 148.291730][ T7412] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1211'. [ 148.300803][ T7412] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1211'. [ 148.498081][ T7425] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1213'. [ 148.525315][ T7436] loop2: detected capacity change from 0 to 1024 [ 148.534443][ T7436] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 148.544850][ T7436] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 148.567777][ T7436] jbd2_journal_init_inode: Cannot locate journal superblock [ 148.575129][ T7436] EXT4-fs (loop2): Could not load journal inode [ 148.637528][ T7437] lo speed is unknown, defaulting to 1000 [ 148.685716][ T7440] loop1: detected capacity change from 0 to 164 [ 148.701283][ T7440] Unable to read rock-ridge attributes [ 148.721892][ T7437] vcan0 speed is unknown, defaulting to 1000 [ 148.761131][ T7444] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1219'. [ 148.770223][ T7444] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1219'. [ 148.870007][ T7419] loop3: detected capacity change from 0 to 512 [ 148.919819][ T7419] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 148.968371][ T7419] EXT4-fs (loop3): orphan cleanup on readonly fs [ 148.975150][ T7419] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.1213: invalid indirect mapped block 256 (level 2) [ 149.013868][ T7419] EXT4-fs (loop3): 2 truncates cleaned up [ 149.028614][ T7419] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 149.060280][ T7419] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.081056][ T7456] loop2: detected capacity change from 0 to 512 [ 149.088601][ T7456] EXT4-fs: Ignoring removed i_version option [ 149.097014][ T7456] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 149.204376][ T7456] EXT4-fs (loop2): 1 truncate cleaned up [ 149.211273][ T7456] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 149.223757][ T7460] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 149.230428][ T7460] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 149.238283][ T7460] vhci_hcd vhci_hcd.0: Device attached [ 149.258347][ T7456] netlink: 'syz.2.1222': attribute type 29 has an invalid length. [ 149.266775][ T7456] __nla_validate_parse: 1 callbacks suppressed [ 149.266790][ T7456] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1222'. [ 149.282118][ T7462] vhci_hcd: connection closed [ 149.286549][ T85] vhci_hcd: stop threads [ 149.295704][ T85] vhci_hcd: release socket [ 149.300227][ T85] vhci_hcd: disconnect device [ 149.307723][ T7458] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1224'. [ 149.329659][ T7458] SELinux: syz.1.1224 (7458) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 149.500914][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.548392][ T7477] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.647160][ T7484] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 149.675080][ T7484] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 150.118257][ T7490] loop3: detected capacity change from 0 to 1024 [ 150.129498][ T7477] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.388472][ T7490] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 150.405592][ T7490] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 150.436296][ T7490] jbd2_journal_init_inode: Cannot locate journal superblock [ 150.443687][ T7490] EXT4-fs (loop3): Could not load journal inode [ 150.466751][ T7477] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.480246][ T7494] SELinux: syz.2.1234 (7494) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 150.584526][ T7497] loop3: detected capacity change from 0 to 256 [ 150.594002][ T7477] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.617991][ T7500] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1234'. [ 150.627142][ T7500] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1234'. [ 150.636261][ T7500] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1234'. [ 150.647338][ T7500] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1234'. [ 150.757114][ T7477] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.771616][ T7477] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.791153][ T7477] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.813392][ T7477] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.886446][ T7506] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1238'. [ 150.926277][ T7505] SELinux: syz.3.1238 (7505) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 151.062803][ T7515] loop3: detected capacity change from 0 to 1024 [ 151.073400][ T7515] EXT4-fs: Ignoring removed nobh option [ 151.079046][ T7515] EXT4-fs: Ignoring removed nobh option [ 151.084756][ T7515] ext3: Unknown parameter 'dont_hash' [ 151.111624][ T7515] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0) [ 151.120336][ T7515] SELinux: failed to load policy [ 151.157502][ T7517] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1240'. [ 151.224845][ T7521] loop4: detected capacity change from 0 to 1024 [ 151.236296][ T7521] EXT4-fs: Ignoring removed nobh option [ 151.242068][ T7521] EXT4-fs: Ignoring removed bh option [ 151.334431][ T7521] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 151.374300][ T7521] IPv6: NLM_F_CREATE should be specified when creating new route [ 151.394139][ T7521] FAULT_INJECTION: forcing a failure. [ 151.394139][ T7521] name failslab, interval 1, probability 0, space 0, times 0 [ 151.407020][ T7521] CPU: 0 UID: 0 PID: 7521 Comm: syz.4.1245 Not tainted 6.15.0-rc2-syzkaller-00048-gc62f4b82d571 #0 PREEMPT(voluntary) [ 151.407049][ T7521] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 151.407061][ T7521] Call Trace: [ 151.407068][ T7521] [ 151.407118][ T7521] dump_stack_lvl+0xf6/0x150 [ 151.407142][ T7521] dump_stack+0x15/0x1a [ 151.407159][ T7521] should_fail_ex+0x261/0x270 [ 151.407187][ T7521] should_failslab+0x8f/0xb0 [ 151.407217][ T7521] __kmalloc_node_track_caller_noprof+0xaa/0x410 [ 151.407315][ T7521] ? security_context_to_sid_core+0xc7/0x3b0 [ 151.407340][ T7521] kstrdup+0x3d/0xd0 [ 151.407416][ T7521] security_context_to_sid_core+0xc7/0x3b0 [ 151.407446][ T7521] security_context_to_sid_force+0x30/0x40 [ 151.407537][ T7521] selinux_inode_setxattr+0x503/0x720 [ 151.407589][ T7521] security_inode_setxattr+0x169/0x1f0 [ 151.407631][ T7521] __vfs_setxattr_locked+0x88/0x1d0 [ 151.407766][ T7521] vfs_setxattr+0x142/0x290 [ 151.407801][ T7521] filename_setxattr+0x1ae/0x2b0 [ 151.407840][ T7521] path_setxattrat+0x28a/0x320 [ 151.407961][ T7521] __x64_sys_setxattr+0x6e/0x90 [ 151.407980][ T7521] x64_sys_call+0x28e7/0x2e10 [ 151.408002][ T7521] do_syscall_64+0xc9/0x1c0 [ 151.408032][ T7521] ? clear_bhb_loop+0x25/0x80 [ 151.408053][ T7521] ? clear_bhb_loop+0x25/0x80 [ 151.408134][ T7521] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 151.408154][ T7521] RIP: 0033:0x7efd7cfde169 [ 151.408169][ T7521] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 151.408187][ T7521] RSP: 002b:00007efd7b647038 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc [ 151.408205][ T7521] RAX: ffffffffffffffda RBX: 00007efd7d205fa0 RCX: 00007efd7cfde169 [ 151.408291][ T7521] RDX: 0000200000000180 RSI: 0000200000000140 RDI: 0000200000000100 [ 151.408327][ T7521] RBP: 00007efd7b647090 R08: 0000000000000002 R09: 0000000000000000 [ 151.408338][ T7521] R10: 000000000000001b R11: 0000000000000246 R12: 0000000000000001 [ 151.408350][ T7521] R13: 0000000000000000 R14: 00007efd7d205fa0 R15: 00007ffe61a546d8 [ 151.408371][ T7521] [ 151.634176][ T7523] tun0: tun_chr_ioctl cmd 1074025677 [ 151.650246][ T7523] tun0: linktype set to 824 [ 151.665511][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.710737][ T7534] netlink: 'syz.0.1249': attribute type 2 has an invalid length. [ 151.718559][ T7534] netlink: 'syz.0.1249': attribute type 1 has an invalid length. [ 151.794171][ T7543] SELinux: syz.2.1252 (7543) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 151.802772][ T7529] lo speed is unknown, defaulting to 1000 [ 151.845190][ T7529] vcan0 speed is unknown, defaulting to 1000 [ 151.918733][ T7552] loop2: detected capacity change from 0 to 164 [ 152.022720][ T7552] Unable to read rock-ridge attributes [ 152.575357][ T7566] loop2: detected capacity change from 0 to 1024 [ 152.583114][ T7566] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 152.594047][ T7566] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 152.606367][ T7566] jbd2_journal_init_inode: Cannot locate journal superblock [ 152.613683][ T7566] EXT4-fs (loop2): Could not load journal inode [ 152.981652][ T29] kauditd_printk_skb: 138 callbacks suppressed [ 152.981669][ T29] audit: type=1326 audit(1744854426.647:3024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7577 comm="syz.2.1263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2212de169 code=0x7ffc0000 [ 153.018715][ T7578] netlink: 'syz.2.1263': attribute type 6 has an invalid length. [ 153.027300][ T7578] netlink: 'syz.2.1263': attribute type 5 has an invalid length. [ 153.065357][ T29] audit: type=1326 audit(1744854426.647:3025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7577 comm="syz.2.1263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2212de169 code=0x7ffc0000 [ 153.090870][ T29] audit: type=1326 audit(1744854426.647:3026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7577 comm="syz.2.1263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc2212de169 code=0x7ffc0000 [ 153.115332][ T29] audit: type=1326 audit(1744854426.647:3027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7577 comm="syz.2.1263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2212de169 code=0x7ffc0000 [ 153.140122][ T29] audit: type=1326 audit(1744854426.647:3028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7577 comm="syz.2.1263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2212de169 code=0x7ffc0000 [ 153.163662][ T29] audit: type=1326 audit(1744854426.667:3029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7577 comm="syz.2.1263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7fc2212de169 code=0x7ffc0000 [ 153.187095][ T29] audit: type=1326 audit(1744854426.667:3030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7577 comm="syz.2.1263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2212de169 code=0x7ffc0000 [ 153.210887][ T29] audit: type=1326 audit(1744854426.667:3031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7577 comm="syz.2.1263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fc2212de169 code=0x7ffc0000 [ 153.234295][ T29] audit: type=1326 audit(1744854426.667:3032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7577 comm="syz.2.1263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2212de169 code=0x7ffc0000 [ 153.257867][ T29] audit: type=1326 audit(1744854426.667:3033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7577 comm="syz.2.1263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc2212de169 code=0x7ffc0000 [ 153.597986][ T7601] loop2: detected capacity change from 0 to 1024 [ 153.628478][ T7601] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 153.649767][ T7601] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 153.680053][ T7601] jbd2_journal_init_inode: Cannot locate journal superblock [ 153.687454][ T7601] EXT4-fs (loop2): Could not load journal inode [ 153.870434][ T7615] loop2: detected capacity change from 0 to 512 [ 153.951510][ T7618] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 154.023554][ T7615] EXT4-fs: Ignoring removed i_version option [ 154.031288][ T7615] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 154.390077][ T7622] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 154.401380][ T7622] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.453548][ T7615] EXT4-fs (loop2): 1 truncate cleaned up [ 154.464798][ T7615] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 154.509758][ T7622] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 154.520172][ T7622] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.594044][ T7615] netlink: 'syz.2.1277': attribute type 29 has an invalid length. [ 154.595985][ T7633] xt_CT: No such helper "syz0" [ 154.602047][ T7615] __nla_validate_parse: 13 callbacks suppressed [ 154.602063][ T7615] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1277'. [ 154.697155][ T7642] usb usb1: usbfs: process 7642 (syz.1.1284) did not claim interface 0 before use [ 154.772407][ T7622] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 154.782809][ T7622] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.996068][ T7643] lo speed is unknown, defaulting to 1000 [ 155.002585][ T7643] vcan0 speed is unknown, defaulting to 1000 [ 155.418693][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.428431][ T7654] xt_CT: No such helper "syz0" [ 155.482662][ T7660] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 155.788755][ T7622] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 155.799392][ T7622] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.381371][ T7674] loop4: detected capacity change from 0 to 512 [ 156.412543][ T7683] loop2: detected capacity change from 0 to 512 [ 156.421481][ T7683] EXT4-fs: Ignoring removed i_version option [ 156.421644][ T7674] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 156.484487][ T7683] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 156.492978][ T7674] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e12c, mo2=0002] [ 156.514115][ T7683] EXT4-fs (loop2): 1 truncate cleaned up [ 156.520841][ T7683] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 156.530554][ T7622] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 156.541172][ T7622] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.545035][ T7674] System zones: 1-12 [ 156.556156][ T7622] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 156.564426][ T7622] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.572892][ T7683] netlink: 'syz.2.1296': attribute type 29 has an invalid length. [ 156.580766][ T7683] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1296'. [ 156.610256][ T7622] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 156.610688][ T7674] EXT4-fs (loop4): orphan cleanup on readonly fs [ 156.618699][ T7622] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.635039][ T7622] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 156.635088][ T7622] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.744756][ T7690] xt_CT: No such helper "syz0" [ 157.193191][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.303080][ T7674] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.1293: bg 0: block 361: padding at end of block bitmap is not set [ 157.319940][ T7674] EXT4-fs (loop4): Remounting filesystem read-only [ 157.330611][ T7674] EXT4-fs (loop4): 1 truncate cleaned up [ 157.351024][ T7674] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 157.377630][ T7674] EXT4-fs warning (device loop4): dx_probe:793: inode #2: lblock 0: comm syz.4.1293: error -117 reading directory block [ 157.655507][ T7699] tipc: MTU too low for tipc bearer [ 157.707133][ T7705] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 157.743905][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 157.802545][ T7707] loop1: detected capacity change from 0 to 8192 [ 157.868102][ T7713] loop3: detected capacity change from 0 to 1024 [ 157.885287][ T7713] EXT4-fs: Ignoring removed nobh option [ 157.891521][ T7713] EXT4-fs: Ignoring removed nobh option [ 157.897164][ T7713] ext3: Unknown parameter 'dont_hash' [ 157.903869][ T7716] loop4: detected capacity change from 0 to 164 [ 157.919419][ T7707] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 157.928860][ T7707] FAT-fs (loop1): Filesystem has been set read-only [ 157.929184][ T7716] Unable to read rock-ridge attributes [ 157.993709][ T7713] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0) [ 158.003308][ T7719] xt_CT: No such helper "syz0" [ 158.013346][ T7713] SELinux: failed to load policy [ 158.108839][ T29] kauditd_printk_skb: 98 callbacks suppressed [ 158.108856][ T29] audit: type=1326 audit(1744854431.777:3132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7723 comm="syz.0.1311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a05a3e169 code=0x7ffc0000 [ 158.138526][ T29] audit: type=1326 audit(1744854431.777:3133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7723 comm="syz.0.1311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f1a05a3e169 code=0x7ffc0000 [ 158.163169][ T29] audit: type=1326 audit(1744854431.777:3134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7723 comm="syz.0.1311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a05a3e169 code=0x7ffc0000 [ 158.187671][ T29] audit: type=1326 audit(1744854431.777:3135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7723 comm="syz.0.1311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=218 compat=0 ip=0x7f1a05a3e169 code=0x7ffc0000 [ 158.211417][ T29] audit: type=1326 audit(1744854431.777:3136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7723 comm="syz.0.1311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a05a3e169 code=0x7ffc0000 [ 158.280974][ T7730] loop3: detected capacity change from 0 to 512 [ 158.309977][ T7734] hub 9-0:1.0: USB hub found [ 158.314768][ T7734] hub 9-0:1.0: 8 ports detected [ 158.323241][ T29] audit: type=1326 audit(1744854431.897:3137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7723 comm="syz.0.1311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1a05a3e169 code=0x7ffc0000 [ 158.346872][ T29] audit: type=1326 audit(1744854431.907:3138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7723 comm="syz.0.1311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a05a3e169 code=0x7ffc0000 [ 158.370558][ T29] audit: type=1326 audit(1744854431.907:3139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7723 comm="syz.0.1311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1a05a3e169 code=0x7ffc0000 [ 158.394097][ T29] audit: type=1326 audit(1744854431.907:3140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7723 comm="syz.0.1311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a05a3e169 code=0x7ffc0000 [ 158.417700][ T29] audit: type=1326 audit(1744854431.907:3141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7723 comm="syz.0.1311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f1a05a3e169 code=0x7ffc0000 [ 158.447457][ T7730] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 158.462163][ T7726] loop4: detected capacity change from 0 to 1024 [ 158.473393][ T7726] EXT4-fs: Ignoring removed nobh option [ 158.479014][ T7726] EXT4-fs: Ignoring removed nobh option [ 158.484609][ T7726] ext3: Unknown parameter 'dont_hash' [ 158.503795][ T7726] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0) [ 158.513875][ T7726] SELinux: failed to load policy [ 158.519239][ T7730] EXT4-fs (loop3): 1 truncate cleaned up [ 158.525433][ T7730] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 158.618274][ T7741] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1318'. [ 158.627264][ T7741] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1318'. [ 158.639705][ T7732] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.651599][ T7741] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1318'. [ 158.668486][ T7742] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7742 comm=syz.3.1315 [ 158.714787][ T7732] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.729460][ T7744] loop4: detected capacity change from 0 to 1024 [ 158.737256][ T7744] EXT4-fs: Ignoring removed oldalloc option [ 158.743266][ T7744] EXT4-fs: Ignoring removed orlov option [ 158.767714][ T7744] EXT4-fs (loop4): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 158.786313][ T7732] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.810296][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.825559][ T7732] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.847828][ T7744] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 158.916598][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.951222][ T7752] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1320'. [ 158.958094][ T7732] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.964116][ T7752] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1320'. [ 158.979384][ T7754] loop4: detected capacity change from 0 to 164 [ 158.980836][ T7732] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.989791][ T7754] Unable to read rock-ridge attributes [ 159.001426][ T7732] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.031758][ T7732] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.059296][ T7752] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1320'. [ 159.215718][ T7764] xt_CT: No such helper "syz0" [ 159.261170][ T7770] loop4: detected capacity change from 0 to 2048 [ 159.289802][ T7770] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 159.323419][ T7777] loop3: detected capacity change from 0 to 512 [ 159.340324][ T7777] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 159.349512][ T7777] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 159.383013][ T7777] EXT4-fs (loop3): warning: checktime reached, running e2fsck is recommended [ 159.396438][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.427094][ T7777] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 159.435631][ T7777] System zones: 0-2, 18-18, 34-34 [ 159.446795][ T7777] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:1132: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 159.502759][ T7777] EXT4-fs (loop3): 1 truncate cleaned up [ 159.525906][ T7777] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 159.547124][ T7787] loop1: detected capacity change from 0 to 1024 [ 159.560978][ T7787] EXT4-fs: Ignoring removed oldalloc option [ 159.579681][ T7787] EXT4-fs: Ignoring removed orlov option [ 159.602717][ T7787] EXT4-fs (loop1): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 159.618791][ T7789] veth0: entered promiscuous mode [ 159.631080][ T7789] __nla_validate_parse: 6 callbacks suppressed [ 159.631095][ T7789] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1334'. [ 159.663109][ T7787] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 159.728617][ T7789] veth0 (unregistering): left promiscuous mode [ 159.737029][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.754411][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.802733][ T7794] loop3: detected capacity change from 0 to 164 [ 159.814777][ T7794] Unable to read rock-ridge attributes [ 159.954741][ T7802] loop2: detected capacity change from 0 to 1024 [ 159.976351][ T7802] EXT4-fs: Ignoring removed nobh option [ 159.981957][ T7802] EXT4-fs: Ignoring removed nobh option [ 159.988031][ T7802] ext3: Unknown parameter 'dont_hash' [ 160.017593][ T7802] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0) [ 160.037774][ T7802] SELinux: failed to load policy [ 160.039655][ T7808] loop3: detected capacity change from 0 to 1024 [ 160.070122][ T7808] EXT4-fs: Ignoring removed nobh option [ 160.075823][ T7808] EXT4-fs: Ignoring removed nobh option [ 160.081494][ T7808] ext3: Unknown parameter 'dont_hash' [ 160.145724][ T7809] xt_CT: No such helper "syz0" [ 160.152578][ T7808] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0) [ 160.170854][ T7816] loop1: detected capacity change from 0 to 2048 [ 160.177012][ T7808] SELinux: failed to load policy [ 160.324753][ T7825] loop3: detected capacity change from 0 to 164 [ 160.371796][ T7825] Unable to read rock-ridge attributes [ 160.399430][ T7816] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 160.650590][ T7834] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1351'. [ 160.836668][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.897060][ T7843] veth0: entered promiscuous mode [ 160.903036][ T7843] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1352'. [ 161.162878][ T7845] 9p: Unknown access argument +: -22 [ 161.210764][ T7856] FAULT_INJECTION: forcing a failure. [ 161.210764][ T7856] name failslab, interval 1, probability 0, space 0, times 0 [ 161.223627][ T7856] CPU: 0 UID: 0 PID: 7856 Comm: syz.4.1358 Not tainted 6.15.0-rc2-syzkaller-00048-gc62f4b82d571 #0 PREEMPT(voluntary) [ 161.223660][ T7856] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 161.223674][ T7856] Call Trace: [ 161.223680][ T7856] [ 161.223688][ T7856] dump_stack_lvl+0xf6/0x150 [ 161.223712][ T7856] dump_stack+0x15/0x1a [ 161.223764][ T7856] should_fail_ex+0x261/0x270 [ 161.223797][ T7856] should_failslab+0x8f/0xb0 [ 161.223834][ T7856] kmem_cache_alloc_noprof+0x59/0x340 [ 161.223860][ T7856] ? audit_log_start+0x37f/0x6e0 [ 161.223952][ T7856] audit_log_start+0x37f/0x6e0 [ 161.224056][ T7856] ? kstrtouint+0x7b/0xc0 [ 161.224086][ T7856] audit_seccomp+0x4b/0x130 [ 161.224121][ T7856] __seccomp_filter+0x694/0x10e0 [ 161.224153][ T7856] ? vfs_write+0x669/0x950 [ 161.224194][ T7856] __secure_computing+0x7e/0x160 [ 161.224287][ T7856] syscall_trace_enter+0xcf/0x1f0 [ 161.224325][ T7856] do_syscall_64+0xaa/0x1c0 [ 161.224360][ T7856] ? clear_bhb_loop+0x25/0x80 [ 161.224383][ T7856] ? clear_bhb_loop+0x25/0x80 [ 161.224404][ T7856] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 161.224449][ T7856] RIP: 0033:0x7efd7cfde169 [ 161.224466][ T7856] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 161.224494][ T7856] RSP: 002b:00007efd7b647038 EFLAGS: 00000246 ORIG_RAX: 00000000000000fc [ 161.224515][ T7856] RAX: ffffffffffffffda RBX: 00007efd7d205fa0 RCX: 00007efd7cfde169 [ 161.224529][ T7856] RDX: 0000000000000000 RSI: 000000000000ee01 RDI: 0000000000000003 [ 161.224581][ T7856] RBP: 00007efd7b647090 R08: 0000000000000000 R09: 0000000000000000 [ 161.224595][ T7856] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 161.224609][ T7856] R13: 0000000000000000 R14: 00007efd7d205fa0 R15: 00007ffe61a546d8 [ 161.224629][ T7856] [ 161.478394][ T7859] loop3: detected capacity change from 0 to 164 [ 161.487334][ T7859] Unable to read rock-ridge attributes [ 161.583008][ T7862] xt_CT: No such helper "syz0" [ 161.668135][ T7866] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1362'. [ 161.677188][ T7866] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1362'. [ 161.690205][ T7866] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1362'. [ 161.788245][ T7878] FAULT_INJECTION: forcing a failure. [ 161.788245][ T7878] name failslab, interval 1, probability 0, space 0, times 0 [ 161.800992][ T7878] CPU: 0 UID: 0 PID: 7878 Comm: syz.3.1366 Not tainted 6.15.0-rc2-syzkaller-00048-gc62f4b82d571 #0 PREEMPT(voluntary) [ 161.801025][ T7878] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 161.801039][ T7878] Call Trace: [ 161.801048][ T7878] [ 161.801057][ T7878] dump_stack_lvl+0xf6/0x150 [ 161.801082][ T7878] dump_stack+0x15/0x1a [ 161.801098][ T7878] should_fail_ex+0x261/0x270 [ 161.801183][ T7878] should_failslab+0x8f/0xb0 [ 161.801220][ T7878] __kmalloc_node_track_caller_noprof+0xaa/0x410 [ 161.801250][ T7878] ? kasprintf+0x87/0xb0 [ 161.801278][ T7878] kvasprintf+0x8e/0x120 [ 161.801304][ T7878] kasprintf+0x87/0xb0 [ 161.801388][ T7878] ? should_failslab+0x8f/0xb0 [ 161.801502][ T7878] ? alloc_bprm+0xf3/0x680 [ 161.801537][ T7878] alloc_bprm+0x134/0x680 [ 161.801571][ T7878] do_execveat_common+0x12b/0x7e0 [ 161.801631][ T7878] ? getname_flags+0x15a/0x3b0 [ 161.801698][ T7878] __x64_sys_execveat+0x75/0x90 [ 161.801730][ T7878] x64_sys_call+0x2ac7/0x2e10 [ 161.801826][ T7878] do_syscall_64+0xc9/0x1c0 [ 161.801861][ T7878] ? clear_bhb_loop+0x25/0x80 [ 161.801886][ T7878] ? clear_bhb_loop+0x25/0x80 [ 161.801911][ T7878] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 161.801945][ T7878] RIP: 0033:0x7f12e51de169 [ 161.801960][ T7878] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 161.801978][ T7878] RSP: 002b:00007f12e3847038 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 161.801997][ T7878] RAX: ffffffffffffffda RBX: 00007f12e5405fa0 RCX: 00007f12e51de169 [ 161.802011][ T7878] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 161.802024][ T7878] RBP: 00007f12e3847090 R08: 0000000000001000 R09: 0000000000000000 [ 161.802036][ T7878] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 161.802047][ T7878] R13: 0000000000000000 R14: 00007f12e5405fa0 R15: 00007ffc96b136e8 [ 161.802072][ T7878] [ 162.061497][ T7881] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1368'. [ 162.209810][ T7887] loop3: detected capacity change from 0 to 164 [ 162.231443][ T7887] Unable to read rock-ridge attributes [ 162.473997][ T7904] loop2: detected capacity change from 0 to 1024 [ 162.481854][ T7904] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 162.493036][ T7904] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 162.506700][ T7904] jbd2_journal_init_inode: Cannot locate journal superblock [ 162.514048][ T7904] EXT4-fs (loop2): Could not load journal inode [ 162.803150][ T7915] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1380'. [ 162.812142][ T7915] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1380'. [ 162.821542][ T7915] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1380'. [ 162.890606][ T7919] usb usb1: usbfs: process 7919 (syz.3.1377) did not claim interface 0 before use [ 163.020613][ T7922] lo speed is unknown, defaulting to 1000 [ 163.027138][ T7922] vcan0 speed is unknown, defaulting to 1000 [ 163.358354][ T7930] loop2: detected capacity change from 0 to 164 [ 163.367624][ T7930] Unable to read rock-ridge attributes [ 163.402359][ T29] kauditd_printk_skb: 195 callbacks suppressed [ 163.402378][ T29] audit: type=1326 audit(1744854437.067:3335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7929 comm="syz.2.1383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2212de169 code=0x7ffc0000 [ 163.432181][ T29] audit: type=1326 audit(1744854437.067:3336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7929 comm="syz.2.1383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2212de169 code=0x7ffc0000 [ 163.455750][ T29] audit: type=1326 audit(1744854437.067:3337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7929 comm="syz.2.1383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7fc2212de169 code=0x7ffc0000 [ 163.479345][ T29] audit: type=1326 audit(1744854437.067:3338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7929 comm="syz.2.1383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2212de169 code=0x7ffc0000 [ 163.504094][ T29] audit: type=1326 audit(1744854437.067:3339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7929 comm="syz.2.1383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc2212de169 code=0x7ffc0000 [ 163.527808][ T29] audit: type=1326 audit(1744854437.067:3340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7929 comm="syz.2.1383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2212de169 code=0x7ffc0000 [ 163.551403][ T29] audit: type=1326 audit(1744854437.067:3341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7929 comm="syz.2.1383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fc2212de169 code=0x7ffc0000 [ 163.574819][ T29] audit: type=1326 audit(1744854437.067:3342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7929 comm="syz.2.1383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2212de169 code=0x7ffc0000 [ 163.598404][ T29] audit: type=1326 audit(1744854437.067:3343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7929 comm="syz.2.1383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fc2212de169 code=0x7ffc0000 [ 163.621833][ T29] audit: type=1326 audit(1744854437.067:3344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7929 comm="syz.2.1383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2212de169 code=0x7ffc0000 [ 163.793677][ T7941] loop2: detected capacity change from 0 to 1024 [ 163.803300][ T7937] loop3: detected capacity change from 0 to 2048 [ 163.835999][ T7941] EXT4-fs: Ignoring removed oldalloc option [ 163.844449][ T7937] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 163.870528][ T7941] EXT4-fs: Ignoring removed orlov option [ 163.890128][ T7941] EXT4-fs (loop2): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 163.906210][ T7947] siw: device registration error -23 [ 163.939717][ T7941] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 164.018362][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.078195][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.218722][ T7957] loop4: detected capacity change from 0 to 1024 [ 164.231651][ T7957] EXT4-fs: Ignoring removed nobh option [ 164.237334][ T7957] EXT4-fs: Ignoring removed nobh option [ 164.243019][ T7957] ext3: Unknown parameter 'dont_hash' [ 164.437491][ T7962] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0) [ 164.634354][ T7962] SELinux: failed to load policy [ 164.655338][ T7965] loop2: detected capacity change from 0 to 164 [ 164.665473][ T7965] Unable to read rock-ridge attributes [ 164.885104][ T7978] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 165.117596][ T7988] __nla_validate_parse: 10 callbacks suppressed [ 165.117613][ T7988] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1406'. [ 165.134617][ T7988] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1406'. [ 165.156742][ T7988] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1406'. [ 165.188541][ T7987] xt_CT: No such helper "pptp" [ 165.686848][ T8005] FAULT_INJECTION: forcing a failure. [ 165.686848][ T8005] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 165.700120][ T8005] CPU: 1 UID: 0 PID: 8005 Comm: syz.0.1412 Not tainted 6.15.0-rc2-syzkaller-00048-gc62f4b82d571 #0 PREEMPT(voluntary) [ 165.700153][ T8005] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 165.700167][ T8005] Call Trace: [ 165.700175][ T8005] [ 165.700185][ T8005] dump_stack_lvl+0xf6/0x150 [ 165.700212][ T8005] dump_stack+0x15/0x1a [ 165.700241][ T8005] should_fail_ex+0x261/0x270 [ 165.700269][ T8005] should_fail+0xb/0x10 [ 165.700362][ T8005] should_fail_usercopy+0x1a/0x20 [ 165.700396][ T8005] strncpy_from_user+0x25/0x230 [ 165.700420][ T8005] ? getname_flags+0x81/0x3b0 [ 165.700446][ T8005] getname_flags+0xb0/0x3b0 [ 165.700492][ T8005] path_listxattrat+0x81/0x2c0 [ 165.700530][ T8005] ? __secure_computing+0x7e/0x160 [ 165.700566][ T8005] __x64_sys_listxattr+0x4a/0x60 [ 165.700597][ T8005] x64_sys_call+0xc3f/0x2e10 [ 165.700660][ T8005] do_syscall_64+0xc9/0x1c0 [ 165.700695][ T8005] ? clear_bhb_loop+0x25/0x80 [ 165.700720][ T8005] ? clear_bhb_loop+0x25/0x80 [ 165.700746][ T8005] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.700845][ T8005] RIP: 0033:0x7f1a05a3e169 [ 165.700863][ T8005] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 165.700883][ T8005] RSP: 002b:00007f1a040a7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000c2 [ 165.700901][ T8005] RAX: ffffffffffffffda RBX: 00007f1a05c65fa0 RCX: 00007f1a05a3e169 [ 165.700913][ T8005] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 165.700924][ T8005] RBP: 00007f1a040a7090 R08: 0000000000000000 R09: 0000000000000000 [ 165.700935][ T8005] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 165.700981][ T8005] R13: 0000000000000000 R14: 00007f1a05c65fa0 R15: 00007fff2204d358 [ 165.701005][ T8005] [ 165.929485][ T8012] FAULT_INJECTION: forcing a failure. [ 165.929485][ T8012] name failslab, interval 1, probability 0, space 0, times 0 [ 165.942205][ T8012] CPU: 0 UID: 0 PID: 8012 Comm: syz.3.1413 Not tainted 6.15.0-rc2-syzkaller-00048-gc62f4b82d571 #0 PREEMPT(voluntary) [ 165.942239][ T8012] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 165.942327][ T8012] Call Trace: [ 165.942335][ T8012] [ 165.942346][ T8012] dump_stack_lvl+0xf6/0x150 [ 165.942374][ T8012] dump_stack+0x15/0x1a [ 165.942390][ T8012] should_fail_ex+0x261/0x270 [ 165.942419][ T8012] should_failslab+0x8f/0xb0 [ 165.942450][ T8012] __kvmalloc_node_noprof+0x12c/0x520 [ 165.942528][ T8012] ? rhashtable_init_noprof+0x312/0x450 [ 165.942636][ T8012] rhashtable_init_noprof+0x312/0x450 [ 165.942674][ T8012] rhltable_init_noprof+0x1e/0x40 [ 165.942705][ T8012] nf_tables_newtable+0x583/0xf10 [ 165.942742][ T8012] nfnetlink_rcv+0xb6e/0x1610 [ 165.942777][ T8012] ? __kfree_skb+0x102/0x150 [ 165.942878][ T8012] netlink_unicast+0x605/0x6c0 [ 165.942904][ T8012] netlink_sendmsg+0x609/0x720 [ 165.942934][ T8012] ? __pfx_netlink_sendmsg+0x10/0x10 [ 165.942962][ T8012] __sock_sendmsg+0x140/0x180 [ 165.943031][ T8012] ____sys_sendmsg+0x350/0x4e0 [ 165.943066][ T8012] __sys_sendmsg+0x1a0/0x240 [ 165.943115][ T8012] __x64_sys_sendmsg+0x46/0x50 [ 165.943159][ T8012] x64_sys_call+0x26f3/0x2e10 [ 165.943195][ T8012] do_syscall_64+0xc9/0x1c0 [ 165.943253][ T8012] ? clear_bhb_loop+0x25/0x80 [ 165.943278][ T8012] ? clear_bhb_loop+0x25/0x80 [ 165.943311][ T8012] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.943334][ T8012] RIP: 0033:0x7f12e51de169 [ 165.943354][ T8012] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 165.943375][ T8012] RSP: 002b:00007f12e3847038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 165.943397][ T8012] RAX: ffffffffffffffda RBX: 00007f12e5405fa0 RCX: 00007f12e51de169 [ 165.943411][ T8012] RDX: 0000000000000000 RSI: 0000200000000540 RDI: 0000000000000003 [ 165.943492][ T8012] RBP: 00007f12e3847090 R08: 0000000000000000 R09: 0000000000000000 [ 165.943505][ T8012] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 165.943519][ T8012] R13: 0000000000000000 R14: 00007f12e5405fa0 R15: 00007ffc96b136e8 [ 165.943544][ T8012] [ 166.177410][ T8017] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1414'. [ 166.189969][ T8017] siw: device registration error -23 [ 166.459902][ T8030] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1416'. [ 166.486990][ T8029] loop1: detected capacity change from 0 to 1024 [ 166.501143][ T8029] EXT4-fs: Ignoring removed nobh option [ 166.506820][ T8029] EXT4-fs: Ignoring removed nobh option [ 166.512443][ T8029] ext3: Unknown parameter 'dont_hash' [ 166.597783][ T8029] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0) [ 166.619384][ T8032] loop3: detected capacity change from 0 to 512 [ 166.648319][ T8029] SELinux: failed to load policy [ 166.765934][ T8032] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 166.774276][ T8032] EXT4-fs (loop3): orphan cleanup on readonly fs [ 166.817244][ T8037] veth0: entered promiscuous mode [ 166.837568][ T8037] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1420'. [ 166.916946][ T8032] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.1416: invalid indirect mapped block 256 (level 2) [ 166.976944][ T8032] EXT4-fs (loop3): 2 truncates cleaned up [ 166.992542][ T8019] lo speed is unknown, defaulting to 1000 [ 167.027241][ T8019] vcan0 speed is unknown, defaulting to 1000 [ 167.045228][ T8039] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1421'. [ 167.054221][ T8039] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1421'. [ 167.086076][ T8032] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 167.130932][ T8039] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1421'. [ 167.222400][ T8032] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.262516][ T8035] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8035 comm=syz.1.1419 [ 167.391351][ T8046] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1424'. [ 167.550501][ T8050] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 167.918469][ T8054] loop2: detected capacity change from 0 to 256 [ 168.006174][ T8054] msdos: Bad value for 'gid' [ 168.010834][ T8054] msdos: Bad value for 'gid' [ 168.097254][ T8058] loop2: detected capacity change from 0 to 256 [ 168.434804][ T8070] siw: device registration error -23 [ 168.543889][ T29] kauditd_printk_skb: 109 callbacks suppressed [ 168.543904][ T29] audit: type=1326 audit(1744854442.207:3454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8077 comm="syz.1.1437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce73dbe169 code=0x7ffc0000 [ 168.592510][ T29] audit: type=1326 audit(1744854442.247:3455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8077 comm="syz.1.1437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=213 compat=0 ip=0x7fce73dbe169 code=0x7ffc0000 [ 168.616513][ T29] audit: type=1326 audit(1744854442.247:3456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8077 comm="syz.1.1437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce73dbe169 code=0x7ffc0000 [ 168.640054][ T29] audit: type=1326 audit(1744854442.247:3457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8077 comm="syz.1.1437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fce73dbe169 code=0x7ffc0000 [ 168.663527][ T29] audit: type=1326 audit(1744854442.257:3458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8077 comm="syz.1.1437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce73dbe169 code=0x7ffc0000 [ 168.687190][ T29] audit: type=1326 audit(1744854442.257:3459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8077 comm="syz.1.1437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fce73dbe169 code=0x7ffc0000 [ 168.710693][ T29] audit: type=1326 audit(1744854442.257:3460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8077 comm="syz.1.1437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce73dbe169 code=0x7ffc0000 [ 168.734523][ T29] audit: type=1326 audit(1744854442.257:3461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8077 comm="syz.1.1437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fce73dbe169 code=0x7ffc0000 [ 168.758160][ T29] audit: type=1326 audit(1744854442.257:3462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8077 comm="syz.1.1437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce73dbe169 code=0x7ffc0000 [ 168.781768][ T29] audit: type=1326 audit(1744854442.257:3463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8077 comm="syz.1.1437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fce73dbe169 code=0x7ffc0000 [ 168.970406][ T8089] netlink: 'syz.0.1439': attribute type 29 has an invalid length. [ 169.131399][ T8098] loop3: detected capacity change from 0 to 164 [ 169.151313][ T8100] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 169.161521][ T8098] Unable to read rock-ridge attributes [ 169.456809][ T8113] xt_CT: No such helper "syz0" [ 169.490824][ T8117] siw: device registration error -23 [ 169.506618][ T8121] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.516363][ T8119] loop2: detected capacity change from 0 to 1024 [ 169.531517][ T8119] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 169.545408][ T8119] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 169.578827][ T8119] jbd2_journal_init_inode: Cannot locate journal superblock [ 169.586217][ T8119] EXT4-fs (loop2): Could not load journal inode [ 169.606799][ T8121] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.998974][ T8130] xt_CT: No such helper "syz0" [ 170.033164][ T8136] loop2: detected capacity change from 0 to 164 [ 170.088886][ T8136] Unable to read rock-ridge attributes [ 170.135049][ T8121] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.210739][ T8121] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.298433][ T8121] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.386200][ T8121] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.420202][ T8121] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.458182][ T8121] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.634681][ T8151] __nla_validate_parse: 16 callbacks suppressed [ 170.634702][ T8151] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1462'. [ 170.650457][ T8151] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1462'. [ 170.661884][ T8151] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1462'. [ 170.711272][ T8153] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1460'. [ 170.974906][ T8167] loop1: detected capacity change from 0 to 512 [ 171.040702][ T8169] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1463'. [ 171.069781][ T8171] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1468'. [ 171.456593][ T8184] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1474'. [ 171.465592][ T8184] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1474'. [ 171.482839][ T8184] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1474'. [ 171.590684][ T8195] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1475'. [ 171.678461][ T8201] loop1: detected capacity change from 0 to 512 [ 171.749530][ T8196] lo speed is unknown, defaulting to 1000 [ 171.758217][ T8201] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 171.799611][ T8196] vcan0 speed is unknown, defaulting to 1000 [ 171.823558][ T8201] EXT4-fs (loop1): orphan cleanup on readonly fs [ 171.872952][ T8201] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.1470: invalid indirect mapped block 256 (level 2) [ 171.944671][ T8212] loop4: detected capacity change from 0 to 164 [ 171.956769][ T8212] Unable to read rock-ridge attributes [ 171.995645][ T8201] EXT4-fs (loop1): 2 truncates cleaned up [ 172.001905][ T8201] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 172.035952][ T8201] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.161854][ T8218] loop2: detected capacity change from 0 to 1024 [ 172.181383][ T8218] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 172.202350][ T8218] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 172.254804][ T8218] jbd2_journal_init_inode: Cannot locate journal superblock [ 172.262238][ T8218] EXT4-fs (loop2): Could not load journal inode [ 172.579290][ T8228] siw: device registration error -23 [ 172.615241][ T8231] Cannot find set identified by id 0 to match [ 173.184582][ T8243] loop1: detected capacity change from 0 to 164 [ 173.240709][ T8243] Unable to read rock-ridge attributes [ 173.392975][ T8257] loop1: detected capacity change from 0 to 1024 [ 173.405594][ T8250] lo speed is unknown, defaulting to 1000 [ 173.426103][ T8250] vcan0 speed is unknown, defaulting to 1000 [ 173.468074][ T8257] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 173.504469][ T8257] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 173.556933][ T8257] jbd2_journal_init_inode: Cannot locate journal superblock [ 173.564280][ T8257] EXT4-fs (loop1): Could not load journal inode [ 173.675621][ T8262] syz.4.1501 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 173.860187][ T29] kauditd_printk_skb: 69 callbacks suppressed [ 173.860201][ T29] audit: type=1400 audit(1744854447.527:3533): avc: denied { read } for pid=8266 comm="syz.3.1498" name="/" dev="configfs" ino=760 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 173.889369][ T8267] netlink: 'syz.3.1498': attribute type 10 has an invalid length. [ 173.901824][ T29] audit: type=1400 audit(1744854447.567:3534): avc: denied { open } for pid=8266 comm="syz.3.1498" path="/" dev="configfs" ino=760 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 173.910154][ T8268] loop4: detected capacity change from 0 to 512 [ 173.938940][ T8268] EXT4-fs: Ignoring removed i_version option [ 173.950271][ T8268] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 173.964420][ T8268] EXT4-fs (loop4): 1 truncate cleaned up [ 173.971948][ T8268] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 173.993048][ T8268] netlink: 'syz.4.1503': attribute type 29 has an invalid length. [ 174.048943][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.263074][ T8284] loop1: detected capacity change from 0 to 164 [ 174.299961][ T8284] Unable to read rock-ridge attributes [ 174.560025][ T8270] lo speed is unknown, defaulting to 1000 [ 174.573546][ T8270] vcan0 speed is unknown, defaulting to 1000 [ 174.863078][ T8298] netlink: 'syz.2.1512': attribute type 10 has an invalid length. [ 174.868217][ T29] audit: type=1400 audit(1744854448.517:3535): avc: denied { compute_member } for pid=8297 comm="syz.2.1512" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 174.873870][ T8298] batman_adv: batadv0: Adding interface: macsec0 [ 174.897801][ T8298] batman_adv: batadv0: The MTU of interface macsec0 is too small (1468) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1560. [ 174.917532][ T8298] batman_adv: batadv0: Not using interface macsec0 (retrying later): interface not active [ 175.117624][ T8309] SELinux: syz.0.1515 (8309) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 175.158320][ T8302] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 175.226088][ T8312] FAULT_INJECTION: forcing a failure. [ 175.226088][ T8312] name failslab, interval 1, probability 0, space 0, times 0 [ 175.238873][ T8312] CPU: 0 UID: 0 PID: 8312 Comm: syz.2.1516 Not tainted 6.15.0-rc2-syzkaller-00048-gc62f4b82d571 #0 PREEMPT(voluntary) [ 175.238903][ T8312] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 175.238917][ T8312] Call Trace: [ 175.238925][ T8312] [ 175.238934][ T8312] dump_stack_lvl+0xf6/0x150 [ 175.238998][ T8312] dump_stack+0x15/0x1a [ 175.239015][ T8312] should_fail_ex+0x261/0x270 [ 175.239046][ T8312] should_failslab+0x8f/0xb0 [ 175.239095][ T8312] __kmalloc_cache_noprof+0x55/0x320 [ 175.239119][ T8312] ? inet6_dump_fib+0x187/0x700 [ 175.239149][ T8312] inet6_dump_fib+0x187/0x700 [ 175.239212][ T8312] ? __pfx_inet6_dump_fib+0x10/0x10 [ 175.239242][ T8312] rtnl_dumpit+0x94/0x130 [ 175.239279][ T8312] netlink_dump+0x3a6/0x810 [ 175.239318][ T8312] __netlink_dump_start+0x433/0x520 [ 175.239406][ T8312] ? __pfx_inet6_dump_fib+0x10/0x10 [ 175.239434][ T8312] rtnetlink_rcv_msg+0x5ad/0x740 [ 175.239525][ T8312] ? __pfx_inet6_dump_fib+0x10/0x10 [ 175.239576][ T8312] ? __pfx_rtnl_dumpit+0x10/0x10 [ 175.239609][ T8312] ? __pfx_inet6_dump_fib+0x10/0x10 [ 175.239641][ T8312] netlink_rcv_skb+0x12f/0x230 [ 175.239667][ T8312] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 175.239737][ T8312] rtnetlink_rcv+0x1c/0x30 [ 175.239772][ T8312] netlink_unicast+0x605/0x6c0 [ 175.239802][ T8312] netlink_sendmsg+0x609/0x720 [ 175.239855][ T8312] ? __pfx_netlink_sendmsg+0x10/0x10 [ 175.239883][ T8312] __sock_sendmsg+0x140/0x180 [ 175.239905][ T8312] sock_write_iter+0x186/0x1c0 [ 175.239949][ T8312] vfs_write+0x79b/0x950 [ 175.240021][ T8312] ? __pfx_sock_write_iter+0x10/0x10 [ 175.240064][ T8312] ksys_write+0xeb/0x1b0 [ 175.240106][ T8312] __x64_sys_write+0x42/0x50 [ 175.240140][ T8312] x64_sys_call+0x2a45/0x2e10 [ 175.240193][ T8312] do_syscall_64+0xc9/0x1c0 [ 175.240226][ T8312] ? clear_bhb_loop+0x25/0x80 [ 175.240319][ T8312] ? clear_bhb_loop+0x25/0x80 [ 175.240344][ T8312] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 175.240368][ T8312] RIP: 0033:0x7fc2212de169 [ 175.240395][ T8312] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 175.240415][ T8312] RSP: 002b:00007fc21f905038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 175.240433][ T8312] RAX: ffffffffffffffda RBX: 00007fc221506160 RCX: 00007fc2212de169 [ 175.240523][ T8312] RDX: 0000000000000085 RSI: 0000200000000000 RDI: 0000000000000006 [ 175.240575][ T8312] RBP: 00007fc21f905090 R08: 0000000000000000 R09: 0000000000000000 [ 175.240589][ T8312] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 175.240603][ T8312] R13: 0000000000000000 R14: 00007fc221506160 R15: 00007ffec75754e8 [ 175.240624][ T8312] [ 175.597240][ T8314] loop4: detected capacity change from 0 to 128 [ 175.651714][ T8305] lo speed is unknown, defaulting to 1000 [ 175.658483][ T8305] vcan0 speed is unknown, defaulting to 1000 [ 175.666571][ T8308] lo speed is unknown, defaulting to 1000 [ 175.754047][ T8316] loop4: detected capacity change from 0 to 164 [ 175.832404][ T8308] vcan0 speed is unknown, defaulting to 1000 [ 175.857371][ T8316] Unable to read rock-ridge attributes [ 176.349694][ T8322] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 176.362373][ T8322] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 176.430895][ T29] audit: type=1326 audit(1744854450.087:3536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8321 comm="syz.4.1521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd7cfde169 code=0x7ffc0000 [ 176.455311][ T29] audit: type=1326 audit(1744854450.087:3537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8321 comm="syz.4.1521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efd7cfde169 code=0x7ffc0000 [ 176.479811][ T29] audit: type=1326 audit(1744854450.087:3538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8321 comm="syz.4.1521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd7cfde169 code=0x7ffc0000 [ 176.504708][ T29] audit: type=1326 audit(1744854450.087:3539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8321 comm="syz.4.1521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efd7cfde169 code=0x7ffc0000 [ 176.529179][ T29] audit: type=1326 audit(1744854450.087:3540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8321 comm="syz.4.1521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd7cfde169 code=0x7ffc0000 [ 176.553780][ T29] audit: type=1326 audit(1744854450.087:3541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8321 comm="syz.4.1521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efd7cfde169 code=0x7ffc0000 [ 176.578223][ T29] audit: type=1326 audit(1744854450.097:3542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8321 comm="syz.4.1521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd7cfde169 code=0x7ffc0000 [ 176.652639][ T8331] __nla_validate_parse: 6 callbacks suppressed [ 176.652727][ T8331] netlink: 14601 bytes leftover after parsing attributes in process `syz.4.1526'. [ 176.852380][ T8336] loop4: detected capacity change from 0 to 128 [ 176.883541][ T8335] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 177.622411][ T8344] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0) [ 177.632554][ T8344] SELinux: failed to load policy [ 177.657091][ T8349] loop1: detected capacity change from 0 to 164 [ 177.683041][ T8350] rtc_cmos 00:00: Alarms can be up to one day in the future [ 177.741699][ T8349] Unable to read rock-ridge attributes [ 178.378633][ T10] rtc_cmos 00:00: Alarms can be up to one day in the future [ 178.387147][ T10] rtc_cmos 00:00: Alarms can be up to one day in the future [ 178.394769][ T10] rtc_cmos 00:00: Alarms can be up to one day in the future [ 178.403306][ T10] rtc_cmos 00:00: Alarms can be up to one day in the future [ 178.411489][ T10] rtc rtc0: __rtc_set_alarm: err=-22 [ 178.494831][ T8370] loop1: detected capacity change from 0 to 2048 [ 178.553862][ T8368] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1538'. [ 178.627552][ T8370] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 178.644006][ T8368] loop4: detected capacity change from 0 to 512 [ 178.718022][ T8368] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 178.720543][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 178.792863][ T8365] lo speed is unknown, defaulting to 1000 [ 178.799305][ T8365] vcan0 speed is unknown, defaulting to 1000 [ 178.887266][ T8368] EXT4-fs (loop4): orphan cleanup on readonly fs [ 178.894318][ T8368] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.1538: invalid indirect mapped block 256 (level 2) [ 178.909403][ T8368] EXT4-fs (loop4): 2 truncates cleaned up [ 178.919919][ T8391] loop3: detected capacity change from 0 to 164 [ 178.932479][ T8391] Unable to read rock-ridge attributes [ 178.940238][ T8368] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 179.040233][ T8368] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 179.307854][ T29] kauditd_printk_skb: 16 callbacks suppressed [ 179.307903][ T29] audit: type=1326 audit(1744854452.927:3559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8396 comm="syz.0.1547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a05a3e169 code=0x7ffc0000 [ 179.337632][ T29] audit: type=1326 audit(1744854452.927:3560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8396 comm="syz.0.1547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a05a3e169 code=0x7ffc0000 [ 179.361361][ T29] audit: type=1326 audit(1744854452.927:3561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8396 comm="syz.0.1547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1a05a3e169 code=0x7ffc0000 [ 179.385092][ T29] audit: type=1326 audit(1744854452.927:3562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8396 comm="syz.0.1547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a05a3e169 code=0x7ffc0000 [ 179.408689][ T29] audit: type=1326 audit(1744854452.927:3563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8396 comm="syz.0.1547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1a05a3e169 code=0x7ffc0000 [ 179.432376][ T29] audit: type=1326 audit(1744854452.927:3564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8396 comm="syz.0.1547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a05a3e169 code=0x7ffc0000 [ 179.456009][ T29] audit: type=1326 audit(1744854452.927:3565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8396 comm="syz.0.1547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f1a05a3e169 code=0x7ffc0000 [ 179.479614][ T29] audit: type=1326 audit(1744854452.927:3566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8396 comm="syz.0.1547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a05a3e169 code=0x7ffc0000 [ 179.503767][ T29] audit: type=1326 audit(1744854452.927:3567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8396 comm="syz.0.1547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=195 compat=0 ip=0x7f1a05a3e169 code=0x7ffc0000 [ 179.507563][ T8409] xt_CT: No such helper "pptp" [ 179.528007][ T29] audit: type=1326 audit(1744854452.927:3568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8396 comm="syz.0.1547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a05a3e169 code=0x7ffc0000 [ 179.900109][ T8415] loop1: detected capacity change from 0 to 2048 [ 179.940831][ T8415] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 179.968995][ T8423] loop2: detected capacity change from 0 to 164 [ 179.978131][ T8423] Unable to read rock-ridge attributes [ 180.440757][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 180.455470][ T8444] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 180.479749][ T8444] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 180.812826][ T8449] loop4: detected capacity change from 0 to 1024 [ 180.827302][ T8449] EXT4-fs: Ignoring removed orlov option [ 180.833011][ T8449] EXT4-fs: Ignoring removed nomblk_io_submit option [ 181.065314][ T8463] loop1: detected capacity change from 0 to 1024 [ 181.074642][ T8463] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 181.084460][ T8463] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 181.100625][ T8449] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 181.119473][ T8464] syz.3.1568 uses obsolete (PF_INET,SOCK_PACKET) [ 181.130451][ T8464] loop3: detected capacity change from 0 to 512 [ 181.140680][ T8463] jbd2_journal_init_inode: Cannot locate journal superblock [ 181.142028][ T8464] EXT4-fs: Ignoring removed nobh option [ 181.148108][ T8463] EXT4-fs (loop1): Could not load journal inode [ 181.162159][ T8464] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 181.221390][ T8464] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 181.292011][ T8464] ext4 filesystem being mounted at /337/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 181.379343][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 181.388981][ T8471] loop1: detected capacity change from 0 to 2048 [ 181.434168][ T8471] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 181.554588][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 181.578918][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 181.888698][ T8494] loop1: detected capacity change from 0 to 512 [ 181.911303][ T8494] EXT4-fs: Ignoring removed i_version option [ 181.934920][ T8494] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 182.000164][ T8494] EXT4-fs (loop1): 1 truncate cleaned up [ 182.017366][ T8494] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 182.079329][ T8494] netlink: 'syz.1.1580': attribute type 29 has an invalid length. [ 182.087248][ T8494] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1580'. [ 182.178018][ T8504] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1583'. [ 182.289705][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 182.315688][ T8509] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 182.360546][ T8509] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 182.395075][ T8513] loop7: detected capacity change from 0 to 7 [ 182.396595][ T8512] loop4: detected capacity change from 0 to 2048 [ 182.402047][ T8513] Buffer I/O error on dev loop7, logical block 0, async page read [ 182.417726][ T8513] Buffer I/O error on dev loop7, logical block 0, async page read [ 182.425791][ T8513] loop7: unable to read partition table [ 182.431597][ T8513] loop_reread_partitions: partition scan of loop7 (被xڬdƤݡ [ 182.431597][ T8513] U) failed (rc=-5) [ 182.509636][ T8512] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 182.651515][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 182.923731][ T8527] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1592'. [ 182.970869][ T8531] loop1: detected capacity change from 0 to 1024 [ 183.013353][ T8531] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 183.035680][ T8531] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 183.064588][ T8527] SELinux: syz.3.1592 (8527) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 183.082577][ T8531] jbd2_journal_init_inode: Cannot locate journal superblock [ 183.089950][ T8531] EXT4-fs (loop1): Could not load journal inode [ 183.530615][ T8543] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 183.594242][ T8543] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 183.855188][ T8568] loop4: detected capacity change from 0 to 1024 [ 183.885792][ T8568] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 183.897137][ T8568] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 183.911637][ T8568] jbd2_journal_init_inode: Cannot locate journal superblock [ 183.919029][ T8568] EXT4-fs (loop4): Could not load journal inode [ 184.797024][ T29] kauditd_printk_skb: 8 callbacks suppressed [ 184.797043][ T29] audit: type=1400 audit(1744854458.457:3577): avc: denied { read } for pid=8577 comm="syz.1.1611" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 184.827461][ T29] audit: type=1400 audit(1744854458.457:3578): avc: denied { open } for pid=8577 comm="syz.1.1611" path="/dev/loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 184.907735][ T8590] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 184.961605][ T8590] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 185.015545][ T29] audit: type=1400 audit(1744854458.657:3579): avc: denied { read } for pid=8592 comm="wg1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 185.078547][ T8599] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 185.089580][ T8599] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.147366][ T8599] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 185.158182][ T8599] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.230237][ T8599] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 185.240065][ T8599] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.296191][ T8603] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1621'. [ 185.317095][ T8599] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 185.327042][ T8599] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.349085][ T8603] siw: device registration error -23 [ 185.463900][ T8599] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 185.472223][ T8599] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.552112][ T8599] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 185.560531][ T8599] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.596521][ T8599] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 185.604892][ T8599] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.652221][ T8599] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 185.660529][ T8599] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.663163][ T8609] loop3: detected capacity change from 0 to 1024 [ 185.689858][ T8609] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 185.701188][ T8609] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 185.714233][ T8609] jbd2_journal_init_inode: Cannot locate journal superblock [ 185.721666][ T8609] EXT4-fs (loop3): Could not load journal inode [ 185.823008][ T3384] page_pool_release_retry() stalled pool shutdown: id 28, 1 inflight 60 sec [ 185.870820][ T8625] loop2: detected capacity change from 0 to 2048 [ 185.932102][ T29] audit: type=1400 audit(1744854459.597:3580): avc: denied { recv } for pid=8632 comm="syz.3.1632" saddr=10.128.0.163 src=30030 daddr=10.128.1.72 dest=49528 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 186.001911][ T8625] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 186.054744][ T29] audit: type=1400 audit(1744854459.717:3581): avc: denied { mount } for pid=8642 comm="syz.4.1638" name="/" dev="ramfs" ino=21990 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 186.088254][ T29] audit: type=1400 audit(1744854459.747:3582): avc: denied { write } for pid=8642 comm="syz.4.1638" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 186.112566][ T29] audit: type=1400 audit(1744854459.747:3583): avc: denied { ioctl } for pid=8642 comm="syz.4.1638" path="/dev/ppp" dev="devtmpfs" ino=140 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 186.159895][ T8646] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.175220][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 186.189704][ T8640] lo speed is unknown, defaulting to 1000 [ 186.196436][ T8640] vcan0 speed is unknown, defaulting to 1000 [ 186.311961][ T8646] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.339048][ T8652] siw: device registration error -23 [ 186.349339][ T8656] loop2: detected capacity change from 0 to 1024 [ 186.363182][ T8656] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 186.373460][ T8656] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 186.388685][ T8656] jbd2_journal_init_inode: Cannot locate journal superblock [ 186.390575][ T8646] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.396205][ T8656] EXT4-fs (loop2): Could not load journal inode [ 186.568030][ T8646] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.831425][ T8646] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.861948][ T8646] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.894456][ T8646] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.943197][ T8671] loop3: detected capacity change from 0 to 2048 [ 186.960976][ T8646] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.000947][ T8671] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 187.187045][ T8697] __nla_validate_parse: 7 callbacks suppressed [ 187.187065][ T8697] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1655'. [ 187.227651][ T8688] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1650'. [ 187.335472][ T8688] loop4: detected capacity change from 0 to 512 [ 187.359668][ T8691] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1654'. [ 187.380725][ T8688] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 187.395986][ T8688] EXT4-fs (loop4): orphan cleanup on readonly fs [ 187.405992][ T8674] lo speed is unknown, defaulting to 1000 [ 187.412535][ T8674] vcan0 speed is unknown, defaulting to 1000 [ 187.418887][ T8688] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.1650: invalid indirect mapped block 256 (level 2) [ 187.479630][ T8688] EXT4-fs (loop4): 2 truncates cleaned up [ 187.507156][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 187.523499][ T8688] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 187.566803][ T8688] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 187.927534][ T8730] netlink: 8 bytes leftover after parsing attributes in process `+}[@'. [ 187.952213][ T8730] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 188.048624][ T8722] FAULT_INJECTION: forcing a failure. [ 188.048624][ T8722] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 188.062358][ T8722] CPU: 1 UID: 0 PID: 8722 Comm: Not tainted 6.15.0-rc2-syzkaller-00048-gc62f4b82d571 #0 PREEMPT(voluntary) [ 188.062388][ T8722] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 188.062404][ T8722] Call Trace: [ 188.062410][ T8722] [ 188.062419][ T8722] dump_stack_lvl+0xf6/0x150 [ 188.062484][ T8722] dump_stack+0x15/0x1a [ 188.062504][ T8722] should_fail_ex+0x261/0x270 [ 188.062537][ T8722] should_fail+0xb/0x10 [ 188.062632][ T8722] should_fail_usercopy+0x1a/0x20 [ 188.062666][ T8722] copy_fpstate_to_sigframe+0x65d/0x7f0 [ 188.062776][ T8722] ? copy_fpstate_to_sigframe+0xed/0x7f0 [ 188.062818][ T8722] ? fpu__alloc_mathframe+0x95/0xd0 [ 188.062857][ T8722] get_sigframe+0x308/0x440 [ 188.062961][ T8722] x64_setup_rt_frame+0xb4/0x5a0 [ 188.063004][ T8722] arch_do_signal_or_restart+0x28c/0x4b0 [ 188.063100][ T8722] syscall_exit_to_user_mode+0x62/0x120 [ 188.063156][ T8722] do_syscall_64+0xd6/0x1c0 [ 188.063190][ T8722] ? clear_bhb_loop+0x25/0x80 [ 188.063228][ T8722] ? clear_bhb_loop+0x25/0x80 [ 188.063252][ T8722] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 188.063277][ T8722] RIP: 0033:0x7fce73dbe169 [ 188.063346][ T8722] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 188.063366][ T8722] RSP: 002b:00007fce72427038 EFLAGS: 00000246 ORIG_RAX: 0000000000000119 [ 188.063384][ T8722] RAX: fffffffffffffffc RBX: 00007fce73fe5fa0 RCX: 00007fce73dbe169 [ 188.063396][ T8722] RDX: 0000000000000001 RSI: 00002000008c9fc4 RDI: 0000000000000005 [ 188.063408][ T8722] RBP: 00007fce72427090 R08: 0000000000000000 R09: 0000000000000000 [ 188.063420][ T8722] R10: 00000000fffffff3 R11: 0000000000000246 R12: 0000000000000001 [ 188.063431][ T8722] R13: 0000000000000000 R14: 00007fce73fe5fa0 R15: 00007ffc163d2fa8 [ 188.063479][ T8722] [ 188.508730][ T8748] loop2: detected capacity change from 0 to 512 [ 188.524968][ T8748] EXT4-fs: Ignoring removed i_version option [ 188.534523][ T8744] netlink: 'syz.0.1674': attribute type 29 has an invalid length. [ 188.542423][ T8744] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1674'. [ 188.558152][ T8748] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 188.579978][ T8748] EXT4-fs (loop2): 1 truncate cleaned up [ 188.592978][ T8748] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 188.635783][ T8748] netlink: 'syz.2.1676': attribute type 29 has an invalid length. [ 188.643650][ T8748] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1676'. [ 188.744422][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 188.889647][ T8758] SELinux: Context system_u:object_r:man_t:s0 is not valid (left unmapped). [ 188.907785][ T8764] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1677'. [ 188.927749][ T8765] loop4: detected capacity change from 0 to 512 [ 188.929956][ T29] audit: type=1400 audit(1744854462.577:3584): avc: denied { relabelto } for pid=8756 comm="syz.0.1680" name="293" dev="tmpfs" ino=1545 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:man_t:s0" [ 188.945585][ T8767] netlink: 8 bytes leftover after parsing attributes in process `+}[@'. [ 188.961316][ T29] audit: type=1400 audit(1744854462.577:3585): avc: denied { associate } for pid=8756 comm="syz.0.1680" name="293" dev="tmpfs" ino=1545 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:man_t:s0" [ 189.008486][ T8765] EXT4-fs error (device loop4): ext4_get_branch:178: inode #13: block 1024: comm syz.4.1681: invalid block [ 189.050166][ T8767] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 189.054997][ T29] audit: type=1400 audit(1744854462.697:3586): avc: denied { setopt } for pid=8768 comm="syz.2.1683" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 189.071710][ T8765] EXT4-fs (loop4): Remounting filesystem read-only [ 189.092596][ T8750] lo speed is unknown, defaulting to 1000 [ 189.099237][ T8750] vcan0 speed is unknown, defaulting to 1000 [ 189.197786][ T8765] EXT4-fs (loop4): 1 truncate cleaned up [ 189.203939][ T8765] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 189.219873][ T8764] loop1: detected capacity change from 0 to 512 [ 189.375196][ T8778] lo speed is unknown, defaulting to 1000 [ 189.382104][ T8778] vcan0 speed is unknown, defaulting to 1000 [ 189.530938][ T8779] loop2: detected capacity change from 0 to 2048 [ 189.594735][ T8779] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 189.636646][ T8764] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 189.645828][ T8764] EXT4-fs (loop1): orphan cleanup on readonly fs [ 189.652901][ T8764] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.1677: invalid indirect mapped block 256 (level 2) [ 189.672123][ T8764] EXT4-fs (loop1): 2 truncates cleaned up [ 189.679063][ T8764] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 189.697029][ T8764] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 189.916621][ T8796] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.015590][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.024786][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 190.024799][ T29] audit: type=1326 audit(1744854463.677:3590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8801 comm="syz.3.1693" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f12e51de169 code=0x0 [ 190.406783][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.424048][ T8796] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.561502][ T8796] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.217891][ T8796] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.475898][ T8827] xt_CT: No such helper "pptp" [ 191.661607][ T8819] loop3: detected capacity change from 0 to 512 [ 191.712529][ T29] audit: type=1400 audit(1744854465.377:3591): avc: denied { map_create } for pid=8840 comm="syz.4.1704" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 191.731920][ T29] audit: type=1400 audit(1744854465.377:3592): avc: denied { bpf } for pid=8840 comm="syz.4.1704" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 191.753045][ T29] audit: type=1400 audit(1744854465.377:3593): avc: denied { map_read map_write } for pid=8840 comm="syz.4.1704" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 192.075406][ T29] audit: type=1400 audit(1744854465.427:3594): avc: denied { prog_load } for pid=8840 comm="syz.4.1704" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 192.094639][ T29] audit: type=1400 audit(1744854465.437:3595): avc: denied { perfmon } for pid=8840 comm="syz.4.1704" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 192.115715][ T29] audit: type=1400 audit(1744854465.437:3596): avc: denied { prog_run } for pid=8840 comm="syz.4.1704" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 192.134819][ T29] audit: type=1326 audit(1744854465.437:3597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8840 comm="syz.4.1704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd7cfde169 code=0x7ffc0000 [ 192.158385][ T29] audit: type=1326 audit(1744854465.437:3598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8840 comm="syz.4.1704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efd7cfde169 code=0x7ffc0000 [ 192.181974][ T29] audit: type=1326 audit(1744854465.437:3599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8840 comm="syz.4.1704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd7cfde169 code=0x7ffc0000 [ 192.206751][ T8819] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 192.215132][ T8819] EXT4-fs (loop3): orphan cleanup on readonly fs [ 192.224335][ T8819] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.1699: invalid indirect mapped block 256 (level 2) [ 192.238515][ T8819] EXT4-fs (loop3): 2 truncates cleaned up [ 192.244531][ T8839] __nla_validate_parse: 6 callbacks suppressed [ 192.244546][ T8839] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1703'. [ 192.246692][ T8819] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 192.276889][ T8819] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.293548][ T8831] lo speed is unknown, defaulting to 1000 [ 192.301336][ T8831] vcan0 speed is unknown, defaulting to 1000 [ 192.645600][ T8860] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1710'. [ 193.260438][ T8796] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.341910][ T8796] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.388233][ T8796] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.422484][ T8796] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.569099][ T8873] FAULT_INJECTION: forcing a failure. [ 193.569099][ T8873] name failslab, interval 1, probability 0, space 0, times 0 [ 193.582823][ T8873] CPU: 0 UID: 0 PID: 8873 Comm: syz.3.1718 Not tainted 6.15.0-rc2-syzkaller-00048-gc62f4b82d571 #0 PREEMPT(voluntary) [ 193.582890][ T8873] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 193.582905][ T8873] Call Trace: [ 193.582914][ T8873] [ 193.582924][ T8873] dump_stack_lvl+0xf6/0x150 [ 193.582954][ T8873] dump_stack+0x15/0x1a [ 193.582974][ T8873] should_fail_ex+0x261/0x270 [ 193.583040][ T8873] should_failslab+0x8f/0xb0 [ 193.583078][ T8873] kmem_cache_alloc_noprof+0x59/0x340 [ 193.583105][ T8873] ? alloc_empty_file+0x78/0x200 [ 193.583168][ T8873] ? _raw_spin_unlock+0x26/0x50 [ 193.583194][ T8873] alloc_empty_file+0x78/0x200 [ 193.583222][ T8873] alloc_file_pseudo+0xcb/0x160 [ 193.583254][ T8873] __shmem_file_setup+0x1bb/0x1f0 [ 193.583293][ T8873] shmem_file_setup+0x3b/0x50 [ 193.583402][ T8873] __se_sys_memfd_create+0x2e1/0x5a0 [ 193.583431][ T8873] __x64_sys_memfd_create+0x31/0x40 [ 193.583458][ T8873] x64_sys_call+0x1163/0x2e10 [ 193.583481][ T8873] do_syscall_64+0xc9/0x1c0 [ 193.583537][ T8873] ? clear_bhb_loop+0x25/0x80 [ 193.583560][ T8873] ? clear_bhb_loop+0x25/0x80 [ 193.583663][ T8873] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 193.583686][ T8873] RIP: 0033:0x7f12e51de169 [ 193.583703][ T8873] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 193.583722][ T8873] RSP: 002b:00007f12e3846e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 193.583781][ T8873] RAX: ffffffffffffffda RBX: 00000000000007fd RCX: 00007f12e51de169 [ 193.583793][ T8873] RDX: 00007f12e3846ef0 RSI: 0000000000000000 RDI: 00007f12e5261404 [ 193.583805][ T8873] RBP: 0000200000000840 R08: 00007f12e3846bb7 R09: 00007f12e3846e40 [ 193.583824][ T8873] R10: 000000000000000a R11: 0000000000000202 R12: 0000200000000740 [ 193.583838][ T8873] R13: 00007f12e3846ef0 R14: 00007f12e3846eb0 R15: 00002000000006c0 [ 193.583887][ T8873] [ 193.969012][ T8889] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1722'. [ 194.021278][ T8888] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1721'. [ 194.092311][ T8895] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1719'. [ 194.131572][ T8893] xt_CT: No such helper "pptp" [ 194.181075][ T8903] loop4: detected capacity change from 0 to 512 [ 194.292045][ T8907] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 194.301914][ T8907] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.313083][ T8912] ================================================================== [ 194.317303][ T8903] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 194.321188][ T8912] BUG: KCSAN: data-race in mas_walk / mas_wmb_replace [ 194.335863][ T8912] [ 194.338201][ T8912] write to 0xffff888104cd7a00 of 8 bytes by task 8909 on cpu 1: [ 194.345841][ T8912] mas_wmb_replace+0x224/0x1510 [ 194.350705][ T8912] mas_wr_store_entry+0x158c/0x2460 [ 194.355923][ T8912] mas_store_prealloc+0x6d5/0x960 [ 194.360964][ T8912] vma_iter_store_new+0x1d3/0x210 [ 194.365994][ T8912] vma_complete+0x12b/0x570 [ 194.370513][ T8912] __split_vma+0x56c/0x630 [ 194.374942][ T8912] vma_modify+0x105/0x200 [ 194.379286][ T8912] vma_modify_flags+0x10a/0x140 [ 194.384156][ T8912] mprotect_fixup+0x30f/0x5d0 [ 194.388838][ T8912] do_mprotect_pkey+0x6ce/0x9a0 [ 194.393702][ T8912] __x64_sys_mprotect+0x48/0x60 [ 194.398557][ T8912] x64_sys_call+0x272f/0x2e10 [ 194.403244][ T8912] do_syscall_64+0xc9/0x1c0 [ 194.407763][ T8912] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 194.413661][ T8912] [ 194.415984][ T8912] read to 0xffff888104cd7a00 of 8 bytes by task 8912 on cpu 0: [ 194.423569][ T8912] mas_walk+0x123/0x320 [ 194.427737][ T8912] lock_vma_under_rcu+0xa7/0x340 [ 194.432692][ T8912] exc_page_fault+0x150/0x6a0 [ 194.437380][ T8912] asm_exc_page_fault+0x26/0x30 [ 194.442237][ T8912] [ 194.444562][ T8912] value changed: 0xffff8881150e3741 -> 0xffff888104cd7a00 [ 194.451667][ T8912] [ 194.453986][ T8912] Reported by Kernel Concurrency Sanitizer on: [ 194.460139][ T8912] CPU: 0 UID: 0 PID: 8912 Comm: syz.3.1727 Not tainted 6.15.0-rc2-syzkaller-00048-gc62f4b82d571 #0 PREEMPT(voluntary) [ 194.472553][ T8912] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 194.482616][ T8912] ================================================================== [ 194.493700][ T8903] EXT4-fs (loop4): orphan cleanup on readonly fs [ 194.510645][ T8895] lo speed is unknown, defaulting to 1000 [ 194.517750][ T8903] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.1719: invalid indirect mapped block 256 (level 2) [ 194.532018][ T8903] EXT4-fs (loop4): 2 truncates cleaned up [ 194.536277][ T8895] vcan0 speed is unknown, defaulting to 1000 [ 194.540051][ T8903] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 194.559613][ T8903] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.588908][ T8907] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 194.598774][ T8907] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.678398][ T8907] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 194.688214][ T8907] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.738366][ T8907] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 194.748811][ T8907] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.970927][ T8907] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 194.979482][ T8907] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.995829][ T8907] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 195.004089][ T8907] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.019048][ T8907] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 195.027372][ T8907] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.042832][ T8907] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 195.051102][ T8907] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0